rf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:26:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) socket$inet_udplite(0x2, 0x2, 0x88) listen(r0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 21:26:50 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4c4ad308}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000400)={r5, 0x6}, 0x8) r6 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r7 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r7, 0x14) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r9, r10, 0x0, 0x1000007ffff000) setsockopt$inet_mreqsrc(r9, 0x0, 0x26, &(0x7f0000000040)={@multicast1, @broadcast, @local}, 0xc) 21:26:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:26:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)='lo\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) write$P9_RUNLINKAT(r3, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syslog(0x0, 0x0, 0x0) 21:26:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:26:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) socket$inet_udplite(0x2, 0x2, 0x88) listen(r0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 21:26:51 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4c4ad308}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000400)={r5, 0x6}, 0x8) r6 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r7 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r7, 0x14) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r9, r10, 0x0, 0x1000007ffff000) 21:26:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000000)=0xc) setreuid(0x0, r1) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e20, @remote}}, 0x0, 0x1, 0x0, "e4649928eef9e3b11907669c0dc9407e38f36c78f033428345fcf148f6a0ebf465f222a056f9061c0addada1a33de09bc4652d7c9258147bd2382f55430708d2420044c5725ed17285d9e61e5856ac2f"}, 0xd8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x400000, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x87) setuid(r6) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) syz_mount_image$hfs(&(0x7f0000001640)='hfs\x00', &(0x7f0000001680)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001f40)={[{@gid={'gid', 0x3d, r8}}]}) write$FUSE_ENTRY(r4, &(0x7f0000000080)={0x90, 0x0, 0x4, {0x5, 0xffffffffffffffff, 0x6, 0x8, 0x1, 0x80000001, {0x5, 0x100000001, 0x800, 0x0, 0x8000, 0x664, 0xff, 0x3, 0x5, 0x345b, 0x3, r6, r8, 0x1, 0x4}}}, 0x90) r9 = dup(r3) arch_prctl$ARCH_GET_CPUID(0x1011) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) syslog(0x0, 0x0, 0x0) [ 376.056754] hfs: gid requires an argument [ 376.061130] hfs: unable to parse mount options [ 376.073370] selinux_nlmsg_perm: 4773 callbacks suppressed [ 376.073385] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=12036 comm=syz-executor.4 [ 376.092715] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=12036 comm=syz-executor.4 [ 376.106033] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=12036 comm=syz-executor.4 [ 376.124656] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=12036 comm=syz-executor.4 [ 376.144693] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=12036 comm=syz-executor.4 [ 376.169041] hfs: gid requires an argument [ 376.178607] hfs: unable to parse mount options [ 376.205897] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=12036 comm=syz-executor.4 [ 376.218919] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=12036 comm=syz-executor.4 [ 376.232854] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=12036 comm=syz-executor.4 [ 376.246474] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=12036 comm=syz-executor.4 [ 376.259061] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=12036 comm=syz-executor.4 21:26:51 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0x0) 21:26:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:26:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:26:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) socket$inet_udplite(0x2, 0x2, 0x88) listen(r0, 0x400000001ffffffd) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40), 0x0, 0x0) 21:26:51 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4c4ad308}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000400)={r5, 0x6}, 0x8) r6 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r7 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r7, 0x14) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) accept4(r8, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') 21:26:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syslog(0x0, 0x0, 0x0) 21:26:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_x25_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={@remote={[], 0x2}, 0x8, 'bcsh0\x00'}) syslog(0x0, 0x0, 0x0) 21:26:51 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(0xffffffffffffffff, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:26:51 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4c4ad308}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000400)={r5, 0x6}, 0x8) r6 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r7 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r7, 0x14) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) accept4(r8, 0x0, 0x0, 0x0) 21:26:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) socket$inet_udplite(0x2, 0x2, 0x88) listen(r0, 0x400000001ffffffd) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:26:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r4, r5, 0x0, 0x1000007ffff000) setsockopt$inet_opts(r5, 0x0, 0x9bdc07bd6e73d702, &(0x7f0000000040)="fae0c2ed15386033f8fcec6930aac7e703d06ecaef4a027dc573750c7f89d696ebac2e0983f0a9bf22f80bc7ed6c6fb891531b1dcd687344b3a2806023af2d00b6241b625031ff4bdcdfb316d3be9d41a74c4ba8ce11d8b67732c7d647a09ad6e94d6076fa7da2049c297f345c2d79bfddb17df1f869ece79188e3c2a937319a74ab5e997f18341151000000000000", 0xfffffe41) r6 = dup(r2) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000000)=0x60, 0x4) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r8 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r9 = accept4(r8, 0x0, 0x0, 0x80800) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r9, r10, 0x0, 0x1000007ffff000) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r12 = accept4(r11, 0x0, 0x0, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r12, r13, 0x0, 0x1000007ffff000) renameat2(r10, &(0x7f0000000140)='./file0\x00', r13, &(0x7f0000000180)='./file0\x00', 0x6) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) syslog(0x0, 0x0, 0x0) 21:26:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(0xffffffffffffffff, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:26:52 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0x0) 21:26:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:26:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(0xffffffffffffffff, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:26:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x0, &(0x7f00000002c0), 0x10000, &(0x7f0000000340)={[], [{@obj_user={'obj_user', 0x3d, '$-'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}) setreuid(0x0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)=""/95, 0x5f) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r6, r7, 0x0, 0x1000007ffff000) setsockopt$ax25_SO_BINDTODEVICE(r6, 0x101, 0x19, &(0x7f0000000680)=@rose={'rose', 0x0}, 0x10) syslog(0x0, 0x0, 0x0) sendmsg(r2, &(0x7f0000000640)={&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e21, 0x0, @empty, 0x6}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000100)="a4b81ee53718db9d23710e2e2623183456a3a7605814f9d199383788134f3d66e14db00b2d0527d92e500e30ad99ebb6f611ca75d6796fe5994cde3250e0ac064b1e82f3719bf8cf805fb5d38cc880337d94ae7bb3b90b305eb86a01537d4a9a78ed535ea0425edf2335699dd52843723b42ba97c098e79f5aba9da3045ae7ba19cffdac580a37742f43d7b4546292971ef6affc06d5f9ddb8c32952b4d4779c2a8335726dca4c994f97004b73e88d7fe806abeb6137684d55f981928d8c12aa2fd693369ca5ece25844f6ea8fe78e890530a8f56c8f1b26062b99de0c3c", 0xde}, {&(0x7f0000000200)="e617dfeac53116ab0e04671f006c099ca7ac5610dd1972c73c7bc55a7b02a7", 0x1f}, {&(0x7f00000002c0)="6057640950ba0075b5a544ec", 0xc}, {&(0x7f0000000380)="06232c76d518a1569e67c6f3429fd65f691ba7dbcf8a5b8d9191eea5b7e2867fb79484f01e99905a5e519234d700f9bdaa2fa33e29a81fca2a0f75604a30f5e873a403a1ab4c02202062025b3905e2ddba62230279a148bd483ca0135c6ec19bdaf0741961a5bec88e388c6df1dca8ea5a2017b045c38ccf9efa4f38c5ffc2", 0x7f}], 0x4, &(0x7f0000000400)=[{0xd8, 0x111, 0x800, "623d5284d23240ec2f591afa25fbbf9fc292fd6a1ebcd66e1c38803a076ac21e5e0ead971a5ca0b5894dfbbd7b9cd464d6a4aa29294b1308d120f3ef013181d1df8f24539842dd947ac29c503829a5046b15a338e5d5cd9975c0e29aa78ca21b744f355e7f7eb61b5c5c31853eb1673bc6024a7e84e05fbff45c77d0101d2222914d21bd4f8d8becde8291decb2c1721fbd5f68c5806d38f59341cfbbec7de120c35df9ec00f4abd2827b2777f08ff89292d1e24f27c74aefa761512f5fb3eeee813"}, {0x30, 0x113, 0x80000000, "908fa9893d13761cd313da7f465c8cde7a3dbb71a607f69cf28f"}, {0x48, 0x117, 0x80000000, "998796df0f6a02efdafb3f111d44441fe66bcbee15c94967a65ea8c35710b9063dde639ea4995a6d787095388c15f19dad"}, {0xf0, 0x3a, 0x6, "fd6018a66e3002fcfb6f26f000186356ed33d350023360bf434ca8d4475194c89fc88e8c2b2891209557a4145025afc6cf88a0881103316f1d31750c5682350c8a221f3a9796e8cb0b15deeebf11505b96115939e62371c2b704eb4606b89fa628533a438e4d6ab3921778609e1a91bd370712b5e052891d7f9e5d9c3cfc2ad17bb9b88bf07bda8112f9a4ec0cf381b0694a358d7688fbcc2faf702bbb57e104386eef37fb2192f7e0255c79143ac8b967ef12a5e5ee46a62fa16b11340143c100bc73062bf7153683ea551d8b70a9771ca598a2026fc32fb5a93a79"}], 0x240}, 0x24080821) 21:26:52 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4c4ad308}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000400)={r5, 0x6}, 0x8) r6 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r7 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r7, 0x14) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) 21:26:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) socket$inet_udplite(0x2, 0x2, 0x88) listen(r0, 0x400000001ffffffd) [ 377.284681] XFS (loop3): unknown mount option [obj_user=$-]. 21:26:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, 0xffffffffffffffff, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) listen(0xffffffffffffffff, 0x400000001ffffffd) [ 377.378270] nla_parse: 18 callbacks suppressed [ 377.378297] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. 21:26:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r5, r6, 0x0, 0x1000007ffff000) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000180)=0x60, 0x2) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r8, r9, 0x0, 0x1000007ffff000) getsockname$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) ioctl$TUNSETIFINDEX(r6, 0x400454da, &(0x7f0000000080)=r10) r11 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x90003, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r11, 0x6430) syslog(0x0, 0x0, 0x0) 21:26:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, 0xffffffffffffffff, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:26:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:26:52 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4c4ad308}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000400)={r5, 0x6}, 0x8) r6 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r7 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r7, 0x14) socket$alg(0x26, 0x5, 0x0) 21:26:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) socket$inet_udplite(0x2, 0x2, 0x88) listen(r0, 0x400000001ffffffd) 21:26:53 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0x0) 21:26:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r2 = getuid() setreuid(r2, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syslog(0x0, 0x0, 0x167) 21:26:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, 0xffffffffffffffff, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:26:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) 21:26:53 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4c4ad308}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000400)={r5, 0x6}, 0x8) r6 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r7 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r7, 0x14) 21:26:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) socket$inet_udplite(0x2, 0x2, 0x88) listen(r0, 0x400000001ffffffd) 21:26:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket(0x2000000000000021, 0x0, 0x10000000000002) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "98cd2741ed306bf3", "22f4509f68f89df8678538d7a1973a87c37d7569409b402071584ea9379f95f0", "59719a92", "86ab9b376fd09e3d"}, 0x38) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x20) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000011c0)={r5, 0x9878, 0x400}, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000040)={r5, 0xfffffffb}, &(0x7f0000000080)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syslog(0x0, 0x0, 0x0) 21:26:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x0) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) listen(0xffffffffffffffff, 0x400000001ffffffd) [ 378.320623] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. 21:26:53 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4c4ad308}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000400)={r5, 0x6}, 0x8) r6 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 21:26:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syslog(0x0, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000002c0)={"c9bfba905b9d0bd1d621b2783373aa141fd3729f99cf4c0af4b2dc5c9d82fa8a462079646ff9d250a989d2aab292acb79e212ddd5b139143c73c79b8d7e5a4f391b7d207b5862781e1f882e5674c3f6bbde738976f3ab52864817abd9b6c6435725d954875ec56b4630ec1fb0b624a4c0eb78f8ff96381ac20d6b2eccb12156959d1338b1d6edcb42f7992dbd2add218b522a5dfa95d402889b792f9238d8471741c064f90365aff85d53a17dc0b97baf118e5f0d89eeb44f44bf03f7d3fa1690045c76d86a0c6c36df6fa04578ac3af217f7a3b1f0e1f20912f92a940cfd58f8e3a623a893e39b812be2b76cb8ade9968b5162a3ad52278ef810369301af587a357c6f5629bfe9dc92316e48985ec86b6af864e8a8e5b7323bf9c84724d6afbe780af814096650b8114bf61c6799ae6995351cc4fd012800da86b49de7b2a60cb1f73159c54829c0dc4da1a76e7f6925855274886b3159753f3ab55b29dbeabe7f07f9b470255e2d6bad88fa5a9760702ec6cd29396ffe2a07d34d472f8c452893ed1b15d6b7c7bd2fda6e710bf3cb2d1f329cf56be1a2972eb390925057bac0aa3b5a5619e234e786a28ece83661bf263ec177787db6a70bae3114a337d926493053cc6843d4e5b78ef8bd4f5c824ed610d533d0456b6fe5f37d535c67d1c8e013432df4381ffa21b55b50b065c381761ed44ac881ceac481e8929b5103ece120ab5849f5ddedaffb0b855c1daaf1efc3dd42cb3bda5582ce4da5201b5ece7a78148697cde7b3188725274103528764483c9f448157750b9c7beac939b221f456c25d7699dfbfa341913742928e29868fe70c56110be03e08857061932febf5112e582e69185ebb9056bdfc95db2dd7e598f186a940c4a94b21676129f33bc287b51dccc65e7a86b7227e7671faf6273b61b2dc5efaf44b84bb57dccb4b2ce69a4fbdf567e40fc22f5d0a15565713993423a25e017c788cff328c4584c6cd31cbb873663cf3119b6cca93d77ee83e8ddd8bf4c30eaf0f5bc6a7ac4cf64c6db200a9cf2a2acf99be878ce4f012f8086eb86f2ec8a3460a9b1b3af7ede34d7379e7c6e658122805382823566344ccb30e7f8fa8d228ba1d226f0f036956244af64c4aa5bcd7a80134e27e932ddc5640e6621bc67789cff0c601a1b9344e5c5b7b0a6bd523381cd890ee53d8a3671358ad55c965fad8b15ea7b3782438e1faf85ef2ef4d36160ae8727f66de08c05b9b46fd8616f104105a9ab558add2d3458995d2edad0afcfa08e5e5314ddf0ac86cc107947a0addee5f451d7bc056292807b82e7cbb781488bbc0892662c65c3470a2490ec81926b1594efcd4a833f1410582a13dd822735f99d42a882cd6ece546ec0898e1acd62b1d197eaa11c353c400c26af8a1db8ac66c2f362528b830b1697cf49d9f3b1bdd66b862281f4557ddb8a"}) 21:26:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) socket$inet_udplite(0x2, 0x2, 0x88) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:26:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) 21:26:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x0) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:26:54 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0x0) 21:26:54 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) setreuid(0x0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r4, r5, 0x0, 0x1000007ffff000) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f00000002c0)={0x6f06, 0x1, 0x6, 0x8000, 0x1}, 0xc) r6 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setlease(r6, 0x400, 0x3) r7 = syz_open_dev$media(&(0x7f0000000340)='/dev/media#\x00', 0x1ff, 0x100) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x2) syslog(0x0, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000200)=@urb_type_bulk={0x3, {0xa, 0x1}, 0x5, 0xa3194ff80f036c09, &(0x7f0000000000)="6606cc7b459aae8d4521a94fb09f979620c2bc6bcbf807673cd685f185d3012e16a8980ef39b754047948ae136bc8b66159b348c441e3d3eacc3c45ba89107b8da6c02496e9579ec6036b742dd4e8c728d1bfdc99a1355aa9d1c272323e5272059551dffa77912cccb393551b13ea8d9190e654be62e442be87af3ad2dc7404b6c4560997f5e6383991d0913d2131757ce9a5bac13e0f1f18eb2ba2c471633808d50591e956da28b7ce911655b80b40b1d44bfd1093be59eb4c341dc4f0c67f01e0ea9e01e4035da7f3bca282f71f1b9f86057c4d759c6b76fcd63c50c6b523651cc3b9ef8e4211310", 0xe9, 0x2, 0xffff8001, 0x40, 0x1f, 0x200, &(0x7f0000000100)="255d2c9a2799d3d2ded51c7c741a3479cc1496d9e4004148d4713a4900cf3e05b944eb72a85455b099ddfe433f66a528408f1804c15d5d8c058c6b21a663eda2706d1f2822121a070155352634fa885381f21fba7a4e98d3a836900d80d90d5b44da7956a4b3b02e3f93a83619ae9da128cf94fe3d5493545091a9d905deca1b176ec70f8d76c87362b24026841718f2717e79241418c102242539da47398a4fbd8d8adb17b6c1dfe164370f42f36f9bf531b2133965a95df401c5349bbc60219b8ef95e989823f9b174d546e28740fe10"}) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="15ebb00065ffffa00e000008003950323030302e4c"], 0x15) 21:26:54 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4c4ad308}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000400)={r5, 0x6}, 0x8) r6 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 21:26:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) 21:26:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:26:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x0) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:26:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:26:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x0, 0x101000) listen(0xffffffffffffffff, 0x400000001ffffffd) [ 379.222707] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. 21:26:54 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x69a501, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f00000001c0)={0x8b7a8a01e22830bb, 0x0, {0x5, 0x4, 0x7c1789458894b16d, 0x0, 0x7, 0x6, 0x2, 0x1}}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0}, &(0x7f00000003c0)=0x1) setreuid(0x0, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syslog(0x0, 0x0, 0x0) r6 = accept4(r3, &(0x7f0000000000)=@sco, &(0x7f0000000080)=0x80, 0x40800) ioctl$SIOCAX25GETINFO(0xffffffffffffffff, 0x89ed, &(0x7f00000002c0)) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f00000000c0)={0x0, 0x35, "3d7024fe195cf08a66465769c143b9f6949a205e9b7b2a9932e3631fca1c94064c1b7812e1cae504a50003267a575b902923a78319"}, &(0x7f0000000100)=0x3d) 21:26:54 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4c4ad308}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000400)={r5, 0x6}, 0x8) r6 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 21:26:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:26:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(r1, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syslog(0x2, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r6, r7, 0x0, 0x1000007ffff000) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r9) r10 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r11) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x1000000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '\xb7'}}, {@noextend='noextend'}, {@cache_loose='cache=loose'}, {@version_9p2000='version=9p2000'}, {@dfltgid={'dfltgid', 0x3d, r2}}, {@cachetag={'cachetag'}}, {@debug={'debug', 0x3d, 0x7fffffff}}, {@posixacl='posixacl'}, {@debug={'debug', 0x3d, 0x7}}], [{@audit='audit'}, {@euid_lt={'euid<', r9}}, {@uid_eq={'uid', 0x3d, r11}}, {@seclabel='seclabel'}, {@subj_role={'subj_role', 0x3d, '*'}}]}}) 21:26:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x0, 0x101000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:26:55 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0x0) 21:26:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:26:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:26:55 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4c4ad308}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000400)={r5, 0x6}, 0x8) r6 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(0x0, 0x14) 21:26:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r4, r5, 0x0, 0x1000007ffff000) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000080)={'yam0\x00', 0x1d02}) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) fstat(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$cgroup_ro(r5, &(0x7f0000000140)='memory.events\x00', 0x0, 0x0) getsockopt$inet_mreqn(r7, 0x0, 0x24, &(0x7f0000000180)={@local, @initdev}, &(0x7f00000001c0)=0xc) setreuid(r6, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) syslog(0x0, 0x0, 0x0) 21:26:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x0, 0x101000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:26:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:26:55 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0x0) 21:26:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r5, r6, 0x0, 0x1000007ffff000) ioctl$VIDIOC_ENUM_DV_TIMINGS(r6, 0xc0945662, &(0x7f0000000000)={0x6, 0x0, [], {0x0, @reserved}}) syslog(0x0, 0x0, 0x0) 21:26:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:26:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:26:55 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4c4ad308}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000400)={r5, 0x6}, 0x8) r6 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(0x0, 0x14) 21:26:55 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0x0) 21:26:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:26:55 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0x0) 21:26:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:26:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r2 = socket$alg(0x26, 0x5, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x400220, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000140)=0x7fff, 0x4) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r4 = accept4(r2, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r4, r5, 0x0, 0x1000007ffff000) ioctl$PIO_FONTRESET(r5, 0x4b6d, 0x0) setreuid(0x0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r9, r10, 0x0, 0x1000007ffff000) ioctl$VIDIOC_S_SELECTION(r10, 0xc040565f, &(0x7f0000000040)={0x6, 0x0, 0x3, {0xfffffff5, 0x5, 0x7, 0x3f}}) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r12 = accept4(r11, 0x0, 0x0, 0x0) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r14 = accept4(r13, 0x0, 0x0, 0x0) r15 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r14, r15, 0x0, 0x1000007ffff000) r16 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r17) r18 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r18, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) syz_mount_image$hfs(&(0x7f0000001640)='hfs\x00', &(0x7f0000001680)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001f40)={[{@gid={'gid', 0x3d, r19}}]}) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='fuse\x00', 0x203004, &(0x7f00000002c0)={{'fd', 0x3d, r15}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, r17}, 0x2c, {'group_id', 0x3d, r19}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x100000000}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'net/ipv6_route\x00'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}]}}) r20 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r12, r20, 0x0, 0x1000007ffff000) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r20, 0x84, 0xc, &(0x7f0000000180)=0xffff0000, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) syslog(0x0, 0x0, 0x0) 21:26:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:26:56 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0x0) 21:26:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:26:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:26:56 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4c4ad308}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000400)={r5, 0x6}, 0x8) r6 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(0x0, 0x14) 21:26:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:26:56 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0x0) 21:26:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:26:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 381.114987] hfs: gid requires an argument [ 381.119302] hfs: unable to parse mount options 21:26:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x0, 0x101000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:26:56 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r1 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x20000000010009, 0x0) 21:26:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:26:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(0xffffffffffffffff, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:26:56 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4c4ad308}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000400)={r5, 0x6}, 0x8) r6 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) r7 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r7, 0x14) 21:26:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:26:56 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(0x0, 0x0) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4005ef3) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) 21:26:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(0xffffffffffffffff, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:26:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:26:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:26:57 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4c4ad308}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000400)={r5, 0x6}, 0x8) r6 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) r7 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r7, 0x14) 21:26:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(0xffffffffffffffff, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:26:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:26:57 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4c4ad308}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000400)={r5, 0x6}, 0x8) r6 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) r7 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r7, 0x14) 21:26:57 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r1 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x20000000010009, 0x0) 21:26:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:26:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:26:57 executing program 2: 21:26:57 executing program 3: 21:26:57 executing program 2: 21:26:57 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4c4ad308}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000400)={r5, 0x6}, 0x8) r6 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r7 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r7, 0x14) 21:26:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:26:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:26:57 executing program 3: 21:26:57 executing program 2: 21:26:58 executing program 2: 21:26:58 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r1 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x20000000010009, 0x0) 21:26:58 executing program 2: 21:26:58 executing program 3: 21:26:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:26:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:26:58 executing program 2: 21:27:00 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4c4ad308}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000400)={r5, 0x6}, 0x8) r6 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r7 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r7, 0x14) 21:27:00 executing program 3: 21:27:00 executing program 2: 21:27:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:27:00 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:27:00 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000010009, 0x0) 21:27:00 executing program 2: 21:27:00 executing program 3: 21:27:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:27:01 executing program 2: 21:27:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:27:01 executing program 3: 21:27:03 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4c4ad308}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000400)={r5, 0x6}, 0x8) r6 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r7 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r7, 0x14) 21:27:03 executing program 2: 21:27:03 executing program 3: 21:27:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:27:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:27:03 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000010009, 0x0) 21:27:04 executing program 2: 21:27:04 executing program 3: getpid() perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) write$eventfd(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x1, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x800000, 0x6}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) open(0x0, 0x0, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000040), 0x4) 21:27:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:27:04 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r0, r1, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:27:04 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) 21:27:04 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r0, r1, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:27:07 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4c4ad308}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000400)={r5, 0x6}, 0x8) r6 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r7 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r7, 0x14) 21:27:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) 21:27:07 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r0, r1, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:27:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:27:07 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000010009, 0x0) 21:27:07 executing program 3: r0 = socket(0x2, 0xc003, 0x6) connect$unix(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="8202adfdffffffffffffff653000463f7b238bf46854d78a2a197a386207000000008295955984c87910bf453f68c11700287ead4bcb777fa69dfceac2a84e6abca64896bc5e57c6388bbd2ad88b2951b15801360bcd4c0a162b58fd4237b8fa4d012ae447473c238495aaee48c02f6ac41e6bf3bf554799b9b813ad30505e8f5300a49fef9d612f871f4385f04157795ea4a5c5fe659fa202361cd8cac7dbbc5b65c6593d2870b4122cd23500"/189], 0x10) write(r0, &(0x7f0000000040)="9e3eb3900603b73725c7419aab4230e8864fabe4f27242c9a88b86fab7ca2730619556ae0b655533", 0x28) sendto(r0, &(0x7f0000000180)="6861fe261e6f64378b5e05cdf304b826010000000000000000000000e2597291bd508928c1fcdf82fa627475b78f00"/60, 0x3c, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000280)="f8893e9d34ba751218d141ed7382a05dd4857d0e4b1fdfd4b09f4f8a", 0x1c) 21:27:07 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r0, 0x29, 0x1c, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) 21:27:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:27:07 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) socket$inet6(0xa, 0x40000080806, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:27:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)=""/230, &(0x7f0000000100)=0xe6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00') syslog(0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r5, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) r6 = accept4(r4, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r6, r7, 0x0, 0x1000007ffff000) getsockopt$inet6_buf(r7, 0x29, 0x2e, &(0x7f00000001c0)=""/37, &(0x7f0000000200)=0x25) 21:27:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:27:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) write(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, &(0x7f00000004c0)={0x0, 0x9, "b9e20d4e6bbe242e46b80a80a7becbe28b3f2a42aec75de6099cc86823ba271b", 0x0, 0x20, 0x2, 0x8001, 0x33, 0x0, 0x0, 0x0, [0xffffffff, 0x2, 0x4, 0x100]}) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) socket$inet_udplite(0x2, 0x2, 0x88) listen(r1, 0x400000001ffffffd) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40), 0x0, 0x0) [ 392.251896] FAULT_FLAG_ALLOW_RETRY missing 70 [ 392.285369] CPU: 1 PID: 12589 Comm: syz-executor.2 Not tainted 4.19.84 #0 [ 392.292353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 392.301724] Call Trace: [ 392.304328] dump_stack+0x197/0x210 [ 392.307974] handle_userfault.cold+0x41/0x5a [ 392.312408] ? userfaultfd_ioctl+0x3a40/0x3a40 [ 392.317102] ? find_get_entry+0x3e8/0x820 [ 392.321269] ? filemap_map_pages+0x1130/0x1130 [ 392.325872] ? find_lock_entry+0x1a3/0x510 [ 392.330120] shmem_getpage_gfp+0x2cfa/0x3640 [ 392.334557] ? shmem_add_to_page_cache+0xd30/0xd30 [ 392.339497] ? lock_downgrade+0x880/0x880 [ 392.343668] ? kasan_check_read+0x11/0x20 [ 392.347819] shmem_fault+0x233/0x760 [ 392.351617] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 392.356901] ? find_get_pages_range_tag+0xc40/0xc40 [ 392.361959] ? pmd_val+0x85/0x100 [ 392.365423] ? pmd_val+0x85/0x100 [ 392.368892] __do_fault+0x111/0x480 [ 392.372709] __handle_mm_fault+0x2d78/0x3f80 [ 392.372729] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 392.372765] ? count_memcg_event_mm+0x2b1/0x4d0 [ 392.372783] handle_mm_fault+0x1b5/0x690 [ 392.382024] __do_page_fault+0x62a/0xe90 [ 392.394798] ? vmalloc_fault+0x740/0x740 [ 392.398891] ? trace_hardirqs_off_caller+0x65/0x220 [ 392.403926] ? trace_hardirqs_on_caller+0x6a/0x220 [ 392.408881] ? page_fault+0x8/0x30 [ 392.412424] do_page_fault+0x71/0x57d [ 392.416221] ? page_fault+0x8/0x30 [ 392.419768] page_fault+0x1e/0x30 [ 392.423213] RIP: 0033:0x453fd0 [ 392.426409] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 392.445301] RSP: 002b:00007fd6157797a8 EFLAGS: 00010202 [ 392.450666] RAX: 00007fd615779850 RBX: 0000000000000003 RCX: 000000000000000e [ 392.457983] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fd615779850 [ 392.465262] RBP: 000000000075bf20 R08: 00000000000003ff R09: 0000000000000000 [ 392.472522] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd61577a6d4 [ 392.479789] R13: 00000000004ca143 R14: 00000000004e1eb0 R15: 00000000ffffffff 21:27:10 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4c4ad308}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000400)={r5, 0x6}, 0x8) r6 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r7 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r7, 0x14) 21:27:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:27:10 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 21:27:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)=""/230, &(0x7f0000000100)=0xe6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00') syslog(0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r5, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) r6 = accept4(r4, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r6, r7, 0x0, 0x1000007ffff000) getsockopt$inet6_buf(r7, 0x29, 0x2e, &(0x7f00000001c0)=""/37, &(0x7f0000000200)=0x25) 21:27:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:27:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) write(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, &(0x7f00000004c0)={0x0, 0x9, "b9e20d4e6bbe242e46b80a80a7becbe28b3f2a42aec75de6099cc86823ba271b", 0x0, 0x20, 0x2, 0x8001, 0x33, 0x0, 0xffffffa1, 0x63, [0xffffffff, 0x2, 0x4, 0x100]}) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) socket$inet_udplite(0x2, 0x2, 0x88) listen(r1, 0x400000001ffffffd) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40), 0x0, 0x0) [ 394.923162] FAULT_FLAG_ALLOW_RETRY missing 70 [ 394.927872] CPU: 0 PID: 12618 Comm: syz-executor.2 Not tainted 4.19.84 #0 [ 394.934962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 394.944325] Call Trace: [ 394.947070] dump_stack+0x197/0x210 [ 394.950709] handle_userfault.cold+0x41/0x5a [ 394.955144] ? userfaultfd_ioctl+0x3a40/0x3a40 [ 394.959753] ? find_get_entry+0x3e8/0x820 [ 394.963925] ? filemap_map_pages+0x1130/0x1130 [ 394.969460] ? find_lock_entry+0x1a3/0x510 [ 394.973717] shmem_getpage_gfp+0x2cfa/0x3640 [ 394.978167] ? shmem_add_to_page_cache+0xd30/0xd30 [ 394.983123] ? lock_downgrade+0x880/0x880 [ 394.987297] ? kasan_check_read+0x11/0x20 [ 394.991465] shmem_fault+0x233/0x760 [ 394.995200] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 395.000498] ? find_get_pages_range_tag+0xc40/0xc40 [ 395.005532] ? pmd_val+0x85/0x100 [ 395.009006] ? pmd_val+0x85/0x100 [ 395.012483] __do_fault+0x111/0x480 [ 395.016125] __handle_mm_fault+0x2d78/0x3f80 [ 395.020552] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 395.025431] ? count_memcg_event_mm+0x2b1/0x4d0 [ 395.030115] handle_mm_fault+0x1b5/0x690 [ 395.034191] __do_page_fault+0x62a/0xe90 [ 395.038269] ? vmalloc_fault+0x740/0x740 [ 395.042347] ? trace_hardirqs_off_caller+0x65/0x220 [ 395.047379] ? trace_hardirqs_on_caller+0x6a/0x220 [ 395.052324] ? page_fault+0x8/0x30 [ 395.056010] do_page_fault+0x71/0x57d [ 395.059830] ? page_fault+0x8/0x30 [ 395.063388] page_fault+0x1e/0x30 [ 395.066851] RIP: 0033:0x453fd0 [ 395.070054] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 395.089131] RSP: 002b:00007fd6157587a8 EFLAGS: 00010202 [ 395.094510] RAX: 00007fd615758850 RBX: 0000000000000003 RCX: 000000000000000e [ 395.101818] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fd615758850 [ 395.109099] RBP: 000000000075bfc8 R08: 00000000000003ff R09: 0000000000000000 [ 395.116381] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd6157596d4 21:27:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:27:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:27:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 395.123689] R13: 00000000004ca143 R14: 00000000004e1eb0 R15: 00000000ffffffff 21:27:10 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4c4ad308}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000400)={r5, 0x6}, 0x8) r6 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r7 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r7, 0x14) 21:27:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) write(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, &(0x7f00000004c0)={0x0, 0x9, "b9e20d4e6bbe242e46b80a80a7becbe28b3f2a42aec75de6099cc86823ba271b", 0x0, 0x20, 0x2, 0x8001, 0x33, 0x0, 0xffffffa1, 0x63, [0xffffffff, 0x2, 0x4, 0x100]}) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) socket$inet_udplite(0x2, 0x2, 0x88) listen(r1, 0x400000001ffffffd) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40), 0x0, 0x0) 21:27:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:27:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:27:10 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 21:27:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:27:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)=""/230, &(0x7f0000000100)=0xe6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00') syslog(0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r5, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) r6 = accept4(r4, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r6, r7, 0x0, 0x1000007ffff000) getsockopt$inet6_buf(r7, 0x29, 0x2e, &(0x7f00000001c0)=""/37, &(0x7f0000000200)=0x25) 21:27:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) write(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, &(0x7f00000004c0)={0x0, 0x9, "b9e20d4e6bbe242e46b80a80a7becbe28b3f2a42aec75de6099cc86823ba271b", 0x0, 0x20, 0x2, 0x8001, 0x33, 0x0, 0xffffffa1, 0x63, [0xffffffff, 0x2, 0x4, 0x100]}) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) socket$inet_udplite(0x2, 0x2, 0x88) listen(r1, 0x400000001ffffffd) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40), 0x0, 0x0) 21:27:11 executing program 0: syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) [ 396.027756] FAULT_FLAG_ALLOW_RETRY missing 70 [ 396.039861] CPU: 0 PID: 12659 Comm: syz-executor.2 Not tainted 4.19.84 #0 [ 396.046835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 396.056223] Call Trace: [ 396.058833] dump_stack+0x197/0x210 [ 396.062482] handle_userfault.cold+0x41/0x5a [ 396.066921] ? userfaultfd_ioctl+0x3a40/0x3a40 [ 396.071513] ? find_get_entry+0x3e8/0x820 [ 396.075692] ? filemap_map_pages+0x1130/0x1130 [ 396.080304] ? find_lock_entry+0x1a3/0x510 [ 396.084557] shmem_getpage_gfp+0x2cfa/0x3640 [ 396.088995] ? shmem_add_to_page_cache+0xd30/0xd30 [ 396.093944] ? lock_downgrade+0x880/0x880 [ 396.098115] ? kasan_check_read+0x11/0x20 [ 396.102292] shmem_fault+0x233/0x760 [ 396.106035] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 396.111330] ? find_get_pages_range_tag+0xc40/0xc40 [ 396.116894] ? pmd_val+0x85/0x100 [ 396.120366] ? pmd_val+0x85/0x100 [ 396.123839] __do_fault+0x111/0x480 [ 396.127489] __handle_mm_fault+0x2d78/0x3f80 [ 396.131928] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 396.136926] ? count_memcg_event_mm+0x2b1/0x4d0 [ 396.141612] handle_mm_fault+0x1b5/0x690 [ 396.145691] __do_page_fault+0x62a/0xe90 [ 396.149769] ? vmalloc_fault+0x740/0x740 [ 396.153850] ? trace_hardirqs_off_caller+0x65/0x220 [ 396.158886] ? trace_hardirqs_on_caller+0x6a/0x220 [ 396.163849] ? page_fault+0x8/0x30 [ 396.167415] do_page_fault+0x71/0x57d [ 396.171235] ? page_fault+0x8/0x30 [ 396.174791] page_fault+0x1e/0x30 [ 396.178263] RIP: 0033:0x453fd0 [ 396.181465] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 396.200412] RSP: 002b:00007fd6157797a8 EFLAGS: 00010202 [ 396.206052] RAX: 00007fd615779850 RBX: 0000000000000003 RCX: 000000000000000e [ 396.213337] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fd615779850 [ 396.220621] RBP: 000000000075bf20 R08: 00000000000003ff R09: 0000000000000000 21:27:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) socket$inet6(0xa, 0x40000080806, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:27:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:27:11 executing program 0: syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) [ 396.227908] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd61577a6d4 [ 396.235196] R13: 00000000004ca143 R14: 00000000004e1eb0 R15: 00000000ffffffff 21:27:13 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4c4ad308}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000400)={r5, 0x6}, 0x8) r6 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r7 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r7, 0x14) 21:27:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)=""/230, &(0x7f0000000100)=0xe6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00') syslog(0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r5, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) r6 = accept4(r4, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r6, r7, 0x0, 0x1000007ffff000) 21:27:13 executing program 0: syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:27:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:27:13 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 21:27:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) write(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, &(0x7f00000004c0)={0x0, 0x9, "b9e20d4e6bbe242e46b80a80a7becbe28b3f2a42aec75de6099cc86823ba271b", 0x0, 0x20, 0x2, 0x0, 0x33, 0x400, 0xffffffa1, 0x63, [0xffffffff, 0x2, 0x4, 0x100]}) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) socket$inet_udplite(0x2, 0x2, 0x88) listen(r1, 0x400000001ffffffd) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40), 0x0, 0x0) 21:27:13 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:27:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, &(0x7f00000004c0)={0x80000000, 0x9, "b9e20d4e6bbe242e46b80a80a7becbe28b3f2a42aec75de6099cc86823ba271b", 0x8, 0x20, 0x2, 0x8001, 0x33, 0x400, 0xffffffa1, 0x63, [0xffffffff, 0x2, 0x4, 0x100]}) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) socket$inet_udplite(0x2, 0x2, 0x88) listen(r0, 0x400000001ffffffd) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40), 0x0, 0x0) 21:27:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:27:13 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) [ 398.611423] FAULT_FLAG_ALLOW_RETRY missing 70 [ 398.626183] CPU: 1 PID: 12698 Comm: syz-executor.2 Not tainted 4.19.84 #0 [ 398.633170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 398.642573] Call Trace: [ 398.645193] dump_stack+0x197/0x210 [ 398.648851] handle_userfault.cold+0x41/0x5a [ 398.653285] ? _raw_spin_unlock_irq+0x5e/0x90 [ 398.662433] ? userfaultfd_ioctl+0x3a40/0x3a40 [ 398.667094] ? find_get_entry+0x3e8/0x820 [ 398.671342] ? try_to_wake_up+0xcc/0xf50 [ 398.675454] ? filemap_map_pages+0x1130/0x1130 [ 398.680083] ? find_lock_entry+0x1a3/0x510 [ 398.684512] shmem_getpage_gfp+0x2cfa/0x3640 [ 398.688953] ? shmem_add_to_page_cache+0xd30/0xd30 [ 398.693898] ? lock_downgrade+0x880/0x880 [ 398.698083] ? kasan_check_read+0x11/0x20 [ 398.702246] shmem_fault+0x233/0x760 [ 398.705983] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 398.711284] ? find_get_pages_range_tag+0xc40/0xc40 [ 398.716313] ? pmd_val+0x85/0x100 [ 398.719779] ? pmd_val+0x85/0x100 [ 398.723251] __do_fault+0x111/0x480 [ 398.726984] __handle_mm_fault+0x2d78/0x3f80 [ 398.731409] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 398.736296] ? count_memcg_event_mm+0x2b1/0x4d0 [ 398.741187] handle_mm_fault+0x1b5/0x690 [ 398.745271] __do_page_fault+0x62a/0xe90 [ 398.749358] ? vmalloc_fault+0x740/0x740 [ 398.753442] ? trace_hardirqs_off_caller+0x65/0x220 [ 398.758566] ? trace_hardirqs_on_caller+0x6a/0x220 [ 398.763518] ? page_fault+0x8/0x30 [ 398.767095] do_page_fault+0x71/0x57d [ 398.770915] ? page_fault+0x8/0x30 [ 398.774477] page_fault+0x1e/0x30 [ 398.777941] RIP: 0033:0x453fd0 [ 398.781137] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 398.800048] RSP: 002b:00007fd6157797a8 EFLAGS: 00010202 21:27:14 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) [ 398.806475] RAX: 00007fd615779850 RBX: 0000000000000003 RCX: 000000000000000e [ 398.813759] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fd615779850 [ 398.821044] RBP: 000000000075bf20 R08: 00000000000003ff R09: 0000000000000000 [ 398.828416] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd61577a6d4 [ 398.836494] R13: 00000000004ca143 R14: 00000000004e1eb0 R15: 00000000ffffffff 21:27:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)=""/230, &(0x7f0000000100)=0xe6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00') syslog(0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r5, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) accept4(r4, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') [ 399.049149] FAULT_FLAG_ALLOW_RETRY missing 70 [ 399.054368] CPU: 1 PID: 12730 Comm: syz-executor.2 Not tainted 4.19.84 #0 [ 399.061515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 399.070889] Call Trace: [ 399.073534] dump_stack+0x197/0x210 [ 399.077200] handle_userfault.cold+0x41/0x5a [ 399.081616] ? userfaultfd_ioctl+0x3a40/0x3a40 [ 399.086214] ? find_get_entry+0x3e8/0x820 [ 399.090385] ? filemap_map_pages+0x1130/0x1130 [ 399.094984] ? find_lock_entry+0x1a3/0x510 [ 399.099243] shmem_getpage_gfp+0x2cfa/0x3640 [ 399.103864] ? shmem_add_to_page_cache+0xd30/0xd30 [ 399.108789] ? lock_downgrade+0x880/0x880 [ 399.112935] ? kasan_check_read+0x11/0x20 [ 399.117084] shmem_fault+0x233/0x760 [ 399.120814] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 399.126101] ? find_get_pages_range_tag+0xc40/0xc40 [ 399.131129] ? pmd_val+0x85/0x100 [ 399.134585] ? pmd_val+0x85/0x100 [ 399.138033] __do_fault+0x111/0x480 [ 399.141740] __handle_mm_fault+0x2d78/0x3f80 [ 399.146185] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 399.151064] ? count_memcg_event_mm+0x2b1/0x4d0 [ 399.155753] handle_mm_fault+0x1b5/0x690 [ 399.159896] __do_page_fault+0x62a/0xe90 [ 399.163950] ? vmalloc_fault+0x740/0x740 [ 399.168003] ? trace_hardirqs_off_caller+0x65/0x220 [ 399.173097] ? trace_hardirqs_on_caller+0x6a/0x220 [ 399.178019] ? page_fault+0x8/0x30 [ 399.181552] do_page_fault+0x71/0x57d [ 399.185341] ? page_fault+0x8/0x30 [ 399.188886] page_fault+0x1e/0x30 [ 399.192341] RIP: 0033:0x453fd0 [ 399.195535] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 399.214526] RSP: 002b:00007fd6157797a8 EFLAGS: 00010202 [ 399.219892] RAX: 00007fd615779850 RBX: 0000000000000003 RCX: 000000000000000e [ 399.227164] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fd615779850 [ 399.234442] RBP: 000000000075bf20 R08: 00000000000003ff R09: 0000000000000000 [ 399.241713] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd61577a6d4 [ 399.249018] R13: 00000000004ca143 R14: 00000000004e1eb0 R15: 00000000ffffffff 21:27:14 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4c4ad308}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000400)={r5, 0x6}, 0x8) r6 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r7 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r7, 0x14) 21:27:14 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:27:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, &(0x7f00000004c0)={0x80000000, 0x9, "b9e20d4e6bbe242e46b80a80a7becbe28b3f2a42aec75de6099cc86823ba271b", 0x8, 0x20, 0x2, 0x8001, 0x33, 0x400, 0xffffffa1, 0x63, [0xffffffff, 0x2, 0x4, 0x100]}) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) socket$inet_udplite(0x2, 0x2, 0x88) listen(0xffffffffffffffff, 0x400000001ffffffd) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40), 0x0, 0x0) 21:27:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:27:14 executing program 4 (fault-call:6 fault-nth:0): pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0x0) 21:27:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)=""/230, &(0x7f0000000100)=0xe6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00') syslog(0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r5, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) accept4(r4, 0x0, 0x0, 0x0) [ 399.399516] FAULT_INJECTION: forcing a failure. [ 399.399516] name failslab, interval 1, probability 0, space 0, times 1 [ 399.456444] CPU: 1 PID: 12744 Comm: syz-executor.4 Not tainted 4.19.84 #0 [ 399.463661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 399.473035] Call Trace: [ 399.475639] dump_stack+0x197/0x210 [ 399.479435] should_fail.cold+0xa/0x1b [ 399.483385] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 399.488508] ? lock_downgrade+0x880/0x880 [ 399.492703] __should_failslab+0x121/0x190 [ 399.496958] should_failslab+0x9/0x14 [ 399.500783] kmem_cache_alloc_node+0x26c/0x710 [ 399.505479] __alloc_skb+0xd5/0x5f0 [ 399.509141] ? skb_scrub_packet+0x490/0x490 [ 399.513547] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 399.519188] ? netlink_autobind.isra.0+0x228/0x310 [ 399.524147] netlink_sendmsg+0x97b/0xd70 [ 399.528233] ? netlink_unicast+0x720/0x720 [ 399.532591] ? selinux_socket_sendmsg+0x36/0x40 [ 399.537316] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 399.542944] ? security_socket_sendmsg+0x8d/0xc0 [ 399.547725] ? netlink_unicast+0x720/0x720 [ 399.552050] sock_sendmsg+0xd7/0x130 [ 399.555803] kernel_sendmsg+0x44/0x50 [ 399.559628] sock_no_sendpage+0x116/0x150 [ 399.563790] ? sock_kfree_s+0x70/0x70 [ 399.567610] ? avc_has_perm+0x379/0x610 [ 399.571641] ? lock_acquire+0x16f/0x3f0 [ 399.575709] ? pipe_lock+0x6e/0x80 [ 399.579284] kernel_sendpage+0x92/0xf0 [ 399.583183] ? sock_kfree_s+0x70/0x70 [ 399.587030] sock_sendpage+0x8b/0xc0 [ 399.590820] pipe_to_sendpage+0x296/0x360 [ 399.590837] ? kernel_sendpage+0xf0/0xf0 [ 399.599056] ? direct_splice_actor+0x190/0x190 21:27:14 executing program 3 (fault-call:8 fault-nth:0): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:27:14 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 399.603649] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 399.603729] ? splice_from_pipe_next.part.0+0x255/0x2f0 [ 399.603749] __splice_from_pipe+0x391/0x7d0 [ 399.618987] ? direct_splice_actor+0x190/0x190 [ 399.619012] ? direct_splice_actor+0x190/0x190 [ 399.619030] splice_from_pipe+0x108/0x170 [ 399.628202] ? splice_shrink_spd+0xd0/0xd0 [ 399.628229] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 399.628246] ? security_file_permission+0x89/0x230 [ 399.628266] generic_splice_sendpage+0x3c/0x50 [ 399.652234] ? splice_from_pipe+0x170/0x170 [ 399.656667] do_splice+0x642/0x12c0 [ 399.660321] ? opipe_prep.part.0+0x2d0/0x2d0 [ 399.664784] ? __fget_light+0x1a9/0x230 [ 399.668787] __x64_sys_splice+0x2c6/0x330 [ 399.672964] do_syscall_64+0xfd/0x620 [ 399.676786] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 399.681995] RIP: 0033:0x45a639 [ 399.685199] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 21:27:15 executing program 5: socket$inet6(0xa, 0x40000080806, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 399.704516] FAULT_INJECTION: forcing a failure. [ 399.704516] name failslab, interval 1, probability 0, space 0, times 1 [ 399.715913] RSP: 002b:00007f4a49d8cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 399.723648] RAX: ffffffffffffffda RBX: 00007f4a49d8cc90 RCX: 000000000045a639 [ 399.730950] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000003 [ 399.738857] RBP: 000000000075bfc8 R08: 0020000000010009 R09: 0000000000000000 [ 399.746142] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4a49d8d6d4 [ 399.753536] R13: 00000000004ca5d1 R14: 00000000004e1790 R15: 0000000000000007 [ 399.768575] CPU: 0 PID: 12757 Comm: syz-executor.3 Not tainted 4.19.84 #0 [ 399.775642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 399.785618] Call Trace: [ 399.788232] dump_stack+0x197/0x210 [ 399.791890] should_fail.cold+0xa/0x1b [ 399.795804] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 399.801016] ? lock_downgrade+0x880/0x880 [ 399.805450] __should_failslab+0x121/0x190 [ 399.809701] should_failslab+0x9/0x14 [ 399.813519] kmem_cache_alloc_trace+0x2cc/0x760 [ 399.818205] ? retint_kernel+0x2d/0x2d [ 399.822116] alloc_pipe_info+0xb9/0x430 [ 399.826137] ? splice_direct_to_actor+0x83/0x890 [ 399.830907] splice_direct_to_actor+0x6bb/0x890 [ 399.835603] ? generic_pipe_buf_nosteal+0x10/0x10 [ 399.840462] ? selinux_file_permission+0x92/0x550 [ 399.845337] ? do_splice_to+0x180/0x180 [ 399.849332] ? security_file_permission+0x89/0x230 [ 399.854353] ? rw_verify_area+0x118/0x360 [ 399.858527] do_splice_direct+0x1da/0x2a0 [ 399.862697] ? splice_direct_to_actor+0x890/0x890 [ 399.867560] ? retint_kernel+0x2d/0x2d [ 399.871485] do_sendfile+0x597/0xce0 [ 399.876527] ? do_compat_pwritev64+0x1c0/0x1c0 [ 399.881132] ? fput+0x128/0x1a0 [ 399.884435] __x64_sys_sendfile64+0x1dd/0x220 [ 399.889036] ? __ia32_sys_sendfile+0x230/0x230 [ 399.893636] ? do_syscall_64+0x26/0x620 [ 399.897633] ? lockdep_hardirqs_on+0x415/0x5d0 [ 399.902232] ? trace_hardirqs_on+0x67/0x220 21:27:15 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:27:15 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 399.906572] do_syscall_64+0xfd/0x620 [ 399.910405] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 399.915606] RIP: 0033:0x45a639 [ 399.918810] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 399.937717] RSP: 002b:00007f113eae1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 399.937733] RAX: ffffffffffffffda RBX: 00007f113eae1c90 RCX: 000000000045a639 [ 399.937745] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 399.952712] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 399.952723] R10: 001000007ffff000 R11: 0000000000000246 R12: 00007f113eae26d4 [ 399.952732] R13: 00000000004c83bf R14: 00000000004de7f0 R15: 0000000000000007 21:27:15 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4c4ad308}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000400)={r5, 0x6}, 0x8) r6 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r7 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r7, 0x14) 21:27:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)=""/230, &(0x7f0000000100)=0xe6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00') syslog(0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r5, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) accept4(r4, 0x0, 0x0, 0x0) 21:27:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:27:15 executing program 3 (fault-call:8 fault-nth:1): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:15 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:27:15 executing program 4 (fault-call:6 fault-nth:1): pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0x0) [ 400.254966] FAULT_INJECTION: forcing a failure. [ 400.254966] name failslab, interval 1, probability 0, space 0, times 0 [ 400.302654] CPU: 1 PID: 12782 Comm: syz-executor.3 Not tainted 4.19.84 #0 [ 400.309648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 400.319030] Call Trace: [ 400.321644] dump_stack+0x197/0x210 [ 400.325300] should_fail.cold+0xa/0x1b [ 400.329205] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 400.334328] ? lock_downgrade+0x880/0x880 [ 400.338503] __should_failslab+0x121/0x190 [ 400.342846] should_failslab+0x9/0x14 [ 400.346658] __kmalloc+0x2e2/0x750 [ 400.350230] ? kmem_cache_alloc_trace+0x348/0x760 [ 400.355092] ? alloc_pipe_info+0x199/0x430 [ 400.359351] alloc_pipe_info+0x199/0x430 [ 400.363605] splice_direct_to_actor+0x6bb/0x890 [ 400.368300] ? generic_pipe_buf_nosteal+0x10/0x10 [ 400.373263] ? selinux_file_permission+0x92/0x550 [ 400.378135] ? do_splice_to+0x180/0x180 [ 400.382123] ? security_file_permission+0x89/0x230 [ 400.387074] ? rw_verify_area+0x118/0x360 [ 400.391242] do_splice_direct+0x1da/0x2a0 [ 400.395400] ? splice_direct_to_actor+0x890/0x890 [ 400.400249] ? security_file_permission+0x89/0x230 [ 400.405179] ? rw_verify_area+0x118/0x360 [ 400.405195] do_sendfile+0x597/0xce0 [ 400.405216] ? do_compat_pwritev64+0x1c0/0x1c0 [ 400.405231] ? fput+0x128/0x1a0 [ 400.405249] __x64_sys_sendfile64+0x1dd/0x220 [ 400.425454] ? __ia32_sys_sendfile+0x230/0x230 [ 400.425472] ? do_syscall_64+0x26/0x620 [ 400.425487] ? lockdep_hardirqs_on+0x415/0x5d0 [ 400.425508] ? trace_hardirqs_on+0x67/0x220 [ 400.438636] do_syscall_64+0xfd/0x620 [ 400.438659] entry_SYSCALL_64_after_hwframe+0x49/0xbe 21:27:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:27:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:27:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 400.438671] RIP: 0033:0x45a639 [ 400.438684] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 400.438695] RSP: 002b:00007f113eae1c78 EFLAGS: 00000246 [ 400.474068] ORIG_RAX: 0000000000000028 [ 400.474078] RAX: ffffffffffffffda RBX: 00007f113eae1c90 RCX: 000000000045a639 [ 400.474087] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 21:27:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 400.474096] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 400.474105] R10: 001000007ffff000 R11: 0000000000000246 R12: 00007f113eae26d4 [ 400.474114] R13: 00000000004c83bf R14: 00000000004de7f0 R15: 0000000000000007 [ 400.481150] FAULT_FLAG_ALLOW_RETRY missing 70 [ 400.527984] FAULT_INJECTION: forcing a failure. [ 400.527984] name failslab, interval 1, probability 0, space 0, times 0 [ 400.531051] CPU: 1 PID: 12784 Comm: syz-executor.2 Not tainted 4.19.84 #0 [ 400.546234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 400.555598] Call Trace: [ 400.558208] dump_stack+0x197/0x210 [ 400.561861] handle_userfault.cold+0x41/0x5a [ 400.566307] ? userfaultfd_ioctl+0x3a40/0x3a40 [ 400.570912] ? find_get_entry+0x3e8/0x820 [ 400.575080] ? filemap_map_pages+0x1130/0x1130 [ 400.579675] ? find_lock_entry+0x1a3/0x510 [ 400.583921] shmem_getpage_gfp+0x2cfa/0x3640 [ 400.588356] ? shmem_add_to_page_cache+0xd30/0xd30 [ 400.593302] ? lock_downgrade+0x880/0x880 [ 400.597469] ? kasan_check_read+0x11/0x20 [ 400.601635] shmem_fault+0x233/0x760 [ 400.605447] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 400.610736] ? find_get_pages_range_tag+0xc40/0xc40 [ 400.615797] ? pmd_val+0x85/0x100 [ 400.619269] ? pmd_val+0x85/0x100 [ 400.622738] __do_fault+0x111/0x480 [ 400.626369] __handle_mm_fault+0x2d78/0x3f80 [ 400.630790] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 400.635666] ? count_memcg_event_mm+0x2b1/0x4d0 [ 400.640350] handle_mm_fault+0x1b5/0x690 [ 400.644425] __do_page_fault+0x62a/0xe90 [ 400.648758] ? vmalloc_fault+0x740/0x740 [ 400.652831] ? trace_hardirqs_off_caller+0x65/0x220 [ 400.657860] ? trace_hardirqs_on_caller+0x6a/0x220 [ 400.662808] ? page_fault+0x8/0x30 [ 400.666367] do_page_fault+0x71/0x57d [ 400.670187] ? page_fault+0x8/0x30 [ 400.673763] page_fault+0x1e/0x30 [ 400.677228] RIP: 0033:0x453fd0 [ 400.680514] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d 21:27:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:27:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 400.699431] RSP: 002b:00007fd6157797a8 EFLAGS: 00010202 [ 400.704817] RAX: 00007fd615779850 RBX: 0000000000000003 RCX: 000000000000000e [ 400.712102] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fd615779850 [ 400.719382] RBP: 000000000075bf20 R08: 00000000000003ff R09: 0000000000000000 [ 400.726657] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd61577a6d4 [ 400.733919] R13: 00000000004ca143 R14: 00000000004e1eb0 R15: 00000000ffffffff [ 400.741211] CPU: 0 PID: 12799 Comm: syz-executor.4 Not tainted 4.19.84 #0 [ 400.748170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 400.757536] Call Trace: [ 400.760140] dump_stack+0x197/0x210 [ 400.763787] should_fail.cold+0xa/0x1b [ 400.767693] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 400.772815] ? lock_downgrade+0x880/0x880 [ 400.776995] __should_failslab+0x121/0x190 [ 400.781262] should_failslab+0x9/0x14 [ 400.785083] kmem_cache_alloc_node_trace+0x274/0x720 [ 400.790208] ? __alloc_skb+0xd5/0x5f0 [ 400.794032] __kmalloc_node_track_caller+0x3d/0x80 [ 400.798987] __kmalloc_reserve.isra.0+0x40/0xf0 [ 400.803674] __alloc_skb+0x10b/0x5f0 [ 400.803690] ? skb_scrub_packet+0x490/0x490 [ 400.803709] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 400.811828] ? netlink_autobind.isra.0+0x228/0x310 [ 400.811846] netlink_sendmsg+0x97b/0xd70 [ 400.811865] ? netlink_unicast+0x720/0x720 [ 400.830618] ? selinux_socket_sendmsg+0x36/0x40 [ 400.835312] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 400.840875] ? security_socket_sendmsg+0x8d/0xc0 [ 400.845662] ? netlink_unicast+0x720/0x720 [ 400.849924] sock_sendmsg+0xd7/0x130 [ 400.853666] kernel_sendmsg+0x44/0x50 [ 400.857504] sock_no_sendpage+0x116/0x150 [ 400.862719] ? sock_kfree_s+0x70/0x70 [ 400.866537] ? avc_has_perm+0x379/0x610 [ 400.870537] ? lock_acquire+0x16f/0x3f0 [ 400.874540] ? pipe_lock+0x6e/0x80 [ 400.878097] kernel_sendpage+0x92/0xf0 [ 400.881999] ? sock_kfree_s+0x70/0x70 [ 400.885847] sock_sendpage+0x8b/0xc0 [ 400.889563] pipe_to_sendpage+0x296/0x360 [ 400.893872] ? kernel_sendpage+0xf0/0xf0 [ 400.897938] ? direct_splice_actor+0x190/0x190 [ 400.902516] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 400.908065] ? splice_from_pipe_next.part.0+0x255/0x2f0 [ 400.913511] __splice_from_pipe+0x391/0x7d0 [ 400.917842] ? direct_splice_actor+0x190/0x190 [ 400.922416] ? direct_splice_actor+0x190/0x190 [ 400.926986] splice_from_pipe+0x108/0x170 [ 400.931139] ? splice_shrink_spd+0xd0/0xd0 [ 400.935368] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 400.940893] ? security_file_permission+0x89/0x230 [ 400.945825] generic_splice_sendpage+0x3c/0x50 [ 400.950424] ? splice_from_pipe+0x170/0x170 [ 400.954742] do_splice+0x642/0x12c0 [ 400.958366] ? opipe_prep.part.0+0x2d0/0x2d0 [ 400.962767] ? __fget_light+0x1a9/0x230 [ 400.966746] __x64_sys_splice+0x2c6/0x330 [ 400.970887] do_syscall_64+0xfd/0x620 [ 400.974681] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 400.979872] RIP: 0033:0x45a639 [ 400.983078] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 21:27:16 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4c4ad308}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000400)={r5, 0x6}, 0x8) dup(r1) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r6 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r6, 0x14) 21:27:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:27:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)=""/230, &(0x7f0000000100)=0xe6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00') syslog(0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r5, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) [ 401.002578] RSP: 002b:00007f4a49d8cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 401.010276] RAX: ffffffffffffffda RBX: 00007f4a49d8cc90 RCX: 000000000045a639 [ 401.017546] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000003 [ 401.025079] RBP: 000000000075bfc8 R08: 0020000000010009 R09: 0000000000000000 [ 401.032423] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4a49d8d6d4 [ 401.039682] R13: 00000000004ca5d1 R14: 00000000004e1790 R15: 0000000000000007 21:27:16 executing program 3 (fault-call:8 fault-nth:2): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:27:16 executing program 4 (fault-call:6 fault-nth:2): pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0x0) [ 401.166760] FAULT_FLAG_ALLOW_RETRY missing 70 [ 401.177476] CPU: 0 PID: 12816 Comm: syz-executor.2 Not tainted 4.19.84 #0 [ 401.184484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 401.193854] Call Trace: [ 401.196467] dump_stack+0x197/0x210 [ 401.200138] handle_userfault.cold+0x41/0x5a [ 401.204564] ? _raw_spin_unlock_irq+0x5e/0x90 [ 401.209088] ? userfaultfd_ioctl+0x3a40/0x3a40 [ 401.213691] ? find_get_entry+0x3e8/0x820 [ 401.218493] ? filemap_map_pages+0x1130/0x1130 [ 401.223101] ? find_lock_entry+0x1a3/0x510 [ 401.227355] shmem_getpage_gfp+0x2cfa/0x3640 [ 401.227388] ? shmem_add_to_page_cache+0xd30/0xd30 [ 401.227408] ? lock_downgrade+0x880/0x880 [ 401.236755] ? kasan_check_read+0x11/0x20 [ 401.236772] shmem_fault+0x233/0x760 [ 401.236791] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 401.236807] ? find_get_pages_range_tag+0xc40/0xc40 [ 401.236822] ? pmd_val+0x85/0x100 [ 401.236837] ? pmd_val+0x85/0x100 [ 401.236855] __do_fault+0x111/0x480 [ 401.236871] __handle_mm_fault+0x2d78/0x3f80 [ 401.236891] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 401.272377] FAULT_INJECTION: forcing a failure. [ 401.272377] name failslab, interval 1, probability 0, space 0, times 0 [ 401.274073] ? count_memcg_event_mm+0x2b1/0x4d0 [ 401.274092] handle_mm_fault+0x1b5/0x690 [ 401.274112] __do_page_fault+0x62a/0xe90 [ 401.303030] ? vmalloc_fault+0x740/0x740 [ 401.307119] ? trace_hardirqs_off_caller+0x65/0x220 [ 401.312510] ? trace_hardirqs_on_caller+0x6a/0x220 21:27:16 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4c4ad308}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000400)={r5, 0x6}, 0x8) dup(r1) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r6 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r6, 0x14) [ 401.317445] ? page_fault+0x8/0x30 [ 401.321001] do_page_fault+0x71/0x57d [ 401.324807] ? page_fault+0x8/0x30 [ 401.328354] page_fault+0x1e/0x30 [ 401.331807] RIP: 0033:0x453fd0 [ 401.335022] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 401.353931] RSP: 002b:00007fd6157797a8 EFLAGS: 00010202 [ 401.359302] RAX: 00007fd615779850 RBX: 0000000000000003 RCX: 000000000000000e 21:27:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:27:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 401.366584] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fd615779850 [ 401.374006] RBP: 000000000075bf20 R08: 00000000000003ff R09: 0000000000000000 [ 401.381372] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd61577a6d4 [ 401.388668] R13: 00000000004ca143 R14: 00000000004e1eb0 R15: 00000000ffffffff [ 401.412548] CPU: 0 PID: 12823 Comm: syz-executor.3 Not tainted 4.19.84 #0 [ 401.419533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 401.428926] Call Trace: [ 401.432422] dump_stack+0x197/0x210 [ 401.436100] should_fail.cold+0xa/0x1b [ 401.440010] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 401.445142] ? lock_downgrade+0x880/0x880 [ 401.449331] __should_failslab+0x121/0x190 [ 401.453593] should_failslab+0x9/0x14 [ 401.457444] kmem_cache_alloc_node_trace+0x274/0x720 [ 401.462565] ? lock_downgrade+0x880/0x880 [ 401.466912] __kmalloc_node+0x3d/0x80 [ 401.470713] kvmalloc_node+0x68/0x100 [ 401.474696] iov_iter_get_pages_alloc+0x5aa/0x11a0 [ 401.479691] ? unwind_get_return_address+0x61/0xa0 [ 401.484629] ? iov_iter_revert+0xa50/0xa50 [ 401.488858] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 401.493867] ? iov_iter_pipe+0xbe/0x2e0 [ 401.497848] default_file_splice_read+0x19c/0x890 [ 401.502694] ? save_stack+0x45/0xd0 [ 401.506313] ? kasan_kmalloc+0xce/0xf0 [ 401.510186] ? __kmalloc+0x15d/0x750 [ 401.513892] ? do_splice_direct+0x1da/0x2a0 [ 401.518204] ? __x64_sys_sendfile64+0x1dd/0x220 [ 401.522867] ? do_syscall_64+0xfd/0x620 [ 401.526850] ? iter_file_splice_write+0xbd0/0xbd0 [ 401.531687] ? mark_held_locks+0x100/0x100 [ 401.535970] ? get_mem_cgroup_from_mm+0x139/0x320 [ 401.540807] ? rcu_read_unlock+0x16/0x60 [ 401.544859] ? percpu_ref_put_many+0x94/0x190 [ 401.549354] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 401.554896] ? fsnotify+0x8ba/0xf00 [ 401.558525] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 401.564054] ? fsnotify_first_mark+0x210/0x210 [ 401.568629] ? __inode_security_revalidate+0xda/0x120 [ 401.573808] ? avc_policy_seqno+0xd/0x70 [ 401.577866] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 401.582878] ? security_file_permission+0x89/0x230 [ 401.587802] ? iter_file_splice_write+0xbd0/0xbd0 [ 401.592638] do_splice_to+0x127/0x180 [ 401.596459] splice_direct_to_actor+0x256/0x890 [ 401.601143] ? generic_pipe_buf_nosteal+0x10/0x10 [ 401.605983] ? do_splice_to+0x180/0x180 [ 401.609950] ? security_file_permission+0x89/0x230 [ 401.614880] ? rw_verify_area+0x118/0x360 [ 401.619021] do_splice_direct+0x1da/0x2a0 [ 401.623161] ? splice_direct_to_actor+0x890/0x890 [ 401.628012] ? security_file_permission+0x89/0x230 [ 401.632933] ? rw_verify_area+0x118/0x360 [ 401.637072] do_sendfile+0x597/0xce0 [ 401.640789] ? do_compat_pwritev64+0x1c0/0x1c0 [ 401.645374] ? fput+0x128/0x1a0 [ 401.648662] __x64_sys_sendfile64+0x1dd/0x220 [ 401.653150] ? __ia32_sys_sendfile+0x230/0x230 [ 401.657722] ? do_syscall_64+0x26/0x620 [ 401.661708] ? lockdep_hardirqs_on+0x415/0x5d0 [ 401.666282] ? trace_hardirqs_on+0x67/0x220 [ 401.670635] do_syscall_64+0xfd/0x620 [ 401.674431] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 401.679607] RIP: 0033:0x45a639 [ 401.683146] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 401.702037] RSP: 002b:00007f113eae1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 401.709749] RAX: ffffffffffffffda RBX: 00007f113eae1c90 RCX: 000000000045a639 [ 401.717024] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 401.724283] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 401.732757] R10: 001000007ffff000 R11: 0000000000000246 R12: 00007f113eae26d4 [ 401.740025] R13: 00000000004c83bf R14: 00000000004de7f0 R15: 0000000000000007 [ 401.756955] FAULT_INJECTION: forcing a failure. [ 401.756955] name failslab, interval 1, probability 0, space 0, times 0 [ 401.789960] CPU: 1 PID: 12828 Comm: syz-executor.4 Not tainted 4.19.84 #0 [ 401.796982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 401.806426] Call Trace: [ 401.809038] dump_stack+0x197/0x210 [ 401.812705] should_fail.cold+0xa/0x1b [ 401.816623] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 401.821753] ? netlink_deliver_tap+0x146/0xc20 [ 401.826356] __should_failslab+0x121/0x190 [ 401.830609] should_failslab+0x9/0x14 [ 401.834425] kmem_cache_alloc+0x47/0x700 [ 401.838507] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 401.844132] ? check_preemption_disabled+0x48/0x290 [ 401.849256] ? lock_acquire+0x16f/0x3f0 [ 401.853251] skb_clone+0x156/0x3e0 [ 401.856960] netlink_deliver_tap+0x97b/0xc20 [ 401.861395] netlink_unicast+0x5a8/0x720 [ 401.865486] ? netlink_attachskb+0x770/0x770 [ 401.869910] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 401.875465] netlink_sendmsg+0x8ae/0xd70 [ 401.879544] ? netlink_unicast+0x720/0x720 [ 401.883798] ? selinux_socket_sendmsg+0x36/0x40 [ 401.888480] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 401.894039] ? security_socket_sendmsg+0x8d/0xc0 [ 401.898818] ? netlink_unicast+0x720/0x720 [ 401.903077] sock_sendmsg+0xd7/0x130 [ 401.906903] kernel_sendmsg+0x44/0x50 [ 401.910735] sock_no_sendpage+0x116/0x150 [ 401.914904] ? sock_kfree_s+0x70/0x70 [ 401.918716] ? avc_has_perm+0x379/0x610 [ 401.922725] ? lock_acquire+0x16f/0x3f0 [ 401.926724] ? pipe_lock+0x6e/0x80 [ 401.930291] kernel_sendpage+0x92/0xf0 [ 401.934208] ? sock_kfree_s+0x70/0x70 [ 401.938008] sock_sendpage+0x8b/0xc0 [ 401.941721] pipe_to_sendpage+0x296/0x360 [ 401.945860] ? kernel_sendpage+0xf0/0xf0 [ 401.949927] ? direct_splice_actor+0x190/0x190 [ 401.954502] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 401.960039] ? splice_from_pipe_next.part.0+0x255/0x2f0 [ 401.965402] __splice_from_pipe+0x391/0x7d0 [ 401.969720] ? direct_splice_actor+0x190/0x190 [ 401.974409] ? direct_splice_actor+0x190/0x190 [ 401.978982] splice_from_pipe+0x108/0x170 [ 401.983124] ? splice_shrink_spd+0xd0/0xd0 [ 401.987357] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 401.992887] ? security_file_permission+0x89/0x230 [ 401.997812] generic_splice_sendpage+0x3c/0x50 [ 402.002387] ? splice_from_pipe+0x170/0x170 [ 402.006754] do_splice+0x642/0x12c0 [ 402.010380] ? opipe_prep.part.0+0x2d0/0x2d0 [ 402.014781] ? __fget_light+0x1a9/0x230 [ 402.018750] __x64_sys_splice+0x2c6/0x330 [ 402.022917] do_syscall_64+0xfd/0x620 [ 402.026721] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 402.031899] RIP: 0033:0x45a639 [ 402.035089] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 402.054436] RSP: 002b:00007f4a49d8cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 402.062164] RAX: ffffffffffffffda RBX: 00007f4a49d8cc90 RCX: 000000000045a639 [ 402.069446] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000003 [ 402.076753] RBP: 000000000075bfc8 R08: 0020000000010009 R09: 0000000000000000 [ 402.084043] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4a49d8d6d4 21:27:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:27:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)=""/230, &(0x7f0000000100)=0xe6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00') syslog(0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) ioctl$UFFDIO_WAKE(r5, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) [ 402.091493] R13: 00000000004ca5d1 R14: 00000000004e1790 R15: 0000000000000007 21:27:17 executing program 3 (fault-call:8 fault-nth:3): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:27:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)=""/230, &(0x7f0000000100)=0xe6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00') syslog(0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) ioctl$UFFDIO_WAKE(r5, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:17 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4c4ad308}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000400)={r5, 0x6}, 0x8) dup(r1) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r6 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r6, 0x14) 21:27:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 402.367723] selinux_nlmsg_perm: 4381 callbacks suppressed [ 402.367738] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=12828 comm=syz-executor.4 [ 402.428832] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=12828 comm=syz-executor.4 [ 402.454531] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=12828 comm=syz-executor.4 [ 402.520520] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=12828 comm=syz-executor.4 [ 402.538993] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=12828 comm=syz-executor.4 [ 402.557209] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=12828 comm=syz-executor.4 [ 402.570147] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=12828 comm=syz-executor.4 [ 402.583627] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=12828 comm=syz-executor.4 [ 402.597346] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=12828 comm=syz-executor.4 21:27:17 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0x0) 21:27:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)=""/230, &(0x7f0000000100)=0xe6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00') syslog(0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) ioctl$UFFDIO_WAKE(r5, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:27:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:27:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:18 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4c4ad308}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000400)={r4, 0x6}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r5 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r5, 0x14) [ 402.610244] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=12828 comm=syz-executor.4 21:27:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:27:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)=""/230, &(0x7f0000000100)=0xe6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00') syslog(0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r5, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:27:18 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4c4ad308}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000400)={r4, 0x6}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r5 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r5, 0x14) 21:27:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x10000000000002) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)=""/230, &(0x7f0000000100)=0xe6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00') syslog(0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r5, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)=""/230, &(0x7f0000000100)=0xe6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00') syslog(0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r5, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:27:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:27:18 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4c4ad308}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000400)={r4, 0x6}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r5 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r5, 0x14) 21:27:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x10000000000ffe) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:18 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x2b1, 0x0) 21:27:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)=""/230, &(0x7f0000000100)=0xe6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00') syslog(0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r5, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:27:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff002) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)=""/230, &(0x7f0000000100)=0xe6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00') syslog(0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r5, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:27:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:27:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)=""/230, &(0x7f0000000100)=0xe6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00') syslog(0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r5, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:19 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4c4ad308}, &(0x7f00000002c0)=0x8) r5 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r6 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r6, 0x14) 21:27:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff003) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:27:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)=""/230, &(0x7f0000000100)=0xe6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00') syslog(0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:19 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000014000, 0x0) 21:27:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:27:19 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) r5 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r6 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r6, 0x14) 21:27:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)=""/230, &(0x7f0000000100)=0xe6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00') syslog(0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:27:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff004) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)=""/230, &(0x7f0000000100)=0xe6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00') syslog(0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:27:20 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r4 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r4, 0x14) 21:27:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff005) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)=""/230, &(0x7f0000000100)=0xe6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00') syslog(0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r5, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:27:20 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0x2) 21:27:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:27:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)=""/230, &(0x7f0000000100)=0xe6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00') syslog(0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r5, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:20 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r4 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r4, 0x14) 21:27:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff006) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:27:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)=""/230, &(0x7f0000000100)=0xe6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00') syslog(0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r5, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:27:20 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r4 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r4, 0x14) 21:27:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:27:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff007) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:27:21 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0x4) 21:27:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)=""/230, &(0x7f0000000100)=0xe6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00') syslog(0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r5, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:27:21 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$alg(0x26, 0x5, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff008) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:27:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 406.402325] FAULT_FLAG_ALLOW_RETRY missing 70 [ 406.425962] CPU: 1 PID: 13090 Comm: syz-executor.2 Not tainted 4.19.84 #0 [ 406.432971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 406.442351] Call Trace: [ 406.444970] dump_stack+0x197/0x210 [ 406.448618] handle_userfault.cold+0x41/0x5a [ 406.453068] ? _raw_spin_unlock_irq+0x5e/0x90 [ 406.457595] ? userfaultfd_ioctl+0x3a40/0x3a40 [ 406.462290] ? find_get_entry+0x3e8/0x820 [ 406.466549] ? try_to_wake_up+0xcc/0xf50 [ 406.470620] ? filemap_map_pages+0x1130/0x1130 [ 406.475314] ? find_lock_entry+0x1a3/0x510 [ 406.479561] shmem_getpage_gfp+0x2cfa/0x3640 [ 406.484002] ? shmem_add_to_page_cache+0xd30/0xd30 [ 406.488951] ? lock_downgrade+0x880/0x880 [ 406.493109] ? kasan_check_read+0x11/0x20 [ 406.497268] shmem_fault+0x233/0x760 [ 406.501030] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 406.506404] ? find_get_pages_range_tag+0xc40/0xc40 [ 406.511451] ? pmd_val+0x85/0x100 [ 406.514923] ? pmd_val+0x85/0x100 [ 406.518399] __do_fault+0x111/0x480 [ 406.522039] __handle_mm_fault+0x2d78/0x3f80 [ 406.526492] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 406.531369] ? count_memcg_event_mm+0x2b1/0x4d0 [ 406.536060] handle_mm_fault+0x1b5/0x690 [ 406.540150] __do_page_fault+0x62a/0xe90 [ 406.544241] ? vmalloc_fault+0x740/0x740 [ 406.548332] ? trace_hardirqs_off_caller+0x65/0x220 [ 406.553372] ? trace_hardirqs_on_caller+0x6a/0x220 [ 406.558324] ? page_fault+0x8/0x30 [ 406.561880] do_page_fault+0x71/0x57d [ 406.565689] ? page_fault+0x8/0x30 [ 406.569240] page_fault+0x1e/0x30 [ 406.572800] RIP: 0033:0x453fd0 21:27:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 406.576005] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 406.594916] RSP: 002b:00007fd6157797a8 EFLAGS: 00010202 [ 406.594930] RAX: 00007fd615779850 RBX: 0000000000000003 RCX: 000000000000000e [ 406.594938] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fd615779850 [ 406.594946] RBP: 000000000075bf20 R08: 00000000000003ff R09: 0000000000000000 21:27:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:27:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff009) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:21 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) [ 406.594958] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd61577a6d4 [ 406.608113] R13: 00000000004ca143 R14: 00000000004e1eb0 R15: 00000000ffffffff 21:27:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:27:22 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0xa) 21:27:22 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r2 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r2, 0x14) 21:27:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff00a) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:27:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)=""/230, &(0x7f0000000100)=0xe6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00') syslog(0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r4, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:27:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, 0xffffffffffffffff, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 407.382480] FAULT_FLAG_ALLOW_RETRY missing 70 [ 407.396066] CPU: 1 PID: 13137 Comm: syz-executor.2 Not tainted 4.19.84 #0 [ 407.403573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 407.412946] Call Trace: [ 407.415567] dump_stack+0x197/0x210 [ 407.419237] handle_userfault.cold+0x41/0x5a [ 407.423675] ? _raw_spin_unlock_irq+0x5e/0x90 [ 407.428218] ? userfaultfd_ioctl+0x3a40/0x3a40 [ 407.432828] ? find_get_entry+0x3e8/0x820 [ 407.436998] ? try_to_wake_up+0xcc/0xf50 [ 407.441057] ? filemap_map_pages+0x1130/0x1130 [ 407.445723] ? find_lock_entry+0x1a3/0x510 [ 407.449957] shmem_getpage_gfp+0x2cfa/0x3640 [ 407.454368] ? shmem_add_to_page_cache+0xd30/0xd30 [ 407.459474] ? lock_downgrade+0x880/0x880 [ 407.464054] ? kasan_check_read+0x11/0x20 [ 407.468200] shmem_fault+0x233/0x760 [ 407.471911] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 407.477187] ? find_get_pages_range_tag+0xc40/0xc40 [ 407.482207] ? pmd_val+0x85/0x100 [ 407.485651] ? pmd_val+0x85/0x100 [ 407.489114] __do_fault+0x111/0x480 [ 407.492737] __handle_mm_fault+0x2d78/0x3f80 [ 407.497153] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 407.502110] ? count_memcg_event_mm+0x2b1/0x4d0 [ 407.506772] handle_mm_fault+0x1b5/0x690 [ 407.510831] __do_page_fault+0x62a/0xe90 [ 407.514890] ? vmalloc_fault+0x740/0x740 [ 407.518942] ? trace_hardirqs_off_caller+0x65/0x220 [ 407.523949] ? trace_hardirqs_on_caller+0x6a/0x220 [ 407.528874] ? page_fault+0x8/0x30 [ 407.532408] do_page_fault+0x71/0x57d [ 407.536285] ? page_fault+0x8/0x30 [ 407.539817] page_fault+0x1e/0x30 [ 407.543270] RIP: 0033:0x453fd0 [ 407.546455] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 407.565368] RSP: 002b:00007fd6157797a8 EFLAGS: 00010202 [ 407.570722] RAX: 00007fd615779850 RBX: 0000000000000003 RCX: 000000000000000e [ 407.577994] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fd615779850 [ 407.585251] RBP: 000000000075bf20 R08: 00000000000003ff R09: 0000000000000000 [ 407.592507] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd61577a6d4 [ 407.599784] R13: 00000000004ca143 R14: 00000000004e1eb0 R15: 00000000ffffffff 21:27:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff00b) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) [ 407.632794] selinux_nlmsg_perm: 6639 callbacks suppressed [ 407.632811] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=13149 comm=syz-executor.4 21:27:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:27:23 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r2 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r2, 0x14) [ 407.687743] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=13149 comm=syz-executor.4 [ 407.710673] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=13149 comm=syz-executor.4 [ 407.730711] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=13149 comm=syz-executor.4 21:27:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, 0xffffffffffffffff, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 407.780678] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=13149 comm=syz-executor.4 [ 407.842678] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=13149 comm=syz-executor.4 21:27:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) [ 407.901837] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=13149 comm=syz-executor.4 [ 407.923286] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=13149 comm=syz-executor.4 [ 407.976306] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=13149 comm=syz-executor.4 [ 408.041022] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=13149 comm=syz-executor.4 21:27:23 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0xe) 21:27:23 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r2 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r2, 0x14) 21:27:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, 0xffffffffffffffff, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:27:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)=""/230, &(0x7f0000000100)=0xe6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00') syslog(0x0, 0x0, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r4, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff00c) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:27:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x0) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:27:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:27:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff00d) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:23 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x0) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:27:23 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) [ 408.450367] FAULT_FLAG_ALLOW_RETRY missing 70 [ 408.502857] CPU: 1 PID: 13197 Comm: syz-executor.2 Not tainted 4.19.84 #0 [ 408.510369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 408.519742] Call Trace: [ 408.522364] dump_stack+0x197/0x210 [ 408.526024] handle_userfault.cold+0x41/0x5a [ 408.530457] ? _raw_spin_unlock_irq+0x5e/0x90 [ 408.534986] ? userfaultfd_ioctl+0x3a40/0x3a40 [ 408.539596] ? find_get_entry+0x3e8/0x820 [ 408.543771] ? try_to_wake_up+0xcc/0xf50 [ 408.547852] ? filemap_map_pages+0x1130/0x1130 [ 408.552490] ? find_lock_entry+0x1a3/0x510 [ 408.556744] shmem_getpage_gfp+0x2cfa/0x3640 [ 408.561167] ? shmem_add_to_page_cache+0xd30/0xd30 [ 408.566104] ? lock_downgrade+0x880/0x880 [ 408.570252] ? kasan_check_read+0x11/0x20 [ 408.574402] shmem_fault+0x233/0x760 [ 408.578113] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 408.583431] ? find_get_pages_range_tag+0xc40/0xc40 [ 408.588459] ? pmd_val+0x85/0x100 [ 408.591907] ? pmd_val+0x85/0x100 [ 408.595359] __do_fault+0x111/0x480 [ 408.599159] __handle_mm_fault+0x2d78/0x3f80 [ 408.603568] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 408.608420] ? count_memcg_event_mm+0x2b1/0x4d0 [ 408.613092] handle_mm_fault+0x1b5/0x690 [ 408.617153] __do_page_fault+0x62a/0xe90 [ 408.621213] ? vmalloc_fault+0x740/0x740 [ 408.625268] ? trace_hardirqs_off_caller+0x65/0x220 [ 408.630273] ? trace_hardirqs_on_caller+0x6a/0x220 [ 408.635202] ? page_fault+0x8/0x30 [ 408.638754] do_page_fault+0x71/0x57d [ 408.642638] ? page_fault+0x8/0x30 [ 408.646179] page_fault+0x1e/0x30 [ 408.649628] RIP: 0033:0x453fd0 [ 408.652825] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 408.672261] RSP: 002b:00007fd6157797a8 EFLAGS: 00010202 [ 408.677636] RAX: 00007fd615779850 RBX: 0000000000000003 RCX: 000000000000000e [ 408.684911] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fd615779850 [ 408.692204] RBP: 000000000075bf20 R08: 00000000000003ff R09: 0000000000000000 [ 408.699467] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd61577a6d4 [ 408.706756] R13: 00000000004ca143 R14: 00000000004e1eb0 R15: 00000000ffffffff 21:27:24 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x0) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:27:24 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0xf) 21:27:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff00e) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:27:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)=""/230, &(0x7f0000000100)=0xe6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00') mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r4, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x0, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:27:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:27:24 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) [ 409.276183] FAULT_FLAG_ALLOW_RETRY missing 70 [ 409.282585] CPU: 1 PID: 13237 Comm: syz-executor.2 Not tainted 4.19.84 #0 [ 409.289637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 409.299006] Call Trace: [ 409.301621] dump_stack+0x197/0x210 [ 409.305272] handle_userfault.cold+0x41/0x5a [ 409.309712] ? userfaultfd_ioctl+0x3a40/0x3a40 [ 409.314317] ? find_get_entry+0x3e8/0x820 [ 409.318485] ? filemap_map_pages+0x1130/0x1130 [ 409.323086] ? find_lock_entry+0x1a3/0x510 [ 409.327346] shmem_getpage_gfp+0x2cfa/0x3640 [ 409.331780] ? shmem_add_to_page_cache+0xd30/0xd30 [ 409.336725] ? lock_downgrade+0x880/0x880 [ 409.340896] ? kasan_check_read+0x11/0x20 [ 409.345065] shmem_fault+0x233/0x760 [ 409.348880] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 409.354179] ? find_get_pages_range_tag+0xc40/0xc40 [ 409.359219] ? pmd_val+0x85/0x100 [ 409.362691] ? pmd_val+0x85/0x100 [ 409.366246] __do_fault+0x111/0x480 [ 409.369900] __handle_mm_fault+0x2d78/0x3f80 [ 409.375115] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 409.379997] ? count_memcg_event_mm+0x2b1/0x4d0 [ 409.384678] handle_mm_fault+0x1b5/0x690 [ 409.388738] __do_page_fault+0x62a/0xe90 [ 409.392793] ? vmalloc_fault+0x740/0x740 [ 409.396844] ? trace_hardirqs_off_caller+0x65/0x220 [ 409.401846] ? trace_hardirqs_on_caller+0x6a/0x220 [ 409.406766] ? page_fault+0x8/0x30 [ 409.410302] do_page_fault+0x71/0x57d [ 409.417052] ? page_fault+0x8/0x30 [ 409.420581] page_fault+0x1e/0x30 [ 409.424022] RIP: 0033:0x453fd0 [ 409.427204] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 409.446191] RSP: 002b:00007fd6157797a8 EFLAGS: 00010202 [ 409.451545] RAX: 00007fd615779850 RBX: 0000000000000003 RCX: 000000000000000e [ 409.458802] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fd615779850 [ 409.466069] RBP: 000000000075bf20 R08: 00000000000003ff R09: 0000000000000000 21:27:24 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x0, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 409.473323] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd61577a6d4 [ 409.480577] R13: 00000000004ca143 R14: 00000000004e1eb0 R15: 00000000ffffffff 21:27:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:27:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff00f) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)=""/230, &(0x7f0000000100)=0xe6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r4, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) [ 409.730248] FAULT_FLAG_ALLOW_RETRY missing 70 [ 409.738841] CPU: 1 PID: 13261 Comm: syz-executor.2 Not tainted 4.19.84 #0 [ 409.745820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 409.755184] Call Trace: [ 409.757792] dump_stack+0x197/0x210 [ 409.761445] handle_userfault.cold+0x41/0x5a [ 409.765867] ? _raw_spin_unlock_irq+0x5e/0x90 [ 409.770396] ? userfaultfd_ioctl+0x3a40/0x3a40 [ 409.774999] ? find_get_entry+0x3e8/0x820 [ 409.779158] ? try_to_wake_up+0xcc/0xf50 [ 409.783223] ? filemap_map_pages+0x1130/0x1130 [ 409.787817] ? find_lock_entry+0x1a3/0x510 [ 409.792061] shmem_getpage_gfp+0x2cfa/0x3640 [ 409.796499] ? shmem_add_to_page_cache+0xd30/0xd30 [ 409.801437] ? lock_downgrade+0x880/0x880 [ 409.805592] ? kasan_check_read+0x11/0x20 [ 409.809755] shmem_fault+0x233/0x760 [ 409.813487] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 409.818775] ? find_get_pages_range_tag+0xc40/0xc40 [ 409.823804] ? pmd_val+0x85/0x100 [ 409.827267] ? pmd_val+0x85/0x100 [ 409.830732] __do_fault+0x111/0x480 [ 409.834373] __handle_mm_fault+0x2d78/0x3f80 [ 409.838800] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 409.843681] ? count_memcg_event_mm+0x2b1/0x4d0 [ 409.848381] handle_mm_fault+0x1b5/0x690 [ 409.852454] __do_page_fault+0x62a/0xe90 [ 409.856543] ? vmalloc_fault+0x740/0x740 [ 409.860618] ? trace_hardirqs_off_caller+0x65/0x220 [ 409.865637] ? trace_hardirqs_on_caller+0x6a/0x220 [ 409.871859] ? page_fault+0x8/0x30 [ 409.875452] do_page_fault+0x71/0x57d [ 409.879245] ? page_fault+0x8/0x30 [ 409.882775] page_fault+0x1e/0x30 [ 409.886218] RIP: 0033:0x453fd0 [ 409.889398] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 409.908314] RSP: 002b:00007fd6157797a8 EFLAGS: 00010202 [ 409.913670] RAX: 00007fd615779850 RBX: 0000000000000003 RCX: 000000000000000e [ 409.920947] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fd615779850 21:27:25 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0x12) 21:27:25 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x0, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:27:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:27:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff010) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)=""/230, &(0x7f0000000100)=0xe6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) [ 409.928208] RBP: 000000000075bf20 R08: 00000000000003ff R09: 0000000000000000 [ 409.935479] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd61577a6d4 [ 409.942756] R13: 00000000004ca143 R14: 00000000004e1eb0 R15: 00000000ffffffff [ 410.085105] FAULT_FLAG_ALLOW_RETRY missing 70 [ 410.096184] CPU: 0 PID: 13274 Comm: syz-executor.2 Not tainted 4.19.84 #0 [ 410.103166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 410.112534] Call Trace: [ 410.115141] dump_stack+0x197/0x210 [ 410.118786] handle_userfault.cold+0x41/0x5a [ 410.123225] ? userfaultfd_ioctl+0x3a40/0x3a40 [ 410.127831] ? find_get_entry+0x3e8/0x820 21:27:25 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:27:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) [ 410.132007] ? filemap_map_pages+0x1130/0x1130 [ 410.136617] ? find_lock_entry+0x1a3/0x510 [ 410.140873] shmem_getpage_gfp+0x2cfa/0x3640 [ 410.145310] ? shmem_add_to_page_cache+0xd30/0xd30 [ 410.150256] ? lock_downgrade+0x880/0x880 [ 410.154415] ? kasan_check_read+0x11/0x20 [ 410.158601] shmem_fault+0x233/0x760 [ 410.162325] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 410.162343] ? find_get_pages_range_tag+0xc40/0xc40 [ 410.162358] ? pmd_val+0x85/0x100 [ 410.162373] ? pmd_val+0x85/0x100 [ 410.162391] __do_fault+0x111/0x480 [ 410.162407] __handle_mm_fault+0x2d78/0x3f80 [ 410.162427] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 410.162458] ? count_memcg_event_mm+0x2b1/0x4d0 [ 410.162475] handle_mm_fault+0x1b5/0x690 [ 410.192519] __do_page_fault+0x62a/0xe90 [ 410.192538] ? vmalloc_fault+0x740/0x740 [ 410.192555] ? trace_hardirqs_off_caller+0x65/0x220 [ 410.192567] ? trace_hardirqs_on_caller+0x6a/0x220 [ 410.192582] ? page_fault+0x8/0x30 [ 410.192601] do_page_fault+0x71/0x57d [ 410.192613] ? page_fault+0x8/0x30 [ 410.192633] page_fault+0x1e/0x30 [ 410.234115] RIP: 0033:0x453fd0 [ 410.237328] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 410.256697] RSP: 002b:00007fd6157797a8 EFLAGS: 00010202 [ 410.262056] RAX: 00007fd615779850 RBX: 0000000000000003 RCX: 000000000000000e [ 410.269315] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fd615779850 [ 410.276594] RBP: 000000000075bf20 R08: 00000000000003ff R09: 0000000000000000 21:27:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff048) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) [ 410.283856] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd61577a6d4 [ 410.291114] R13: 00000000004ca143 R14: 00000000004e1eb0 R15: 00000000ffffffff 21:27:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:27:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:27:26 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0x13) 21:27:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff04c) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)=""/230, &(0x7f0000000100)=0xe6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:26 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 21:27:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) [ 410.953110] FAULT_FLAG_ALLOW_RETRY missing 70 [ 410.962440] CPU: 1 PID: 13323 Comm: syz-executor.2 Not tainted 4.19.84 #0 [ 410.969518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 410.978928] Call Trace: [ 410.981544] dump_stack+0x197/0x210 [ 410.985193] handle_userfault.cold+0x41/0x5a [ 410.989792] ? _raw_spin_unlock_irq+0x5e/0x90 [ 410.994320] ? userfaultfd_ioctl+0x3a40/0x3a40 [ 410.998917] ? find_get_entry+0x3e8/0x820 [ 411.003086] ? try_to_wake_up+0xcc/0xf50 [ 411.007163] ? filemap_map_pages+0x1130/0x1130 [ 411.011784] ? find_lock_entry+0x1a3/0x510 [ 411.016036] shmem_getpage_gfp+0x2cfa/0x3640 [ 411.020500] ? shmem_add_to_page_cache+0xd30/0xd30 [ 411.025450] ? lock_downgrade+0x880/0x880 [ 411.029615] ? kasan_check_read+0x11/0x20 [ 411.033789] shmem_fault+0x233/0x760 [ 411.037529] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 411.042924] ? find_get_pages_range_tag+0xc40/0xc40 [ 411.047959] ? pmd_val+0x85/0x100 [ 411.051432] ? pmd_val+0x85/0x100 [ 411.054918] __do_fault+0x111/0x480 [ 411.058561] __handle_mm_fault+0x2d78/0x3f80 [ 411.062989] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 411.067874] ? count_memcg_event_mm+0x2b1/0x4d0 [ 411.072568] handle_mm_fault+0x1b5/0x690 [ 411.076660] __do_page_fault+0x62a/0xe90 [ 411.080747] ? vmalloc_fault+0x740/0x740 [ 411.084868] ? trace_hardirqs_off_caller+0x65/0x220 [ 411.089895] ? trace_hardirqs_on_caller+0x6a/0x220 [ 411.094831] ? page_fault+0x8/0x30 [ 411.094852] do_page_fault+0x71/0x57d [ 411.094865] ? page_fault+0x8/0x30 [ 411.094878] page_fault+0x1e/0x30 [ 411.094891] RIP: 0033:0x453fd0 [ 411.112414] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 411.131337] RSP: 002b:00007fd6157797a8 EFLAGS: 00010202 [ 411.136720] RAX: 00007fd615779850 RBX: 0000000000000003 RCX: 000000000000000e [ 411.144098] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fd615779850 21:27:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, 0xffffffffffffffff, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:27:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 21:27:26 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) [ 411.151387] RBP: 000000000075bf20 R08: 00000000000003ff R09: 0000000000000000 [ 411.158675] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd61577a6d4 [ 411.165957] R13: 00000000004ca143 R14: 00000000004e1eb0 R15: 00000000ffffffff 21:27:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff068) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 21:27:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)=""/230, &(0x7f0000000100)=0xe6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) [ 411.470285] FAULT_FLAG_ALLOW_RETRY missing 70 [ 411.476840] CPU: 0 PID: 13347 Comm: syz-executor.2 Not tainted 4.19.84 #0 [ 411.483813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 411.493176] Call Trace: [ 411.495787] dump_stack+0x197/0x210 [ 411.499411] handle_userfault.cold+0x41/0x5a [ 411.503823] ? userfaultfd_ioctl+0x3a40/0x3a40 [ 411.508403] ? find_get_entry+0x3e8/0x820 [ 411.512551] ? filemap_map_pages+0x1130/0x1130 [ 411.517145] ? find_lock_entry+0x1a3/0x510 [ 411.521461] shmem_getpage_gfp+0x2cfa/0x3640 [ 411.526133] ? shmem_add_to_page_cache+0xd30/0xd30 [ 411.531076] ? lock_downgrade+0x880/0x880 [ 411.535230] ? kasan_check_read+0x11/0x20 [ 411.539371] shmem_fault+0x233/0x760 [ 411.543167] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 411.548435] ? find_get_pages_range_tag+0xc40/0xc40 [ 411.553441] ? pmd_val+0x85/0x100 [ 411.556893] ? pmd_val+0x85/0x100 [ 411.560338] __do_fault+0x111/0x480 [ 411.563957] __handle_mm_fault+0x2d78/0x3f80 [ 411.568360] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 411.573208] ? count_memcg_event_mm+0x2b1/0x4d0 [ 411.577866] handle_mm_fault+0x1b5/0x690 [ 411.581930] __do_page_fault+0x62a/0xe90 [ 411.585992] ? vmalloc_fault+0x740/0x740 [ 411.590043] ? trace_hardirqs_off_caller+0x65/0x220 [ 411.595061] ? trace_hardirqs_on_caller+0x6a/0x220 [ 411.600002] ? page_fault+0x8/0x30 [ 411.603539] do_page_fault+0x71/0x57d [ 411.607327] ? page_fault+0x8/0x30 [ 411.610856] page_fault+0x1e/0x30 [ 411.614314] RIP: 0033:0x453fd0 [ 411.617495] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 411.636385] RSP: 002b:00007fd6157797a8 EFLAGS: 00010202 [ 411.641749] RAX: 00007fd615779850 RBX: 0000000000000003 RCX: 000000000000000e [ 411.649010] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fd615779850 [ 411.656288] RBP: 000000000075bf20 R08: 00000000000003ff R09: 0000000000000000 [ 411.663548] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd61577a6d4 [ 411.670817] R13: 00000000004ca143 R14: 00000000004e1eb0 R15: 00000000ffffffff 21:27:27 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0x14) 21:27:27 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet(0xffffffffffffffff, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r2 = gettid() recvmmsg(0xffffffffffffffff, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r2, 0x14) 21:27:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, 0xffffffffffffffff, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:27:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 21:27:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)=""/230, &(0x7f0000000100)=0xe6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff06c) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) [ 411.886364] FAULT_FLAG_ALLOW_RETRY missing 70 [ 411.897593] CPU: 1 PID: 13367 Comm: syz-executor.2 Not tainted 4.19.84 #0 [ 411.904588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 411.913972] Call Trace: [ 411.916578] dump_stack+0x197/0x210 [ 411.920222] handle_userfault.cold+0x41/0x5a [ 411.924656] ? userfaultfd_ioctl+0x3a40/0x3a40 [ 411.929256] ? find_get_entry+0x3e8/0x820 [ 411.934127] ? filemap_map_pages+0x1130/0x1130 [ 411.938749] ? find_lock_entry+0x1a3/0x510 [ 411.943006] shmem_getpage_gfp+0x2cfa/0x3640 [ 411.947440] ? shmem_add_to_page_cache+0xd30/0xd30 [ 411.952384] ? lock_downgrade+0x880/0x880 [ 411.956547] ? kasan_check_read+0x11/0x20 [ 411.960711] shmem_fault+0x233/0x760 [ 411.964454] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 411.969738] ? find_get_pages_range_tag+0xc40/0xc40 [ 411.974757] ? pmd_val+0x85/0x100 [ 411.978218] ? pmd_val+0x85/0x100 [ 411.981682] __do_fault+0x111/0x480 [ 411.985313] __handle_mm_fault+0x2d78/0x3f80 [ 411.989744] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 411.994591] ? count_memcg_event_mm+0x2b1/0x4d0 [ 411.999440] handle_mm_fault+0x1b5/0x690 [ 412.003496] __do_page_fault+0x62a/0xe90 [ 412.007548] ? vmalloc_fault+0x740/0x740 [ 412.011687] ? trace_hardirqs_off_caller+0x65/0x220 [ 412.016691] ? trace_hardirqs_on_caller+0x6a/0x220 [ 412.021610] ? page_fault+0x8/0x30 [ 412.025141] do_page_fault+0x71/0x57d [ 412.028927] ? page_fault+0x8/0x30 [ 412.032467] page_fault+0x1e/0x30 [ 412.035910] RIP: 0033:0x453fd0 [ 412.039097] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 412.059789] RSP: 002b:00007fd6157797a8 EFLAGS: 00010202 [ 412.065159] RAX: 00007fd615779850 RBX: 0000000000000003 RCX: 000000000000000e [ 412.072424] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fd615779850 [ 412.079691] RBP: 000000000075bf20 R08: 00000000000003ff R09: 0000000000000000 21:27:27 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet(0xffffffffffffffff, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r2 = gettid() recvmmsg(0xffffffffffffffff, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r2, 0x14) 21:27:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, 0xffffffffffffffff, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x400000001ffffffd) [ 412.086962] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd61577a6d4 [ 412.094218] R13: 00000000004ca143 R14: 00000000004e1eb0 R15: 00000000ffffffff 21:27:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)=""/230, &(0x7f0000000100)=0xe6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 21:27:27 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet(0xffffffffffffffff, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r2 = gettid() recvmmsg(0xffffffffffffffff, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r2, 0x14) 21:27:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x0) listen(0xffffffffffffffff, 0x400000001ffffffd) [ 412.332252] FAULT_FLAG_ALLOW_RETRY missing 70 [ 412.338402] CPU: 0 PID: 13388 Comm: syz-executor.2 Not tainted 4.19.84 #0 [ 412.345362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 412.354913] Call Trace: [ 412.357527] dump_stack+0x197/0x210 [ 412.361310] handle_userfault.cold+0x41/0x5a [ 412.365755] ? userfaultfd_ioctl+0x3a40/0x3a40 [ 412.370359] ? find_get_entry+0x3e8/0x820 [ 412.374539] ? filemap_map_pages+0x1130/0x1130 [ 412.379154] ? find_lock_entry+0x1a3/0x510 [ 412.383419] shmem_getpage_gfp+0x2cfa/0x3640 [ 412.388032] ? shmem_add_to_page_cache+0xd30/0xd30 [ 412.392972] ? lock_downgrade+0x880/0x880 [ 412.397142] ? kasan_check_read+0x11/0x20 [ 412.401312] shmem_fault+0x233/0x760 [ 412.405058] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 412.410353] ? find_get_pages_range_tag+0xc40/0xc40 [ 412.415394] ? pmd_val+0x85/0x100 [ 412.418863] ? pmd_val+0x85/0x100 [ 412.422424] __do_fault+0x111/0x480 [ 412.426066] __handle_mm_fault+0x2d78/0x3f80 [ 412.430504] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 412.435389] ? count_memcg_event_mm+0x2b1/0x4d0 [ 412.440074] handle_mm_fault+0x1b5/0x690 [ 412.444160] __do_page_fault+0x62a/0xe90 [ 412.448233] ? vmalloc_fault+0x740/0x740 [ 412.453105] ? trace_hardirqs_off_caller+0x65/0x220 [ 412.458133] ? trace_hardirqs_on_caller+0x6a/0x220 [ 412.463103] ? page_fault+0x8/0x30 [ 412.466670] do_page_fault+0x71/0x57d [ 412.470488] ? page_fault+0x8/0x30 [ 412.474047] page_fault+0x1e/0x30 [ 412.477580] RIP: 0033:0x453fd0 [ 412.480762] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 412.500168] RSP: 002b:00007fd6157797a8 EFLAGS: 00010202 [ 412.505570] RAX: 00007fd615779850 RBX: 0000000000000003 RCX: 000000000000000e [ 412.512923] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fd615779850 [ 412.520190] RBP: 000000000075bf20 R08: 00000000000003ff R09: 0000000000000000 [ 412.527449] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd61577a6d4 [ 412.534799] R13: 00000000004ca143 R14: 00000000004e1eb0 R15: 00000000ffffffff 21:27:28 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0x15) 21:27:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff074) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 21:27:28 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x0) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:27:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)=""/230, &(0x7f0000000100)=0xe6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x101000) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 412.767192] FAULT_FLAG_ALLOW_RETRY missing 70 [ 412.771856] CPU: 0 PID: 13406 Comm: syz-executor.2 Not tainted 4.19.84 #0 [ 412.778804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 412.788208] Call Trace: [ 412.790818] dump_stack+0x197/0x210 [ 412.794473] handle_userfault.cold+0x41/0x5a [ 412.798907] ? userfaultfd_ioctl+0x3a40/0x3a40 [ 412.803511] ? find_get_entry+0x3e8/0x820 [ 412.807684] ? filemap_map_pages+0x1130/0x1130 [ 412.812311] ? find_lock_entry+0x1a3/0x510 [ 412.812332] shmem_getpage_gfp+0x2cfa/0x3640 [ 412.812363] ? shmem_add_to_page_cache+0xd30/0xd30 [ 412.812380] ? lock_downgrade+0x880/0x880 [ 412.812396] ? kasan_check_read+0x11/0x20 [ 412.812413] shmem_fault+0x233/0x760 [ 412.821070] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 412.843267] ? find_get_pages_range_tag+0xc40/0xc40 [ 412.848306] ? pmd_val+0x85/0x100 [ 412.851827] ? pmd_val+0x85/0x100 [ 412.855303] __do_fault+0x111/0x480 [ 412.858949] __handle_mm_fault+0x2d78/0x3f80 [ 412.863381] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 412.868620] ? count_memcg_event_mm+0x2b1/0x4d0 [ 412.873317] handle_mm_fault+0x1b5/0x690 [ 412.877405] __do_page_fault+0x62a/0xe90 [ 412.881498] ? vmalloc_fault+0x740/0x740 [ 412.885581] ? trace_hardirqs_off_caller+0x65/0x220 [ 412.890617] ? trace_hardirqs_on_caller+0x6a/0x220 [ 412.895568] ? page_fault+0x8/0x30 [ 412.899215] do_page_fault+0x71/0x57d [ 412.903118] ? page_fault+0x8/0x30 [ 412.906668] page_fault+0x1e/0x30 [ 412.910127] RIP: 0033:0x453fd0 [ 412.913339] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 412.932272] RSP: 002b:00007fd6157797a8 EFLAGS: 00010202 [ 412.932286] RAX: 00007fd615779850 RBX: 0000000000000003 RCX: 000000000000000e [ 412.932293] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fd615779850 [ 412.932301] RBP: 000000000075bf20 R08: 00000000000003ff R09: 0000000000000000 [ 412.932309] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd61577a6d4 21:27:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff04c) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x0) listen(0xffffffffffffffff, 0x400000001ffffffd) 21:27:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)=""/230, &(0x7f0000000100)=0xe6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff07a) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) [ 412.932316] R13: 00000000004ca143 R14: 00000000004e1eb0 R15: 00000000ffffffff 21:27:28 executing program 1: r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) [ 413.083300] FAULT_FLAG_ALLOW_RETRY missing 70 [ 413.091035] CPU: 1 PID: 13427 Comm: syz-executor.2 Not tainted 4.19.84 #0 [ 413.097985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 413.107346] Call Trace: [ 413.109956] dump_stack+0x197/0x210 [ 413.113703] handle_userfault.cold+0x41/0x5a [ 413.118146] ? _raw_spin_unlock_irq+0x5e/0x90 [ 413.122718] ? userfaultfd_ioctl+0x3a40/0x3a40 [ 413.127315] ? find_get_entry+0x3e8/0x820 [ 413.131485] ? try_to_wake_up+0xcc/0xf50 [ 413.135556] ? filemap_map_pages+0x1130/0x1130 [ 413.140154] ? find_lock_entry+0x1a3/0x510 [ 413.144409] shmem_getpage_gfp+0x2cfa/0x3640 [ 413.148856] ? shmem_add_to_page_cache+0xd30/0xd30 [ 413.148874] ? lock_downgrade+0x880/0x880 [ 413.148892] ? kasan_check_read+0x11/0x20 [ 413.162102] shmem_fault+0x233/0x760 [ 413.162124] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 413.162141] ? find_get_pages_range_tag+0xc40/0xc40 [ 413.162154] ? pmd_val+0x85/0x100 [ 413.162170] ? pmd_val+0x85/0x100 [ 413.171158] __do_fault+0x111/0x480 [ 413.171178] __handle_mm_fault+0x2d78/0x3f80 [ 413.171203] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 413.186735] ? count_memcg_event_mm+0x2b1/0x4d0 [ 413.186752] handle_mm_fault+0x1b5/0x690 [ 413.195991] __do_page_fault+0x62a/0xe90 [ 413.196011] ? vmalloc_fault+0x740/0x740 [ 413.204735] ? trace_hardirqs_off_caller+0x65/0x220 [ 413.212827] ? trace_hardirqs_on_caller+0x6a/0x220 [ 413.212843] ? page_fault+0x8/0x30 [ 413.212861] do_page_fault+0x71/0x57d [ 413.212877] ? page_fault+0x8/0x30 [ 413.222978] page_fault+0x1e/0x30 [ 413.222992] RIP: 0033:0x453fd0 [ 413.223007] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 413.223015] RSP: 002b:00007fd6157797a8 EFLAGS: 00010202 [ 413.223027] RAX: 00007fd615779850 RBX: 0000000000000003 RCX: 000000000000000e [ 413.223036] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fd615779850 [ 413.223048] RBP: 000000000075bf20 R08: 00000000000003ff R09: 0000000000000000 [ 413.230379] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd61577a6d4 [ 413.230388] R13: 00000000004ca143 R14: 00000000004e1eb0 R15: 00000000ffffffff 21:27:29 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0x30) 21:27:29 executing program 5: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x2b1, 0x0) 21:27:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x0) 21:27:29 executing program 1: r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)=""/230, &(0x7f0000000100)=0xe6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff0df) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) [ 413.876793] FAULT_FLAG_ALLOW_RETRY missing 70 [ 413.881898] CPU: 1 PID: 13456 Comm: syz-executor.2 Not tainted 4.19.84 #0 [ 413.888866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 413.898230] Call Trace: [ 413.900844] dump_stack+0x197/0x210 [ 413.904519] handle_userfault.cold+0x41/0x5a [ 413.908979] ? userfaultfd_ioctl+0x3a40/0x3a40 [ 413.913576] ? find_get_entry+0x3e8/0x820 [ 413.917747] ? filemap_map_pages+0x1130/0x1130 [ 413.922377] ? find_lock_entry+0x1a3/0x510 [ 413.926629] shmem_getpage_gfp+0x2cfa/0x3640 [ 413.931061] ? shmem_add_to_page_cache+0xd30/0xd30 [ 413.935999] ? lock_downgrade+0x880/0x880 [ 413.940155] ? kasan_check_read+0x11/0x20 [ 413.944314] shmem_fault+0x233/0x760 [ 413.948044] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 413.953343] ? find_get_pages_range_tag+0xc40/0xc40 [ 413.958369] ? pmd_val+0x85/0x100 [ 413.961830] ? pmd_val+0x85/0x100 [ 413.965294] __do_fault+0x111/0x480 [ 413.968959] __handle_mm_fault+0x2d78/0x3f80 [ 413.973463] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 413.978331] ? count_memcg_event_mm+0x2b1/0x4d0 [ 413.983014] handle_mm_fault+0x1b5/0x690 [ 413.987088] __do_page_fault+0x62a/0xe90 [ 413.991175] ? vmalloc_fault+0x740/0x740 [ 413.995256] ? trace_hardirqs_off_caller+0x65/0x220 [ 414.000292] ? trace_hardirqs_on_caller+0x6a/0x220 [ 414.005239] ? page_fault+0x8/0x30 [ 414.008817] do_page_fault+0x71/0x57d [ 414.012657] ? page_fault+0x8/0x30 [ 414.016217] page_fault+0x1e/0x30 [ 414.019772] RIP: 0033:0x453fd0 [ 414.022979] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 414.042012] RSP: 002b:00007fd6157797a8 EFLAGS: 00010202 [ 414.047381] RAX: 00007fd615779850 RBX: 0000000000000003 RCX: 000000000000000e [ 414.054676] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fd615779850 [ 414.062018] RBP: 000000000075bf20 R08: 00000000000003ff R09: 0000000000000000 [ 414.069377] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd61577a6d4 21:27:29 executing program 1: r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)=""/230, &(0x7f0000000100)=0xe6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) [ 414.076749] R13: 00000000004ca143 R14: 00000000004e1eb0 R15: 00000000ffffffff 21:27:29 executing program 0 (fault-call:6 fault-nth:0): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x0) 21:27:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x5381) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000900)='/dev/radio#\x00', 0x2, 0x2) bind$alg(r5, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-sse2\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x0) r6 = getpid() rt_tgsigqueueinfo(r6, r6, 0x16, &(0x7f0000000100)={0x0, 0x6}) r7 = getpid() r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r9, r10, 0x0, 0x1000007ffff000) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r12 = accept4(r11, 0x0, 0x0, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r12, r13, 0x0, 0x1000007ffff000) recvmsg$can_bcm(r12, &(0x7f0000000700)={&(0x7f0000000180)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000200)=""/89, 0x59}, {&(0x7f0000000280)=""/164, 0xa4}, {&(0x7f0000000340)=""/58, 0x3a}, {&(0x7f0000000480)=""/216, 0xd8}, {&(0x7f0000000380)=""/84, 0x54}, {&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000400)=""/59, 0x3b}], 0x7}, 0x20e2) bind$can_raw(r10, &(0x7f0000000740)={0x1d, r14}, 0x10) rt_tgsigqueueinfo(r7, r7, 0x16, &(0x7f0000000100)={0x0, 0x6}) r15 = socket$alg(0x26, 0x5, 0x0) bind$alg(r15, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r16 = accept4(r15, 0x0, 0x0, 0x0) r17 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r16, r17, 0x0, 0x1000007ffff000) inotify_add_watch(r17, &(0x7f0000000080)='./file0\x00', 0x21000000) r18 = syz_open_procfs(r7, &(0x7f0000000040)='\x00'/11) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') sendfile(r4, r18, 0x0, 0x9) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) [ 414.298146] FAULT_INJECTION: forcing a failure. [ 414.298146] name failslab, interval 1, probability 0, space 0, times 0 [ 414.316322] CPU: 1 PID: 13479 Comm: syz-executor.0 Not tainted 4.19.84 #0 [ 414.323304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 414.332670] Call Trace: [ 414.335288] dump_stack+0x197/0x210 [ 414.338948] should_fail.cold+0xa/0x1b [ 414.342865] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 414.347994] ? lock_downgrade+0x880/0x880 [ 414.352167] __should_failslab+0x121/0x190 [ 414.356423] should_failslab+0x9/0x14 [ 414.360262] kmem_cache_alloc_trace+0x2cc/0x760 [ 414.364994] ? refcount_inc_checked+0x2b/0x70 [ 414.369525] alloc_pipe_info+0xb9/0x430 [ 414.373609] ? __might_sleep+0x95/0x190 [ 414.377612] splice_direct_to_actor+0x6bb/0x890 [ 414.382307] ? generic_pipe_buf_nosteal+0x10/0x10 [ 414.387172] ? selinux_file_permission+0x92/0x550 [ 414.392039] ? do_splice_to+0x180/0x180 [ 414.396028] ? security_file_permission+0x89/0x230 [ 414.400980] ? rw_verify_area+0x118/0x360 [ 414.405150] do_splice_direct+0x1da/0x2a0 [ 414.409318] ? splice_direct_to_actor+0x890/0x890 [ 414.414186] ? retint_kernel+0x2d/0x2d [ 414.418105] do_sendfile+0x597/0xce0 [ 414.421924] ? do_compat_pwritev64+0x1c0/0x1c0 [ 414.426524] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 414.431304] __x64_sys_sendfile64+0x1dd/0x220 [ 414.435810] ? __ia32_sys_sendfile+0x230/0x230 [ 414.440413] ? do_syscall_64+0x26/0x620 [ 414.444399] ? lockdep_hardirqs_on+0x415/0x5d0 [ 414.448992] ? trace_hardirqs_on+0x67/0x220 [ 414.453414] do_syscall_64+0xfd/0x620 [ 414.457241] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 414.462450] RIP: 0033:0x45a639 [ 414.465660] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 414.485055] RSP: 002b:00007f8fc217dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 21:27:29 executing program 3: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="367f9dbc5f3087a9523a7ed28038b91900cbc32d7fb4855f7f1ab7304ce14f39e628184921972f06d2fc9366e051ed2218dad9c026efbb1114cdb68ef07e4575eaceded5dadc89e8", 0x48) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r5, r6, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:29 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) [ 414.492786] RAX: ffffffffffffffda RBX: 00007f8fc217dc90 RCX: 000000000045a639 [ 414.500076] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 414.507360] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 414.514647] R10: 001000007ffff000 R11: 0000000000000246 R12: 00007f8fc217e6d4 [ 414.522009] R13: 00000000004c83bf R14: 00000000004de7f0 R15: 0000000000000007 [ 414.544600] FAULT_FLAG_ALLOW_RETRY missing 70 [ 414.561161] CPU: 0 PID: 13482 Comm: syz-executor.2 Not tainted 4.19.84 #0 [ 414.568151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 414.577525] Call Trace: [ 414.580131] dump_stack+0x197/0x210 [ 414.583789] handle_userfault.cold+0x41/0x5a [ 414.588240] ? userfaultfd_ioctl+0x3a40/0x3a40 [ 414.592854] ? find_get_entry+0x3e8/0x820 [ 414.597037] ? filemap_map_pages+0x1130/0x1130 [ 414.601640] ? find_lock_entry+0x1a3/0x510 [ 414.605880] shmem_getpage_gfp+0x2cfa/0x3640 [ 414.610303] ? shmem_add_to_page_cache+0xd30/0xd30 [ 414.615231] ? lock_downgrade+0x880/0x880 [ 414.619982] ? kasan_check_read+0x11/0x20 [ 414.624131] shmem_fault+0x233/0x760 [ 414.627840] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 414.633108] ? find_get_pages_range_tag+0xc40/0xc40 [ 414.638126] ? pmd_val+0x85/0x100 [ 414.641580] ? pmd_val+0x85/0x100 [ 414.645027] __do_fault+0x111/0x480 [ 414.648657] __handle_mm_fault+0x2d78/0x3f80 [ 414.653069] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 414.657916] ? count_memcg_event_mm+0x2b1/0x4d0 [ 414.662593] handle_mm_fault+0x1b5/0x690 [ 414.666650] __do_page_fault+0x62a/0xe90 [ 414.670723] ? vmalloc_fault+0x740/0x740 [ 414.674782] ? trace_hardirqs_off_caller+0x65/0x220 [ 414.679787] ? trace_hardirqs_on_caller+0x6a/0x220 [ 414.684706] ? page_fault+0x8/0x30 [ 414.688244] do_page_fault+0x71/0x57d [ 414.692032] ? page_fault+0x8/0x30 [ 414.695562] page_fault+0x1e/0x30 [ 414.699002] RIP: 0033:0x453fd0 [ 414.702186] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 414.721493] RSP: 002b:00007fd6157797a8 EFLAGS: 00010202 [ 414.726844] RAX: 00007fd615779850 RBX: 0000000000000003 RCX: 000000000000000e [ 414.734105] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fd615779850 [ 414.741452] RBP: 000000000075bf20 R08: 00000000000003ff R09: 0000000000000000 [ 414.748711] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd61577a6d4 [ 414.756060] R13: 00000000004ca143 R14: 00000000004e1eb0 R15: 00000000ffffffff 21:27:30 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0x60) 21:27:30 executing program 0 (fault-call:6 fault-nth:1): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x0) 21:27:30 executing program 5: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x2b1, 0x0) 21:27:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) prctl$PR_GET_FP_MODE(0x2e) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r5, r6, 0x0, 0x1000007ffff000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000e00000/0x200000)=nil, &(0x7f0000fc4000/0x1000)=nil, &(0x7f0000fb6000/0x1000)=nil, &(0x7f0000e02000/0x2000)=nil, &(0x7f0000fe2000/0x4000)=nil, &(0x7f0000fbc000/0x3000)=nil, &(0x7f0000f98000/0x4000)=nil, &(0x7f0000e81000/0x3000)=nil, &(0x7f0000000040)="0395236afe1811dc58bad1", 0xb, r6}, 0x68) sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) [ 414.976874] FAULT_INJECTION: forcing a failure. [ 414.976874] name failslab, interval 1, probability 0, space 0, times 0 [ 414.994808] CPU: 0 PID: 13499 Comm: syz-executor.0 Not tainted 4.19.84 #0 [ 415.001792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 415.011171] Call Trace: [ 415.013787] dump_stack+0x197/0x210 [ 415.017440] should_fail.cold+0xa/0x1b [ 415.021363] ? fault_create_debugfs_attr+0x1e0/0x1e0 21:27:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)=""/230, &(0x7f0000000100)=0xe6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) [ 415.026488] ? lock_downgrade+0x880/0x880 [ 415.030671] __should_failslab+0x121/0x190 [ 415.034942] should_failslab+0x9/0x14 [ 415.038772] __kmalloc+0x2e2/0x750 [ 415.038787] ? kmem_cache_alloc_trace+0x348/0x760 [ 415.038808] ? alloc_pipe_info+0x199/0x430 [ 415.038825] alloc_pipe_info+0x199/0x430 [ 415.038845] splice_direct_to_actor+0x6bb/0x890 [ 415.047223] ? generic_pipe_buf_nosteal+0x10/0x10 [ 415.047243] ? selinux_file_permission+0x92/0x550 [ 415.047261] ? do_splice_to+0x180/0x180 [ 415.047278] ? security_file_permission+0x89/0x230 [ 415.079431] ? rw_verify_area+0x118/0x360 [ 415.083659] do_splice_direct+0x1da/0x2a0 [ 415.087838] ? splice_direct_to_actor+0x890/0x890 [ 415.092705] ? retint_kernel+0x2d/0x2d [ 415.096620] do_sendfile+0x597/0xce0 [ 415.100385] ? do_compat_pwritev64+0x1c0/0x1c0 [ 415.104981] ? fput+0x128/0x1a0 [ 415.108314] __x64_sys_sendfile64+0x1dd/0x220 [ 415.112827] ? __ia32_sys_sendfile+0x230/0x230 [ 415.117448] ? do_syscall_64+0x26/0x620 [ 415.121449] ? lockdep_hardirqs_on+0x415/0x5d0 [ 415.126062] ? trace_hardirqs_on+0x67/0x220 [ 415.126086] do_syscall_64+0xfd/0x620 [ 415.126106] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 415.126121] RIP: 0033:0x45a639 [ 415.134299] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 415.134307] RSP: 002b:00007f8fc217dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 415.134321] RAX: ffffffffffffffda RBX: 00007f8fc217dc90 RCX: 000000000045a639 21:27:30 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) [ 415.134328] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 415.134335] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 415.134342] R10: 001000007ffff000 R11: 0000000000000246 R12: 00007f8fc217e6d4 [ 415.134355] R13: 00000000004c83bf R14: 00000000004de7f0 R15: 0000000000000007 [ 415.216239] FAULT_FLAG_ALLOW_RETRY missing 70 [ 415.245476] CPU: 1 PID: 13516 Comm: syz-executor.2 Not tainted 4.19.84 #0 [ 415.252504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 415.261873] Call Trace: [ 415.264486] dump_stack+0x197/0x210 [ 415.268151] handle_userfault.cold+0x41/0x5a [ 415.272582] ? _raw_spin_unlock_irq+0x5e/0x90 [ 415.277108] ? userfaultfd_ioctl+0x3a40/0x3a40 [ 415.281718] ? find_get_entry+0x3e8/0x820 [ 415.285891] ? try_to_wake_up+0xcc/0xf50 [ 415.289972] ? filemap_map_pages+0x1130/0x1130 [ 415.294577] ? find_lock_entry+0x1a3/0x510 [ 415.298834] shmem_getpage_gfp+0x2cfa/0x3640 [ 415.303279] ? shmem_add_to_page_cache+0xd30/0xd30 [ 415.308222] ? lock_downgrade+0x880/0x880 [ 415.312389] ? kasan_check_read+0x11/0x20 [ 415.316552] shmem_fault+0x233/0x760 [ 415.320281] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 415.325581] ? find_get_pages_range_tag+0xc40/0xc40 [ 415.330616] ? pmd_val+0x85/0x100 [ 415.334083] ? pmd_val+0x85/0x100 [ 415.337573] __do_fault+0x111/0x480 [ 415.341214] __handle_mm_fault+0x2d78/0x3f80 [ 415.345645] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 415.345687] ? count_memcg_event_mm+0x2b1/0x4d0 [ 415.345708] handle_mm_fault+0x1b5/0x690 [ 415.359300] __do_page_fault+0x62a/0xe90 [ 415.359324] ? vmalloc_fault+0x740/0x740 [ 415.359341] ? trace_hardirqs_off_caller+0x65/0x220 [ 415.359357] ? trace_hardirqs_on_caller+0x6a/0x220 [ 415.377451] ? page_fault+0x8/0x30 [ 415.381195] do_page_fault+0x71/0x57d [ 415.385024] ? page_fault+0x8/0x30 [ 415.388596] page_fault+0x1e/0x30 [ 415.392065] RIP: 0033:0x453fd0 [ 415.395370] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 415.414309] RSP: 002b:00007fd6157797a8 EFLAGS: 00010202 [ 415.419957] RAX: 00007fd615779850 RBX: 0000000000000003 RCX: 000000000000000e [ 415.427419] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fd615779850 [ 415.434707] RBP: 000000000075bf20 R08: 00000000000003ff R09: 0000000000000000 21:27:30 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:30 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0xa, 0x3e) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x4000, 0x0) r4 = socket(0x2000000000000021, 0x0, 0x10000000000002) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "98cd2741ed306bf3", "22f4509f68f89df8678538d7a1973a87c37d7569409b402071584ea9379f95f0", "59719a92", "86ab9b376fd09e3d"}, 0x38) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x20) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000011c0)={r5, 0x9878, 0x400}, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000029c0)=@assoc_value={r5, 0x101}, &(0x7f0000002a00)=0x8) r7 = socket(0x2000000000000021, 0x0, 0x10000000000002) setsockopt$inet6_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "98cd2741ed306bf3", "22f4509f68f89df8678538d7a1973a87c37d7569409b402071584ea9379f95f0", "59719a92", "86ab9b376fd09e3d"}, 0x38) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000200)={0x2, [0x0, 0x0]}, &(0x7f00000000c0)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000280), 0x20) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000011c0)={0x0, 0x9878, 0x400}, 0x0) r8 = socket(0x2000000000000021, 0x0, 0x10000000000002) setsockopt$inet6_tcp_TLS_TX(r8, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "98cd2741ed306bf3", "22f4509f68f89df8678538d7a1973a87c37d7569409b402071584ea9379f95f0", "59719a92", "86ab9b376fd09e3d"}, 0x38) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9}, 0x20) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f00000011c0)={r9, 0x9878, 0x400}, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r11 = accept4(r10, 0x0, 0x0, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r11, r12, 0x0, 0x1000007ffff000) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x66, &(0x7f0000003040)={0x0, 0x4a00}, &(0x7f0000003080)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000003380)=[{&(0x7f00000001c0)=@in6={0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, [], 0x24}, 0x401}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000000200)}, {&(0x7f0000000240)="32069dde3d4a52a88672e7495f1b47f32cbbc7cd30d36fdba6dc2aa1a67f4cde2ebfd404874cf59998c183dcc0", 0x2d}, {&(0x7f0000000280)="aefb7220b9dfcf793f426988a3752c5f967f7b6833f8c28de8f0da7a21a718ba9ef9b72eb5805b3723a5ec87c7abec3e3c9e34d00eb19cc3eb4f0bca551bf9cd1da4a10d87ac3c96acbd78b18d1e22b3f82020af1dd58a4f6a87941a5ce00dbd548fc302e85a71a10d8c420a7b755d0eb3c08dcf1287767748595f6fc4995253158162e0af8c281ba99671dcb87d06560d3ca732f04b37ea241fcb6d8c049a08177ef3293c0f08437ded7d583b8f4324962e6d5bd47301e9402bb3bb", 0xbc}, {&(0x7f0000000340)="80a9a5c52db583fe45a1fbae1fffcc56312cc7014b4986efa36cb2acdbb35279f4f3fa9a0af53579fcc4f6722ede83d48dca2ab03c1d2835674353354c80bbc02eed71ecc2b71f92c90ec1fa41c02c1757d629", 0x53}, {&(0x7f0000000480)="26be0d78ead9c149c8a0ba192ec9b61eb111ee2968bf642c3dbe9b95a4f15d445b5386d9315a14b32d5c5ddd5071286e3d1b12c1cdf35a2932b0bbda665dae16c6a1d1a1eeff113fcdd4cfb567fef06cfcdc5b242362c8fca799fef4c66dbe5546c19f9b70ce903cca76a358d703439895efe21a13c022750ee3ae4fb98b53cb1efd348a3264c668f1d9d723c19e7981c64af1bc7ad7fcbc3e1f63ac497466a3605327e1b86c539cac0f9fecffce2b0da7e0cd0ba0e69eee", 0xb8}, {&(0x7f00000003c0)="c516c18a0b4039e60d43910ed0405bf78a3fbd4547a99bc864bfdc98bffdf71ec74baa9a20fd1802f7d218f1f74f4b", 0x2f}, {&(0x7f0000000540)="5e69129629d09f22a6ae67945552bd099bbc9d0d944d8c0929514a1f99fb5cf29d5a7092e2470f610ada165df6d2c0b60d07007159986111b11f7f7331ea565d712131b337fa6304d30094ff0b8a1cb254f97464d7b4d444aab393beef5fb74c86178ee540e0140b76a3866b2c6a4e30d031e92e89c54bff9d8370156238f8abf4223eb07ee54488f8963b2808b3428ca811f53558da3225de163e6fdb0152f1c7120007b5aaf102e3f2e48ba4d2f84471bb4f0c16b57951", 0xb8}, {&(0x7f0000000600)="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", 0x1000}], 0x8, &(0x7f0000000400)=[@init={0x18, 0x84, 0x0, {0x0, 0x1, 0x35}}, @init={0x18, 0x84, 0x0, {0x1000, 0x0, 0x7, 0x8000}}], 0x30, 0x80c0}, {&(0x7f0000001680)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002940)=[{&(0x7f00000016c0)="365788eb9f3f0fe58441d230d2c5a83fe663ee02649ae72a08f2b903566fd67f6b9574b24b36f9498c4fe28967ec95b589063a8320858e1c785bfb72d88aa37b0ec32363c5c6f968875ffe284d6a0165c10fe0a2251b53b0eb48b966d9908f7dea2f00167d7872e27c9afc23c5476e5cf2575a2cdd319ae9258986b676526957096dd53ee21647e64fcdc92a370585d3e5eb177ecb", 0x95}, {&(0x7f0000001780)="5bf3fba1b2adf4445ce7fbd97ebb5372531efef1c7b4a88240e16721c7ce8d0c0fbcb5a5660ed9077e0f7ae8abda89fbdcb6e248bbaebcd34c0b249d966046920ff1ae91604398491db390f941e1caf718aca37220403ae07bab3337ed29df97ad90f6b05c", 0x65}, {&(0x7f0000001800)="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", 0x1000}, {&(0x7f0000002800)="9e8e23a375ebb7ec9ac402da1eab544f6f986b21a69f68c0a6389d48dea1016dce2a610f437faee1c5ce49dde0625c282ca0b4fc7f2703b3480e999af1666cac6507cc1e57b8282e8cd16481b0cdb37191f69450c947f2ac7a1720dad8cfc9df465388bf9386e9ba41a51fcb8601115b84859332bc458a05c21e73ca0813a0cf5f801cb2d15d1f0ab0861667771b0bacedbd4a32a19d02e38695c4729688c01e33e6aba8db9296", 0xa7}, {&(0x7f00000028c0)="295a2e6d016ed29de7a85cb9", 0xc}, {&(0x7f0000002900)}], 0x6, &(0x7f0000002a40)=[@dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @sndinfo={0x20, 0x84, 0x2, {0x1, 0x8000, 0x4, 0xc8, r6}}], 0x40, 0x20000000}, {&(0x7f0000002a80)=@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, [], 0x16}, 0x5}, 0x1c, &(0x7f0000002e00)=[{&(0x7f0000002ac0)="e8a5ca6865714abff1a170a86ca00568f6d8cf70e137ccb1fb4bb4d0298ea226a91b40b37ae114aef1fb570705c64255b0bf963f9776d0604793d9f13a33a69dcba3a20a02509e4664f249b3b04668edf43764096c8380d729306c00c91aa1c563bea134e7a3ad465e1aabee802ad6d6f0dec8e4ff6f1ed4ca7d8c8683062bbfb0f38edd0667e1412acc1d063482b68f356bab97f5e8963e27339141fecfd4edae2a8f144266441ac178455d40636d5894c10c15550605d874454847fdead53b27bc3f60e2", 0xc5}, {&(0x7f0000002bc0)="68abc088dc68cf9b415bb44428b2c54dec35bfed56e43e619241cd393147896822a824e0b68a3d0fa8a14fc3c74d6fa65c06482fc9abaecfe8e787d2a1079ba0dfed55a7545a078b0594a74af355c4476281bc0409934915a9cc17685fc7da19cf1c8f623d0bd50c7b87468ea243d5dc16094e7aea7cdd27d35368a894294687c32ac8e1830b7e569c6e345782ea78a4ef31488b9b573d1157d71777904b755c", 0xa0}, {&(0x7f0000002c80)="4fda633ed1735a3085693cc68ad87a2a9463d38d58049c557457e2d7d1c32841712735711d6f284ff0ab41d24c0ade2fda804534969f213bc9ee0d48f136b01c24c9cda1f951a722a3bf6d70f628a70c709c5d2e9a90d8a9473250f1d4fdc7b4087f11983910363cebf047a2ed300ba70485ab783443bd57f68bbb78dcea7fa5c65ad8dfa08b0f65b3ed092b1a9bef31efcb7a648ab63a68d0886687a7365f50fb9f76c5ce13120729ec8f0caa23d0132aa960a9ee9c143d530c988449d96626777a5485ee79ebba1ce03e9bb7e304c1e2ec8bc0", 0xd4}, {&(0x7f0000002d80)="31a29dcec927e4a9be619e87da3d37812397c7a1b4ff5128d2401c18d067fc66d799c8cda96a455fdab42ba0c034e92748f9ae5dfc71a8d8a6fddd7c8ae8edb30daa677debb88630822f5aa5283d179adbecea", 0x53}], 0x4, &(0x7f0000002e40)=[@sndrcv={0x30, 0x84, 0x1, {0x3f, 0x8000, 0xa, 0x8001, 0x5f21, 0x5, 0x5, 0x3ff}}, @dstaddrv6={0x20, 0x84, 0x8, @remote}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={[], [], @remote}}, @prinfo={0x18}], 0x88, 0x800}, {&(0x7f0000002f00)=@in6={0xa, 0x4e24, 0x401, @rand_addr="695b9cd1b20e26bf34b6a6cb765a144a", 0x200}, 0x1c, &(0x7f0000003000)=[{&(0x7f0000002f40)="b6bc144af598ecfd83d26e11c23b965ca354328ae6c50f35ca2c64b875d8400b9fefc495ce595fdc4de4ae39fdddd2f28a5eafd5efd32cd39e5f6cbd63876d92eba6dc183d11f36e659b6f4e1f07a33aaf3752ff9ceb90323e2cdc7bf25a71b7f78720683fa45f4821a4fe256d9e027653e590f4f9fbf872b2a2e28b36ba82ddf16205386cd8ce3f9470d51debf2e229e2d0", 0x92}], 0x1, &(0x7f00000030c0)=[@sndrcv={0x30, 0x84, 0x1, {0x1d3, 0x7ff, 0x204, 0x7, 0x0, 0x401, 0x25b0000, 0x80000000, r9}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x2}}, @sndrcv={0x30, 0x84, 0x1, {0x7f, 0x8, 0x8000, 0x20, 0x6a98, 0x30, 0x7ff, 0x1000, r13}}, @dstaddrv6={0x20, 0x84, 0x8, @loopback}, @init={0x18, 0x84, 0x0, {0x81, 0x8, 0xff, 0x101}}], 0xb0, 0x2090}, {&(0x7f0000003180)=@in6={0xa, 0x4e22, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xe853}, 0x1c, &(0x7f0000003340)=[{&(0x7f00000031c0)="9a7cb8ea3a5520", 0x7}, {&(0x7f0000003200)="edaf", 0x2}, {&(0x7f0000003240)="20f4c2f6e7b284433139f4927f990a0984361c3e62736ae1da36e5ce74551b160e645ad097105ae0b8912fe7c20dcef7f49c3dcf333f3f4b1ca0dd5ca01571ad780abf5d59e8aebbb0fc031d43ba6bf5770d8d8e68d71cbf8ad4e6ce0b84f65a683399ac5adc9f9f79b28b7ed739accbec2e47326c59505d6bc67de30dd97f46318561ebe80b68e33cb7a74f0c28016e25d7ea5d329a8f9c33a39e", 0x9b}, {&(0x7f0000003300)="29b928be10e396c89270355c8d3ddc106b89f22721c565557c54b60b913f274153f708774d815226f14374e0ecaa5c7e0799d0", 0x33}], 0x4, 0x0, 0x0, 0xa7192ecc49a813a2}], 0x5, 0x1) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000140)={0x2, 0x4, 0x1, r3}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r14 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r14, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000180)=0x80000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r15 = socket$alg(0x26, 0x5, 0x0) bind$alg(r15, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r16 = accept4(r15, 0x0, 0x0, 0x0) r17 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r16, r17, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:30 executing program 0 (fault-call:6 fault-nth:2): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x0) [ 415.441988] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd61577a6d4 [ 415.444960] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET) [ 415.449285] R13: 00000000004ca143 R14: 00000000004e1eb0 R15: 00000000ffffffff 21:27:30 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)=""/230, &(0x7f0000000100)=0xe6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:30 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) [ 415.655197] FAULT_INJECTION: forcing a failure. [ 415.655197] name failslab, interval 1, probability 0, space 0, times 0 [ 415.685420] FAULT_FLAG_ALLOW_RETRY missing 70 [ 415.690091] CPU: 1 PID: 13535 Comm: syz-executor.2 Not tainted 4.19.84 #0 [ 415.697035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 415.706406] Call Trace: [ 415.709009] dump_stack+0x197/0x210 [ 415.712666] handle_userfault.cold+0x41/0x5a [ 415.717108] ? userfaultfd_ioctl+0x3a40/0x3a40 [ 415.721706] ? find_get_entry+0x3e8/0x820 [ 415.725877] ? filemap_map_pages+0x1130/0x1130 [ 415.730491] ? find_lock_entry+0x1a3/0x510 [ 415.734761] shmem_getpage_gfp+0x2cfa/0x3640 [ 415.739208] ? shmem_add_to_page_cache+0xd30/0xd30 [ 415.744153] ? lock_downgrade+0x880/0x880 [ 415.748324] ? kasan_check_read+0x11/0x20 [ 415.752501] shmem_fault+0x233/0x760 [ 415.756239] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 415.761562] ? find_get_pages_range_tag+0xc40/0xc40 [ 415.766592] ? pmd_val+0x85/0x100 [ 415.770054] ? pmd_val+0x85/0x100 [ 415.773538] __do_fault+0x111/0x480 [ 415.777187] __handle_mm_fault+0x2d78/0x3f80 [ 415.781617] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 415.786499] ? count_memcg_event_mm+0x2b1/0x4d0 [ 415.791194] handle_mm_fault+0x1b5/0x690 [ 415.795270] __do_page_fault+0x62a/0xe90 [ 415.799347] ? vmalloc_fault+0x740/0x740 [ 415.803423] ? trace_hardirqs_off_caller+0x65/0x220 [ 415.808456] ? trace_hardirqs_on_caller+0x6a/0x220 [ 415.813396] ? page_fault+0x8/0x30 [ 415.816958] do_page_fault+0x71/0x57d [ 415.820776] ? page_fault+0x8/0x30 [ 415.824341] page_fault+0x1e/0x30 [ 415.827804] RIP: 0033:0x453fd0 [ 415.831040] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 415.849963] RSP: 002b:00007fd6157797a8 EFLAGS: 00010202 21:27:31 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0xbc) 21:27:31 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) [ 415.855345] RAX: 00007fd615779850 RBX: 0000000000000003 RCX: 000000000000000e [ 415.862633] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fd615779850 [ 415.870064] RBP: 000000000075bf20 R08: 00000000000003ff R09: 0000000000000000 [ 415.877356] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd61577a6d4 [ 415.884645] R13: 00000000004ca143 R14: 00000000004e1eb0 R15: 00000000ffffffff [ 415.912868] CPU: 0 PID: 13529 Comm: syz-executor.0 Not tainted 4.19.84 #0 [ 415.919856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 415.929222] Call Trace: [ 415.931831] dump_stack+0x197/0x210 [ 415.935489] should_fail.cold+0xa/0x1b [ 415.939403] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 415.944541] __should_failslab+0x121/0x190 [ 415.948817] should_failslab+0x9/0x14 [ 415.952634] kmem_cache_alloc_node_trace+0x274/0x720 [ 415.957764] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 415.962540] ? lockdep_hardirqs_on+0x415/0x5d0 [ 415.967135] ? retint_kernel+0x2d/0x2d [ 415.971064] __kmalloc_node+0x3d/0x80 [ 415.974876] kvmalloc_node+0x68/0x100 [ 415.978696] iov_iter_get_pages_alloc+0x5aa/0x11a0 [ 415.983647] ? iov_iter_revert+0xa50/0xa50 [ 415.987896] ? iov_iter_pipe+0x132/0x2e0 [ 415.991972] ? iov_iter_pipe+0xbe/0x2e0 [ 415.995970] default_file_splice_read+0x19c/0x890 [ 416.000836] ? save_stack+0x45/0xd0 [ 416.004482] ? kasan_kmalloc+0xce/0xf0 [ 416.008382] ? __kmalloc+0x15d/0x750 [ 416.012113] ? do_splice_direct+0x1da/0x2a0 [ 416.016463] ? __x64_sys_sendfile64+0x1dd/0x220 [ 416.021151] ? do_syscall_64+0xfd/0x620 [ 416.025163] ? iter_file_splice_write+0xbd0/0xbd0 [ 416.030034] ? trace_hardirqs_on_caller+0x6a/0x220 [ 416.034983] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 416.039767] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 416.044560] ? lockdep_hardirqs_on+0x415/0x5d0 [ 416.049162] ? retint_kernel+0x2d/0x2d [ 416.053082] ? trace_hardirqs_on_caller+0x6a/0x220 [ 416.058044] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 416.063618] ? fsnotify+0x8ba/0xf00 [ 416.063633] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 416.063651] ? fsnotify_first_mark+0x210/0x210 [ 416.063674] ? __inode_security_revalidate+0xda/0x120 [ 416.072836] ? avc_policy_seqno+0xd/0x70 [ 416.072850] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 416.072873] ? security_file_permission+0x89/0x230 [ 416.072896] ? iter_file_splice_write+0xbd0/0xbd0 [ 416.072911] do_splice_to+0x127/0x180 [ 416.072930] splice_direct_to_actor+0x256/0x890 [ 416.072987] ? generic_pipe_buf_nosteal+0x10/0x10 [ 416.073002] ? do_splice_to+0x180/0x180 [ 416.073017] ? rw_verify_area+0x118/0x360 [ 416.073034] do_splice_direct+0x1da/0x2a0 [ 416.073050] ? splice_direct_to_actor+0x890/0x890 [ 416.073065] ? retint_kernel+0x2d/0x2d [ 416.073090] do_sendfile+0x597/0xce0 [ 416.073111] ? do_compat_pwritev64+0x1c0/0x1c0 [ 416.073132] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 416.073153] __x64_sys_sendfile64+0x1dd/0x220 [ 416.073168] ? __ia32_sys_sendfile+0x230/0x230 [ 416.073190] do_syscall_64+0xfd/0x620 21:27:31 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) [ 416.162046] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 416.167247] RIP: 0033:0x45a639 [ 416.170450] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 416.189383] RSP: 002b:00007f8fc217dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 416.189399] RAX: ffffffffffffffda RBX: 00007f8fc217dc90 RCX: 000000000045a639 [ 416.189406] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 21:27:31 executing program 5: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x2b1, 0x0) 21:27:31 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) [ 416.189413] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 416.189421] R10: 001000007ffff000 R11: 0000000000000246 R12: 00007f8fc217e6d4 [ 416.189430] R13: 00000000004c83bf R14: 00000000004de7f0 R15: 0000000000000007 [ 416.240040] FAULT_FLAG_ALLOW_RETRY missing 70 [ 416.254614] CPU: 1 PID: 13548 Comm: syz-executor.2 Not tainted 4.19.84 #0 [ 416.261593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 416.270965] Call Trace: [ 416.273584] dump_stack+0x197/0x210 [ 416.277249] handle_userfault.cold+0x41/0x5a [ 416.281678] ? _raw_spin_unlock_irq+0x5e/0x90 [ 416.286198] ? userfaultfd_ioctl+0x3a40/0x3a40 [ 416.290799] ? find_get_entry+0x3e8/0x820 [ 416.294968] ? try_to_wake_up+0xcc/0xf50 [ 416.299042] ? filemap_map_pages+0x1130/0x1130 [ 416.303642] ? find_lock_entry+0x1a3/0x510 [ 416.307894] shmem_getpage_gfp+0x2cfa/0x3640 [ 416.312337] ? shmem_add_to_page_cache+0xd30/0xd30 [ 416.317285] ? lock_downgrade+0x880/0x880 [ 416.321450] ? kasan_check_read+0x11/0x20 [ 416.325660] shmem_fault+0x233/0x760 [ 416.329393] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 416.334691] ? find_get_pages_range_tag+0xc40/0xc40 [ 416.339742] ? pmd_val+0x85/0x100 [ 416.343213] ? pmd_val+0x85/0x100 [ 416.346683] __do_fault+0x111/0x480 [ 416.351282] __handle_mm_fault+0x2d78/0x3f80 [ 416.355718] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 416.360594] ? count_memcg_event_mm+0x2b1/0x4d0 [ 416.365301] handle_mm_fault+0x1b5/0x690 [ 416.369490] __do_page_fault+0x62a/0xe90 [ 416.373577] ? vmalloc_fault+0x740/0x740 [ 416.377658] ? trace_hardirqs_off_caller+0x65/0x220 [ 416.382912] ? trace_hardirqs_on_caller+0x6a/0x220 [ 416.387858] ? page_fault+0x8/0x30 [ 416.391416] do_page_fault+0x71/0x57d [ 416.395240] ? page_fault+0x8/0x30 [ 416.398818] page_fault+0x1e/0x30 [ 416.402285] RIP: 0033:0x453fd0 [ 416.405498] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 416.424418] RSP: 002b:00007fd6157797a8 EFLAGS: 00010202 [ 416.429807] RAX: 00007fd615779850 RBX: 0000000000000003 RCX: 000000000000000e [ 416.437274] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fd615779850 [ 416.444593] RBP: 000000000075bf20 R08: 00000000000003ff R09: 0000000000000000 [ 416.452495] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd61577a6d4 [ 416.459788] R13: 00000000004ca143 R14: 00000000004e1eb0 R15: 00000000ffffffff 21:27:31 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:31 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:32 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x3, 0x70, 0x1, 0x5e, 0x7, 0xfc, 0x0, 0x1, 0x20, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffff7, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x80, 0x31d, 0x9, 0x3, 0x5, 0xfff, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1002, 0xffffff00}, 0x0, 0x0, r0, 0x0) r1 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r5, r6, 0x0, 0x1000007ffff000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000080)=0xe8) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@rand_addr="1a8c14af67de9071870aa1c96facbd14", @mcast1, @ipv4={[], [], @remote}, 0x1, 0x8, 0xff57, 0x0, 0x6, 0x2000000, r7}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000300)={'team0\x00', r7}) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r10, r11, 0x0, 0x1000007ffff000) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x14, 0xd, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81}, [@alu={0x7, 0x0, 0x6, 0xb, 0x8, 0xfffffffffffffff4, 0xfffffffffffffffc}, @generic={0x0, 0x6, 0x2, 0x4, 0xff}, @alu={0x0, 0x1, 0x1, 0x0, 0x6, 0xffffffffffffffff, 0xfffffffffffffffc}, @alu={0x4, 0x1, 0x1, 0x0, 0x7, 0xffffffffffffffc0}, @ldst={0x2, 0x2, 0x0, 0x3, 0x4, 0x4, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x94}, @generic={0x1f, 0x5, 0x9, 0xffff, 0x80000001}, @jmp={0x5, 0x1, 0xd, 0x1, 0x3, 0xfffffffffffffff4, 0xfffffffffffffff4}, @call={0x85, 0x0, 0x0, 0x42}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x4, &(0x7f00000002c0)=""/4, 0x20880, 0x4, [], r8, 0x1, r11, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x1, 0x4e6, 0x2}, 0x10}, 0x70) r12 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80800) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x2400, 0x8) sendfile(r3, r12, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x0) 21:27:32 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:32 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0xdf) [ 416.800193] FAULT_FLAG_ALLOW_RETRY missing 70 [ 416.809829] CPU: 1 PID: 13569 Comm: syz-executor.2 Not tainted 4.19.84 #0 [ 416.816826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 416.826188] Call Trace: [ 416.828797] dump_stack+0x197/0x210 [ 416.833395] handle_userfault.cold+0x41/0x5a [ 416.837823] ? userfaultfd_ioctl+0x3a40/0x3a40 [ 416.842406] ? find_get_entry+0x3e8/0x820 [ 416.846551] ? filemap_map_pages+0x1130/0x1130 [ 416.851130] ? find_lock_entry+0x1a3/0x510 [ 416.855358] shmem_getpage_gfp+0x2cfa/0x3640 [ 416.859769] ? shmem_add_to_page_cache+0xd30/0xd30 [ 416.864693] ? lock_downgrade+0x880/0x880 [ 416.868834] ? kasan_check_read+0x11/0x20 [ 416.872986] shmem_fault+0x233/0x760 [ 416.876708] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 416.882151] ? find_get_pages_range_tag+0xc40/0xc40 [ 416.887161] ? pmd_val+0x85/0x100 [ 416.890621] ? pmd_val+0x85/0x100 [ 416.894068] __do_fault+0x111/0x480 [ 416.897692] __handle_mm_fault+0x2d78/0x3f80 [ 416.902107] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 416.906989] ? count_memcg_event_mm+0x2b1/0x4d0 [ 416.911680] handle_mm_fault+0x1b5/0x690 [ 416.915750] __do_page_fault+0x62a/0xe90 [ 416.919823] ? vmalloc_fault+0x740/0x740 [ 416.923893] ? trace_hardirqs_off_caller+0x65/0x220 [ 416.928899] ? trace_hardirqs_on_caller+0x6a/0x220 [ 416.933996] ? page_fault+0x8/0x30 [ 416.937540] do_page_fault+0x71/0x57d [ 416.941347] ? page_fault+0x8/0x30 [ 416.944895] page_fault+0x1e/0x30 [ 416.948349] RIP: 0033:0x453fd0 [ 416.951530] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 416.970425] RSP: 002b:00007fd6157797a8 EFLAGS: 00010202 [ 416.975781] RAX: 00007fd615779850 RBX: 0000000000000003 RCX: 000000000000000e [ 416.983042] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fd615779850 [ 416.990314] RBP: 000000000075bf20 R08: 00000000000003ff R09: 0000000000000000 [ 416.997591] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd61577a6d4 [ 417.005039] R13: 00000000004ca143 R14: 00000000004e1eb0 R15: 00000000ffffffff 21:27:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1000007ffff000) sendmsg(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x1, {0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, [], 0x1e}, 0x76}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000000140)="cf27cb987c7eb7251e3f74743cc96accda6132ba459efe0f43d804f5aaae7123dc980bc33f93b6afd496ee0d1bfd8603de3dcf28fc4096557a303adee6e92b673bd857e42de8471a82fbcac6fec05aa5825eb1853fbc034c60389c22fd2d950071c7bbe6b3ccf63b184805059347fb75bda3ce63481467774674187a53b2a2e6a7c38c40c577c90a1d94fa4a485c6d99045e4bbabe100b14a9a40a8b2c57c8f9d5ca8222d81de6f186fe7e851363fdf4158d41dc7aaff676d25664137b38c6e4943426dab7a4309127bc0571df932e9c6e1d759a080ed279786fb7a2690923fb50e89acc54847e2efed0dc7855983ff05a498113", 0xf4}], 0x2}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r5, r6, 0x0, 0x1000007ffff000) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x24}) r7 = accept4(r3, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r7, r8, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:32 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:32 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:32 executing program 5: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) splice(r0, 0x0, r2, 0x0, 0x2b1, 0x0) 21:27:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x10000000000002) listen(0xffffffffffffffff, 0x0) 21:27:32 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:32 executing program 5: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) splice(r0, 0x0, r2, 0x0, 0x2b1, 0x0) [ 417.575196] FAULT_FLAG_ALLOW_RETRY missing 70 [ 417.597272] CPU: 1 PID: 13606 Comm: syz-executor.2 Not tainted 4.19.84 #0 [ 417.604264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 417.613633] Call Trace: [ 417.616247] dump_stack+0x197/0x210 [ 417.619898] handle_userfault.cold+0x41/0x5a [ 417.624335] ? userfaultfd_ioctl+0x3a40/0x3a40 [ 417.628936] ? find_get_entry+0x3e8/0x820 [ 417.633103] ? filemap_map_pages+0x1130/0x1130 [ 417.637739] ? find_lock_entry+0x1a3/0x510 [ 417.641990] shmem_getpage_gfp+0x2cfa/0x3640 [ 417.646437] ? shmem_add_to_page_cache+0xd30/0xd30 [ 417.651376] ? lock_downgrade+0x880/0x880 [ 417.655534] ? kasan_check_read+0x11/0x20 [ 417.659695] shmem_fault+0x233/0x760 [ 417.663426] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 417.668749] ? find_get_pages_range_tag+0xc40/0xc40 [ 417.673782] ? pmd_val+0x85/0x100 [ 417.677274] ? pmd_val+0x85/0x100 [ 417.680748] __do_fault+0x111/0x480 [ 417.684398] __handle_mm_fault+0x2d78/0x3f80 [ 417.688824] ? vmf_insert_mixed_mkwrite+0x90/0x90 21:27:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfc, 0x0, 0x80, 0x0, 0x41c1, 0xc2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x2a6614868c30b7b0, 0x2, 0x3, 0x0, 0xfffffe6e}}) 21:27:33 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) [ 417.693698] ? count_memcg_event_mm+0x2b1/0x4d0 [ 417.698405] handle_mm_fault+0x1b5/0x690 [ 417.702486] __do_page_fault+0x62a/0xe90 [ 417.706567] ? vmalloc_fault+0x740/0x740 [ 417.710649] ? trace_hardirqs_off_caller+0x65/0x220 [ 417.715682] ? trace_hardirqs_on_caller+0x6a/0x220 [ 417.715700] ? page_fault+0x8/0x30 [ 417.715719] do_page_fault+0x71/0x57d [ 417.715734] ? page_fault+0x8/0x30 [ 417.715748] page_fault+0x1e/0x30 [ 417.715758] RIP: 0033:0x453fd0 [ 417.715775] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 417.724241] RSP: 002b:00007fd6157797a8 EFLAGS: 00010202 [ 417.724255] RAX: 00007fd615779850 RBX: 0000000000000003 RCX: 000000000000000e [ 417.724265] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fd615779850 [ 417.724273] RBP: 000000000075bf20 R08: 00000000000003ff R09: 0000000000000000 [ 417.724280] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd61577a6d4 21:27:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x10000000000ffe) listen(0xffffffffffffffff, 0x0) 21:27:33 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0xf0) [ 417.724288] R13: 00000000004ca143 R14: 00000000004e1eb0 R15: 00000000ffffffff 21:27:33 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:33 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:33 executing program 5: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) splice(r0, 0x0, r2, 0x0, 0x2b1, 0x0) 21:27:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff002) listen(0xffffffffffffffff, 0x0) 21:27:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r5, r6, 0x0, 0x1000007ffff000) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r8, r9, 0x0, 0x1000007ffff000) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000400)={0x0, 0xbab4}, &(0x7f0000001480)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000014c0)={r10, @in6={{0xa, 0x4e23, 0x20400000, @remote, 0x3}}, 0x0, 0x7ff, 0x5, 0x1bb8, 0x10}, &(0x7f0000001580)=0x98) r11 = syz_open_dev$mouse(0x0, 0x3ff, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r11, 0xc0205649, &(0x7f00000003c0)={0x4, 0x8, 0xe7, [], &(0x7f0000000380)={0x980908, 0x9, [], @value64=0x42}}) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000040)="ddf8cd", 0x3}, {&(0x7f0000000140)="faca6d8e54ee297344468093e4532653ad740a8141bef59bd6853abb48aef0d051c278bd842299d8467aa61f67ed3e9ea523e96f575f8f13413a609a8e12deac802d5d1d295b30fe88054fd9caa4ce47beca03bfe8de21a38e8b1506843be0ccf3547edb29d75069057a86795719ec72e37e1d64fd66921ac4fcbff3140dcb3960b69ca0338730824d5d969debc984a927753792e328144c89042b1e70a64c68a5987a66f1b2934e816be9d1ebf9199ad7455b1dc49c4b59bd97372a6e68987e88b825ccb2cc6ac040d7934c8b19c07ac48eef6a49e4e78a0ed7408fa6a2d5efbd5d16a0e0ada44732879dd715fd468699b6bf120eea", 0xf6}, {&(0x7f0000000240)="5dcbed853fd7036e5c372106485909c008d2fe084a8da2405143606fd9d25d09d5efbe5a49cdb279056ecd78580e19ce6e13bdad433cee4836e53627b5f45707e26dc030e772d801bf", 0x49}, {&(0x7f0000000480)="dab300d53d4c6fd65cd4ebb033d5ba949872361fd1a52f00034dfc51e6ead7857f7afbd5feec95c9c000c34f7b799f6a5b79ed8c5cc03fd96a08c32545ebb4b697a5515203bc50e0f0069306f50e4e47396f1cace66e1c25c3b82844bacb22747a0ba5d190a24fcf59a22eced94604e7648fc2a2e3d682e09441e103041754ab7db4ecb5266ae16a808a0013a485b8ef286e7805939b03e844f5bc7b504b6fbfd0a5d0e77f266fb67e9071add38621bbc98c96a28e01644db40b23869030b4688a6dd605a9b58e1c930e91253dc4e407bd7791e8b3dabd61b09505bb1afd1d9ce7865db255cacd3aa66c77a9907f0bf0e6e40ab340639bdaafbdd5f536cda7fbf2225063879f941064a64a11171e5adcf71f9003b3361953bf52ceb51ec12aa8bd0bb77c9f648a822657fa705b682b957b1a51800fba3444ba905286c838fec10334bf68327c272d1708ade60eb4431445aae78cb39d4a62bf9c87c1641337a97738f721fcbf39c1f30a77f34779b401961d9930e697278baf2695824cb470db37ce943d285d2d9ccd072460216814bb3e9878e8751a7eef35baeab6b044b94020abbbd69c3186cc6ced1d32b3e32e97d41c2fd4129e961603e73509283a78d44f170e028c60ec5d674fe369e1adf451b4e32a6e3cd324f7b51196494a0a76b0717eb8687bff66d6222a5993ab85470183729535f2e47070109629d4bf3160b8952d1791511778982035568cb448dc91a9c66cad2f7525d4e76715a6483824a33601e099d6b13f64e062921ff97f31037b1b158c6c5dbfd34fd9d000df29e083a494e9c093cd687781a8d8886bff60b3b65b3ba1d5f2ad0ea0ef0a6de1b0b81dc7468025d82274a736aa4dba961fa7d01cad57c8c72bbf3d0ef05b5ddd1fff337c91f2981c7c61e78b727611fcec1ecb55255af0fd683697a4902c694bd61fab608fea7ca5c5fa6ef5c8c1dfc4fe8cf2af3c57a144b85649859531d7fdd658a8a279edc077626eefb831b50f4f2c21dd6312b9f2d80e40819f4853e88036597206a19851d81e3da481b5253acf03f99e1eea834c037ee7aaccdfa6aadf1a4418a7545a155c629bee008143fd5be0ed29452cd0a592b5652da444bbe7bc69b166ff80cb1563bd91b8e2798d526b2d40e21bc7e993749413eff9e51ead1d161b1889d9cd6a563998653fc6826180ea1ac668af4829232fa71734569d0f5612fa53d607bec3416a0211b5ea00228c3c8db03d5849335bf27633fa05606b7bc0c764dbd32af62d51ade6940960b7c608b47a4ecd12025351c11b77def83e4afaad2200148d8c6d25964ea052773b1e8eeb6456471b9e19ef27b90a7c8a25f2fca8032ba65e53617d794a54fd887951b2d7eec63caad4579eed1d154eb302c3c00859abf74fe24f05ab0e89c3a8745194f1970a7f8a0e6c570d735f6c6cd57f88431949dac0207d8a4b5498ea11598d0db11834d6296cb3f2789ed5358b6b38d3b43c41532e5c067f13cc7d88ad9d95b1ba66492aee08e887b447ca78c3d75de1deb260d42f6492da6b35195278c93265189f8b1f0ec04fc6a9a8fb699b4292e0a3b0f47f4099419cc8c84d8be3515832a4a31943b5ed38663eea79ca91495bb1dfc3b11df220e49b5656958d2559ebacc44280f15f9754ec25fcc064093fe1a68b590f378da6d0bbc842c35066643daaae647d3bb6637f1a34373eabc058ecd7abb3aad66cf4c08e975e635836204599ccc4b1826f257e21ba883bb05b659850e55380b8d4c650b98579908b5fb0eee28c5d7e06e84c4a859d509eb62df44a70405126f5fb2fd366c5033c204b30d40b7bf256a17c04d8d4d4d1e9cac10f2fe5b654922296a0cf21e131d08b44db985ab1184ffa45076b4701b315d0712dd3ee23c107e27bc626262c36fdefb392db5780fd9ce42033e37a853814bffd57e4777dbff3e5346b23ebb5aa2a3f66f722800ae9dcc425d34fa7c96d0c09729fba0998a323e45918aaca1f2063061dfc779b93fa8a9bb066b5f88a503cb33a427007c54e1b4d5bb5d0ec5265c242c5892afb6df4085761b0d577d3fd99615fbc7737fe856c3cfff7cd822ce9213fcd4c947988e90bf409c8e737c19163c4c4b2e10cfea897dc799c762b084f919b67216e4dca332092bb281812d4fd5789caa9ab9c058c720c925672e1d33da216f14c8236d596994293151efb1fd080c6463e2d7c0fa699b4f4de82521f28ce724413c107d47d903cf7ee3fbd3ff77f848d089ba0b35c0f9edd950c17558a76be44c3c2c5852e4091f0e81d34998ba269c4321a1e70cad75d049ebe2ece1e2225198a659590b2961c52e85d9c8a8bdfb5ab9fcbd7bd4b3c0b212b52637347f6b9a60751756fe2ce12ed429f5f12ea9927de7ade554ef3cfbaff4340212da4a3b47d6da888a6516d2a0eab7c7a954ece5e84586aceab617349f1a34c9e3f21887cb2b7ef1bdb17c92129385e0b6da6b4b28828fd743c3906fd15ee633e8d571f881daf5ea54f7f99f773cd889b28c8b49bdb49c7faa7d96bad398be4e054984dbeed0754590182c8286f1270a61812e9626edd232ee9806d053754a3b6598328b7e78bd8f941c12808d972ff3ddb5ad829d7dc63a65b5436650348a7c536d083de347ceb27fe3262f8eb271aaa67f440a4b28f340316ac233cc0c44ee337d6abed9a983e9511c66b5462dd7392ffb8e8e43549701cea22d52dbd210a3fcd5a16249143f97cef0c4682128d735417891767e77af6753677c44ad91368cb960fd94cb9b9d25f52ebd8efeee2bec6594163a00c61e525489937a29531963224bf8d3555a7d974b78826991c414a160b4b2afb1c6dc187bffffb2239d4027e2cd1acd1af00c4906fc7d5b764cbe6ee8ec90a59cb8db624f46bcdf5ad44b9db00eb0a7a24064435eeaf31cc5e0e03b8ddedf9ad7a643f52df6dbfc7203c949d903951b6af0356ab17f57576ce1f8b6447bc47ed69c898d7a2d89da1a5509e088c6cf6404b462a2ed97be7f18d1b5a7cc28e5a4d88df18f0b3703ef54e5d09eee8090a32f135c5099aafefb751dfbf6eb4b89cf12cc7154e3cab7b6033e43093bacd2a2cf7f650459a7b5fcc1cfcde4a364cdea42d2ce4acd9ffab23181fa4c8de8e475b2ba93f7ba37709b532f648025738789e7fd3d842292a48dc8eac118de47c677d2a72f675d7dfb6898bf3ce20bd047538d4207e96c0f49348c46fa5be5d0105d1026de231698d11e964d9341468c5f88b4c8d5512843e82d4fba4ec1493317e87c773165c756196dba029be4e29cf498fd28fd5f09761f9236fabad42d96669ab6469801a69a88ee8ff7e48014344ecdadeac7793e51ef38a65325d19bc6645659cc86ee8563cd0116f2eecc6d04007d28a1240d1084429207c72fbaf14104c4854dc3919737b98ad08bf042100d16c780f1564ae8a07b5260bf49518f1dd6f837d04c1560f64b354d233220bee93f702095b9cab99d0e06214c3c2151bb92b12201854e3de3bf8964b32c90bbc1f32faeb5fac5628c7b3c97a80da80d802261337be69e909957faaba013e1045cc609cc69b8fe198ac0c73ab95329b7ad428067ccd9c6ea20677a5d538c3bc477569ec4cf8e219a82ed7eafdcda4ca244112b1441eeca7fe5d2e71b7b96b4656f7d18be8ac995ef6ac042c0d365ce30eb6049e36ab038c78bdfa1665b9c2b88e0361851925f1401a65cbc8bc02fc75d2f0169cdaa23de65bbad557554c21ece2c6c010f253ed625323317d552809edb1dbba2cd9ce482e813a11872f7f2ad99c0dbdc7ad932e18863243b9ea9c5d945b52871b7c66c17ba3ff7e84469759ddd539cad94c15db632fad0659a5713bae77e4d442483389762781c16e7d6e3f84a47506b3f1390907531d3147f45421b115c751232fb0694606177e04a939ee8f3875f452db4d0ca59485f5b28fea94f9de70f9589317e0295cf77928708ae069e858795633607a756d4d2a8fc57a00a24a8fd094968b748690b1e30ae145d0fb029de091851d6116d2473abc1dc9464fc2bd74fcfedf22713dac368f1fdb561ae784eed9bfb542c4810b06bf850a781fba94d563f3fc575bce2b4e2fa1f117643bcb7b622a2fb5c224de8fd0fc4260b41e614e888408b062c4e9ffd2a7147732bcfb6a8dbbaebfdf907a5d8133dcc2033f06b922312eae98c0151b4237339ea0d8482c66c8f3faa69a968ae3b6a3b015441a9e67a1bafd329fffbf758791370bef7fb75e55880592bb50a23ee0791e5395f1bd5b8f2b527d83ecca3906f876228282406139935ff34ebc3e8af93f52e06ca8f871579ca31c0a48d9c8e5b1f6838dd67202b32fc27af93d598dec32a0fb23136b9a6e874358b165e476c28e85bdc17d89bcf442e29c4d447b5e8abcc6a8fe28b0184fef076bab51f2f4be5cda8c1b235a3a988ec1ba1e4a20e2255176d1ee108a6ba75b23e4caf8b1dbf749c7c0942380215cd615ff89a6164bfd46bb3ba64d7cc08117d7b31f524f478a6788b6abf0ed37351d67a60fc8150c0803f786e9c199a039bf3b379d8a90c23bf5955107a08cd248236ec8fd8bddd84534a87191eee4060806d955616feedf2fd78f93dc052b91ba8e1d5155d17d149e917ee9e6aaac902d9db786ccccd8d1be0a53bb6152b96befbe43d9afc6a5b5d6648cd1740a9ebcc7fa0f03f3cc408421531d281a368144873200d2ca11a27f3920606e676219bb363da6eafcbbabd7fc2bb744712ac65dd3788f9775e3acd8cbe33f9b8513a1b86d5d89e9b4cc492497794bfe1df27b8b655c949cf0a10381df5356b9fc157bed5179b71db29773906d05bb5f296866becb21d19032f5877655f8eb114f65b817add05ca6b16db0f891cd42bdd887de01dde22da9fa5a0f6d10d1b64b741feceb17588ea553465835e75f1ddf0ad89a59567b83bc43a34a16cdb3154fe5dc0480cf9f7e3df44cbb7ec95c99e33c0c510e36bec8fe34f140ea228f8caef42a8eaf9a6af1e13b54a3242916c33be45137673fec7d4701294e0cae800e92c21a75ea999e5604eecb09dde875056519a07066afc1a1a99a7daff628d2696143b99d22ff84649fd289872910712b4fed1fc16e443ccf623a9ef98b511a7f4c352f85568825f51283401cb3d14106c21dc574da4ccc51d8a5f3574364ea5ab7a61664d22808789fe4ca6ae833d5d6e48f6f172f1d14f3b15a0c255fc30d00de729402d5450f7a82f6166b4905dbb6ac8fd822ac5a8f6daaeb2dcb3bb4577640e6889f2df0e44ed9faec4ecdc9ea5dd26ece5a8579d813acf073287d875e300cf0954342b4795f4eb4f57e425f9473aa7266fe6156e49f08e40b98b9c484974030b9cdd2260d72e8508339cb51ab45379ee162c3cc021100aa5161ab28219cadfc7ef270277a241ad292ec890144d215334eedbd0e08675490cba34e1290e79654fea7796c89170319885ddfceb86545676e4b58b11cd6ba714f9e26bb8f5b12fa99b0ee0cfbc39b2f1370b796a4d5e19fee9a7514cbffa5d929f5f3175e137accbc813cd45bd044a4e5787996811275ee275aeb0528db42b08749a40994433e46a82b4e6dc4feef6c06e3218b7a52710839f2d54dd4a7f065a3ef372d44763cc030918f09e3792277345163b5ff5694336114048985813e7bfe6e2e2020a35ae7eabcacfe31f6c5446304958242bd5a7557530e63860a92443c6cd43b4aa6c2102a7dab32b28b51769503298606426fc70fbbabb553b76d4260f0499c08f6ba578acd791c5ba764470286490b4600a68597d748ebaa3668bd1d", 0x1000}, {&(0x7f0000000080)="1793b8f238cfbc5d8c455ba04b4a6caaab7424a3a50ddd3735874bf45a737f6e5a665970f51ee5c2a2fe110e1474c83c7eca40633101efdb8943c4c5", 0x3c}, {&(0x7f00000002c0)="38a43797fc14d933136bcfed70e206de691dc42d1b3c2230fd75046bc154", 0x1e}], 0x6, 0x8) listen(0xffffffffffffffff, 0x0) [ 418.045111] FAULT_FLAG_ALLOW_RETRY missing 70 [ 418.052860] CPU: 1 PID: 13635 Comm: syz-executor.2 Not tainted 4.19.84 #0 [ 418.059842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 418.069252] Call Trace: [ 418.071866] dump_stack+0x197/0x210 [ 418.075627] handle_userfault.cold+0x41/0x5a [ 418.080064] ? _raw_spin_unlock_irq+0x5e/0x90 [ 418.084606] ? userfaultfd_ioctl+0x3a40/0x3a40 [ 418.089214] ? find_get_entry+0x3e8/0x820 [ 418.093389] ? try_to_wake_up+0xcc/0xf50 [ 418.097464] ? filemap_map_pages+0x1130/0x1130 [ 418.102078] ? find_lock_entry+0x1a3/0x510 [ 418.106332] shmem_getpage_gfp+0x2cfa/0x3640 [ 418.110786] ? shmem_add_to_page_cache+0xd30/0xd30 [ 418.115732] ? lock_downgrade+0x880/0x880 [ 418.119899] ? kasan_check_read+0x11/0x20 [ 418.124097] shmem_fault+0x233/0x760 [ 418.127823] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 418.133106] ? find_get_pages_range_tag+0xc40/0xc40 [ 418.138135] ? pmd_val+0x85/0x100 [ 418.141613] ? pmd_val+0x85/0x100 [ 418.145086] __do_fault+0x111/0x480 [ 418.148735] __handle_mm_fault+0x2d78/0x3f80 [ 418.153169] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 418.158049] ? count_memcg_event_mm+0x2b1/0x4d0 [ 418.164039] handle_mm_fault+0x1b5/0x690 [ 418.168123] __do_page_fault+0x62a/0xe90 [ 418.172198] ? vmalloc_fault+0x740/0x740 [ 418.176277] ? trace_hardirqs_off_caller+0x65/0x220 [ 418.181313] ? trace_hardirqs_on_caller+0x6a/0x220 [ 418.186612] ? page_fault+0x8/0x30 [ 418.190174] do_page_fault+0x71/0x57d [ 418.193992] ? page_fault+0x8/0x30 [ 418.197542] page_fault+0x1e/0x30 [ 418.201012] RIP: 0033:0x453fd0 [ 418.204214] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 418.223153] RSP: 002b:00007fd6157797a8 EFLAGS: 00010202 [ 418.228547] RAX: 00007fd615779850 RBX: 0000000000000003 RCX: 000000000000000e [ 418.235850] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fd615779850 21:27:33 executing program 5: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x2b1, 0x0) [ 418.243144] RBP: 000000000075bf20 R08: 00000000000003ff R09: 0000000000000000 [ 418.250440] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd61577a6d4 [ 418.257728] R13: 00000000004ca143 R14: 00000000004e1eb0 R15: 00000000ffffffff 21:27:33 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) write$binfmt_elf64(r3, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x8, 0xff, 0x9, 0xae8, 0xdcff9ff9db9fdd78, 0x3, 0xe69, 0x34a, 0x40, 0xd5, 0x8, 0x2, 0x38, 0x1, 0x2, 0xc3, 0x4}, [{0x0, 0xf, 0x8c6, 0x18000, 0x8, 0x4, 0x6, 0x8f}], "8e8d57014375fab3bb3e01407792391f1d6d88c0c9784505db72357f1ee3e042e3753a41fe68d23df1f23ed03417785c4e43ce145815632cffb8b0ff654f6f69ac47576fcd8875386a108f724015452e95d0d9cb9525447307688a5e40a4bac24a4fc3021fbef7ad23128c70a9867003140315bef3e052eb4f79fbd2454a4b64cd9aad", [[], [], [], [], [], [], [], [], [], []]}, 0xafb) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r6, r7, 0x0, 0x1000007ffff000) getsockopt$SO_COOKIE(r7, 0x1, 0x39, &(0x7f0000000080), &(0x7f0000000140)=0x8) r8 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000040)=0x4, 0x4) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r8, r9, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:33 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:33 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) [ 418.547255] FAULT_FLAG_ALLOW_RETRY missing 70 [ 418.552058] CPU: 1 PID: 13662 Comm: syz-executor.2 Not tainted 4.19.84 #0 [ 418.558998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 418.568358] Call Trace: [ 418.570957] dump_stack+0x197/0x210 [ 418.574598] handle_userfault.cold+0x41/0x5a [ 418.579018] ? _raw_spin_unlock_irq+0x5e/0x90 [ 418.583541] ? userfaultfd_ioctl+0x3a40/0x3a40 [ 418.588141] ? find_get_entry+0x3e8/0x820 [ 418.592402] ? try_to_wake_up+0xcc/0xf50 [ 418.596462] ? filemap_map_pages+0x1130/0x1130 [ 418.601050] ? find_lock_entry+0x1a3/0x510 [ 418.605280] shmem_getpage_gfp+0x2cfa/0x3640 [ 418.609687] ? shmem_add_to_page_cache+0xd30/0xd30 [ 418.614710] ? lock_downgrade+0x880/0x880 [ 418.618849] ? kasan_check_read+0x11/0x20 [ 418.622983] shmem_fault+0x233/0x760 [ 418.626755] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 418.632031] ? find_get_pages_range_tag+0xc40/0xc40 [ 418.637048] ? pmd_val+0x85/0x100 [ 418.640488] ? pmd_val+0x85/0x100 [ 418.643943] __do_fault+0x111/0x480 [ 418.647585] __handle_mm_fault+0x2d78/0x3f80 [ 418.652005] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 418.656857] ? count_memcg_event_mm+0x2b1/0x4d0 [ 418.661510] handle_mm_fault+0x1b5/0x690 [ 418.665565] __do_page_fault+0x62a/0xe90 [ 418.669626] ? vmalloc_fault+0x740/0x740 [ 418.673690] ? trace_hardirqs_off_caller+0x65/0x220 [ 418.678731] ? trace_hardirqs_on_caller+0x6a/0x220 [ 418.683668] ? page_fault+0x8/0x30 [ 418.687199] do_page_fault+0x71/0x57d [ 418.691093] ? page_fault+0x8/0x30 [ 418.694620] page_fault+0x1e/0x30 [ 418.698058] RIP: 0033:0x453fd0 [ 418.701238] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 418.720141] RSP: 002b:00007fd6157797a8 EFLAGS: 00010202 [ 418.725496] RAX: 00007fd615779850 RBX: 0000000000000003 RCX: 000000000000000e [ 418.732764] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fd615779850 [ 418.740049] RBP: 000000000075bf20 R08: 00000000000003ff R09: 0000000000000000 21:27:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff003) listen(0xffffffffffffffff, 0x0) [ 418.747323] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd61577a6d4 [ 418.754701] R13: 00000000004ca143 R14: 00000000004e1eb0 R15: 00000000ffffffff 21:27:34 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0x17b) 21:27:34 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) connect$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(0xffffffffffffffff, r2, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:34 executing program 2: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:34 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) [ 419.056334] FAULT_FLAG_ALLOW_RETRY missing 70 [ 419.076097] CPU: 0 PID: 13687 Comm: syz-executor.2 Not tainted 4.19.84 #0 [ 419.083095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 419.092458] Call Trace: [ 419.092486] dump_stack+0x197/0x210 [ 419.092508] handle_userfault.cold+0x41/0x5a [ 419.092523] ? _raw_spin_unlock_irq+0x5e/0x90 [ 419.092546] ? userfaultfd_ioctl+0x3a40/0x3a40 [ 419.112247] ? find_get_entry+0x3e8/0x820 [ 419.116430] ? try_to_wake_up+0xcc/0xf50 [ 419.116445] ? filemap_map_pages+0x1130/0x1130 [ 419.116469] ? find_lock_entry+0x1a3/0x510 [ 419.116489] shmem_getpage_gfp+0x2cfa/0x3640 [ 419.116516] ? shmem_add_to_page_cache+0xd30/0xd30 [ 419.138871] ? lock_downgrade+0x880/0x880 [ 419.143044] ? kasan_check_read+0x11/0x20 [ 419.147219] shmem_fault+0x233/0x760 [ 419.150955] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 21:27:34 executing program 5: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x2b1, 0x0) 21:27:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x26d705d52850d7a9, 0x0, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000080)={'ah\x00'}, &(0x7f0000000140)=0x1e) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev, 0x4}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, r6}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0xfffffffffffffffd, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000, 0x0, 0x4]}}, r6}}, 0x48) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f00000000c0)={0x8, 0x120, 0xfa00, {0x4, {0x626, 0x25ed, "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", 0x5, 0x8, 0xff, 0x20, 0x0, 0x4, 0x4, 0x1}, r6}}, 0x128) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r8, r9, 0x0, 0x1000007ffff000) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r4, &(0x7f0000000180)={0xf, 0x8, 0xfa00, {r10, 0x10}}, 0x10) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r12 = accept4(r11, 0x0, 0x0, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r12, r13, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) r14 = socket$alg(0x26, 0x5, 0x0) bind$alg(r14, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r15 = accept4(r14, 0x0, 0x0, 0x0) r16 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r15, r16, 0x0, 0x1000007ffff000) listen(r15, 0x0) [ 419.156256] ? find_get_pages_range_tag+0xc40/0xc40 [ 419.161294] ? pmd_val+0x85/0x100 [ 419.164768] ? pmd_val+0x85/0x100 [ 419.168236] __do_fault+0x111/0x480 [ 419.171880] __handle_mm_fault+0x2d78/0x3f80 [ 419.176311] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 419.181190] ? count_memcg_event_mm+0x2b1/0x4d0 [ 419.185885] handle_mm_fault+0x1b5/0x690 [ 419.189968] __do_page_fault+0x62a/0xe90 [ 419.194047] ? vmalloc_fault+0x740/0x740 [ 419.198136] ? trace_hardirqs_off_caller+0x65/0x220 [ 419.203193] ? trace_hardirqs_on_caller+0x6a/0x220 [ 419.208142] ? page_fault+0x8/0x30 [ 419.211701] do_page_fault+0x71/0x57d [ 419.215512] ? page_fault+0x8/0x30 [ 419.219070] page_fault+0x1e/0x30 [ 419.222540] RIP: 0033:0x453fd0 [ 419.225742] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 419.244661] RSP: 002b:00007fd6157797a8 EFLAGS: 00010202 [ 419.250050] RAX: 00007fd615779850 RBX: 0000000000000003 RCX: 000000000000000e 21:27:34 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) [ 419.257343] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fd615779850 [ 419.264632] RBP: 000000000075bf20 R08: 00000000000003ff R09: 0000000000000000 [ 419.271921] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd61577a6d4 [ 419.279475] R13: 00000000004ca143 R14: 00000000004e1eb0 R15: 00000000ffffffff 21:27:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff004) listen(0xffffffffffffffff, 0x0) 21:27:34 executing program 2: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:34 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) [ 419.543085] FAULT_FLAG_ALLOW_RETRY missing 70 [ 419.552424] CPU: 0 PID: 13713 Comm: syz-executor.2 Not tainted 4.19.84 #0 [ 419.559427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 419.568801] Call Trace: [ 419.568826] dump_stack+0x197/0x210 [ 419.568848] handle_userfault.cold+0x41/0x5a [ 419.568862] ? _raw_spin_unlock_irq+0x5e/0x90 [ 419.568884] ? userfaultfd_ioctl+0x3a40/0x3a40 [ 419.568899] ? find_get_entry+0x3e8/0x820 21:27:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x1f9, 0x0, 0x0, 0x0, 0x8, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r5, r6, 0x0, 0x1000007ffff000) fadvise64(r5, 0x8c, 0x6, 0xa) sendfile(r2, r3, 0x0, 0x1000007ffff000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x20, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0xfc, r8, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fa0}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x20, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_SOCK={0x4c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5c86}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x15}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x400420b0}, 0x1) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) [ 419.568917] ? try_to_wake_up+0xcc/0xf50 [ 419.568930] ? filemap_map_pages+0x1130/0x1130 [ 419.568952] ? find_lock_entry+0x1a3/0x510 [ 419.568970] shmem_getpage_gfp+0x2cfa/0x3640 [ 419.568999] ? shmem_add_to_page_cache+0xd30/0xd30 [ 419.617053] ? lock_downgrade+0x880/0x880 [ 419.621246] ? kasan_check_read+0x11/0x20 [ 419.625428] shmem_fault+0x233/0x760 [ 419.629186] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 419.634490] ? find_get_pages_range_tag+0xc40/0xc40 [ 419.639531] ? pmd_val+0x85/0x100 [ 419.643009] ? pmd_val+0x85/0x100 [ 419.646488] __do_fault+0x111/0x480 [ 419.650151] __handle_mm_fault+0x2d78/0x3f80 [ 419.654588] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 419.659472] ? count_memcg_event_mm+0x2b1/0x4d0 [ 419.664162] handle_mm_fault+0x1b5/0x690 [ 419.668253] __do_page_fault+0x62a/0xe90 [ 419.672775] ? vmalloc_fault+0x740/0x740 [ 419.676851] ? trace_hardirqs_off_caller+0x65/0x220 [ 419.681885] ? trace_hardirqs_on_caller+0x6a/0x220 [ 419.686919] ? page_fault+0x8/0x30 [ 419.690546] do_page_fault+0x71/0x57d [ 419.694364] ? page_fault+0x8/0x30 [ 419.697916] page_fault+0x1e/0x30 [ 419.701377] RIP: 0033:0x453fd0 [ 419.704577] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 419.723494] RSP: 002b:00007fd6157797a8 EFLAGS: 00010202 [ 419.728876] RAX: 00007fd615779850 RBX: 0000000000000003 RCX: 000000000000000e [ 419.736165] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fd615779850 21:27:35 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0x259) 21:27:35 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x0, &(0x7f00006dc000)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) [ 419.743452] RBP: 000000000075bf20 R08: 00000000000003ff R09: 0000000000000000 [ 419.750742] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd61577a6d4 [ 419.758034] R13: 00000000004ca143 R14: 00000000004e1eb0 R15: 00000000ffffffff 21:27:35 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setlease(r0, 0x400, 0x3) dup3(r0, 0xffffffffffffffff, 0x80000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) r4 = openat(r3, &(0x7f0000000040)='./file0\x00', 0x191a00, 0x80) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x48, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfffffffffffff23c}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xa, r4, 0x2) r5 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r7, r8, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff005) listen(0xffffffffffffffff, 0x0) 21:27:35 executing program 2: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:35 executing program 5: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x2b1, 0x0) 21:27:35 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x0, &(0x7f00006dc000)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) [ 420.115891] FAULT_FLAG_ALLOW_RETRY missing 70 [ 420.128506] CPU: 1 PID: 13739 Comm: syz-executor.2 Not tainted 4.19.84 #0 [ 420.135495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 420.144887] Call Trace: [ 420.147492] dump_stack+0x197/0x210 [ 420.151138] handle_userfault.cold+0x41/0x5a 21:27:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff006) listen(0xffffffffffffffff, 0x0) [ 420.161817] ? userfaultfd_ioctl+0x3a40/0x3a40 [ 420.166431] ? find_get_entry+0x3e8/0x820 [ 420.170609] ? filemap_map_pages+0x1130/0x1130 [ 420.175239] ? find_lock_entry+0x1a3/0x510 [ 420.179527] shmem_getpage_gfp+0x2cfa/0x3640 [ 420.183976] ? shmem_add_to_page_cache+0xd30/0xd30 [ 420.188948] ? lock_downgrade+0x880/0x880 [ 420.188971] ? kasan_check_read+0x11/0x20 [ 420.197279] shmem_fault+0x233/0x760 [ 420.197302] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 420.197318] ? find_get_pages_range_tag+0xc40/0xc40 [ 420.197336] ? pmd_val+0x85/0x100 21:27:35 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setlease(r0, 0x400, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0, 0x3}, 0x0, 0x8, 0x2}, 0x0, 0x0, r0, 0x0) r1 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000040)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) r5 = syz_open_procfs(r4, &(0x7f0000000140)='nat/t\x02\x00\x00\x00') sendfile(r3, r5, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x28c, 0x0) listen(0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) [ 420.214774] ? pmd_val+0x85/0x100 [ 420.218255] __do_fault+0x111/0x480 [ 420.221898] __handle_mm_fault+0x2d78/0x3f80 [ 420.226325] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 420.231228] ? count_memcg_event_mm+0x2b1/0x4d0 [ 420.235925] handle_mm_fault+0x1b5/0x690 [ 420.235948] __do_page_fault+0x62a/0xe90 [ 420.235968] ? vmalloc_fault+0x740/0x740 [ 420.235984] ? trace_hardirqs_off_caller+0x65/0x220 [ 420.235996] ? trace_hardirqs_on_caller+0x6a/0x220 [ 420.236015] ? page_fault+0x8/0x30 [ 420.244148] do_page_fault+0x71/0x57d 21:27:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r5, r6, 0x0, 0x1000007ffff000) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f00000001c0)=0x4) r7 = accept4$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x1c, 0x80000) pread64(r7, &(0x7f0000000140)=""/121, 0x79, 0xffff) sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) [ 420.244163] ? page_fault+0x8/0x30 [ 420.244179] page_fault+0x1e/0x30 [ 420.244190] RIP: 0033:0x453fd0 [ 420.244205] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 420.244212] RSP: 002b:00007fd6157797a8 EFLAGS: 00010202 [ 420.244228] RAX: 00007fd615779850 RBX: 0000000000000003 RCX: 000000000000000e [ 420.307567] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fd615779850 [ 420.314858] RBP: 000000000075bf20 R08: 00000000000003ff R09: 0000000000000000 [ 420.322152] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd61577a6d4 [ 420.329440] R13: 00000000004ca143 R14: 00000000004e1eb0 R15: 00000000ffffffff 21:27:35 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x0, &(0x7f00006dc000)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:35 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) [ 420.618097] FAULT_FLAG_ALLOW_RETRY missing 70 [ 420.623197] CPU: 0 PID: 13772 Comm: syz-executor.2 Not tainted 4.19.84 #0 [ 420.630149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 420.639525] Call Trace: [ 420.642138] dump_stack+0x197/0x210 [ 420.645820] handle_userfault.cold+0x41/0x5a [ 420.650363] ? userfaultfd_ioctl+0x3a40/0x3a40 [ 420.654971] ? find_get_entry+0x3e8/0x820 [ 420.659137] ? filemap_map_pages+0x1130/0x1130 [ 420.664223] ? find_lock_entry+0x1a3/0x510 [ 420.668463] shmem_getpage_gfp+0x2cfa/0x3640 [ 420.673018] ? shmem_add_to_page_cache+0xd30/0xd30 [ 420.677939] ? lock_downgrade+0x880/0x880 [ 420.682083] ? kasan_check_read+0x11/0x20 [ 420.686246] shmem_fault+0x233/0x760 [ 420.690080] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 420.695410] ? find_get_pages_range_tag+0xc40/0xc40 [ 420.700416] ? pmd_val+0x85/0x100 [ 420.703871] ? pmd_val+0x85/0x100 [ 420.707330] __do_fault+0x111/0x480 [ 420.710952] __handle_mm_fault+0x2d78/0x3f80 [ 420.715497] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 420.720347] ? count_memcg_event_mm+0x2b1/0x4d0 [ 420.725019] handle_mm_fault+0x1b5/0x690 [ 420.729088] __do_page_fault+0x62a/0xe90 [ 420.733149] ? vmalloc_fault+0x740/0x740 [ 420.737246] ? trace_hardirqs_off_caller+0x65/0x220 [ 420.742263] ? trace_hardirqs_on_caller+0x6a/0x220 [ 420.747294] ? page_fault+0x8/0x30 [ 420.750839] do_page_fault+0x71/0x57d [ 420.754818] ? page_fault+0x8/0x30 [ 420.758402] page_fault+0x1e/0x30 [ 420.761855] RIP: 0033:0x453fd0 [ 420.765156] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 420.784416] RSP: 002b:00007fd6157797a8 EFLAGS: 00010202 [ 420.789789] RAX: 00007fd615779850 RBX: 0000000000000003 RCX: 000000000000000e [ 420.797571] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fd615779850 [ 420.804848] RBP: 000000000075bf20 R08: 00000000000003ff R09: 0000000000000000 21:27:36 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0xa00) 21:27:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff007) listen(0xffffffffffffffff, 0x0) 21:27:36 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x0, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x68e74c9fc97808e8}}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r5 = accept4(r1, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r5, r6, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) [ 420.812725] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd61577a6d4 [ 420.819984] R13: 00000000004ca143 R14: 00000000004e1eb0 R15: 00000000ffffffff 21:27:36 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:36 executing program 5: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x2b1, 0x0) 21:27:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000880)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r5, 0x12, 0x2, &(0x7f0000000980)=""/146, &(0x7f0000000080)=0xffffffffffffffc3) r6 = accept4(r4, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r6, r7, 0x0, 0x1000007ffff000) ioctl$SCSI_IOCTL_GET_IDLUN(r7, 0x5382, &(0x7f0000000040)) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:36 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x0, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff008) listen(0xffffffffffffffff, 0x0) 21:27:36 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x0, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) [ 421.154390] FAULT_FLAG_ALLOW_RETRY missing 70 [ 421.163993] CPU: 0 PID: 13798 Comm: syz-executor.2 Not tainted 4.19.84 #0 [ 421.170978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 421.180343] Call Trace: [ 421.180375] dump_stack+0x197/0x210 [ 421.180397] handle_userfault.cold+0x41/0x5a [ 421.180422] ? userfaultfd_ioctl+0x3a40/0x3a40 [ 421.180438] ? find_get_entry+0x3e8/0x820 [ 421.180454] ? filemap_map_pages+0x1130/0x1130 [ 421.180473] ? find_lock_entry+0x1a3/0x510 [ 421.180490] shmem_getpage_gfp+0x2cfa/0x3640 [ 421.180515] ? shmem_add_to_page_cache+0xd30/0xd30 [ 421.180537] ? lock_downgrade+0x880/0x880 [ 421.180558] ? kasan_check_read+0x11/0x20 [ 421.180581] shmem_fault+0x233/0x760 [ 421.180606] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 421.180626] ? find_get_pages_range_tag+0xc40/0xc40 [ 421.204561] ? pmd_val+0x85/0x100 [ 421.204576] ? pmd_val+0x85/0x100 [ 421.204604] __do_fault+0x111/0x480 [ 421.204626] __handle_mm_fault+0x2d78/0x3f80 [ 421.204651] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 421.247452] ? count_memcg_event_mm+0x2b1/0x4d0 [ 421.255656] handle_mm_fault+0x1b5/0x690 [ 421.255676] __do_page_fault+0x62a/0xe90 [ 421.255695] ? vmalloc_fault+0x740/0x740 [ 421.255710] ? trace_hardirqs_off_caller+0x65/0x220 [ 421.255720] ? trace_hardirqs_on_caller+0x6a/0x220 [ 421.255739] ? page_fault+0x8/0x30 [ 421.290869] do_page_fault+0x71/0x57d [ 421.294697] ? page_fault+0x8/0x30 [ 421.298258] page_fault+0x1e/0x30 [ 421.301722] RIP: 0033:0x453fd0 [ 421.304921] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 421.323839] RSP: 002b:00007fd6157797a8 EFLAGS: 00010202 [ 421.329221] RAX: 00007fd615779850 RBX: 0000000000000003 RCX: 000000000000000e [ 421.336497] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fd615779850 [ 421.343766] RBP: 000000000075bf20 R08: 00000000000003ff R09: 0000000000000000 21:27:36 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) r3 = dup3(0xffffffffffffffff, r1, 0x180000) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x3f, 0x4, 0x0, 0x0, 0x0, 0x41c3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x80000000, 0xfff}, 0x0, 0x6, 0xffffffff}, 0x0, 0x8, r3, 0x3) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) accept4(r7, 0x0, 0x0, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) r9 = socket(0x9, 0x0, 0x4a) bind$alg(r9, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0xfffffffffffffe4c) r10 = accept4(r8, 0x0, 0x0, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r10, r11, 0x0, 0x1000007ffff000) r12 = socket$inet_udplite(0x2, 0x2, 0x88) sendfile(r5, r12, 0x0, 0x1000007ffff000) ioctl$PIO_FONTRESET(r6, 0x4b6d, 0x0) r13 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r13, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r14 = socket$alg(0x26, 0x5, 0x0) bind$alg(r14, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r15 = accept4(r14, 0x0, 0x0, 0x0) r16 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r15, r16, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:36 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) [ 421.343774] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd61577a6d4 [ 421.343782] R13: 00000000004ca143 R14: 00000000004e1eb0 R15: 00000000ffffffff 21:27:37 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0xe00) 21:27:37 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') chdir(&(0x7f0000000040)='./file0\x00') bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080)=r0, 0x4) sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff009) listen(0xffffffffffffffff, 0x0) [ 421.770223] FAULT_FLAG_ALLOW_RETRY missing 70 [ 421.776360] CPU: 1 PID: 13832 Comm: syz-executor.2 Not tainted 4.19.84 #0 [ 421.783319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 421.792691] Call Trace: [ 421.795300] dump_stack+0x197/0x210 [ 421.798946] handle_userfault.cold+0x41/0x5a [ 421.803371] ? _raw_spin_unlock_irq+0x5e/0x90 [ 421.807895] ? userfaultfd_ioctl+0x3a40/0x3a40 [ 421.812498] ? find_get_entry+0x3e8/0x820 [ 421.816668] ? try_to_wake_up+0xcc/0xf50 [ 421.820743] ? filemap_map_pages+0x1130/0x1130 [ 421.825341] ? find_lock_entry+0x1a3/0x510 [ 421.829592] shmem_getpage_gfp+0x2cfa/0x3640 [ 421.834029] ? shmem_add_to_page_cache+0xd30/0xd30 [ 421.838965] ? lock_downgrade+0x880/0x880 [ 421.843121] ? kasan_check_read+0x11/0x20 [ 421.847284] shmem_fault+0x233/0x760 [ 421.851018] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 421.856316] ? find_get_pages_range_tag+0xc40/0xc40 [ 421.861362] ? pmd_val+0x85/0x100 [ 421.861380] ? pmd_val+0x85/0x100 21:27:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) [ 421.868309] __do_fault+0x111/0x480 [ 421.868329] __handle_mm_fault+0x2d78/0x3f80 [ 421.868349] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 421.868382] ? count_memcg_event_mm+0x2b1/0x4d0 [ 421.886035] handle_mm_fault+0x1b5/0x690 [ 421.890123] __do_page_fault+0x62a/0xe90 [ 421.894215] ? vmalloc_fault+0x740/0x740 [ 421.898300] ? trace_hardirqs_off_caller+0x65/0x220 [ 421.903332] ? trace_hardirqs_on_caller+0x6a/0x220 [ 421.908391] ? page_fault+0x8/0x30 [ 421.911971] do_page_fault+0x71/0x57d [ 421.915788] ? page_fault+0x8/0x30 [ 421.919342] page_fault+0x1e/0x30 [ 421.922823] RIP: 0033:0x453fd0 [ 421.926025] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 421.944941] RSP: 002b:00007fd6157797a8 EFLAGS: 00010202 [ 421.950324] RAX: 00007fd615779850 RBX: 0000000000000003 RCX: 000000000000000e [ 421.957781] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fd615779850 [ 421.965063] RBP: 000000000075bf20 R08: 00000000000003ff R09: 0000000000000000 [ 421.972340] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd61577a6d4 [ 421.979640] R13: 00000000004ca143 R14: 00000000004e1eb0 R15: 00000000ffffffff 21:27:37 executing program 5: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x2b1, 0x0) 21:27:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff00a) listen(0xffffffffffffffff, 0x0) 21:27:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x21) recvfrom(r3, &(0x7f0000000140)=""/181, 0xb5, 0x0, &(0x7f0000000200)=@hci={0x1f, 0x0, 0x2}, 0x80) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x18000, 0x0) sendto$inet6(r4, &(0x7f0000000280)="d4861cf5bf40de46d8fceb4a0187c6fd30b90d1525f17248d7dda631274896fe24a467dde4dbce363706af9f6e9a53e8ca938b2871716194f27bbb24593881d3b16f258d9ad9dfbf15a5c0ee572b20204e7a7ec5ed85fd8edffee7820a6a2043c708eff30d8225b49c7c76e734f93f35d762c37e64462181b92ba9ecf5155740c06d51247f127690f82edf18f21f4a91857fcb6434852d2a10f2177d3046b64425363c86996fa0d68c425a6e40159be27f06246b2c8ffa1cd65f580251cf42f5019983a7878323d56fa33b2c8cfb90", 0xcf, 0x2c0c8055, &(0x7f0000000380)={0xa, 0x4e24, 0x8001, @empty, 0x41}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r5, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:37 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:37 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) [ 422.271077] FAULT_FLAG_ALLOW_RETRY missing 70 [ 422.293745] CPU: 1 PID: 13861 Comm: syz-executor.2 Not tainted 4.19.84 #0 [ 422.300728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 422.310127] Call Trace: [ 422.312721] dump_stack+0x197/0x210 [ 422.316353] handle_userfault.cold+0x41/0x5a [ 422.320768] ? _raw_spin_unlock_irq+0x5e/0x90 [ 422.325276] ? userfaultfd_ioctl+0x3a40/0x3a40 [ 422.329855] ? find_get_entry+0x3e8/0x820 [ 422.334005] ? try_to_wake_up+0xcc/0xf50 [ 422.338069] ? filemap_map_pages+0x1130/0x1130 [ 422.342646] ? find_lock_entry+0x1a3/0x510 [ 422.346888] shmem_getpage_gfp+0x2cfa/0x3640 [ 422.351303] ? shmem_add_to_page_cache+0xd30/0xd30 [ 422.356244] ? lock_downgrade+0x880/0x880 [ 422.360387] ? kasan_check_read+0x11/0x20 [ 422.364553] shmem_fault+0x233/0x760 [ 422.368263] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 422.373535] ? find_get_pages_range_tag+0xc40/0xc40 [ 422.378573] ? pmd_val+0x85/0x100 [ 422.382033] ? pmd_val+0x85/0x100 [ 422.385482] __do_fault+0x111/0x480 [ 422.389119] __handle_mm_fault+0x2d78/0x3f80 [ 422.393697] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 422.398550] ? count_memcg_event_mm+0x2b1/0x4d0 [ 422.403230] handle_mm_fault+0x1b5/0x690 [ 422.407313] __do_page_fault+0x62a/0xe90 [ 422.411420] ? vmalloc_fault+0x740/0x740 [ 422.415493] ? trace_hardirqs_off_caller+0x65/0x220 [ 422.420536] ? trace_hardirqs_on_caller+0x6a/0x220 [ 422.425477] ? page_fault+0x8/0x30 [ 422.429018] do_page_fault+0x71/0x57d [ 422.432814] ? page_fault+0x8/0x30 [ 422.436360] page_fault+0x1e/0x30 [ 422.439800] RIP: 0033:0x453fd0 [ 422.442986] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 422.461895] RSP: 002b:00007fd6157797a8 EFLAGS: 00010202 [ 422.467254] RAX: 00007fd615779850 RBX: 0000000000000003 RCX: 000000000000000e [ 422.474520] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fd615779850 [ 422.481792] RBP: 000000000075bf20 R08: 00000000000003ff R09: 0000000000000000 [ 422.489053] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd61577a6d4 [ 422.496317] R13: 00000000004ca143 R14: 00000000004e1eb0 R15: 00000000ffffffff 21:27:37 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0xf00) 21:27:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:37 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff00b) listen(0xffffffffffffffff, 0x0) 21:27:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) prctl$PR_GET_FP_MODE(0x2e) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r5, r6, 0x0, 0x1000007ffff000) ioctl$PPPIOCGUNIT(r6, 0x80047456, &(0x7f0000000040)) listen(0xffffffffffffffff, 0x0) [ 422.730252] FAULT_FLAG_ALLOW_RETRY missing 70 [ 422.750912] CPU: 1 PID: 13880 Comm: syz-executor.2 Not tainted 4.19.84 #0 [ 422.757904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 422.767280] Call Trace: [ 422.769883] dump_stack+0x197/0x210 [ 422.773533] handle_userfault.cold+0x41/0x5a [ 422.777973] ? userfaultfd_ioctl+0x3a40/0x3a40 [ 422.782577] ? find_get_entry+0x3e8/0x820 [ 422.786768] ? mark_held_locks+0x100/0x100 [ 422.791040] ? filemap_map_pages+0x1130/0x1130 [ 422.795633] ? finish_task_switch+0x146/0x7c0 [ 422.800136] ? finish_task_switch+0x118/0x7c0 [ 422.804645] ? switch_mm_irqs_off+0x2de/0x1360 [ 422.809342] ? rcu_read_unlock_special+0x679/0xea0 [ 422.814302] ? find_lock_entry+0x1a3/0x510 [ 422.818561] shmem_getpage_gfp+0x2cfa/0x3640 [ 422.822995] ? shmem_add_to_page_cache+0xd30/0xd30 [ 422.827972] ? lock_downgrade+0x880/0x880 [ 422.832161] shmem_fault+0x233/0x760 [ 422.835900] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 422.841195] ? find_get_pages_range_tag+0xc40/0xc40 [ 422.846224] ? pmd_val+0x85/0x100 [ 422.849688] ? pmd_val+0x85/0x100 [ 422.853249] __do_fault+0x111/0x480 [ 422.856896] __handle_mm_fault+0x2d78/0x3f80 [ 422.861325] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 422.866205] ? count_memcg_event_mm+0x2b1/0x4d0 [ 422.870894] handle_mm_fault+0x1b5/0x690 [ 422.874984] __do_page_fault+0x62a/0xe90 [ 422.879068] ? vmalloc_fault+0x740/0x740 [ 422.883141] ? trace_hardirqs_off_caller+0x65/0x220 [ 422.888180] ? trace_hardirqs_on_caller+0x6a/0x220 [ 422.893125] ? page_fault+0x8/0x30 [ 422.896685] do_page_fault+0x71/0x57d 21:27:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff00c) listen(0xffffffffffffffff, 0x0) [ 422.900497] ? page_fault+0x8/0x30 [ 422.904132] page_fault+0x1e/0x30 [ 422.907599] RIP: 0033:0x453fd0 [ 422.910800] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 422.929721] RSP: 002b:00007fd6157797a8 EFLAGS: 00010202 [ 422.935116] RAX: 00007fd615779850 RBX: 0000000000000003 RCX: 000000000000000e [ 422.942395] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fd615779850 [ 422.942405] RBP: 000000000075bf20 R08: 00000000000003ff R09: 0000000000000000 [ 422.942414] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd61577a6d4 [ 422.942423] R13: 00000000004ca143 R14: 00000000004e1eb0 R15: 00000000ffffffff 21:27:38 executing program 5: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x2b1, 0x0) 21:27:38 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:38 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x18, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00'}, 0x30) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ni\x00'}, 0xfe0f) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = getpid() rt_tgsigqueueinfo(r4, r4, 0x16, &(0x7f0000000100)={0x0, 0x6}) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000040)=r4) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r5, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) chdir(&(0x7f0000000080)='.\x00') 21:27:38 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) [ 423.264111] FAULT_FLAG_ALLOW_RETRY missing 70 [ 423.271030] CPU: 1 PID: 13905 Comm: syz-executor.2 Not tainted 4.19.84 #0 [ 423.277987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 423.287352] Call Trace: [ 423.289956] dump_stack+0x197/0x210 [ 423.293604] handle_userfault.cold+0x41/0x5a [ 423.298041] ? userfaultfd_ioctl+0x3a40/0x3a40 [ 423.302724] ? find_get_entry+0x3e8/0x820 [ 423.306892] ? filemap_map_pages+0x1130/0x1130 21:27:38 executing program 3: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000200)='R', 0x1, r0) keyctl$get_security(0x11, r1, 0x0, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000140)="41e7c8", 0x3, r1) r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000200)='R', 0x1, r3) keyctl$instantiate_iov(0x14, r2, &(0x7f0000000740)=[{&(0x7f0000000180)="3fce7ee1cad6718c7ea5ead7e91108f6ea2a96fe6cadc18dc0482a3d7033fde37f8611afdd4dc270b793429ede3390f25fd78943ef6db4777af46638ef2b43f1e4efbf9fecf531c0785ef1f54d04d0b48dcbb72b80f9c8437f4fa4a4b930b68762195ed8d4e06815df", 0x69}, {&(0x7f0000000200)="b130fb530cec59b3ead2ffe562af87c0b84c7230904a9c48d9cae5f001300b463bf124082764b8c7960e5510be12207ec5d36c5ca2317aecd831b28f43df135169f17170dc9eb78ade2690c329a8ea31c93b", 0x52}, {&(0x7f0000000280)="72563714f658fcd7f0660ae123024e9dcce51a3c1712ae7b1df5a0f036535f6df18e80a6b3484121089f77a439c10426eef7f3dd2b35b8635a4d751072e728d51794ce6f10926b189b3bf99e4dcae39de3c2839fe0ca98bc0457a788642189d697abdc227ad48b715dc12f6cb75d2e9f679fe817dfb1e175c5f31ec4f3391cb1aea36191415d20d76b69bb", 0x8b}, {&(0x7f0000000340)="e800a4d93d392f4fc18cf6fa3d86192700"/29, 0x1d}, {&(0x7f00000006c0)="91a70aef64971513e3a62bdb346bfc7bf1a458e060e1eed3a268fe556558b6d3ecf9c34d9f54476921915c0d320a8b36c77c13065e2f7f6c6ac98996853d36542e1b95858dd42efd73d3c0220c4230404772f8be074a3140a9d2d08969238b31cb927799ee1e45bf", 0x52}, {&(0x7f0000000480)="cfa2e78dbadbd5fe3d0de68d86a9161e5ade5154cbb37df86690f448f0f063664e1e8d20d0de2aeb487d96fa527377ae46da6511e62cc24612724c6da537211735d61be6fb35342a59ccbd255428e759c243", 0x1f}, {&(0x7f0000000500)="66ffd7cc17c227193125213a25a22f28e9f58a7c9cec83ae094b5416d08492abf39ff584ac3426d2a96df95673b96a5b5db81341b25100fbc23bb324bd301c172459e5f8aa33dbb46bb8ea95566d2441e717b8", 0xfee5}, {&(0x7f0000000580)="5986ca77e8cab968fcefdac82d9bcfcd95654d97ce3744909ba7b7dcb86339958608e18083515b37db3fc492333e8757f7c3ebb96e2d50b6f3beb747796d5a6e3c43dd329713d43c3d844d34cbaca9d94916a2595a9041b696bbc1152ebf72b80335c0c500990a930c95e1408dc5d31c3b9e44bc369c1fb1beb06ee4f8e43ec2a7d833d077b8b70fff90ac7ce17627a426be7b1c61e00f16fb81729f197e2769a4697c28882116f91e349901194495e3d0", 0xb1}], 0x8, r3) r4 = syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x0, 0x2) bind$vsock_dgram(r4, &(0x7f00000003c0)={0x28, 0x0, 0x0, @reserved}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r7, r8, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) [ 423.311494] ? find_lock_entry+0x1a3/0x510 [ 423.315741] shmem_getpage_gfp+0x2cfa/0x3640 [ 423.320172] ? shmem_add_to_page_cache+0xd30/0xd30 [ 423.325109] ? lock_downgrade+0x880/0x880 [ 423.329270] ? kasan_check_read+0x11/0x20 [ 423.333438] shmem_fault+0x233/0x760 [ 423.337167] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 423.342452] ? find_get_pages_range_tag+0xc40/0xc40 [ 423.347481] ? pmd_val+0x85/0x100 [ 423.350947] ? pmd_val+0x85/0x100 [ 423.354411] __do_fault+0x111/0x480 [ 423.354429] __handle_mm_fault+0x2d78/0x3f80 [ 423.354447] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 423.354476] ? count_memcg_event_mm+0x2b1/0x4d0 [ 423.362489] handle_mm_fault+0x1b5/0x690 [ 423.362512] __do_page_fault+0x62a/0xe90 [ 423.362535] ? vmalloc_fault+0x740/0x740 [ 423.362552] ? trace_hardirqs_off_caller+0x65/0x220 [ 423.362564] ? trace_hardirqs_on_caller+0x6a/0x220 [ 423.362580] ? page_fault+0x8/0x30 [ 423.362602] do_page_fault+0x71/0x57d [ 423.401461] ? page_fault+0x8/0x30 [ 423.405000] page_fault+0x1e/0x30 [ 423.408447] RIP: 0033:0x453fd0 [ 423.411654] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 423.430552] RSP: 002b:00007fd6157797a8 EFLAGS: 00010202 [ 423.435921] RAX: 00007fd615779850 RBX: 0000000000000003 RCX: 000000000000000e [ 423.443185] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fd615779850 [ 423.450457] RBP: 000000000075bf20 R08: 00000000000003ff R09: 0000000000000000 [ 423.457719] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd61577a6d4 21:27:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff00d) listen(0xffffffffffffffff, 0x0) [ 423.464978] R13: 00000000004ca143 R14: 00000000004e1eb0 R15: 00000000ffffffff 21:27:38 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0x1200) 21:27:38 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) r5 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f0000000040)={0x0, @aes128}) r6 = accept4(r1, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r6, r7, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) [ 423.739465] FAULT_FLAG_ALLOW_RETRY missing 70 [ 423.746725] CPU: 1 PID: 13936 Comm: syz-executor.2 Not tainted 4.19.84 #0 [ 423.753707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 423.763248] Call Trace: [ 423.765880] dump_stack+0x197/0x210 [ 423.769532] handle_userfault.cold+0x41/0x5a [ 423.773960] ? _raw_spin_unlock_irq+0x5e/0x90 [ 423.778488] ? userfaultfd_ioctl+0x3a40/0x3a40 [ 423.783088] ? find_get_entry+0x3e8/0x820 [ 423.787248] ? try_to_wake_up+0xcc/0xf50 [ 423.791335] ? filemap_map_pages+0x1130/0x1130 [ 423.795938] ? find_lock_entry+0x1a3/0x510 [ 423.800209] shmem_getpage_gfp+0x2cfa/0x3640 [ 423.804658] ? shmem_add_to_page_cache+0xd30/0xd30 [ 423.809597] ? lock_downgrade+0x880/0x880 [ 423.813754] ? kasan_check_read+0x11/0x20 [ 423.817919] shmem_fault+0x233/0x760 [ 423.821645] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 423.826931] ? find_get_pages_range_tag+0xc40/0xc40 [ 423.831955] ? pmd_val+0x85/0x100 [ 423.835637] ? pmd_val+0x85/0x100 [ 423.839095] __do_fault+0x111/0x480 [ 423.842724] __handle_mm_fault+0x2d78/0x3f80 [ 423.847174] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 423.852050] ? count_memcg_event_mm+0x2b1/0x4d0 [ 423.856805] handle_mm_fault+0x1b5/0x690 [ 423.860878] __do_page_fault+0x62a/0xe90 [ 423.865058] ? vmalloc_fault+0x740/0x740 [ 423.869213] ? trace_hardirqs_off_caller+0x65/0x220 [ 423.874249] ? trace_hardirqs_on_caller+0x6a/0x220 [ 423.879185] ? page_fault+0x8/0x30 [ 423.882733] do_page_fault+0x71/0x57d [ 423.886534] ? page_fault+0x8/0x30 [ 423.890089] page_fault+0x1e/0x30 [ 423.893528] RIP: 0033:0x453fd0 [ 423.896727] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 423.915719] RSP: 002b:00007fd6157797a8 EFLAGS: 00010202 [ 423.921083] RAX: 00007fd615779850 RBX: 0000000000000003 RCX: 000000000000000e [ 423.928345] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fd615779850 21:27:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff00e) listen(0xffffffffffffffff, 0x0) 21:27:39 executing program 5: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x2b1, 0x0) [ 423.935605] RBP: 000000000075bf20 R08: 00000000000003ff R09: 0000000000000000 [ 423.942863] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd61577a6d4 [ 423.950119] R13: 00000000004ca143 R14: 00000000004e1eb0 R15: 00000000ffffffff 21:27:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) 21:27:39 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:39 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) [ 424.105080] selinux_nlmsg_perm: 35 callbacks suppressed [ 424.105096] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pig=13950 comm=syz-executor.5 21:27:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x40, 0x1, 0x0, 0x0, 0x41bf, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x311}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) [ 424.256244] FAULT_FLAG_ALLOW_RETRY missing 70 [ 424.268376] CPU: 0 PID: 13957 Comm: syz-executor.2 Not tainted 4.19.84 #0 [ 424.275384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 424.284760] Call Trace: [ 424.287371] dump_stack+0x197/0x210 [ 424.291036] handle_userfault.cold+0x41/0x5a [ 424.295450] ? _raw_spin_unlock_irq+0x5e/0x90 [ 424.300066] ? userfaultfd_ioctl+0x3a40/0x3a40 [ 424.304681] ? find_get_entry+0x3e8/0x820 [ 424.308850] ? try_to_wake_up+0xcc/0xf50 [ 424.312933] ? filemap_map_pages+0x1130/0x1130 [ 424.317545] ? find_lock_entry+0x1a3/0x510 [ 424.321817] shmem_getpage_gfp+0x2cfa/0x3640 [ 424.326442] ? shmem_add_to_page_cache+0xd30/0xd30 [ 424.331388] ? lock_downgrade+0x880/0x880 [ 424.331409] ? kasan_check_read+0x11/0x20 [ 424.331428] shmem_fault+0x233/0x760 [ 424.331450] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 424.339749] ? find_get_pages_range_tag+0xc40/0xc40 21:27:39 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x80000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e20, @loopback}}, 0x7, 0x5, 0x1ff, 0x5, 0x10000}, &(0x7f0000000300)=0x98) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r7, r8, 0x0, 0x1000007ffff000) getsockopt$inet_sctp_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000340)=@assoc_id=0x0, &(0x7f0000000380)=0x4) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000480)={r5, 0x1000, 0x1, 0x3ff, 0x23, 0x0, 0x6, 0x336, {r9, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x26}}}, 0x6, 0x833, 0x0, 0x8, 0x2}}, &(0x7f00000003c0)=0xb0) ioctl$VIDIOC_G_FBUF(r3, 0x8030560a, &(0x7f0000000040)={0xd0, 0x8, &(0x7f0000000140)="6b822eabf2741550896f30436e655e7c8d024e4384a928b3476922140bf9ded8d62408c69bcb2243d303f104fd8dcc838c03032ac80bf6d1288a4398001643e3629b1519a52cdfe1bd07d210470c93b090c793a4d278ef7b711743e564dbc15bc7858dc09cbb5ca412b90ad1e9cb2a832bb0b4981caebf5eb136634ac42aa58a472a147ce52b340494548f73f59eafdb0f9d4769e9693b18917f8aab44c338909c5e74fcd9356b97f114d8dcc26654b635b7b885a0e03f1c35fe1dfc4e1072d9071d32df57eae2283bb2e83f8e12c1", {0x1, 0x5, 0x34343459, 0x6, 0x239a, 0x1, 0x4, 0x8c}}) listen(0xffffffffffffffff, 0x0) accept4$llc(r3, 0x0, &(0x7f0000000400), 0x400) [ 424.339766] ? pmd_val+0x85/0x100 [ 424.339782] ? pmd_val+0x85/0x100 [ 424.339800] __do_fault+0x111/0x480 [ 424.364384] __handle_mm_fault+0x2d78/0x3f80 [ 424.368819] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 424.374685] ? count_memcg_event_mm+0x2b1/0x4d0 [ 424.379381] handle_mm_fault+0x1b5/0x690 [ 424.383469] __do_page_fault+0x62a/0xe90 [ 424.387543] ? vmalloc_fault+0x740/0x740 [ 424.391605] ? trace_hardirqs_off_caller+0x65/0x220 [ 424.396640] ? trace_hardirqs_on_caller+0x6a/0x220 [ 424.401572] ? page_fault+0x8/0x30 [ 424.405128] do_page_fault+0x71/0x57d [ 424.408949] ? page_fault+0x8/0x30 [ 424.412587] page_fault+0x1e/0x30 [ 424.416184] RIP: 0033:0x453fd0 [ 424.419403] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 424.438327] RSP: 002b:00007fd6157797a8 EFLAGS: 00010202 [ 424.443807] RAX: 00007fd615779850 RBX: 0000000000000003 RCX: 000000000000000e 21:27:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff00f) listen(0xffffffffffffffff, 0x0) [ 424.451112] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fd615779850 [ 424.458426] RBP: 000000000075bf20 R08: 00000000000003ff R09: 0000000000000000 [ 424.465718] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd61577a6d4 [ 424.473012] R13: 00000000004ca143 R14: 00000000004e1eb0 R15: 00000000ffffffff 21:27:39 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0x1300) 21:27:39 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:39 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000140)=0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='hash\x00') r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r6, r7, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff010) listen(0xffffffffffffffff, 0x0) 21:27:40 executing program 5: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x2b1, 0x0) 21:27:40 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:40 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff048) listen(0xffffffffffffffff, 0x0) 21:27:40 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket(0x2000000000000021, 0x0, 0x10000000000002) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "98cd2741ed306bf3", "22f4509f68f89df8678538d7a1973a87c37d7569409b402071584ea9379f95f0", "59719a92", "86ab9b376fd09e3d"}, 0x38) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x20) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000011c0)={r3, 0x9878, 0x400}, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={r3, 0x1}, 0x8) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r4 = accept4(r1, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r4, r5, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) [ 424.990340] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pig=14012 comm=syz-executor.5 [ 425.028201] FAULT_FLAG_ALLOW_RETRY missing 70 [ 425.075920] CPU: 1 PID: 14010 Comm: syz-executor.2 Not tainted 4.19.84 #0 [ 425.082909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 425.092369] Call Trace: [ 425.094980] dump_stack+0x197/0x210 [ 425.098649] handle_userfault.cold+0x41/0x5a [ 425.103074] ? _raw_spin_unlock_irq+0x5e/0x90 [ 425.107600] ? userfaultfd_ioctl+0x3a40/0x3a40 [ 425.112196] ? find_get_entry+0x3e8/0x820 [ 425.116357] ? try_to_wake_up+0xcc/0xf50 [ 425.116375] ? filemap_map_pages+0x1130/0x1130 [ 425.116401] ? find_lock_entry+0x1a3/0x510 [ 425.116422] shmem_getpage_gfp+0x2cfa/0x3640 [ 425.116449] ? shmem_add_to_page_cache+0xd30/0xd30 [ 425.125069] ? lock_downgrade+0x880/0x880 [ 425.125087] ? kasan_check_read+0x11/0x20 [ 425.125103] shmem_fault+0x233/0x760 [ 425.125123] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 425.156484] ? find_get_pages_range_tag+0xc40/0xc40 [ 425.161519] ? pmd_val+0x85/0x100 [ 425.164996] ? pmd_val+0x85/0x100 [ 425.168471] __do_fault+0x111/0x480 21:27:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff04c) listen(0xffffffffffffffff, 0x0) [ 425.172118] __handle_mm_fault+0x2d78/0x3f80 [ 425.177331] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 425.182221] ? count_memcg_event_mm+0x2b1/0x4d0 [ 425.186920] handle_mm_fault+0x1b5/0x690 [ 425.191008] __do_page_fault+0x62a/0xe90 [ 425.195091] ? vmalloc_fault+0x740/0x740 [ 425.199170] ? trace_hardirqs_off_caller+0x65/0x220 [ 425.204204] ? trace_hardirqs_on_caller+0x6a/0x220 [ 425.209144] ? page_fault+0x8/0x30 [ 425.209168] do_page_fault+0x71/0x57d [ 425.209182] ? page_fault+0x8/0x30 [ 425.209199] page_fault+0x1e/0x30 [ 425.209211] RIP: 0033:0x453fd0 [ 425.209228] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 425.216546] RSP: 002b:00007fd6157797a8 EFLAGS: 00010202 [ 425.216561] RAX: 00007fd615779850 RBX: 0000000000000003 RCX: 000000000000000e [ 425.216570] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fd615779850 [ 425.216579] RBP: 000000000075bf20 R08: 00000000000003ff R09: 0000000000000000 [ 425.216588] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd61577a6d4 [ 425.216597] R13: 00000000004ca143 R14: 00000000004e1eb0 R15: 00000000ffffffff 21:27:40 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0x1400) 21:27:40 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r5, r6, 0x0, 0x1000007ffff000) accept$netrom(r5, &(0x7f0000000040)={{0x3, @default}, [@netrom, @default, @bcast, @default, @rose, @netrom, @netrom, @default]}, &(0x7f0000000140)=0x48) sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:40 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:41 executing program 5: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x2b1, 0x0) 21:27:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff068) listen(0xffffffffffffffff, 0x0) 21:27:41 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:41 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:41 executing program 3: clock_gettime(0x0, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r5, r6, 0x0, 0x1000007ffff000) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x10) listen(0xffffffffffffffff, 0x0) 21:27:41 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:41 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff06c) listen(0xffffffffffffffff, 0x0) [ 425.829237] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pig=14060 comm=syz-executor.5 21:27:41 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0x1500) 21:27:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) syz_mount_image$ceph(&(0x7f0000000040)='ceph\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000140)="30db1c2574118b78a51109380c92ba9f3d176f1d2a214f9b1b43949c708217827e0744d6d44bb7a87cbc1d47a53521097eb3a4fbc898db85aadd73e106e852a83a543063c391813e6b433b0570d28805eb9144fdd4290534e20f785aef", 0x5d}, {&(0x7f00000001c0)="5de5b532807a735b55e51c203912dd82616ff13ac992fce42cb19261cd21fa061b0092f930f3bf6f834bef2aa658aa95c452bbe410c86b371929e59168218e5414776ae7625b2ea00347eb4a5191ebacbb18a1bc968c98c7d0d3e276c7c1eea7c1e63dbd4042bedb813a14eee8c041c859a8b647e8e14541792280371ec60be129d8f5bb5f21efb7a4b2432f429f8b89119a5220ec7905ec95f6efe64ea81028a25224304578db3f027e02a55df2c34ddc4a56d4eb4d118a7a758bb4d7ead904c5e3e09242207f4ef75cab374847c54fdc728e9ecba9a6dc28dffce5659e4d20e24404254416df89e2", 0xe9, 0xe3}, {&(0x7f00000002c0), 0x0, 0x8001}], 0x4, &(0x7f0000000380)='\x00') r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r4, 0xc0605345, &(0x7f00000003c0)={0x81, 0x2, {0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x3}}) 21:27:41 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:41 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) [ 426.366198] ceph: device name is missing path (no : separator in /dev/loop3) [ 426.425559] ceph: device name is missing path (no : separator in /dev/loop3) 21:27:41 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff074) listen(0xffffffffffffffff, 0x0) 21:27:41 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:41 executing program 5: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x2b1, 0x0) 21:27:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r5, r6, 0x0, 0x1000007ffff000) write$P9_RMKDIR(r6, &(0x7f0000000040)={0x14, 0x49, 0x1, {0x10, 0x0, 0x7}}, 0x14) 21:27:42 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x10, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:42 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:42 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:42 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0x3000) 21:27:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff07a) listen(0xffffffffffffffff, 0x0) 21:27:42 executing program 3: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setlease(r0, 0x400, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, r0, 0x0) r1 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = getpid() rt_tgsigqueueinfo(r6, r6, 0x16, &(0x7f0000000100)={0x0, 0x6}) ptrace$setopts(0x4206, r6, 0x1, 0x100050) bind$alg(r5, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r7 = accept4(r5, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r7, r8, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:42 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:42 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:42 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:42 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:42 executing program 5: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x2b1, 0x0) 21:27:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x63f2653749662b87, 0x70, 0x0, 0x0, 0x0, 0x85, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x80000001}, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xa1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x1, 0x0, {0x20}}, 0x18) pipe(&(0x7f0000000200)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0xfffffcf4) r5 = accept4(r1, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net\x9c\xe5;\x966_route\x00') sendfile(r5, r6, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) r7 = getpid() rt_tgsigqueueinfo(r7, r7, 0x16, &(0x7f0000000100)={0x0, 0x6}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r9 = socket(0x2000000000000021, 0x0, 0x10000000000002) setsockopt$inet6_tcp_TLS_TX(r9, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "98cd2741ed306bf3", "22f4509f68f89df8678538d7a1973a87c37d7569409b402071584ea9379f95f0", "59719a92", "86ab9b376fd09e3d"}, 0x38) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/264, @ANYRES32=0x0], &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10}, 0x20) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f00000011c0)={r10, 0x9878, 0x400}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000480)=ANY=[@ANYRES32=r10, @ANYBLOB="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"], &(0x7f0000000240)=0x1008) accept4(r8, 0x0, 0x0, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000140)=0xc) r12 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setlease(r12, 0x400, 0x3) r13 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/relabel\x00', 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(r7, r11, 0x7, r12, &(0x7f00000001c0)={r0, r13, 0x2d}) 21:27:42 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:42 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff0df) listen(0xffffffffffffffff, 0x0) 21:27:43 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0x3f00) 21:27:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:43 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) r5 = accept4(r3, &(0x7f0000000180)=@ax25={{0x3, @null}, [@netrom, @null, @remote, @netrom, @rose, @rose, @null]}, &(0x7f0000000200)=0x80, 0x80000) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000240)="a106765f51aeea637679f310ecba871a404bfcb80f25794b753a0cfb878f246ea9f15e083dad68bb2a1799b8833251a18f6ce56618aa8e2db94950cc071be87155549924951b1648097b1d1807ed6ed7b0b70d889055bd159cb30533634fa867819ede1867aa801ea8f7c9551d73aac5b4b04496c246c660298d3b519d335ad3e0433e934c22208983d27287488a9934d5d292972e7ce4e8428eef73aa21f930448c096805581fc3010551edc7e5644d75ad08db04aa6f574b1c0eb99bf17b9e34c22d766694616ee7835e7a92eb96ec595185c2845b4ba3ad4efacf15d297a1721e31b402835f2f744827bc", 0xec) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r6, 0x0, 0x1000007ffff000) socket$inet6_udplite(0xa, 0x2, 0x88) r7 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x783a, 0x8000) ioctl$DRM_IOCTL_GET_UNIQUE(r7, 0xc0106401, &(0x7f0000000140)={0x29, &(0x7f0000000080)=""/41}) listen(0xffffffffffffffff, 0x0) 21:27:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x80000, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) r3 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x3, 0x1000) r4 = socket$isdn(0x22, 0x3, 0x22) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r4) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_DMA(r3, 0xc0406429, &(0x7f0000000380)={r5, 0x8, &(0x7f00000001c0)=[0x118e, 0x2, 0x9b, 0x3, 0x7f, 0x4, 0x8, 0x6], &(0x7f0000000200)=[0x5, 0xfffffff8, 0x7, 0x4, 0x2, 0x91f2, 0x4, 0x5], 0x10, 0x3, 0x1, &(0x7f0000000300)=[0x1, 0x1822, 0x3], &(0x7f0000000340)=[0xffffffc1, 0x7]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000000080)={r5, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r7, r8, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:43 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:43 executing program 5: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x2b1, 0x0) 21:27:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x2, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000080)={0x2}) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r4 = accept4(r1, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r4, r5, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(digest_null,xts-camellia-asm)\x00'}, 0xfffffffffffffd7a) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r4, r5, 0x0, 0x1000007ffff000) accept$alg(r5, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:43 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:44 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0x4000) 21:27:44 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:44 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:44 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r4, r5, 0x0, 0x1000007ffff000) sendfile(r2, r0, 0x0, 0x400) sendfile(0xffffffffffffffff, r5, &(0x7f0000000040)=0x200, 0x5) listen(0xffffffffffffffff, 0x0) 21:27:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r5, r6, 0x0, 0x1000007ffff000) bind$tipc(r5, &(0x7f0000000140)=@id={0x1e, 0x3, 0x0, {0x4e24}}, 0x10) sendfile(r2, r3, 0x0, 0x1000007ffff000) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x1e) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r8, r9, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:44 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:44 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r2 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r2, 0x14) 21:27:44 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r0 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x2b1, 0x0) 21:27:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000140)={0x1f, &(0x7f0000000080)="b45518becee2594ba83bf06d320078a9481da92ae9"}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) delete_module(&(0x7f0000000040)='vboxnet1\x00', 0x200) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='autog\x01oup\x04') sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:44 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, 0x0) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x8) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setlease(r3, 0x400, 0x3) r4 = gettid() r5 = gettid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r5, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r6}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, r6}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r3, 0x0, 0x11, &(0x7f0000000200)='&}mime_type*ppp0\x00', r6}, 0x30) process_vm_readv(r7, &(0x7f0000001580)=[{&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/144, 0x90}, {&(0x7f0000000400)=""/107, 0x6b}, {&(0x7f0000000480)=""/219, 0xdb}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x5, &(0x7f0000002840)=[{&(0x7f0000001600)=""/198, 0xc6}, {&(0x7f0000001700)=""/15, 0xf}, {&(0x7f0000001740)=""/175, 0xaf}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/20, 0x14}], 0x5, 0x0) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000140)=0x4) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r8, 0x0, 0x1000007ffff000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PPPIOCSMAXCID(r8, 0x40047451, &(0x7f00000001c0)) listen(0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000180)={0x1, 0x0, {0x20, 0x0, 0x3, 0x6}}) 21:27:44 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r2 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r2, 0x14) 21:27:45 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0x5902) 21:27:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, 0x0) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:45 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r0 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x2b1, 0x0) 21:27:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) ioctl$SIOCRSGL2CALL(r4, 0x89e5, &(0x7f0000000040)=@rose) r5 = accept4(r1, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r5, r6, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) shutdown(r0, 0x827cade3051c2281) 21:27:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r3, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x0) 21:27:45 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r2 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r2, 0x14) 21:27:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, 0x0) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:45 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r0 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x2b1, 0x0) 21:27:45 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r2 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r2, 0x14) 21:27:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0xffffffffffffff09, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) uselib(&(0x7f0000000040)='./file0\x00') r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x0) 21:27:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000180)=""/249) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) accept4(r5, 0x0, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) listen(r6, 0xff) r7 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x1, 0xa0c00) ioctl$BLKPBSZGET(r7, 0x127b, &(0x7f0000000080)) 21:27:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:46 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0x6000) 21:27:46 executing program 5: pipe(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r0 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x2b1, 0x0) 21:27:46 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) getsockname$netrom(r3, &(0x7f0000000040)={{0x3, @rose}, [@null, @remote, @null, @default, @null, @rose, @null, @default]}, &(0x7f0000000140)=0x48) 21:27:46 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r2 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r2, 0x14) 21:27:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kexec_load(0x2, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="9e329b1757c8863a6d2158c0730cd466b2320b669928a58f191fa380984e088ff20e26cfa706647f49d531bca7b134690ad592bc5f00041ca7ed37264770ab97a737120e4e602e60ff6c4b81589e710d39a95a0ee3b92f791ee21bfb8ebe0b618a1af544ba4eeb95a5f18e41a5d215f8333fe6c0dea1de9367c34b8de7c85af6b8668c1b990d6594b49489a658b344ff6290e867ea5b9b73dc0d146727c07979fbb23e00a5ad0424be124d2d53c26c75", 0xb0, 0x0, 0x6}], 0x80000) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000280)={{0x0, 0x1, 0x400, 0x3, 0x7}, 0x0, 0x4, 0xe749}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x3a) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r4, r5, 0x0, 0x1000007ffff000) ioctl$VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000200)={0x2, 0x7, 0x4, 0x100, {}, {0x5, 0x2, 0x0, 0xc1, 0x2, 0x1, "0f363ef3"}, 0xff, 0x2, @userptr=0x7fffffff, 0x4}) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x8, 'syz1\x00', 0x1}) 21:27:46 executing program 5: pipe(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r0 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x2b1, 0x0) 21:27:46 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) r5 = accept4(r1, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r5, r6, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x20000) listen(0xffffffffffffffff, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r8, r9, 0x0, 0x1000007ffff000) ioctl$KDDELIO(r9, 0x4b35, 0xa4) 21:27:46 executing program 5: pipe(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r0 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x2b1, 0x0) 21:27:46 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r2 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r2, 0x14) 21:27:46 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:46 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0x7b01) 21:27:46 executing program 5: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x2b1, 0x0) 21:27:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x0) 21:27:46 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r2 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r2, 0x14) 21:27:46 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x80, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x7) r3 = accept4(r1, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:47 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:47 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:47 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r2 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r2, 0x14) 21:27:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) r4 = socket$inet_udplite(0x2, 0x2, 0x88) clock_gettime(0x0, &(0x7f00000051c0)={0x0, 0x0}) recvmmsg(r4, &(0x7f0000004f40)=[{{&(0x7f0000000040)=@caif=@util, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)=""/232, 0xe8}, {&(0x7f0000000240)=""/69, 0x45}, {&(0x7f00000002c0)=""/86, 0x56}, {&(0x7f0000000340)=""/159, 0x9f}, {&(0x7f0000000400)=""/29, 0x1d}, {&(0x7f0000000480)=""/146, 0x92}, {&(0x7f0000000540)=""/1, 0x1}], 0x7, &(0x7f0000000600)=""/175, 0xaf}, 0xfffffff7}, {{&(0x7f00000006c0)=@xdp, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/103, 0x67}], 0x2}, 0x8000}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000001800)=""/146, 0x92}], 0x1}, 0x3}, {{&(0x7f0000001900)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001980)=""/29, 0x1d}], 0x1, &(0x7f0000001a00)=""/31, 0x1f}, 0x2}, {{&(0x7f0000001a40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001ac0)=""/246, 0xf6}, {&(0x7f0000001bc0)=""/247, 0xf7}], 0x2, &(0x7f0000001d00)=""/206, 0xce}, 0x1}, {{&(0x7f0000001e00)=@alg, 0x80, &(0x7f00000030c0)=[{&(0x7f0000001e80)=""/120, 0x78}, {&(0x7f0000001f00)=""/58, 0x3a}, {&(0x7f0000001f40)=""/182, 0xb6}, {&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000003000)=""/175, 0xaf}], 0x5, &(0x7f0000003140)=""/143, 0x8f}, 0x8000}, {{&(0x7f0000003200)=@caif, 0x80, &(0x7f0000004680)=[{&(0x7f0000003280)=""/33, 0x21}, {&(0x7f00000032c0)=""/127, 0x7f}, {&(0x7f0000003340)=""/198, 0xc6}, {&(0x7f0000003440)=""/29, 0x1d}, {&(0x7f0000003480)=""/4096, 0x1000}, {&(0x7f0000004480)=""/122, 0x7a}, {&(0x7f0000004500)=""/203, 0xcb}, {&(0x7f0000004600)=""/78, 0x4e}], 0x8, &(0x7f0000004700)=""/85, 0x55}, 0xffff0000}, {{&(0x7f0000004780)=@nl, 0x80, &(0x7f0000004840)=[{&(0x7f0000004800)=""/34, 0x22}], 0x1, &(0x7f0000004880)=""/249, 0xf9}, 0x8}, {{&(0x7f0000004980)=@x25={0x9, @remote}, 0x80, &(0x7f0000004b80)=[{&(0x7f0000004a00)=""/111, 0x6f}, {&(0x7f0000004a80)=""/187, 0xbb}, {&(0x7f0000004b40)}], 0x3, &(0x7f0000004bc0)=""/41, 0x29}, 0x5c}, {{&(0x7f0000004c00)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000004e00)=[{&(0x7f0000004c80)=""/87, 0x57}, {&(0x7f0000004d00)=""/193, 0xc1}], 0x2, &(0x7f0000004e40)=""/241, 0xf1}}], 0xa, 0x4100, &(0x7f0000005200)={r5, r6+30000000}) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:47 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x400000, 0x0) flistxattr(r0, &(0x7f0000000140)=""/130, 0x82) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r4, 0xc0bc5310, &(0x7f0000000200)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'ip6_vti0\x00', 0x1}, 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r6, r7, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x0) 21:27:47 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r2 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r2, 0x14) 21:27:47 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0xbc00) 21:27:47 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x100, 0x101000) splice(r4, &(0x7f0000000140)=0x8001, r5, &(0x7f00000001c0)=0x3f, 0x1, 0x4) sendfile(r2, r3, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x0) 21:27:47 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:47 executing program 5: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x2b1, 0x0) 21:27:47 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:48 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x0) 21:27:48 executing program 3: r0 = syz_open_dev$admmidi(0x0, 0x9, 0x4a0040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r4, r5, 0x0, 0x1000007ffff000) bind$alg(r5, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r6 = accept4(r2, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r6, r7, 0x0, 0x1000007ffff000) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x100000003) r8 = accept4(r1, 0x0, 0x0, 0x0) r9 = getpid() r10 = getpid() rt_tgsigqueueinfo(r10, r10, 0x16, &(0x7f0000000100)={0x0, 0x6}) getpgid(r10) rt_tgsigqueueinfo(r9, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x25, 0x40000006, 0xee7}) r11 = syz_open_procfs(r9, &(0x7f0000000040)='coredump_filter\x00') sendfile(r8, r11, 0x0, 0x1000007fffeffe) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$mouse(0x0, 0x1b, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:48 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:48 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) vmsplice(r2, &(0x7f0000000600)=[{&(0x7f0000000040)="f8e37013be1163abda723bb52a19f2d6e38bf78d1618459049752e52459e5956e708ae0a5da807ea58b6a3d4afdbac6a546eea9582f1e6fa0d16fa87adcd8320dd5c3ae5904f02d5865e40a531335be16de92a49d23edc3463bdd9448c4575b2c0fd01070ba28dc9d21ef6f024e7571f9757a1cc7be968c1ef31", 0x7a}, {&(0x7f0000000140)="6a8088e7a6f5563af1137a81d2d2062cedd0e81d72936565ff029c0db61237a8696a301c5094199ee057de5d8bc2dff3989a928793375a90d43019c561d76c3f1633be6d00ba4eea7028e9d176ed8567ac9ae2cb6e5ee8a84267fffa2153ce0850ed9a9e38fb53e378de560caa57e4c832", 0x71}, {&(0x7f00000001c0)="39b6c4ed0fa3792a6440e5bf77b44529770d06ea2627304ce8f922a46a0718946086ee409538dfe901a5aa59bec3255da6ed73830ae09ad92f2ea81a2bcafa6ca612070d556b0122af91f25b3da59f698801b061023dbd8a7f8c6e9f90e44e8de521201982103ad4268c3e0e6c45a971b64cc5c372e6d594c0381a06baf21e00bc351f09b41567cf61499cff5321d66dd37682e6b3a75c97d964c43658bf44f08485e2dcd77e218f7ed19ded8d967e54276675a58df0c15070bfa572f2431b5794a85153cf965856057986d31c49a00af44da91fd64663cbf38f567bbb88d8b72a324eb1efff707ab557627e5051948cc6", 0xf1}, {&(0x7f00000002c0)="2e6e11e9161612e348baecfa5e25fe8b4b256596076fd7c02f32bb492f2d22f93930c53b47ae8dfd15b1c4064dc54f79", 0x30}, {&(0x7f0000000300)="96c0218663d026d3b949c3a97819309fdbcb77e6", 0x14}, {&(0x7f0000000340)}, {&(0x7f0000000380)="c6cc76baa0da3ff63dad128af548aed0fb80988fd41c4f69fd59caf59a53ae205d262e50b7deac1feea8e8150adc31fef9e0327d2debac10dcb75800432935694363dd0903304bc2127db85f11da27afc693c8109e6d1e7336f978abbe76455868f874cdaeb57392611292b9789ca02b6a1632deac057fcf2403d1486f04687f7139b482c1547f29b54bebe7a50418589bb4f3e19868764df59d6d2b3ce0f8abc1c993879735958ca800c0fb446f7eac806d3fc56981434cbb834f4e39", 0x2ae}, {&(0x7f0000000480)="2bf82533ca7cc8fc4ebf7c4e78d63d8e78c4dee32a82f158e663705bc1ba4f", 0x1f}, {&(0x7f00000004c0)="f62953f52712b3eda430d41fc5c09bb0c0a1d1c98b84468933fdb2f24118316cebe0182ac12e9a7f36bb180fceee11a9455411ad8497da06e07d8ee6826494e8903c08fe80904fbcd07f3bc4cbbc26474d568003c6a6429213f02d9e3db8ec3a756b5c17ec52ba35761b25a0cf23ddc66dbea4dd5f796b2d5c877b5a8139b7d4e83312c01db06592361d4b27fe4608d8fab28a3834ff0000a276070681c24b84994319812b0b0e326f16f1e1bab44535ac9a585614b744bb06dde8a5c14e", 0xbe}, {&(0x7f0000000580)="084968cac0e9f5f18f01aab46e2ea77c3be42e0ef951df597f3f34f4048f5c44bde6f9ff15eaa811e6cc8d966c95d18515f51bec88a1c0b1c069cf6be6e0cc93753b81886adfba80b9fbccaf9c2aa8943c8d1ee9b6682ea92c098b49f70e4d9fbf124b7ee2e6c4da", 0x68}], 0xa, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r5, r6, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:48 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(0xffffffffffffffff, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x0) 21:27:48 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0xdf00) 21:27:48 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vcs\x00', 0x40000, 0x0) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000017c0)={&(0x7f0000000400)='./file0\x00', 0x0, 0x8}, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r8, r9, 0x0, 0x1000007ffff000) r10 = socket$inet_dccp(0x2, 0x6, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r12 = accept4(r11, 0x0, 0x0, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r12, r13, 0x0, 0x1000007ffff000) r14 = socket$alg(0x26, 0x5, 0x0) bind$alg(r14, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) accept4(r14, 0x0, 0x0, 0x0) r15 = socket$alg(0x26, 0x5, 0x0) bind$alg(r15, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) accept4(r15, 0x0, 0x0, 0x0) r16 = openat$cgroup(r4, &(0x7f0000001800)='syz0\x00', 0x200002, 0x0) r17 = socket$alg(0x26, 0x5, 0x0) bind$alg(r17, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r18 = accept4(r17, 0x0, 0x0, 0x0) r19 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r18, r19, 0x0, 0x1000007ffff000) r20 = socket$alg(0x26, 0x5, 0x0) bind$alg(r20, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) accept4(r20, 0x0, 0x0, 0x0) r21 = socket$alg(0x26, 0x5, 0x0) bind$alg(r21, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r22 = accept4(r21, 0x0, 0x0, 0x0) r23 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r22, r23, 0x0, 0x1000007ffff000) r24 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setlease(r24, 0x400, 0x3) r25 = socket$alg(0x26, 0x5, 0x0) bind$alg(r25, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) accept4(r25, 0x0, 0x0, 0x0) r26 = socket$alg(0x26, 0x5, 0x0) bind$alg(r26, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) accept4(r26, 0x0, 0x0, 0x0) r27 = socket$alg(0x26, 0x5, 0x0) bind$alg(r27, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r28 = accept4(r27, 0x0, 0x0, 0x0) r29 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r28, r29, 0x0, 0x1000007ffff000) r30 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setlease(r30, 0x400, 0x3) r31 = socket$alg(0x26, 0x5, 0x0) bind$alg(r31, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) accept4(r31, 0x0, 0x0, 0x0) r32 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setlease(r32, 0x400, 0x3) r33 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000002080)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x0) r34 = socket$alg(0x26, 0x5, 0x0) bind$alg(r34, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r35 = accept4(r34, 0x0, 0x0, 0x0) r36 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r35, r36, 0x0, 0x1000007ffff000) r37 = socket$alg(0x26, 0x5, 0x0) bind$alg(r37, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) accept4(r37, 0x0, 0x0, 0x0) r38 = getpid() rt_tgsigqueueinfo(r38, r38, 0x16, &(0x7f0000000100)={0x0, 0x6}) r39 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r39, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r40) r41 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r41, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) syz_mount_image$hfs(&(0x7f0000001640)='hfs\x00', &(0x7f0000001680)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001f40)={[{@gid={'gid', 0x3d, r42}}]}) r43 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r43, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) syz_mount_image$hfs(&(0x7f0000001640)='hfs\x00', &(0x7f0000001680)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001f40)={[{@gid={'gid', 0x3d, r44}}]}) r45 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r45, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) syz_mount_image$hfs(&(0x7f0000001640)='hfs\x00', &(0x7f0000001680)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001f40)={[{@gid={'gid', 0x3d, r46}}]}) getgroups(0x5, &(0x7f00000020c0)=[r42, 0xee00, 0xffffffffffffffff, r44, r46]) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000021c0)=[{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001700)=[{&(0x7f0000000140)="e2633888b3e7b1195e95ef54810e98e3d39d277db89dcb084e7cba4f64bd4f612a1a0a3087d071fa485b6d371ab290375823a8e915ac53", 0x37}, {&(0x7f0000000180)="a27e01c62ec59107c36633b33f264bfd17233eb0caa4192735fd1b17b82d5587e140b5077667db00ba62a0af0546021c66a3742bf057c06f0ce398d11cdf5f5f1bc23bf0c366c92418bbf181ea340c08a64954476a7444a1d38ca857c48127069ad4ad2cddb2ce7e084ce5bc9af4787065be2f2b7222ab92b72929", 0x7b}, {&(0x7f0000000200)="37ca644e13094055983966361213f3985ee4cc639565d6bafd9097bdcc40c6e5a1e6b8cc8120edab009b57dff7f7cc88589f6e7db874b62956f91cc27da6a20801ad40cc41000df69b0a7260a3152b04ff196d4c456cd1cc657de36f43ccf78007703f34a893bb1d7baea407fb46844d6de3654a8b6cbbd0f279d6daafc3943cb66ea3ba8d9ab557", 0x88}, {&(0x7f0000000480)="bbd9434b90f1f2b517e95ddd1b184c3c398159530f4a29c485e1e28d2a1d8454dd80769539670c5cca73c7c893184193f180ebd7048d0be66155ff632557c170ae5aa0d89ea2abe3b4055472ee72d75788d2e363a5e9523d52e4ac9e7e2c895dd96aaffd85d09fab03ddf694a773b873f9dbe7664e62a618e2f91359811cfc7110a96922918cc727a90cfa02406a83e2781ddea08905f4b652798a80c3439f50497d350f31cc81b34c41bda17515df55d899f3c47b24834702ba46939fe0be27c6ef8631eb0010fadf8b544c8bd881ce4ce43554e4d93d7b08a7386d12a4a6fbaa5febde6674f50e359f633a7012ea4ada1a341d9afdf471870a8db001ff10c6a85df204a6cdc20ed1fff8b17a400b4018f59c2a3392535709bdf595c07f51d5f0213372b2a4397d46947ac660c745020c7b4b7fe3b6215cc087c329f3ad22711ac2f1e51f5ffb420113e537bc48ffaa865baddade194429e47b341a04f6353d8a3b1209afa301757b02ae50b7a5618679f123dc530db1e0600b535e70a82d1a13a8e12d696bc8498c0dea6b1af128e00ae2c54881f0a8896399cf60cb64833fd3fa0813ad91ab3d0a9ae3ffc565162bf9a042b73738665660781f6f70f41d2b3a9433e73cec8a41762d2c683e3298e851b48b0e69b6655f0ee8cca9e4c53fb8e05fd8ceb3c8a5a1106e7df26ba23c64c7ea26d1804d2cc18f558d0e3a0b6aca41d2e6bd75396b712afcc0b707fa1cd2434efffb06530d8e50d20dee4c84b26be42d21a12a4c00a09d758fc1fb3d62c019bc18b37a23e46e26d95098410f6b4cfd53ff99ecc71b6ce82d42941b6d83fd20de562e9c8d03b5d09bc93d1557feba84c9a63eccd1ce5b1342584f3351336ebfe38f2154d86787565e8fd86e3bfa3f06ef865c4460697b5428d4e677b13b1e9aff7fe5bb7452299f8c7110c2dc61d73aabbb63ea2dd35d8fb80cbdd2a3bc0c11b65dadfcffcffe21b738622b4ec2f096a89ec787d7e46a33570dc7e32867170721fb8249e3046c3b8a87ad853ba3a991bad61c9b31dd0e6b08eb0c1468a7b7d6bf0061d4a77ff81b9bee40350af385e1fcfa589d020078034df703241a604263349662e2f9806e2c708f6097c521e3c1c980ebfb174eed19a41e99c7ce53ff501a82057a68c70847d5e3a166a2380d20059b7f286f32190e8913c0aa2c59456632709997e039a27676de43932b332c5a13e2fdfc5e9cd5b5c94c437d209716b020f4d9d01f28d81908d719ce8426248ff25642c68d56ad1bd124f0a0b33d07ba526e6a1366bd2a031751c793992356e18ce59f45b6b7533d84c32d59c187e832e8859a7c2f57b7d8c3d210b407e0464823c00d51fe754a00d008f0088dd43be1b985f2d539b7447687b57d6f11437bc0e94f64ed122d917a25f5a19fae1bae8b5603580c43ba40a73a68b77198a77bb1ded2aef37fe58993ff9ab4a54c36ec2623b33191045860f122bc67f742469bd6961bd34f6c3af79b58d9ce9230ad72974dd8eaa160765cd6e64e035e0787335f28e836ce2009d876c5c84e44a206fff746d61ccc5431c26f9c974ecc14f69a174df0e6d20352639e372de53eb0fe767b5a0ee95009ececa7c2b899c8308b7b44d1c21e26d0bfc64da8cad256314440e1a8a6d066aafc7c866c6a66000c003b5bbaec5b312ed2a55745ab6c341796433437bb812d486c87ee06c2d984577c0bb2d926526b4b8b6bfa31130561e876a02ad84514e5b885cba890a8762b03cddb2b6816c9523fb50b6c4a6d2d2fab30de7b3fcf0bd83f3bcc1deb35b87d0085555947baee85e0a14af8b4f83a5a2da5b8310f8ccfaec37e0741cc61c602683dcc95c4eb3b08756f8cb8ffe9a0905f594ebcd21864b653d9758222065e0936d93e2d6e6a731b7f6ee264c1f3636b06be5df35f8abcdd4d1825736506fe583727e8fcf29f741ecccd340f66a0bc682c575aceaeb0d2df53717ed32e98c5aa5f93c040fb4509009ff70691c55b80671b2fdc95c7d63c86edd9079c304a30748e3e65457d27ce3f98c40b059a2d14925952676ecb54843c6ad1491b35893f976743f1561735b7e0c91d21513b4a40f91c6e2c2ca6b3f7719423a573d14ae28a880c0692801b0ba23c66a19dcd81492a690b882d9ad229300f69b823bd1101c65202116b61df15c190927951e1198f7a05e9b83edee1361ddd98790dcbc4ad423b74eedcf11cddcd230d7fd749bc6a54d7a41f851ab7c174c0b9e5136e7c59b1d4da19370b360676e4e4539b78c4a50d24e4659530c777b7d6c0161ccd7964fb1281703cc50d7e3cc3d7ac240d19ac4b8f244e0baf233078762dbf56ccce97feafc72df1ea81ff3e1a4b0dd7acfc2bf658d22b0d19e6e76977fbcdecdfc9b987ef4f8e047efda45d90c550cc647e8ed27b8e36ac1b99f423705b33a79de9f92989f46ab45eb227878fcd7081491ac7f096debf4b640086c1ccb6c5e309d512708598b3fdeec5d9c8315a714e3ea4a113cfc8edaf385181b69eb8ed0d073381552ba466421af6035802b5c0fece2a46185d96374927e20c5e2e17818013ba9ee7f6109b9264304c82a84892ab20d12695b9db9fc62206029653efb60f7fc0e76d21b2cf879ce4090029cb2630809bac04e1b2555907170f45b2b1023fd13042a6927a3dac4f1e4d575820b9ca1508d392a1cbb280c895bc41baca187886d41c14885bb913f7ea2ca5e702e6be406c5ef758fd84000a4f3853178fcd30de0b0561cf97ff9a778c0167d859608fdf4234bf464c42ee8e3adbf176b639b6d263d7c6fa638b284b8fb7c1f0a56a9a4759522680e3c3186530927af90ea19e190fc52784561fbb916e0025b8d3478b3e893d2ea0612e7ad42b4bc7a238f6a1986e192f51340d6ad706901a7ba9bd873a1cc5dba7921332969e326d2a4bd1f6880ec2ae5c4eec4e7edec3d57b5069bdca54b4ba55233d41455ca2e0a64dbc63f5035baea1c06d20e22ea83efdf48c8391c9eb5078a9e06a59c5141969e2efe4428261fe07f21eb6381cd99fd82c02e35860aa478f4bb91c8e863b2aefd22d858fc24b0e078fa8a49da663df4f39a16134f028f3b9a7e1d3cab85fed5fcd16543b991e32d17135903610c51c386b2b45f484182a46342d2f61ee44d727ee752d08443e4741b78908fc0d779ec822db47d07eae66eb496f3a4b7c082eefb0fc3768df5701edaed4ad99656facc507e54d9a44051efaaf6339a179d7772186c02754f8102c7d2f66ad777888dc8df2055b20274194be88e02903cb290176af515b7034454ecf124771e5be25c23a9acc1b1050fe588c1b99514f04a08f8c41337292ddc43a5309212b061f24d43b179bfa0896162b768e6fa67164e447f7ea0294b6121e16f5dfecfa605c1e16ce29e0be0e889abe953e3c4599447a07b75aac169ef647a1582bdd1d4dda09e472817d4e56b55704e9a656caaa9f3db6ce054921221c5e49a6882e7db8d4b989b886fd96efe79effe527cb3ca7465678cd3aaafc76372aaba584e17d4eae469cf7e1b98b36dbd7e013f337529db84e3168e19a611bed9236c2a45c66257821f031d56e3ca3c6d6b0fe72aedefcd2b8873c9337c459a0a6d5b5fa4adbc5a2e0b0d18115a06a89b85679bf1df5e7536afe93c6a9d7bff8ee3cf749b02cb9bb8d1aa6e04998b4c25ac632932aaca277381fd0db38e62ad67782aeacd62bbf50295863d3cc72fccf0b649b8183f55752e6c60d32b9346921c6685f84f947ad017e60f1b5723db07ceec6a80911839892c948629f2069ccd036f70d818cba235c1af6572017776a52b19dc5956c237af0bbaf312ee57351b263f8c556c638f853de3aab5a89daea0d6dd7f386f28743cced226ba86a3f1851e6a5f203dd035880e52ea4d01e035d217fbaf75ea16f0389d8356e2566484d81e9df6fbb98d4f801979d6b0943cf5243e14cdea478261f856581bd4729aad6c2f9a7213302e5efc2eef1f267d92c4872cbed0ae22aabca097a089f46af1de4a9d1f90d02c719025ff133206e0d79556d5fd9856684fca8c1e97ccba217b1780cc348740740c4111224fe26b529d32b30f4723212e578a497c74ade23fb216a0dfc8894022efb6edf2f73b9128dda5cabb585f040adfc13d703f40f4210e271f6cbbdd8f07bf641be5404e22fbb30b9cb29c313a7d3dbbec3eca6378b93aa552f8c04a6e6c173429ec5f6c7cd29ee0a68ddda8734fd389cdd9ad524aeef40ed092362b7e08153e362e3bc4c4c6679c8b3107be32e487748d2889d8851e7bcfaa4c2d7e5d47cef4a0d6d4bb7ec74bdfea586d386c685427436b865a3b42b65ebb18d87d40c2230fad80e1e07bbde199174c2decfed6faa2b453bbc2b9d644f63731d7172eb60785a11a672ea59d2e5f8bc89e4ed455465d251905914bbcf2867e8a4227ee1cdaa74cab11a513adfbb774ebcc2ba23e63d96ca9960925e7a8274d206aa6c7deeab1a854899ccf3c365aa23647548b1f7164ed9dec23a63e94dd24ae7adcfa16c66b7a0f2a9d558dbc4a5ccbcfe50039c1d6e7add25e01b15e607314ed76fead2932be81c507a03fd9079609428862adc18c52965d2298001930fd1d13d5f817baa391b3d8b8a96ec9fbddbd0cc6cc86419e6adaa455c6cb5324afeab1dfd70e96bd463c8dfbda0c9520fab42886d52f8f6df06bc9f7a9d5fc66f619e4b2a4dfe7e95527063c02c8f15725889810ec79466fde8fb7ac672fbf76a781ab4e1acf1c82a1174e08c4aa1c170e22e15d0135b63023346149850a11f66e29bf99f851a4d6669eefc63588a226c483482c6f708ec30da4b6f617ae4b57d70f6def6bd08d50085bb8cc86b8ac2f540bf108d9629b9b5958de7e07c11a80e7b1c72770fcbfa753f0cfe3047dd3fba32246d13549d1428a11cbd4ced0953d16914300591c8ae2f927904da0aef4016fba381ea5562762af333fb737525689d76e9282bb5264af8f49d1fe5b75b5e3ec556c17d0c7d8e813d104cce9b795d968899a9bde7bfa5d73bb28d74179d6ffe73c1bec4d14ca82fc009006a514a1e819cb0e86e2ec53a95a5fd846da38b692f4d3c258027859b5b30289512af6d7c1e96bb40618f1b77c8e0a447c72cebc3aa7af4fde32924399ab2aefd3174079b6633ba13e94d03a6716f7efe010c0da0c4edb621bf25c88e831ecf92b08ebd75d4f9cf098fe92803c53ff8532b3f9476293f4ec6cb6667341b3b41e72a2dbaee3512b132fced0f83ca5b077740b2610a6597600ab7cc759d4b069921b9007044275e54a24fe0ff12dfdabb6df72ba981a28d2ccf53ebcf5e78c9f30b62548d63131da610fed8007dfc728cffef37dacf8b02eb32da23cc7423d6b7d783ce042da825722662ea73352f73e6e6a4a9601f2a5286eaac59042d20b56092a88afda4a04c4b30a8966478904c10830368e1c47f15c437134a478b64fb7726046f379b3a008a9ba6fbd1beb799bbb32bfe4f2a57ef632708c5a80125722501b47d5f35c15597f16ecc95f89c63926c9dfbc61747a8bb2766e244e2ad2d0ff89b60d37d016238e06ebea45ee1f3828fbf40a42fcd5d7bded1234f25ebc0babfc52736feee43f43072bc2e92458f1cce31cbef2bd163278246585111b610709fc8e2d1c8ed0190ff8fd219db073a03fd794422dc8c5ce01b9a57cc2fec2a4a1de8dbe026f2996c228c5cc1cfe43355bb76ed1782a4d32e33a72791b512895a6c7b00e0e84ba8746342a51d42b430d5e71f600dbe60cd92867a00ff9cd64b3033d3aefd31883e838c7b7407", 0x1000}, {&(0x7f00000002c0)="b93a9c98cb14a044ce35850a0d8f6cc44784f928d17f3a693ef0ec39953f80021b5cdd5fcd756091c208a8248a53fcc7e5894ea55ce6b3f098200ec86b803cd7ff9a1851ec5da983145cc2ba75c5b9a663fdbde81947b3f7912a562b1cda88aab17c9c27ca02cb3e88b807f35aff8e0a88943f2cbcc3c6889ddd6dec9b1705900781ecb1eae179e241d85997f6c945f38c4e433966555f8b77", 0x99}, {&(0x7f0000000380)}, {&(0x7f0000001480)="350f71acd68296b5a322502558609cfad6ccb48b37b9f7d65c656f04c25b926ee57e765d7c510a66415f3788f490dc0b261a7fe831db4d9555052a20b6ab5c1119019b1fdd0a4580abb22c30b74369494e528fe790a4351db46fe2667912de7692b9285e7c2fa0bfb40dd7784bd37ffdb3a51c8f2afbde314654cc0e86870902f9", 0x81}, {&(0x7f0000001540)="d3f85d81269b1813b8aeb81637d99e2be18d759bd3b725f21c5abac6e2ad8a33aec4863939da457a12f68c359c6aa82416f58caaf4b3bcf227330511ca2a67669fac995d782fa5759db681d5ffd0b6ebd3c2050256d92fb4d9b211984abdb4938f5713b22aafa6a316edc08a2b91bbfe4be6ac3711d4b0a5ee8f932cd76029490950aefe1bb2ddf3142cacf0902eabd27f5384f9ee83910fc9b742907c668bf42f678754513a369353e7475228a4439d937b404e5b71d2f4b786d5", 0xbb}, {&(0x7f0000001600)="4b4bd75dacb1bdd84b8372c7616d81b9c97df0a6f74611ab42fe49924aa44c4bccd30a6d3191fdd00a3933a8fe09c1afa1043fa3213a2bd79a34391bb7b2526e1b09a7ac9fb15f7afbf4a03c99935c663f379bbc4405f68addbd31fb62e9eb1ff9ff39a0ed422e593225f1b83105f716813831df4dc4bcc656ba8147b625efd70740ef2a96d0782a39c700b69fc9584e2390371ee7029b681bde0add3683f15cae16b8492296c45e82543f2cafd97ed40b5aef760a044a4abd6e0e96299889c5aa0deba9902f4b6d976b1ab449398fd51d12625003a69046080910eeb456a10dcbd29c811fc282a68b8569c9454c1911a5b8b0f22d", 0xf5}], 0x9, &(0x7f0000001840)=[@rights={{0x28, 0x1, 0x1, [r5, r6, 0xffffffffffffffff, r8, r10, r12]}}, @rights={{0x24, 0x1, 0x1, [r1, r14, r3, r15, r16]}}, @rights={{0x2c, 0x1, 0x1, [r19, r2, r20, r22, 0xffffffffffffffff, r0, r3]}}], 0x80}, {&(0x7f00000018c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000001940)="db2b6576ffd1075f18765293b979addd0451c5fe1e73b658a7d3d31eb6482a0ffcfcc8d02ac8b39306e25693d75c943e0c8a7358e2a5376e84959616e2212c3fd3532d6370e59d8099e0901466f55ad8e9e3fc7fd2175971a162c16abb96640a859f2ce3a805513e", 0x68}, {&(0x7f00000019c0)="a3d8b7c4bd297959032879b7d8de506c12ee29da36e76c7b930eea048647f9f37d7d3028a0797844d51e693d559aa9387d8ee378c0", 0x35}, {&(0x7f0000001a00)="3256dbabfcf1f9349460c4f2d254278e7a9514783b58fe7554d002255a71c20e06a9f7f57b56cff9ad7e38c624e574ab4f37058378bd63ceae14a133da2a8c64b51e890086144f8413fbaffc2be74d0345a5c09756c98bcb739169f88ae075555b60d368ee89d2f6651d43c164ab900142924d134d3124d730f39e51fbe9d6117266e2d47adf080d855cd9a4e1ecb697e958eb87b56d498f13834b9f310de967b5233df0fffcf1fc23a32c8654bc5177dcce4a5498a1613f7b74f1528f817e6f61046535558a77e3d8ad65935d4217438809b04748cc957c8b20cec4d1aa0a8350615021188cdd75dccdf9ee26d8b2e731faf37d", 0xf4}, {&(0x7f0000001b00)="f977066a2397b1288a2775e0815f5fa8f3b86dce66f949e29797b8376e587b857c34078ea0559589b1a882111c32894a13970104eacd6d9992b8e70875568d413b5f131fecf5498fb74116ebc3c6a8e15a4a37937bc9dfd683b30edd5f5414e9d4041cd9f4bb017a0d0bef6f442f39ee0df7569e1b7f3c949937184c44cfb9f3d95dad6d70e5d3f5a46c9bd9083fb5dd4fc38feab5c20438044bbecf85bd44e1ee70a7f6333fb8e2acff9729504a4e53ebd4940d5ff6fb52c6f2ab77d66c4a3cccf5c3d795617f22c877aed6a96c0ef4f5f8f421ce56e0467c8ed5babedc285e969920d8758f590ae76d51bc444d2a222954e7", 0xf3}, {&(0x7f0000001c00)="5c1d6365f698bea5ad22f458fef939c17906155716987316a3a9075f6c60430c7baea75d3ecf5123c22113ae4fd2d9ec9876c63f9c0976cc82b12954eccb4cc9ceef8cd9213ae9fb82f55d01c1dc3ad139e82da1a2ec8ebd4f80bfb88f3bbf656e8e65d5aa53415d6fe15fe92eb054532dd408d98eb9d9504e497d35c90eac48e390f4a32068ab9d2dae42ddfa7bf88c414a9a422e0ec79b9fb3a05895739256597e45db711e51c5a2838c6464c3c5e04f69ee22d5bf569a0cc9f4e920a3211b8cbb2752bf2f7f19d61ac67d3d8c9740", 0xd0}, {&(0x7f0000001d00)="26c51465603f41a2e938853b41f281645bc4c123db90e525e897461db82df2b9e270a9359de436e3f273c5ba6146f1f43f58d972b197ba36aca086e619b9c4d286a3e698ba97aa459885844ef513f1e3e3a16a301578e3247c50bfefc48aea10abc27425dc9aa5f9c014e32f1b03dbfecff0e3524361ff3c4923b09df6d4523fee29435276d8f8d22afaaf021384201a27941fafa6b048f8c523b2d3718ef8b5dbb52bb3a106629acdb894a99e36", 0xae}], 0x6, 0x0, 0x0, 0x400}, {&(0x7f0000001e40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002040)=[{&(0x7f0000001ec0)="9b34e7404644e2e5496626d403824ba46454dcda12b3788169dce511bf5bc735e4faa7fdcec3f8e08ca4b6d21cfc0034146b83e1ce11c3145f22959ac7", 0x3d}, {&(0x7f0000001f00)="5eb807", 0x3}, {&(0x7f0000001f40)="1b580cd4d50587c6720ae41f53199e4f57a86b0f3796edff34cc00d8", 0x1c}, {&(0x7f0000001f80)="b4d34c0822f0313d78b2f667797fd3a68be8a6047243f2f08c69a924c004828ecaba007ce16c80b67efd7953e3f7639f09701be5cd17db6891b94bd73e0a6ddb199e1f16d00b0779e56581504d3a313f199989728925eb48508c34317d668a5323ff2f81fa1437b73686e8e80098cd51d02433717c1a997831c00836534fb8a7652666bf4e203555f4aa074e75c21911ea9f91804214fc0307ca88c99406001f6a51113333315f6e5a", 0xa9}], 0x4, &(0x7f0000002100)=[@rights={{0x1c, 0x1, 0x1, [r24, r25, r2]}}, @rights={{0x28, 0x1, 0x1, [r26, r4, r29, 0xffffffffffffffff, r30, r31]}}, @rights={{0x20, 0x1, 0x1, [r32, r33, r2, r1]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r36, r37, r4]}}, @cred={{0x1c, 0x1, 0x2, {r38, r40, r47}}}], 0xa8, 0x80}], 0x3, 0x4040) sendfile(r3, r4, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x8000, 0x0) 21:27:48 executing program 5: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x2b1, 0x0) [ 433.517909] hfs: gid requires an argument [ 433.530729] hfs: unable to parse mount options 21:27:48 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r0, r1, 0x0, 0x1000005fffeffd) listen(0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x20, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2c094744}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0xa8, r6, 0x86904c62d4b94ce2, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x14, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x589}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffc07}]}, @TIPC_NLA_BEARER={0x7c, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xfffffffb, @dev={0xfe, 0x80, [], 0x11}, 0x718}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3f}]}, @TIPC_NLA_BEARER={0x4}]}, 0xa8}, 0x1, 0x0, 0x0, 0x2000000}, 0x4) 21:27:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) setxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'L+', 0x4}, 0x28, 0x7) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:ldconfig_exec_t:s0\x00', 0x25, 0x2) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r5, r6, 0x0, 0x1000007ffff000) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r12 = accept4(r11, 0x0, 0x0, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r12, r13, 0x0, 0x1000007ffff000) ioctl$KVM_SET_SIGNAL_MASK(r13, 0x4004ae8b, &(0x7f0000000280)=ANY=[@ANYBLOB="d20000004fba9792911b76102200970591559068fb9c9c496f684121d079e1eec6d16f2b03916b5af68707ab84e83ea46c6560bc67469c403555d878caf27d2795fffd09964fbd4d96c389416d6558169b3026d817aa42c04c2a69c7ce72f6beafaf8e9a1ebd9b320474e1726a443682b4e15ee8f645040af29b93ad30a2a4c0088c56792ca755a3a57c82fbab516a98910468820a33e01722a21a3e4282fb8d24fdec43d0c973dc761bf242fb819c56a775d573dd043cb5c19e5b5dd4bbca6722ba048a1da8b899c00ca1eee2e1143e9651cf0a0d"]) r14 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r10, r14, 0x0, 0x1000007ffff000) ioctl$VIDIOC_QUERYBUF(r6, 0xc0585609, &(0x7f0000000140)={0x1ff, 0xa, 0x4, 0x80000, {r7, r8/1000+10000}, {0x4, 0x1, 0x1, 0x7, 0x9, 0x3, "80a927b9"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x5, 0xfffffffb, @fd=r14, 0x8}, 0x4}) listen(0xffffffffffffffff, 0x0) 21:27:49 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(0xffffffffffffffff, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') r4 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x800) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000140)={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x25}}, {0x1, @remote}, 0x10, {0x2, 0x4e21, @local}, 'ip6erspan0\x00'}) sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x20}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000140)={r3, @in6={{0xa, 0x4e20, 0x8001, @mcast2, 0x5}}, 0xfffc, 0x7}, 0x90) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r5, r6, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x0) 21:27:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) socket$xdp(0x2c, 0x3, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0x2d, 0x0, 0xc8, "3ced5efc25d8f8743d5fccaf013e072f", "a48d68640bec187a125a6320908222c19bba7715d8c3e41f"}, 0x2d, 0x1) listen(0xffffffffffffffff, 0x0) 21:27:49 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0xf000) 21:27:49 executing program 5: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x2b1, 0x0) 21:27:49 executing program 0: syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x0) 21:27:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0xc0c41) r0 = socket$alg(0x26, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') socket$caif_stream(0x25, 0x1, 0x3) sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x80) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f0000000140)=0x1) [ 434.340485] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pig=14535 comm=syz-executor.5 21:27:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x2, 0x0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000080)={0x5000, 0x4, 0x10001, 0x9, 0x9}) r1 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:49 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, 0x0) 21:27:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x0) 21:27:50 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(0xffffffffffffffff, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x1150, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000140)=0x7, 0x1) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r5, 0xffffffffffffffff, 0x0, 0x1000007ffff000) r6 = syz_open_dev$mouse(0x0, 0x3ff, 0x0) getsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x8) listen(0xffffffffffffffff, 0x0) 21:27:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setlease(r4, 0x400, 0x3) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000040)=0xffff) listen(0xffffffffffffffff, 0x0) 21:27:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0xfe, 0x903b}, {0x1ff, 0x80, 0x9, 0x2}, {0x7, 0x20, 0x0, 0x6}]}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:50 executing program 5: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x2b1, 0x0) 21:27:50 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0x34000) 21:27:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000140)) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r5, r6, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) [ 435.221152] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pig=14581 comm=syz-executor.5 21:27:50 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, 0x0) 21:27:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_init1(0x80000) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512-ce\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r4, r5, 0x0, 0x1000007ffff000) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000200)={0x3, r5}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000002c0)={0x5, &(0x7f0000000280)=[{}, {}, {0x0}, {}, {}]}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r8, r9, 0x0, 0x1000007ffff000) r10 = openat(r9, &(0x7f0000000300)='./file0\x00', 0x0, 0x38) ioctl$DRM_IOCTL_GET_SAREA_CTX(r10, 0xc010641d, &(0x7f0000000440)={r6, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r12 = accept4(r11, 0x0, 0x0, 0x0) r13 = getpid() rt_tgsigqueueinfo(r13, r13, 0x16, &(0x7f0000000100)={0x0, 0x6}) r14 = getpid() rt_tgsigqueueinfo(r14, r14, 0x16, &(0x7f0000000100)={0x0, 0x6}) r15 = getpid() rt_tgsigqueueinfo(r15, r15, 0x16, &(0x7f0000000100)={0x0, 0x6}) r16 = socket$alg(0x26, 0x5, 0x0) bind$alg(r16, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r17 = accept4(r16, 0x0, 0x0, 0x0) r18 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r17, r18, 0x0, 0x1000007ffff000) r19 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setlease(r19, 0x400, 0x3) r20 = syz_open_dev$admmidi(&(0x7f0000000240)='/sev/ad\xedm\b\x00i#\x00', 0xffffffffffffffe0, 0x802) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r13, r20, 0x0, 0x10, &(0x7f0000000180)='trustedvboxnet1\x00', 0xffffffffffffffff}, 0x30) r22 = syz_open_procfs(r21, &(0x7f0000000140)='net/sockstat\x00') sendfile(r12, r22, 0x0, 0x1000007ffff000) ioctl$VIDIOC_S_MODULATOR(0xffffffffffffffff, 0x40445637, &(0x7f0000000040)={0x0, "4a458507228c661ad72d2fdd00561c4330038c427ef698830b237a0b9b09d0e7", 0x2, 0x5, 0xfff, 0x4, 0x1}) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:51 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:51 executing program 5: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x2b1, 0x0) 21:27:51 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0x300000) 21:27:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x8000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000000)={&(0x7f0000000200)={0x3c, r6, 0x439, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}]}]}, 0x3c}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0xa8, r6, 0x800, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0xf06b4bd8b84cf94}, 0x28000) sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) [ 436.120083] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pig=14612 comm=syz-executor.5 [ 436.188532] IPVS: Error connecting to the multicast addr 21:27:51 executing program 3: openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x8000, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x800, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x1000, 0x80000000, 0x0, 0x8000000001, 0xfffffffe}, 0x0, 0x0, r0, 0x0) r1 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:51 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, 0x0) 21:27:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r4, r5, 0x0, 0x1000007ffff000) r6 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x3, 0x1000) r7 = socket$isdn(0x22, 0x3, 0x22) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r7) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_DMA(r6, 0xc0406429, &(0x7f0000000380)={r8, 0x8, &(0x7f00000001c0)=[0x118e, 0x2, 0x9b, 0x3, 0x7f, 0x4, 0x8, 0x6], &(0x7f0000000200)=[0x5, 0xfffffff8, 0x7, 0x4, 0x2, 0x91f2, 0x4, 0x5], 0x10, 0x3, 0x1, &(0x7f0000000300)=[0x1, 0x1822, 0x3], &(0x7f0000000340)=[0xffffffc1, 0x7]}) ioctl$DRM_IOCTL_GET_CTX(r5, 0xc0086423, &(0x7f0000000040)={r8, 0x1}) listen(0xffffffffffffffff, 0x0) 21:27:51 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000024c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) read$usbfs(r4, &(0x7f0000002480)=""/34, 0x22) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r5 = accept4(r1, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r5, r6, 0x0, 0x1000007ffff000) recvmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000003780)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/192, 0xc0}, {&(0x7f0000003900)=""/255, 0xff}, {&(0x7f0000003a00)=""/262, 0x106}, {&(0x7f0000000380)=""/174, 0xae}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000003580)=""/225, 0xe1}, {&(0x7f0000003680)=""/214, 0xd6}], 0x9}, 0x40) getsockopt$ARPT_SO_GET_INFO(r7, 0x0, 0x60, &(0x7f0000003840)={'filter\x00'}, &(0x7f00000038c0)=0x44) syz_open_dev$mouse(0x0, 0x3ff, 0x0) lremovexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@random={'btrfs.', '\x00'}) listen(0xffffffffffffffff, 0x0) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000040)) ioctl$TIOCLINUX3(0xffffffffffffffff, 0x541c, &(0x7f0000002540)) 21:27:51 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r4, r5, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x0) 21:27:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x71, 0x0, 0x0, 0x41c1, 0x8916, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) accept4$alg(r4, 0x0, 0x0, 0x800) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r6, r7, 0x0, 0x1000007ffff000) getsockname$llc(r6, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10) r8 = accept4(r1, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r8, r9, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) setsockopt$inet_dccp_buf(r2, 0x21, 0xe, &(0x7f0000000140)="f027202c4b2423d27de2091af883dbd6e23e482c89112add0c9bb2dfe670e7f93c8c62799b5d52b9de8a16b327294ba0b426b40ee3d224434e8e156cef709c0751080714d16a896687759c30823fb87c0a9f99e1fc6c7fb027dd65f928ea3f18cc665314eb141e29908c28878e26fb402963faf1aa7af37e7fdd47f4702164e7cef6f27ccca6504af23619d55d783c934acca1129a1cdd663b20498c29f551c08af8c8f742d2d071dc863f50875ef95d54c13f0e780c8b95469e5ffa76107c4d63d5cf7146f94bfd45cea85f7354a7d074bfac8ac11aff7667a8eab3d14b396230c04fe9f937fc906390bcd913004259555c", 0xf2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000080), 0x4) sendfile(r4, r5, 0x0, 0x1000007ffff000) ioctl$KDSETLED(r5, 0x4b32, 0xff) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000280)={0x1f, 0x17, 0x4, 0x480, 0x3a, 0xc07, &(0x7f0000000240)="97ecfc968e9020e60315061a1390bddd613333d8c46cad1f12a843ac2b326dde0055c4726410bdaa7bd45bbdff7f95487647b2bae0ee49342706"}) listen(0xffffffffffffffff, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELDLCI(r6, 0x8981, &(0x7f0000000040)={'veth1_to_bond\x00', 0xfff8}) 21:27:52 executing program 5: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x2b1, 0x0) 21:27:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:52 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0x400300) [ 436.994569] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pig=14657 comm=syz-executor.5 21:27:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x800100, 0x0) listen(r3, 0x7) 21:27:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kexec_load(0x2, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="9e329b1757c8863a6d2158c0730cd466b2320b669928a58f191fa380984e088ff20e26cfa706647f49d531bca7b134690ad592bc5f00041ca7ed37264770ab97a737120e4e602e60ff6c4b81589e710d39a95a0ee3b92f791ee21bfb8ebe0b618a1af544ba4eeb95a5f18e41a5d215f8333fe6c0dea1de9367c34b8de7c85af6b8668c1b990d6594b49489a658b344ff6290e867ea5b9b73dc0d146727c07979fbb23e00a5ad0424be124d2d53c26c75", 0xb0, 0x0, 0x6}], 0x80000) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000280)={{0x0, 0x1, 0x400, 0x3, 0x7}, 0x0, 0x4, 0xe749}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x3a) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r4, r5, 0x0, 0x1000007ffff000) ioctl$VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000200)={0x2, 0x7, 0x4, 0x100, {}, {0x5, 0x2, 0x0, 0xc1, 0x2, 0x1, "0f363ef3"}, 0xff, 0x2, @userptr=0x7fffffff, 0x4}) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x8, 'syz1\x00', 0x1}) 21:27:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r4, r5, 0x0, 0x1000007ffff000) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r7, r8, 0x0, 0x1000007ffff000) dup3(r5, r8, 0xe3322dab3aa05e02) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r11 = accept4(r10, 0x0, 0x0, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r11, r12, 0x0, 0x1000007ffff000) write$nbd(r11, &(0x7f0000000040)={0x67446698, 0x0, 0x4, 0x2, 0x3, "99552d0f8637f4cc17b6e353b167b64623bc238cf9718254295ce30ed6ad7f17d6483a"}, 0x33) sendfile(r2, r9, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:52 executing program 0: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) sync() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a51, 0xac63005a0a0e8bfa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='v6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x0) 21:27:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kexec_load(0x2, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="9e329b1757c8863a6d2158c0730cd466b2320b669928a58f191fa380984e088ff20e26cfa706647f49d531bca7b134690ad592bc5f00041ca7ed37264770ab97a737120e4e602e60ff6c4b81589e710d39a95a0ee3b92f791ee21bfb8ebe0b618a1af544ba4eeb95a5f18e41a5d215f8333fe6c0dea1de9367c34b8de7c85af6b8668c1b990d6594b49489a658b344ff6290e867ea5b9b73dc0d146727c07979fbb23e00a5ad0424be124d2d53c26c75", 0xb0, 0x0, 0x6}], 0x80000) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000280)={{0x0, 0x1, 0x400, 0x3, 0x7}, 0x0, 0x4, 0xe749}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x3a) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r4, r5, 0x0, 0x1000007ffff000) ioctl$VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000200)={0x2, 0x7, 0x4, 0x100, {}, {0x5, 0x2, 0x0, 0xc1, 0x2, 0x1, "0f363ef3"}, 0xff, 0x2, @userptr=0x7fffffff, 0x4}) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x8, 'syz1\x00', 0x1}) 21:27:52 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='tet/ip_tab\xe4j\xa8\xb9\xaeS\x91u\xa2\xa0\xa6les_targets\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000140)={{0xc9, 0x1}, 'port0\x00', 0x34, 0x8, 0x800, 0x2d, 0x1, 0x401, 0x7ff, 0x0, 0x1, 0xffff}) r4 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x1, 0x1514f35f89cdd377) ioctl$TCGETA(r4, 0x5405, &(0x7f0000000080)) 21:27:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff008) listen(0xffffffffffffffff, 0x0) 21:27:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) ioctl$ASHMEM_GET_PROT_MASK(r3, 0x7706, &(0x7f0000000040)) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x7faf8f97b1d3bc9, r1) sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x100, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x4, 0x2}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0xd52}}, {0x8, 0x4, 0x1}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x4, 0x1}}]}, 0x100}, 0x1, 0x0, 0x0, 0x40}, 0x8) ioctl$VIDIOC_S_PRIORITY(r4, 0x40045644, 0x2) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r6, r7, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:53 executing program 5: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x2b1, 0x0) 21:27:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x40d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, &(0x7f0000000140)={{0x50, 0x1f, 0x9, 0x2, 0x1, 0xff}, 0x56, 0x5, 0x6f, 0x101, 0x1000, "184b6658866358e74b84d45af2b5aecd7f07874e57d3e203b09cf067a113f2909c1052bbf70f4995d44ea9d64bc6c446a117cfad590fc7d5820006ae202aa005784fafa3a93357955c1a73c90ffa8539bef875e373ce8a326dff1c19f06c83ea903dabcdcf39d7566690455cb1ae86d3ac1aa6fd9f34394b11e273b719941c77"}) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x51a) r4 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3e) r5 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0xa0400) setsockopt$inet_opts(r5, 0x0, 0xc, &(0x7f0000000240)="c54542d6e1ab8eaea862a7d1a616ac70c8f54404d674d5eb6f4208f52e06126140087f54e261c1c75fb8ce2e92cd10e7e40597408bf748471d89687b15923200510148b54ec6868aecbd388e2188fbcf346ec6e5909dfcaba2c3d3184cf007b2a22e8f5b1dd34864e2245fa383e5a8d52106a8424c7c6c54d07fed4e5b061c8127f068fdf9c7f80fe515b4ed23268d6c2519bc75f8b67504bc47899cbdfef098c2e635897a4a62d1c2d2a0", 0xab) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r4, r6, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x0) bind$netrom(r6, &(0x7f0000000040)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 21:27:53 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0x6b6b6b) 21:27:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff008) listen(0xffffffffffffffff, 0x0) [ 437.887174] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pig=14718 comm=syz-executor.5 21:27:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x4000000003ff, 0x0) listen(0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r5, r6, 0x0, 0x1000007ffff000) setsockopt$inet6_int(r5, 0x29, 0xc9, &(0x7f0000000040)=0x9, 0x4) 21:27:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) setsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000140)="0b67352e9def39ea1e318ca354180b3005cebb42e914314dae5da8e8d7ad70fe8bfd03f67a6fec1c0a5aebb450566ae07dfd69d68857837d5def845504e41f6223fba10480ac0b2d009a47e2d8a716b0c0233477742fa04a195a17d7c9cccc9fbdf9f83c6074dce8f285a96176cdccf01e3ffed50fc99634103ab3fdfe2c32e5eb474c4be6eb8222a4483210b14c08f00aad506f1a4a9da1a9df3fc92fe41d9ba6", 0xa1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x0) 21:27:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r5, r6, 0x0, 0x1000007ffff000) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r8, r9, 0x0, 0x1000007ffff000) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000400)={0x0, 0xbab4}, &(0x7f0000001480)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000014c0)={r10, @in6={{0xa, 0x4e23, 0x20400000, @remote, 0x3}}, 0x0, 0x7ff, 0x5, 0x1bb8, 0x10}, &(0x7f0000001580)=0x98) r11 = syz_open_dev$mouse(0x0, 0x3ff, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r11, 0xc0205649, &(0x7f00000003c0)={0x4, 0x8, 0xe7, [], &(0x7f0000000380)={0x980908, 0x9, [], @value64=0x42}}) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000040)="ddf8cd", 0x3}, {&(0x7f0000000140)="faca6d8e54ee297344468093e4532653ad740a8141bef59bd6853abb48aef0d051c278bd842299d8467aa61f67ed3e9ea523e96f575f8f13413a609a8e12deac802d5d1d295b30fe88054fd9caa4ce47beca03bfe8de21a38e8b1506843be0ccf3547edb29d75069057a86795719ec72e37e1d64fd66921ac4fcbff3140dcb3960b69ca0338730824d5d969debc984a927753792e328144c89042b1e70a64c68a5987a66f1b2934e816be9d1ebf9199ad7455b1dc49c4b59bd97372a6e68987e88b825ccb2cc6ac040d7934c8b19c07ac48eef6a49e4e78a0ed7408fa6a2d5efbd5d16a0e0ada44732879dd715fd468699b6bf120eea", 0xf6}, {&(0x7f0000000240)="5dcbed853fd7036e5c372106485909c008d2fe084a8da2405143606fd9d25d09d5efbe5a49cdb279056ecd78580e19ce6e13bdad433cee4836e53627b5f45707e26dc030e772d801bf", 0x49}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000000080)="1793b8f238cfbc5d8c455ba04b4a6caaab7424a3a50ddd3735874bf45a737f6e5a665970f51ee5c2a2fe110e1474c83c7eca40633101efdb8943c4c5", 0x3c}, {&(0x7f00000002c0)="38a43797fc14d933136bcfed70e206de691dc42d1b3c2230fd75046bc154", 0x1e}], 0x6, 0x8) listen(0xffffffffffffffff, 0x0) 21:27:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r5, r6, 0x0, 0x1000007ffff000) r7 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/create\x00', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000180)={{{@in6, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in=@dev}}, &(0x7f0000000280)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x802048, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@debug={'debug', 0x3d, 0x6965}}, {@access_user='access=user'}], [{@subj_type={'subj_type', 0x3d, '(ppp0]'}}, {@obj_role={'obj_role', 0x3d, '\'^'}}, {@uid_eq={'uid', 0x3d, r8}}, {@smackfsfloor={'smackfsfloor'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) 21:27:53 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540), 0x0, 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:53 executing program 2 (fault-call:8 fault-nth:0): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) socketpair(0x5, 0x4, 0x80, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x2, 0x1f) setsockopt$inet6_int(r1, 0x29, 0x2, 0x0, 0xfffffffffffffc8e) r2 = socket$alg(0x26, 0x5, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x2002, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f0000000140)={0x1000, 0xffff, 0x2, 0x7fff, 0x12, 0x15}) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r4 = accept4(r2, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r4, r5, 0x0, 0x1000007ffff000) r6 = syz_open_dev$mouse(0x0, 0x3ff, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r8, r9, 0x0, 0x1000007ffff000) getsockopt$bt_BT_DEFER_SETUP(r9, 0x112, 0x7, &(0x7f0000000180)=0x1, &(0x7f00000001c0)=0x4) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) accept4(r10, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r10) listen(0xffffffffffffffff, 0x0) 21:27:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r4, r5, 0x0, 0x1000007ffff000) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) listen(0xffffffffffffffff, 0x0) [ 438.593524] FAULT_FLAG_ALLOW_RETRY missing 70 [ 438.598898] CPU: 1 PID: 14757 Comm: syz-executor.2 Not tainted 4.19.84 #0 [ 438.605846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 438.615217] Call Trace: [ 438.617827] dump_stack+0x197/0x210 [ 438.621471] handle_userfault.cold+0x41/0x5a [ 438.625908] ? userfaultfd_ioctl+0x3a40/0x3a40 [ 438.630517] ? find_get_entry+0x3e8/0x820 [ 438.634678] ? filemap_map_pages+0x1130/0x1130 [ 438.639289] ? find_lock_entry+0x1a3/0x510 [ 438.643545] shmem_getpage_gfp+0x2cfa/0x3640 [ 438.647975] ? shmem_add_to_page_cache+0xd30/0xd30 [ 438.652913] ? lock_downgrade+0x880/0x880 [ 438.657070] ? kasan_check_read+0x11/0x20 [ 438.661225] shmem_fault+0x233/0x760 [ 438.664950] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 438.670234] ? find_get_pages_range_tag+0xc40/0xc40 [ 438.675263] ? pmd_val+0x85/0x100 [ 438.678728] ? pmd_val+0x85/0x100 [ 438.682224] __do_fault+0x111/0x480 [ 438.685871] __handle_mm_fault+0x2d78/0x3f80 [ 438.690294] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 438.695167] ? count_memcg_event_mm+0x2b1/0x4d0 [ 438.699847] handle_mm_fault+0x1b5/0x690 [ 438.703919] __do_page_fault+0x62a/0xe90 [ 438.707994] ? vmalloc_fault+0x740/0x740 [ 438.712064] ? trace_hardirqs_off_caller+0x65/0x220 [ 438.717108] ? trace_hardirqs_on_caller+0x6a/0x220 [ 438.722044] ? page_fault+0x8/0x30 [ 438.725596] do_page_fault+0x71/0x57d [ 438.729404] ? page_fault+0x8/0x30 [ 438.732971] page_fault+0x1e/0x30 [ 438.736456] RIP: 0033:0x453fd0 [ 438.739663] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 438.758599] RSP: 002b:00007fd6157797a8 EFLAGS: 00010202 [ 438.763980] RAX: 00007fd615779850 RBX: 0000000000000003 RCX: 000000000000000e [ 438.771266] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fd615779850 [ 438.778622] RBP: 000000000075bf20 R08: 00000000000003ff R09: 0000000000000000 [ 438.785916] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd61577a6d4 21:27:54 executing program 5: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x2b1, 0x0) 21:27:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) getresgid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000040)={0x4, 0xe56, 0x5, 0x0, 0x8}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = getpid() r6 = getpid() rt_tgsigqueueinfo(r6, r6, 0x16, &(0x7f0000000100)={0x0, 0x6}) rt_tgsigqueueinfo(r5, r6, 0x15, &(0x7f0000000100)={0x2, 0x6, 0xffffffff}) r7 = syz_open_procfs(r5, &(0x7f0000000280)='net/fib_trie\x00>\xb9\xdc\xb9\x8fkE\x10\x1fd\xa2t\xe8\xc1\xe9\'\xe5\x18') sendfile(r4, r7, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x0) 21:27:54 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0xf0ffff) [ 438.793199] R13: 00000000004ca143 R14: 00000000004e1eb0 R15: 00000000ffffffff [ 438.813872] Unknown ioctl 1075864599 21:27:54 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) [ 438.971837] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pig=14785 comm=syz-executor.5 21:27:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r5, r6, 0x0, 0x1000007ffff000) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000040)=0x1, 0x4) listen(0xffffffffffffffff, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r8, r9, 0x0, 0x1000007ffff000) recvmsg$can_raw(r9, &(0x7f0000000400)={&(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/209, 0xd1}, {&(0x7f00000002c0)=""/139, 0x8b}, {&(0x7f0000000080)=""/34, 0x22}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/218, 0xda}], 0x5, &(0x7f0000001580)=""/173, 0xad}, 0x10040) [ 439.091131] FAULT_FLAG_ALLOW_RETRY missing 70 [ 439.098711] CPU: 0 PID: 14792 Comm: syz-executor.2 Not tainted 4.19.84 #0 [ 439.105674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 439.115145] Call Trace: [ 439.117811] dump_stack+0x197/0x210 [ 439.121441] handle_userfault.cold+0x41/0x5a [ 439.125850] ? userfaultfd_ioctl+0x3a40/0x3a40 [ 439.130423] ? find_get_entry+0x3e8/0x820 [ 439.134588] ? filemap_map_pages+0x1130/0x1130 [ 439.139182] ? find_lock_entry+0x1a3/0x510 [ 439.143408] shmem_getpage_gfp+0x2cfa/0x3640 [ 439.147826] ? shmem_add_to_page_cache+0xd30/0xd30 [ 439.152780] ? lock_downgrade+0x880/0x880 [ 439.156947] ? kasan_check_read+0x11/0x20 [ 439.161107] shmem_fault+0x233/0x760 [ 439.165232] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 439.170512] ? find_get_pages_range_tag+0xc40/0xc40 [ 439.175888] ? pmd_val+0x85/0x100 [ 439.179341] ? pmd_val+0x85/0x100 [ 439.182804] __do_fault+0x111/0x480 [ 439.186431] __handle_mm_fault+0x2d78/0x3f80 [ 439.190843] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 439.195708] ? count_memcg_event_mm+0x2b1/0x4d0 [ 439.200375] handle_mm_fault+0x1b5/0x690 [ 439.204493] __do_page_fault+0x62a/0xe90 [ 439.208555] ? vmalloc_fault+0x740/0x740 [ 439.212673] ? trace_hardirqs_off_caller+0x65/0x220 [ 439.217693] ? trace_hardirqs_on_caller+0x6a/0x220 [ 439.222613] ? page_fault+0x8/0x30 [ 439.226182] do_page_fault+0x71/0x57d [ 439.230000] ? page_fault+0x8/0x30 [ 439.233551] page_fault+0x1e/0x30 [ 439.237008] RIP: 0033:0x453fd0 21:27:54 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540), 0x0, 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) [ 439.240385] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 439.259377] RSP: 002b:00007fd6157797a8 EFLAGS: 00010202 [ 439.259392] RAX: 00007fd615779850 RBX: 0000000000000003 RCX: 000000000000000e [ 439.259402] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fd615779850 [ 439.259411] RBP: 000000000075bf20 R08: 00000000000003ff R09: 0000000000000000 21:27:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x8, 0x80) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:54 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x2, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) [ 439.259419] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd61577a6d4 [ 439.259431] R13: 00000000004ca143 R14: 00000000004e1eb0 R15: 00000000ffffffff 21:27:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_bp={0x0}, 0x408}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000480)=""/102396) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000180)={0x6, 0x2b, 0x9, 0x14, 0x2, 0x1, 0x2, 0x11e}) r4 = accept4(r1, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') unlink(&(0x7f0000000140)='./file0\x00') sendfile(r4, r5, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0xffffffffffffff59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1400, 0xf3}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000002c0)) r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x3, 0x1000) r1 = socket$isdn(0x22, 0x3, 0x22) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000380)={r2, 0x8, &(0x7f00000001c0)=[0x118e, 0x2, 0x9b, 0x3, 0x7f, 0x4, 0x8, 0x6], &(0x7f0000000200)=[0x5, 0xfffffff8, 0x7, 0x4, 0x2, 0x91f2, 0x4, 0x5], 0x10, 0x3, 0x1, &(0x7f0000000300)=[0x1, 0x1822, 0x3], &(0x7f0000000340)=[0xffffffc1, 0x7]}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r4, r5, 0x0, 0x1000007ffff000) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f0000000340)={r2, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r7, r8, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r10, r11, 0x0, 0x1000007ffff000) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r12, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x20, r13, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r10, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x120, r13, 0x201, 0x70bd30, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xf0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}]}]}, @TIPC_NLA_LINK={0x1c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) listen(0xffffffffffffffff, 0x0) 21:27:55 executing program 5: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200), 0x0) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x2b1, 0x0) 21:27:55 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0x1000000) 21:27:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000080)=0xffffffb6) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@rand_addr="1a8c14af67de9071870aa1c96facbd14", @mcast1, @ipv4={[], [], @remote}, 0x1, 0x8, 0xff57, 0x400, 0x6, 0x2000000, r5}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={@mcast2, @ipv4={[], [], @multicast1}, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x28}}, 0x800, 0xa4b9, 0x898c, 0x100, 0x8, 0x3946298fc5ce6a89, r5}) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r6 = accept4(r1, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r6, r7, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) [ 439.812349] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pig=14829 comm=syz-executor.5 21:27:57 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540), 0x0, 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = syz_open_pts(0xffffffffffffffff, 0x41) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000040)={0x7, 0xffff, 0xbe00}) r3 = accept4(r1, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:57 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x4b47, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:57 executing program 5: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200), 0x0) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x2b1, 0x0) 21:27:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r4, r5, 0x0, 0x1000007ffff000) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e20, 0x401, @empty, 0x4}}, 0x200, 0x3, 0x0, 0x4, 0xc}, &(0x7f0000000040)=0x98) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000080)={r6, 0xff, 0x20, 0x81, 0x26d}, &(0x7f0000000200)=0x18) 21:27:57 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0x2000000) [ 441.957625] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pig=14856 comm=syz-executor.5 21:27:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) ioctl$VIDIOC_S_EDID(r3, 0xc0285629, &(0x7f0000000080)={0x0, 0x8, 0x1f, [], &(0x7f0000000040)}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r5, r6, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x0) 21:27:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r4, r5, 0x0, 0x1000007ffff000) setsockopt$inet6_dccp_buf(r4, 0x21, 0x0, &(0x7f0000000040)="c57a35b86f5368d537bd3073b56ca479222d3451805c8327953b44b129d62d", 0x1f) 21:27:57 executing program 3: symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r4, r5, 0x0, 0x1000007ffff000) sendto$inet6(r5, &(0x7f0000000140)="7fd3990ea7389a05fbf9076bf84c8e45685e60d352bd705c2f1f902052286762019cce3c35bce21e219019151dca90b288a299e1a5226d77398099cdac050829f14b225fb443ba70660d0cb72d32314d64d1a23f7746527c5a0edb8e3b746c9570da366fb5", 0x65, 0x10, &(0x7f00000001c0)={0xa, 0x4e21, 0x186, @loopback, 0x80000001}, 0x1c) r6 = accept4(r2, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_joute\x00') sendfile(r6, r7, 0x0, 0x1000007ffff000) r8 = accept4(r6, 0x0, 0x0, 0x80000) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r8, r9, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xc8, &(0x7f0000000440), 0xc) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f00000007c0), 0x4) r1 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) write$FUSE_POLL(r4, &(0x7f0000000040)={0x18, 0x0, 0x3, {0x4}}, 0x18) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r6, r7, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:58 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58", 0x41, 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r4, r5, 0x0, 0x1000007ffff000) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x98, r6, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x10}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x14}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x11240000}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x6}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x1) listen(0xffffffffffffffff, 0x0) 21:27:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="04fde3cc12a432c18f686869b6a6637f8e1fdc19f9a3f3a65b14401c4ff1b9f32446909d089bf859df0cd804377b2f930249168f12414b1dd9ac00c1155b16ea28be9b89c2021f75bf63ae338624ca267007fadbbe7a95c8698c1fe07b25fc65dbbf918d18b2782d78e9f0440df9689dfed68a04ab23a89a139358da6d1952deea09b6c175b390238e52e539bfc34ab98ab6582e281cfc0983da4b68277a253bde2856f502703429b72d7f5a745c61e5c3c49c000908ce7ab70dc179e248f2d3b2c93096ef78de9e168d9982fa43c0ebf142d5edbe20a5a10576d8d0b23d483dc5cf537b9a94c666c4db7f6fe505c8de27cfad871bf3697c", 0xf8) r5 = accept4(r1, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r5, r6, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:58 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x4b49, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:58 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0x4000000) 21:27:58 executing program 5: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200), 0x0) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x2b1, 0x0) 21:27:58 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r4, r5, 0x0, 0x1000007ffff000) getsockopt$inet_mreq(r5, 0x0, 0x20, &(0x7f0000000040)={@broadcast, @multicast1}, &(0x7f0000000080)=0x8) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r6 = accept4(r2, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r6, r7, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000140)={0x7bdb, 0x5, 0x4, 0x3, 0x6, [{0xbe, 0x5, 0x80000000, 0x0, 0x0, 0x1000}, {0x4, 0xa95, 0x9, 0x0, 0x0, 0xa0c}, {0x4ab, 0x0, 0x1, 0x0, 0x0, 0x4}, {0x100, 0xa7bb, 0xffffffffffff827b, 0x0, 0x0, 0x2180}, {0xce, 0x9, 0x9, 0x0, 0x0, 0x80}, {0x708, 0x3, 0x1, 0x0, 0x0, 0x2000}]}) listen(0xffffffffffffffff, 0x0) [ 442.873644] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pig=14913 comm=syz-executor.5 21:27:58 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58", 0x41, 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r4, r5, 0x0, 0x1000007ffff000) accept$alg(r2, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000380)={'#! ', './file0', [], 0xa, "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"}, 0xfffffffffffffead) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000280)="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") sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x0) 21:27:58 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58", 0x41, 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r5, r6, 0x0, 0x1000007ffff000) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000001640)={{{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000001740)=0xe8) sendmsg$kcm(r3, &(0x7f0000001c00)={&(0x7f0000001780)=@can={0x1d, r7}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001800)="ff1bf756818c5877438a499f1a91f873f137b838746bc365c642ffed5e7a14cb5c7b83b3d885a23f0ea70b985edcb5b7afd5d75aaf247b0b9e7a290cad4f879630ee1104491a710b48", 0x49}, {&(0x7f0000001880)="c780bd4281a743da953f0f53fa08992cd8f4e9368d78d1bb75dd8e93e7b8c031b336cc9e9cf0806d0c122d2d8d1fe310db7d848dbdac3cba1e611c7e9258fb96bf4bd5d52c42a70cbfba721a33baefbcbf7e9bf3c9cf326384b35d8adc607a6999834f15d9fabbaff76efed76690f3b364ee155293691d0765e00eee711dc158095f945e3dc1b7f60eeda432c1b5272c5d562a97a3e10b6a11c907fcf75f70864d7009e9b797eee8b82ba5add8c6ea7cce1b115b9d2efb4c2fa411bfcb646426a4297e3289dc6c43b97ffdeed51b2032", 0xd0}, {&(0x7f0000001980)="9037a1a163c3335f12d88971ee28149150a31acff66cf4b3c89f9b3001f3da87562ef6bdb22fcb84e674ec6e4deea5d86bd3588e4bf0f7551e31b3867c4f8c0e8325d74d0a94bf5deb4278ece7354b9d8f08725b20d808a803c603a66ccea49a9a23e2a2c58c0c4fdf972b61294c58c2231274c248e3e814306de3caf983c12c4d2efa678b6726e86cdaeb44388a7d0026ab487cd77c281af89e2e66270dc986a81f853e9a1f7498a29ac6d167451d03510961ecd0d8b3108aab94a1c910e5cb95ff1554da3ec8785b", 0xc9}, {&(0x7f0000001a80)="75de38200123234d49d19c6f45702f19f9bfa7df932b9b116b3bc058693829e5a197a14d6cf9e0e7ae9f8d5ed4a457cbbb5a8a880451a7bfc665c77f16dd62eca16c2e94ac06b5de949ab031cc9cbcfb722477fdb87f8cf7898f8d70c0ba4cf5f7ddad1e8ea604d90016ec2a1d307e250f4e3defd887cbaf10d8496e98a87a53a10d48ffffbbde10c1765724232d41664b", 0x91}, {&(0x7f0000001b40)="f90b8c2533a57a48b7abd19c0449835b4a70fa3d52ea07", 0x17}], 0x5}, 0x40080c9) r8 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r8, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r10, r11, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:58 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c", 0x62, 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:58 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c", 0x62, 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) keyctl$clear(0x7, 0xfffffffffffffff8) listen(0xffffffffffffffff, 0x0) 21:27:58 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0xa000000) 21:27:59 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x541b, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:59 executing program 5: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{0x0}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x2b1, 0x0) 21:27:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r5, r6, 0x0, 0x1000007ffff000) ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f00000001c0)=0x6) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) sched_getparam(r7, &(0x7f0000000080)) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000240)=0x7, 0x4) sendfile(r2, r3, 0x0, 0x1000007ffff000) accept4$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14, 0x800) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:59 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c", 0x62, 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x101000, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000040)=@bpq0='bpq0\x00', 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x0) [ 443.797237] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pig=14966 comm=syz-executor.5 21:27:59 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c", 0x72, 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.apparmor\x00') r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0xfffffffffffffd2f) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x455d, 0x20000) accept$alg(r5, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r4, r6, 0x0, 0x1000007ffff000) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000140)={'bridge_slave_1\x00', 0xe8d}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000240)) listen(0xffffffffffffffff, 0x0) 21:27:59 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c", 0x72, 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount(&(0x7f0000000080), &(0x7f0000000380)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:59 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c", 0x72, 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:59 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c0000000000000000", 0x7a, 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:59 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0xe000000) 21:27:59 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x5421, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:27:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/policy\x00', 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003840)=[{&(0x7f0000000580)="c7861ac178a378a810f957658699b95512ea33c4cfdca450bdcdd2ed05052f506c528b72aa7dc8230a7b800887c25be417d155f9c08a7fe144987438504ecd7764265b33d4eccd481838cdf0e4b33552e7ae0bb2f3a7b2126c8b43e410eed5d14b15608ee398d5f34f217e0ecf5e830801f6fd3321e271744f0e6217d65a7501", 0x80}, {&(0x7f0000000600)="625a8e173e8ecc0ce6d4c2d35bc471042f309add099e531eaa12f89e4130353d042bb8767913964f87d97f5bc579f10fe9b9cf06276441f4002c63219f1a2de206a094252c076f18450d0db3532e454bf30567a9f18fe7437afdb2eb1c7ada973eb8d4ce1bcb38569ee6718d2d5d360f68fada5b77e332f94eece3922d4c769a3369b410831f60f6571875f57d9e3a7c7653729ad2c3a871c6cf462ba1d7f3ed5f24c85035d8c936656b99ca5723e86cca7a67e455", 0xb5}, {&(0x7f00000006c0)="9a00788c918bf97c9a7a05d40e812687a71959d21be91d80ff8afd7220ec3f6d761c16e4cfce18ef4240586f007cb13bb5bff25a20791ef125d7b6c873cf44e07d50502b5068e9159e0b", 0x4a}, {&(0x7f0000000740)="e1a26edd319f2277c00fd06256e5d86e48047a6cc1db91380f584a393c383768bfcaa4ee8a65632a2d9921b5701735828c512b41b7496ec989c79ffbda75aed8c3e5cee1b52f5b03defcb193c3c67a75521828ff42776de9c5789dc2cedfca5a00043f6fcc8ca6ebee596a84397cf933d780590ec41cc34aee6a6cf20618a08030a530d11a50b7d42fac1cd92704014a924b57aa015ddfe33cc61aa54f85d8636ba36554a8a51a9b3508da4d4ca7c7b5944773893e5cbca7cf6d3d7d337c9929de44b41c9acc6647bb2d6810daa9164c1537052a9d3ada9aa203dff9a302a6821944a5f410d66bf6b901dcbe1fe4a82dcd4e9f41bbee42c77204909ba29fd9d3ee504c683fab344222bee2d6288ac2f36b55dbbf2bfe17869e1b43a54e242ef1a615f45f20f72d79e71a0a3ee1ef4aa4f402aeb4dd5f37af3f8d27054e460b84a30a60faa03b5170bf86fbc1dd4ce9fee626fda43b2a31ccc0935e0b22db0509415efffcc215d3325bc9a7cd5dace869ae1eaf52686aced7202c5d963caff60dca2608328e20e23d3cfd5426c10d3f04c125a55d353bf0d10212b3bc6d4d3109b9ab9064b8b5b10e2988ba200df876684baf1d620794c29575cc4692221bc292eeeae65afacc8a19deded637578ef37d5cd792a1002cf9b3bd5661d1c5eb2d35ac0c8e1e9f93b878d41e79326b3dd4692a8a0b743a3b7842e9a7600187701a81f703b30bda854666afdfce0b0386f46d0d39ea4de1cc3cc03c9e585ddcfc994419f3fdf419fe1a00a31f1bcda3c0441a30148c117504c6fb91d65d4b9650efc6562fb76ea73880b0cd31b3ffbb16badac88487b04bcc8cba5ad52506a38c1fcaa155042f445da2f1db90f5b5f0fa4a4e0ebccbc0d7534de28aa503e4059414a733530d39b7cb95fb7042e1ceae7132825ff568c07cfdea6b05dcf82e9b70e503ea90075a8d903fcfcdb3a57783e8c38322e2abd2dc259e7686c74a89ffd853776c8b1eeaefae7fb1efe050800f1c4f9a1347f9ab76be1778844bd0dc4ff80e24228da9adf1b701285fd93089d6c735c08103b6907c7f76f53fefc4c8b743a1400d90dfb31a54d6ad4bc4f5ada84e25afc86a8df268972d15d3ec5c01879cb0d2b2c15685194713f8eea4af3307f249af7c1f1d9b2ff398bc048318bed049425d5fd6089ce8e0fa80fd6e957c303f7dbc14f571735ceafff2b45ecd569e94e9a82a15edc75c800eae793cac4e90667f8b207c142f2d5be3400d1f3544d91febf063031cebb704cd35fc95e3e4d4503908aae207eb99ee7ad58998482f15b9f6d68cc0f008fbce6daaf2009dd67a846fcb29e8354285be5cff622cbfc75389f204e221de6de7af57fa402e94a735e74102961bdd8655bd85a0dd4d768d2f052a1ac01b7a87cb58fb5376d87192ea8ffcd04ac7eadfe9e289033a13969ed707d0ef6c11686f452d8da07dfa10d1c12eacedef2bf2e648ddea4c7a925717c96be1149aafc487bff2b00bf4aa24b4907b190caa446256b113fad14f4f76741e3528f5bb0a3dbd2ee76b6ddb7eb683fba5b36de86a4a42d76023e4285e701ced4bc074c0c8014bf8a350afd28369d0dc9302f7e21563ce9399414b4dd199884b2aaa997f1d712d2e485c875f29ecd9041d3a1c04ef1591f07e005f0c59e07a34c3168f386250ae23199f48063d970346cf94bf5a14703bd58789c780170641629a4f10202d1779a027b0388f58e1b0c19dd700c1ade2b5c13592e29f43139a3c4a8f7555a3559452eab9f6e3bf1b24ff6188890f29dbf784b6c4002f6e070d03cf92e7605122786f28b257b7e08b1a869a8af2d117e44594e4a41467c7830fa915a618780e15e195c78ed92cca1266341905f55c935a3a46d66b3456c48773ac9ea03b9954f2540eb23c5aab7fd84d3c54f6a9f9729bba3da5ddab5c9f476ec79de5c0fdc71e6597ae0e6ea91d0c196b13fa89de4dbb69e225b9249c2e85f16d8d66b4b8389a7c16a7922feffc04a17b94d926b89cb8a021c605600b78e7bd22477b99f20c8cfd72ebfffdcda1d611bab2802b85a9d5ad98230c54a6d49335973078bfd448dccdbbe33602042c6697a7e225708c355d45d58468bd57c59cbbcfad8e3b04dd9999ba8e6b8e778327e7ea755239585c8fee83cdbf438e2bef30def537154a0032d7c5f260b601cd458292729bbccf9694a836cc28148376a7dea4799f6d13b085ccf5ecdee443fc6eb9f7eb173c3455946a9f1a686b27a358426c5e33c610d71a2593422ae10dc8577103a96fea038433db3797b6776e421db0540c4462bb61e1e1e7cb455aa56c70089c738ad5ecf0ae664281fa88010034d5854c279539a3d57b5c9331adcec0e3156d879911f91b8e4c901178e17f667123d6a4899431f65ae7888d33e0dec1fbe362d5b563043d4f635e95d0275c3ebdc35c7b2741f486f5cd51e9d2ded810a570c99a275ad537167066fc2f83d39eb5b1c1527ba48efd638b8d310cc8e6449fa1d909ca932a196f8918bbed77e858fe5cab01048b9ca90bb2072315c680252f350072b49229bb3b075f4ebae0ce070ea71ce182bceae71034d0e605b76d6526697b7b7a611af666460187ce7e285797ab0387616ce089eae75559114c2a42c857a4f4e843efecce9fdc57435a5014d55a419690cf3b26fca303e9ef6d57f95ca44adfff167a9fa776c58bdfad21297c1a1d438c03e302d1432ed15b2752136669ef8a41832893de1b52c7c8887155348fb40dc33365eb709cffcc6b236058b3ad77cc4d8306cdb0988c653890802530c3804896b22b22a3e6126c047944685828d65705068eb0f0d8f30a0d6e0c5d0212fd2f4fe09270b42d17f82c1f80d73f31459b793341469e845292911840ce01c1e954a2bca0b617e17517b9bb18be69b80f2c2c8a347156a4d61378bc9a135bc666783189da0688f7eb9550be0d349fb68a41520ef2482ce5b938a45c7d0a21f5170ab67e3eb38f20d56c154502503f822056c1b9c96f776eb4149c9f781973a74cdc09324321c393913c0e4427959767ccdc536066cfce32702bfe73e4ffd7011dea4c13c6ff6b9c62a47023aa90e27406347fc059786d715e973c82cbaa56d2c72350525a43b9715d7ca8d551c9c6373823f7c7b799c7a734b543da657e0808babc2e08e5e8ae9763d2c0defdf12dcd370b1e82a2da89e5670cf40579793ddd75fdec3ea9632b4c6b25b7dc2ff073709a974148fb21bc453e8fdaab85f2fb15d5cf2fab299c2e271286736fda3cb164979eb8a7faef1a7677453e15fad682c634366d2011293fa88da9f150cd3f8424618dd206c1f176eff31a19245cc3e5600805e6e00c55d4ba17c5008aa11cacfaffe19de198ad3da8dcc2e4fd9d00acea8325e15d62d4227f92cadb1cc4a74f7419016f33ed7f2823e24b1ddc4b363cb3494f993e4876049e1975e36cd90a69537c974b67092d466d233122987a413be5fc67a15f4a445fc2ca6fe467c59402fac6b066403f28e295c9a1d7f8ea262308cdc9f333edb33dcb9123239bd3c22252e8b9d2a8a78c5e7423437fe2077a0b4b10c30f0184741eb8b6c3344719dfe22d68b78114d1887f7e1333ad2931637f277d5dcaa7346cbebc11a9b23b0339a072e122523678da34ba8d4a16f3950aff32ac2d51e3c99dd52ce27bbe837d52fe581d393cfcd1010133b29a18feaecf528154b06e6576761e8de820399afc9bf42bfb82392827abda264da8dd4059a2de954ea19e3d98af8fb2bf957efcbc07b9bc16b0af15cfb978f8920a867530206eb5ec4b8b4939757613b833092b11eaedc7f59c5d8b86745bbdd6bdd26176fa00805d3315891a994e1bda397624e8b9c35c3bbd216acfc2b214d7660f5c81393b4ed6d0e2aa6103bc74d2d7e5fe8e818ef0e4212a5902bbe6adf79097079aabc33f3d34cc99a81328c01894662a73e9ef12808f84687af1e67c4ff345fff26fb2aa50b90adb588afaddfbbc09fff2f89ab84b75248140fb13f272558418b90b425a2f102b371e2772978c4d2914e4c2d7363ecab0f4bd53833c39d78137fcbb2f74560a77e660fd4d6d586a7747ee213fec1895f9698733bb5c1cc2cbbf8cf7b0c9fa2b2d63c455d2ecacc018b77d0a0675340649982cb22506f7feaa78d23ecdedf384d1c03f0e6206a1835a53b5b544d043bf524c3baf656a2ed25766eef74bf5ccdc7c6ae05a2f7283d748737e23f4ff62fb15ad3758412adebe36142595a447811c1a843ff14145deb283d404d0ad54504503d0298a269fbfefb43135cb35d83f7d5f72cf065a0022dbfc701203ff40d7889bd5c7ee804cf23b2ce16baecfeb7921efceacdab4b1ec335a0b93f46a795ab6f949043b20c37ed2b5f425160068823ea811357ec6a51695f057dadb5e2a1302b9d3c37c9b95da0c2f308ff00ee7fa4dcc3469db0b3a006d1f9a17dee8982bd71f496edf7b61a10693a8aa6e49bd49e33c2ed645efcc06cffdcff92c6992ec4d61a63df8105f37c3b4adc27c3db3a386ea123601df0881b58127cad197eb273080a2c2414114a1b982082307369880b125c9c3593c4d8a676c5301e22247780504a316bb817c1b6118a1165db942a10038ad5dc60a01bf5dbbf31cde52bbf73132e93eb8e9d34f6428b4f4728699a0db8f3c469f9edfd2c91bc61c22922a749d08e5e72bc330bdf53c736a13835d73ed11b66e150a5a85685f159a2f0b0aa89b8cbe905fee8b17fb90dc44cf4341493c615b4dc0aff29b63d14375b406e589ac97aacd1c2bbe35ad9d8a039d1b9b5fe09b61e6ec3db32a4037a21a7e028e777eb6462650585b2e456d120aca88385135b277d369bd761dab0586a1452694326e657d29e93861228ae7b6db3b8799a2178580cdaf8f9dad60d8997099b37b7e537aa766b93e18e003ed7ee2fa46edf59e16e09f10af9a7e1800712a63f34f2e7a1bacfc7eb6590f5627f94ab2ac1d72a668c8f9e8a72e3c341995ac1dd2ed49ea99646082cc02ff69d58e31e9cc453fc8f271f8a0be8a57aab8dd693843ca59f228cbebab0accb1292f09bd67185e06f108e940169e47080668bb965e12e658889b490eb03fe918bc7d85aa3e768c27c31fcbafd1a5cd3e9bd095acf12494874d0c8ae6735f6ee15094060eaa8d4563e91f67b1271c4e99311daf8e02ddf324fbb5624f66382fee5622a251e9697cb0664d6220da01458f895001067543e2ef4b7fb6b2f32c3b48d29f2b9ca2aea8d2db809afbf08f4ff712e2c2923a659a9b5bea48fc68456aa9dc9167897e81adc94b87e48371f43e86ff9e055ccb9271c514e785c01a7150a012c1abdf73203d326ba8f1f2ec4bbc280c262025b444986bd44ca6c00948dff1f1e2db12ead0757433fdcf663f8b4eb88191a05fc9d5f375c06ab4b33ab55f44dab3dbe4a0d1c37b7ebbeb2428f894341e7d30ece0ae90640a951ea4c192baa820a87e184fa1b4e69036f80f19b1ff46d3af9963fcfa6ebe5aad5d8398a5f4326650c407338bc46f1789522a84533237fd16b028a0d501e36cce06927558da43d6a488c3125f51e036b124775ac1bd984e6cbcd25cf311173c24ddc20f6618401f6595d04ab68d1f50a6cd7761e6c89f191515e0a38837556a864db727aec4fd949de55faed6c47a36bdd1353a1b6fabe07fabe58b0df82c7f92ae34dccd2284f311a9cfe503e4a7788bbbee7d918ffba69962f0060753ab97e8d2db2b4e6d4710c3015bac4de7aff055195550a6f540c98a5375c5664fc8efdb6389a5586b51a5ff749aa5b6ca928ca00a", 0x1000}, {&(0x7f0000001740)="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", 0x1000}, {&(0x7f0000002740)="07abdedfe01c02dc0d7cfa3c7a6b8c203521fd1325834cc6863153451b86cce4b5adecc53fec6ea6ce8be9408e9a62b3eee806891483efaee2de08d5f199e0179ff01b6755430e9e466bbf853295d2e671444e67668596aff850a598", 0x5c}, {&(0x7f00000027c0)="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", 0x1000}, {&(0x7f00000037c0)="22db7d58cc42da1b30a6f9831f7bfcb557eb02c725e0cc774d7564e60bd6b615c22ab535be81f15d1a8d7e269733f9f383faeba9d81d46056479a8980a51eaee84d40c7219e8f880d30b", 0x4a}], 0x8}, 0x40008) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x503502, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000080), &(0x7f0000000140)=0x8) r3 = accept4(r1, 0x0, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x0, 0x1) futex(&(0x7f00000002c0)=0x2, 0x4, 0x1, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340)=0x1, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r7, r8, 0x0, 0x1000007ffff000) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r7, 0x800442d2, &(0x7f0000000500)={0x9, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @random}]}) r9 = accept4(r5, 0x0, 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ipv6_rou\x00') r11 = getpgid(0x0) ioprio_set$pid(0x2, r11, 0x10000) sendfile(r9, r10, 0x0, 0x1000007ffff000) r12 = gettid() fcntl$lock(r9, 0x0, &(0x7f0000000280)={0x0, 0x1, 0x2, 0x9, r12}) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0xb4de, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0='bpq0\x00', 0x8, [@default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @null]}) sendfile(r3, r4, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000180), 0x4) 21:27:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r4, r5, 0x0, 0x1000007ffff000) r6 = dup3(r2, r5, 0x80000) ioctl$SG_SET_COMMAND_Q(r6, 0x2271, &(0x7f0000000080)) r7 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r7, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) ioctl$SIOCRSGL2CALL(r7, 0x89e5, &(0x7f0000000040)=@netrom) r9 = accept4(r8, 0x0, 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r9, r10, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:27:59 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c0000000000000000", 0x7a, 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:27:59 executing program 5: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{0x0}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x2b1, 0x0) [ 444.707357] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pig=15017 comm=syz-executor.5 21:28:00 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c0000000000000000", 0x7a, 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:28:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f00000002c0)={0x2c1, 0x8, 0x10000, 0xf1, &(0x7f0000000140)=""/241, 0x14, &(0x7f0000000240)=""/20, 0xa, &(0x7f0000000280)=""/10}) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r4, r5, 0x0, 0x1000007ffff000) kcmp$KCMP_EPOLL_TFD(0x0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000080)={r2, r5, 0x7f}) r6 = socket$alg(0x26, 0x5, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r6, 0x400c6615, &(0x7f0000000300)={0x0, @adiantum}) bind$alg(r6, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r7, r8, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r10, r11, 0x0, 0x1000007ffff000) write$USERIO_CMD_SEND_INTERRUPT(r11, &(0x7f0000000340)={0x2, 0xc0}, 0x2) listen(0xffffffffffffffff, 0x0) 21:28:00 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/126, 0x7e, 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:28:00 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/126, 0x7e, 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:28:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000040)={'raw\x00', 0x40, "058079a75828155d2b7255206c803d8a022aa27c6ebd013f1f3f0d7f872a60db01bb15819ceed9eb449cf6be8862146be22116f7341dd6981a5daf38f3b7ab52"}, &(0x7f0000000140)=0x64) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:28:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x1, 0x16c882) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000004c0)={0x4, 0x7, 0x2, 0x215, 0xa, [{0xd5, 0x3dd28000000000, 0x5, 0x0, 0x0, 0x80}, {0x401, 0xc4d, 0xb7e0}, {0x40, 0x4, 0x2, 0x0, 0x0, 0xf06}, {0x3, 0x0, 0x1, 0x0, 0x0, 0x1000}, {0xe7c, 0x3, 0x100000000, 0x0, 0x0, 0x8}, {0x80000000, 0xe52, 0x7, 0x0, 0x0, 0x200}, {0x3, 0x7fff, 0x80, 0x0, 0x0, 0x2903}, {0xff, 0x1f, 0x3, 0x0, 0x0, 0x4}, {0x200, 0x0, 0x1, 0x0, 0x0, 0xc}, {0x6, 0x200, 0x1f}]}) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x80800) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r4, r5, 0x0, 0x1000007ffff000) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r5, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40001002}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)={0x248, r6, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x1c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x40, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x97}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa26c}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}]}, @TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2d0}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100}]}, @TIPC_NLA_LINK={0x60, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x70}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}]}, @TIPC_NLA_BEARER={0xbc, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x5, @local, 0x7fff}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1a7, @mcast1, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7, @loopback, 0x1}}}}]}, @TIPC_NLA_NODE={0x40, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5278}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x30}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x621}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x1}, 0x1) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000040)={{0x5, 0x0, @descriptor="b25111696ef2ce76"}}) listen(0xffffffffffffffff, 0x0) 21:28:00 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0xf000000) 21:28:00 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x5450, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:28:00 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/126, 0x7e, 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:28:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r4, r5, 0x0, 0x1000007ffff000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3cd80000", @ANYRES16=r7, @ANYBLOB="39040000000000000000090000009bfd03000800010001000000080003000000000014000200636169663000"/54], 0x3c}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x48, r7, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffffb}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0xe5b7409c8752a6d6}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x10000}]}]}, 0x48}}, 0x10) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r8, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp\x00') ioctl$TCSETS2(r9, 0x402c542b, &(0x7f0000000280)={0x10001, 0x1, 0x3, 0x1, 0x8f, "6d9360e57ea5b346fe77da5012dfc27b713c60", 0x0, 0x7be}) listen(0xffffffffffffffff, 0x0) 21:28:00 executing program 5: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{0x0}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x2b1, 0x0) 21:28:00 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/128, 0x80, 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:28:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x60, 0x0, 0x8, 0x1, 0x0, 0x41bd, 0xa09a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0x4}, 0x400, 0x7fffffff, 0xebac, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f00000002c0)={{0x3, 0x0, 0x969, 0x10001, '\x00', 0xff}, 0x0, [0x5e, 0x0, 0x4, 0xffff, 0xb0e1, 0x5, 0x4, 0x7f, 0x80000000, 0x7f, 0x10000, 0xfffffffffffffff9, 0x9, 0xfffffffffffff001, 0x800, 0x3, 0x5, 0x3f, 0x9, 0xa09, 0x8, 0x100000000, 0x6, 0xcc00000000000000, 0x8, 0x0, 0x2, 0x58, 0x100, 0x0, 0x7, 0x5, 0x5, 0x1f, 0x0, 0x6, 0x21f02edc, 0x1, 0xf5, 0xffff, 0x8, 0x0, 0x80000001, 0x5, 0x2, 0x200, 0x4, 0xfffffffffffffff7, 0x62, 0x4, 0x3fffffff8000, 0x80000000, 0xfff, 0x211, 0x5, 0x30, 0x100000001, 0x8, 0x8, 0x6, 0x5, 0x1, 0x6, 0x7f2, 0x8, 0x100000001, 0x3, 0x0, 0x9, 0x6, 0x1f, 0x3, 0x7fff, 0x9, 0x2, 0x200, 0x9, 0x8ed, 0x80000000, 0x1000000000000, 0x8, 0x64, 0x9, 0x9, 0x5e2, 0x81, 0x3, 0x8, 0x200, 0x800, 0x6, 0x8, 0x0, 0x2, 0x7, 0x0, 0x8000, 0x4, 0x2e09, 0x8, 0x0, 0x100000001, 0x9, 0x9, 0x1, 0x5, 0x2, 0x5ae, 0x0, 0x80, 0x9954, 0x4, 0x0, 0x8, 0x7, 0x0, 0x59cf, 0x1000, 0x8001, 0x100000000, 0x0, 0x8000, 0x1, 0xff, 0x487, 0x0, 0xa56, 0xffffffffffff8000], {0x0, 0x1c9c380}}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = socket(0x2000000000000021, 0x0, 0x10000000000002) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "98cd2741ed306bf3", "22f4509f68f89df8678538d7a1973a87c37d7569409b402071584ea9379f95f0", "59719a92", "86ab9b376fd09e3d"}, 0x38) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x20) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000011c0)={r4, 0x9878, 0x400}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={r4, 0xd3}, &(0x7f0000000140)=0x8) r5 = accept4(r2, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r5, r6, 0x0, 0x1000007ffff000) ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x6, 0x3, 0x6b}) r7 = accept4(r1, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r7, r8, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x0) [ 445.653542] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pig=15061 comm=syz-executor.5 21:28:01 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/128, 0x80, 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:28:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x80, &(0x7f0000000040)=[@in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e20, 0x9, @mcast2, 0xa0}, @in6={0xa, 0x4e20, 0x86a, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, @in6={0xa, 0x4e23, 0x3f77, @loopback, 0x4b8}, @in6={0xa, 0x4e23, 0x4e9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x4, 0x4}, 0x90) 21:28:01 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/128, 0x80, 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:28:01 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/129, 0x81, 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:28:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-sse2\x00'}, 0xfffffffffffffe6c) accept4(r1, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = accept4(r0, 0x0, 0x0, 0x800) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') r4 = getegid() setregid(0xee01, r4) sendfile(r2, r3, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x0) 21:28:01 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0x12000000) 21:28:01 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x5451, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:28:01 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/129, 0x81, 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:28:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1a012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x10361}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x0) 21:28:01 executing program 5: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x2b1, 0x0) 21:28:02 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/129, 0x81, 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) [ 446.642360] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pig=15112 comm=syz-executor.5 21:28:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f0000000080)='./file0\x00', 0x1, 0x8, &(0x7f0000000580)=[{&(0x7f0000000140)="06e700a40e5544ebf0c4a2e14262a9237051faa14dd63ccd1ee5b4e0cf571446332e67ed6fac43402763750764543a1c3d6eb7a09771e7e2b666fb6316b5ad26e3930d83d16bc46025885ab0f6f67a", 0x4f}, {&(0x7f00000001c0)="cc2c3ea1d3b533ac8c753c646b2ee698423c521e3f5783b29d830bd07757b647fb0a8c3a1c51faaeee8246f9cdab2c328ccbaabfb2a3360defd3e6bd1c356793683d738b26697a47f913770cfc92963318e64295d59ab988bfa202f8a2a21876720019a050f969aa4132dc90f314af", 0x6f, 0x7}, {&(0x7f0000000240)="47a992098ac2a0ed537eb0286733eaa1c3916117ec7ba27c0d", 0x19, 0x7ff}, {&(0x7f0000000280)="f850fa0a571d8a0a2ad44e03306fdc609a356c06a5c55122c662c342b89e1ecc721ae587f5b504b1ca821f17fee780323aafa4c6b5c885e80a4088a284826715dd9744d706aeda6a559e9df7cf05ba9a7dd89dbbc721a751efca07135f165c5c13d4f11893b994eff332c086193162f2775954fd52d28d5239551305226465e8b406926a717fa7290975f359bcd72fc873d24b89dce9b6", 0x97, 0x4}, {&(0x7f0000000340)="bc3be0c26f5ded7c9cd1d47c8eefef9a8c58bfded573cd5ff35300afd4c2fe4754d6092bb21e1bc8975b179b1af0e8da0c7feff2a031d0f8b2089c6715af98bd486ceafe2b6aac99e9eaf8e929fea94e67aeddd0bdb0cc037fed3a71ad9f65822db6262b4aa7", 0x66, 0x9}, {&(0x7f00000003c0)="d4628bb88449883f33cd76fc03742a3a1e808ce6b2293cb3c9b1a1ee00c1cf975398d58bced05d97505284ee8aa0fac2ca18884983b5abc66542d8f5e556cfedeaff71f0602167aed5fe84d411f2aa9cedd397a5ca7567eaafd780c67d26f2001310444d99ac1abcf2bc", 0x6a, 0x7}, {&(0x7f0000000440)="675b930b16e7ab4f9ea0a9c920583bc8e5f1bc792fe835f958e12beb6930d96861202b6ae4b1410229745a9eb8396be7c1731b6a62c4567ce1bfe86031fa04e89fe59006f720f84f5268cfc07f3f50a77732f4e14c46901d4c0260d9976aba5a476b8d", 0x63, 0x7}, {&(0x7f00000004c0)="40ad1329a13101926c37ee30f7f816d8cc75b6a2a8dba1e05c5782c48edae53496e82badfcd409dfc927c99e374739ef5155ff3819406f1b1377264b80e1d6e6ed6e048dcb8a17ea3628e405cca6de61e2f61589571c6de07e1dd85a20373da6039eb3072ead6bdc1aaa9aa22669e150d12400efd56c6c3e09e8b01c7205f2898ffee640adcc5d", 0x87, 0xf7}], 0x1804024, &(0x7f0000000640)={[{@localflocks='localflocks'}, {@locktable={'locktable', 0x3d, '{wlan0cpuseteth0Ksecurity;.)trustedsystemnodevbdevem0}'}}], [{@obj_type={'obj_type', 0x3d, 'sha3-256\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ':vmnet1\'!@GPLprocsystem'}}, {@fsmagic={'fsmagic', 0x3d, 0x8}}, {@hash='hash'}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@obj_type={'obj_type'}}]}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x0) 21:28:02 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:28:02 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:28:02 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0x13000000) 21:28:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1d80000000000, 0x191}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0x80, 0x7f, 0x6, 0xffff}, {0x8, 0x3, 0xd5, 0x6}, {0x99cb, 0x0, 0x8b, 0x4}]}) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) getsockname(r1, &(0x7f0000000040)=@ethernet={0x0, @remote}, &(0x7f0000000140)=0x80) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x0) 21:28:02 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:28:02 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x5452, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:28:02 executing program 5: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x2b1, 0x0) 21:28:02 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, 0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) [ 447.546139] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pig=15152 comm=syz-executor.5 21:28:03 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, 0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:28:03 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, 0x0, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:28:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r0 = socket(0x2000000000000021, 0x0, 0x10000000000002) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{}, "98cd2741ed306bf3", "22f4509f68f89df8678538d7a1973a87c37d7569409b402071584ea9379f95f0", "59719a92", "86ab9b376fd09e3d"}, 0x38) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x20) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000011c0)={r1, 0x9878, 0x400}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000140)={r1, 0x8f}, 0x8) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) sysinfo(&(0x7f0000000040)=""/20) r3 = accept4(r2, 0x0, 0x0, 0x0) time(&(0x7f0000000080)) r4 = fcntl$getown(0xffffffffffffffff, 0x9) r5 = syz_open_procfs(r4, &(0x7f0000000180)='task\x00') sendfile(r3, r5, 0x0, 0x1000007ffff000) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r9, r10, 0x0, 0x1000007ffff000) ioctl$KVM_SET_GSI_ROUTING(r10, 0x4008ae6a, &(0x7f00000002c0)={0x7, 0x0, [{0x3ff, 0x3, 0x0, 0x0, @irqchip={0x80000000, 0x5}}, {0x80, 0x4, 0x0, 0x0, @irqchip={0x80000001, 0xf69}}, {0x9, 0x2, 0x0, 0x0, @sint={0x60, 0x6}}, {0xbab, 0x1, 0x0, 0x0, @adapter={0x7, 0xffffffffffffea8c, 0x45b2, 0x4, 0x6}}, {0x7, 0x4, 0x0, 0x0, @msi={0x3, 0x800}}, {0xff8, 0xc, 0x0, 0x0, @sint={0x9, 0xcab}}, {0x1, 0x4, 0x0, 0x0, @irqchip={0x4, 0x9}}]}) r11 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r7, r11, 0x0, 0x1000007ffff000) listen(r11, 0x0) 21:28:03 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:28:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) accept4(r5, 0x0, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x40800) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r6, r7, 0x0, 0x1000007ffff000) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x9, 0x6, 0x9, 0x0, 0x0, 0x7ff, 0xdf182d066c37aab8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7, 0x7fff}, 0x100, 0x8, 0x6, 0x9, 0x8, 0xffffffff, 0x9}, r3, 0xc, r7, 0x0) sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x0) bind$netrom(r1, &(0x7f0000000180)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) 21:28:03 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0x14000000) 21:28:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f00000001c0)={0x1, @win={{0x8, 0x0, 0xc14}, 0x7, 0xe5, &(0x7f0000000080)={{0x8, 0x2, 0x898a, 0xc8d}, &(0x7f0000000040)={{0x72, 0x0, 0x7f}}}, 0x7fffffff, &(0x7f0000000140)="07362160d9af3d4affb5276472798bc406be510a210549a2e66aa4c749e71621bd1c2eb488a8d4b88bc3336b54cbdf6bf5ad29a40aea9d91edb90b99a3d6d16d6fd7441e83d603daad33f9", 0x9}}) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r4 = accept4(r0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r4, r5, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x0) 21:28:03 executing program 5: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x2b1, 0x0) 21:28:03 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x5460, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:28:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) close(r3) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000040)={[{0x200, 0xb0, 0x1, 0x24, 0x0, 0x80, 0x89, 0x6, 0x5, 0x7, 0x9a, 0x9, 0xaf2}, {0xfff, 0xd78, 0xef, 0xe, 0x7f, 0x1, 0x0, 0x0, 0xda, 0x8, 0x5, 0x6, 0x3f}, {0x1, 0x2, 0x2, 0x2, 0x0, 0x4, 0x5, 0x8, 0x80, 0xff, 0x9, 0x4, 0x10000}], 0x10000}) sendfile(r1, r5, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x0) [ 448.456134] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pig=15197 comm=syz-executor.5 21:28:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="331e3e5305d939c5a24316ef7dabfe12", 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x0) 21:28:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r5, r6, 0x0, 0x1000007ffff000) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r8, r9, 0x0, 0x1000007ffff000) recvmsg(r9, &(0x7f0000000f00)={&(0x7f0000000500)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000300)=""/169, 0xa9}, {&(0x7f0000000640)=""/170, 0xaa}, {&(0x7f0000000700)=""/217, 0xd9}, {&(0x7f0000000800)=""/172, 0xac}, {&(0x7f0000001040)=""/252, 0xfc}, {&(0x7f00000009c0)=""/227, 0xe3}, {&(0x7f0000000ac0)=""/193, 0xc1}, {&(0x7f0000000bc0)}, {&(0x7f0000000c00)=""/195, 0xc3}, {&(0x7f0000000d00)=""/194, 0xc2}], 0xa, &(0x7f0000000ec0)=""/12, 0xc}, 0x2) sendmsg$can_raw(r6, &(0x7f0000001000)={&(0x7f0000000f40)={0x1d, r10}, 0x10, &(0x7f0000000fc0)={&(0x7f0000000f80)=@can={{0x2, 0x0, 0x1}, 0x2b, 0x946f39e1646fef3d, 0x0, 0x0, "147fe7a514af0c48"}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x20000) r11 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) syz_mount_image$hfs(&(0x7f0000001640)='hfs\x00', &(0x7f0000001680)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001f40)={[{@gid={'gid', 0x3d, r12}}]}) chown(&(0x7f0000000040)='./file0\x00', r3, r12) r13 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r13, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x0) 21:28:04 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0x15000000) [ 449.000464] hfs: gid requires an argument [ 449.022329] hfs: unable to parse mount options 21:28:04 executing program 5: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427", 0x9}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x2b1, 0x0) 21:28:04 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x40049409, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:28:06 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0x3f000000) 21:28:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r4, r5, 0x0, 0x1000007ffff000) sendmsg$rds(r5, &(0x7f0000001800)={&(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000140)=""/245, 0xf5}, {&(0x7f0000000240)=""/97, 0x61}], 0x2, &(0x7f0000001840)=ANY=[@ANYBLOB="1800000000000000140100000c0000000400000000000000480000000000000014010000010000000900000002000000", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00'/28], @ANYBLOB="1c00000000000000", @ANYPTR=&(0x7f0000001300)=ANY=[@ANYPTR=&(0x7f0000000300)=ANY=[@ANYBLOB='\x00'/4096], @ANYBLOB="0010000000000000"], @ANYBLOB="0100000000000000400000000000000004000000000000005800000000000000140100000900000000fcffff05000000", @ANYPTR=&(0x7f0000001340)=ANY=[], @ANYPTR=&(0x7f0000001380)=ANY=[@ANYBLOB="0500000000000000"], @ANYBLOB="04000000000000003f00000000000000d200000000000000ffffff7f00000000040000000000000009000000000000005800000000000000140100000800000001000000ff7f0000", @ANYPTR=&(0x7f00000013c0)=ANY=[@ANYBLOB="0100000001000000"], @ANYPTR=&(0x7f0000001400)=ANY=[@ANYBLOB="0a84000000000000"], @ANYBLOB="09000000000000000500000000000000000001000000000020000000000000000a000000000000000500000000000000580000000000000014010000060000008100000001040000", @ANYPTR=&(0x7f0000001440)=ANY=[@ANYBLOB="0101000000000000"], @ANYPTR=&(0x7f0000001480)=ANY=[@ANYBLOB='4\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="050000000000000000006e06000000000600000000000000ff070000000000009c0000000000000001040000000000001800000000000000140100000c000000e10000000000000030000000000000001401000003000000", @ANYPTR=&(0x7f00000014c0)=ANY=[@ANYBLOB='\x00'/49], @ANYBLOB='1\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f00000015c0)=ANY=[@ANYRESDEC=r5], @ANYBLOB="10000000003f00000400000002b428396120866979b92a289700000000500000000000080000000000000000", @ANYPTR=&(0x7f0000001540)=ANY=[@ANYBLOB="0500000000000000"], @ANYPTR=&(0x7f0000001580)=ANY=[@ANYBLOB="9400000000000000"], @ANYBLOB="09000000000000000100000000000000e9da352900000000010000000000000005000000000000000500000000000000"], 0x214, 0x20014}, 0x0) 21:28:06 executing program 5: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427", 0x9}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x2b1, 0x0) 21:28:06 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x40086602, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:28:06 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:28:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r4, r5, 0x0, 0x1000007ffff000) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x2, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r8, r9, 0x0, 0x1000007ffff000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r9, 0xc00c642d, &(0x7f0000000080)={0x0, 0x40000, r5}) r11 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x420100, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f00000001c0)={r10, 0xc0000, r11}) r12 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x0, 0x0) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r14 = accept4(r13, 0x0, 0x0, 0x0) r15 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r14, r15, 0x0, 0x1000007ffff000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x3) r16 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setlease(r16, 0x400, 0x3) write$nbd(r12, &(0x7f0000000240)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[@ANYRES16, @ANYRESOCT=0x0, @ANYRES64=r15, @ANYBLOB="a86a2ce5f33ada381736b893c97f73277f336b90b6bc4e072367ac578bfb80585810e82c4cc18e1f"], @ANYBLOB="be6c43bc8dc244d83668b4ecd125db95b7f4a2e00126b8d951be2989cc808d542b515d69fca7bb52ba20785a28f6c974cea2d2c068d2845a92feb04beb5d5ccb357c29cca2356078c930d97434ebe373b8a17517fd12f73831f18a05347b222f24dae90e8b6b2dea78c6bd76e3c13ce87267449fc167507b26242ead00a2a88fa6", @ANYRESDEC, @ANYRES16, @ANYRES64, @ANYBLOB="d6f70c01a695c00c1bb38577e5eae8846b12e1834aea55b23fd3167d0cd7cb8d766b4c3d03415bfb7352196975dfe5f37ce2a45c784b41574da7a3c2c4371f217d57015012dd70d1b3d3b303a553ad209ed537f1547974df5e99a06da9d686e46e744f4a585e667f28577bf382555af1c62184ca0c4f35c53e80013bfff12e65d70f45561aabaf", @ANYRESOCT=r16], 0x7) r17 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r17, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:28:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0xe4ddc2d8b0c4115b, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000080)=0xdb) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r4, r5, 0x0, 0x1000007ffff000) ioctl$BLKROTATIONAL(r5, 0x127e, &(0x7f0000000140)) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r6 = accept4(r1, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r6, r7, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:28:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200), 0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='trusted.overlay.redirect\x00', &(0x7f0000000180)='./file0\x00', 0x8, 0x1a4e42086d82333) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000040)={0xc001805, 0x5, 0x4}) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f00000001c0)) accept4(r1, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') syz_open_dev$mouse(0x0, 0x3ff, 0x4c80c0) listen(0xffffffffffffffff, 0x0) 21:28:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r4, 0x522f58c7ff5ac33d}, 0x14}}, 0x0) sendmsg$FOU_CMD_GET(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000008}, 0x40) listen(0xffffffffffffffff, 0x0) 21:28:06 executing program 3: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000040)) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:28:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:28:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r5, r6, 0x0, 0x1000007ffff000) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100080}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r7, 0x0, 0x1000007ffff000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r7, 0x4277d89c11544573}, 0x10) r8 = accept4(r1, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r8, r9, 0x0, 0x1000007ffff000) dup(r8) r10 = accept4(r0, 0x0, 0x0, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r10, r11, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x0) 21:28:07 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0x40000000) 21:28:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x10100) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x100, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r8, r9, 0x0, 0x1000007ffff000) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) accept4(r10, 0x0, 0x0, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r12 = accept4(r11, 0x0, 0x0, 0x0) r13 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r12, r13, 0x0, 0x1000007ffff000) r14 = accept4(r4, 0x0, 0x0, 0x0) r15 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r14, r15, 0x0, 0x1000007ffff000) recvfrom$inet(r15, &(0x7f00000003c0)=""/12, 0xc, 0x40004000, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000380)={0x2, r5, 0x1}) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r16 = accept4(r1, 0x0, 0x0, 0x0) r17 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r16, r17, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) r18 = socket$alg(0x26, 0x5, 0x0) bind$alg(r18, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r19 = accept4(r18, 0x0, 0x0, 0x0) r20 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r19, r20, 0x0, 0x1000007ffff000) r21 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r19, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x6f04dc9153395921}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="7c0100000300000000000000572a25fb9e2918a5e6c5d9d3f92d134b4f070000008c0700b55aaacb713d1934c28587d7dbce82db705a3e07bc1e228b6f0186763baedd8b058caac4425e892677d0503001277f6c9af6d6cb936d28a5762a65355760c844f746a9a98c49c3ccdd2d90ebd8cf8c672dc6e161edadc17932dc004bba142897de45a7b49ff7b9a59a23945fdab2fd1b9980d62225d3371d01942b", @ANYRES16=r21, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 21:28:07 executing program 5: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427", 0x9}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x2b1, 0x0) 21:28:07 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x40087602, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:28:09 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f00000003c0)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:28:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) syz_mount_image$hfs(&(0x7f0000001640)='hfs\x00', &(0x7f0000001680)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001f40)={[{@gid={'gid', 0x3d, r5}}]}) syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000000200)="6606ce80bde61cb210758b64ec79d518d62fea2b6bb06d03239335992a2ee771188a9af892642e54b503b5d246baf7361ee2db3152d2eef2ac6bfdbee6c038b0d113ff99a176c3fb330e4911d6779543b7e161ef", 0x54, 0x1}], 0x60, &(0x7f00000002c0)={[{@gid={'gid', 0x3d, r5}}], [{@smackfstransmute={'smackfstransmute'}}, {@dont_hash='dont_hash'}, {@obj_type={'obj_type', 0x3d, 'net/ipv6_route\x00'}}, {@subj_user={'subj_user', 0x3d, 'user\xf2'}}, {@subj_type={'subj_type', 0x3d, 'eth0trustednodeveth1#*em0'}}]}) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r6, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:28:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x800140) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000080)={0x2, 0x4}) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="38f37fdba040c4d5415a871b0f01"], 0x0, 0xe}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) listen(0xffffffffffffffff, 0x8000000) ioctl$KVM_RUN(r4, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000400)={[0xfffffffffffffffc, 0x0, 0xffffffffffffffff, 0x0, 0x7fe, 0x0, 0x0, 0x8000000100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x3000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = accept4(r1, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r7, r8, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) sendfile(r10, 0xffffffffffffffff, 0x0, 0x1000007ffff000) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0xffffffffffffffda, 0x7}, 0x10) 21:28:09 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x4020940d, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:28:09 executing program 5: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c", 0xd}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x2b1, 0x0) 21:28:09 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0x59020000) [ 454.154216] hfs: gid requires an argument [ 454.159023] hfs: unable to parse mount options [ 454.221477] hfs: gid requires an argument [ 454.226358] hfs: unable to parse mount options 21:28:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffea4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f0000000080)=@v2={0x2, @adiantum, 0x1, [], "2d35b3dff0c1d4c0110741e6a1908ec9"}) listen(0xffffffffffffffff, 0x0) 21:28:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setlease(r0, 0x400, 0x3) ioctl(r0, 0x0, &(0x7f0000000140)="67cb07f11a49c0825c227bf13c618830b51d5656853f8572b6694824dd40be11eeda0d0e42aa82bc2b21655e832af3af42a8e095135da80ff714672f350b099084bcec268e") syz_open_dev$admmidi(0x0, 0x5, 0x80040) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r2, r3, 0x0, 0x1000007ffff000) r4 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x5, 0x4000) ioctl$DRM_IOCTL_GET_SAREA_CTX(r4, 0xc010641d, &(0x7f0000000080)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r6, r7, 0x0, 0x1000007ffff000) syz_open_dev$mouse(0x0, 0x3ff, 0x0) listen(0xffffffffffffffff, 0x0) 21:28:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r4, r5, 0x0, 0x1000007ffff000) mmap$usbfs(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, r5, 0x3) sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x0) 21:28:09 executing program 3: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='!lo\x00', r0) 21:28:10 executing program 3: mq_unlink(&(0x7f0000000240)='\x81\x00') 21:28:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) connect$bt_sco(r3, &(0x7f0000000080)={0x1f, {0x7, 0x13, 0x68, 0x10, 0x1, 0x80}}, 0x8) 21:28:12 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000540)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x4f5) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) r3 = gettid() recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) tkill(r3, 0x14) 21:28:12 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0, 0x0, [], 0x0, 0xffffffffffffffff, 0x5}, 0x3c) 21:28:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x5, 0x80040) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) connect$rxrpc(r0, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x8, @empty}}, 0x24) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000200)) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r3, r4, 0x0, 0x1000007ffff000) ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f0000000080)=0x5) r5 = accept4(r1, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={0x0, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e21, @local}, 0x200, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000140)='ip6gretap0\x00', 0x2, 0x6, 0x200}) sendfile(r5, r6, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x0) 21:28:12 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='\x06\x00\x00\x00!nt#\x00|\x00\n\xc8\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x80086601, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 21:28:12 executing program 5: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c", 0xd}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x2b1, 0x0) 21:28:12 executing program 4: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) socket$inet6(0xa, 0x3, 0x100000000000ff) r2 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x20000000010009, 0x60000000) [ 457.196325] audit: type=1400 audit(1574198892.537:80): avc: denied { map_read map_write } for pid=15367 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 21:28:12 executing program 3: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000002c008151e00f80ecdb4cb904014865160b0000dc01410000001200130e0206001500cd5edc2976d153b4", 0x301}], 0x1}, 0x0) 21:28:12 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0xc00c1) 21:28:12 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0xfffffffffffffffa, 0x4, {0x2, @raw_data="f79dd9524c61a7945790ca039664a46fa42cebdb98d059820d5a05496951095404dc369b487724b2cff745d5d908c9f0ea97b24954fbbd2f2ec1168573f130109611459c0df2733e93be33680e0e1fa26ffc8b668ecb501a181f33f5f0ee6b24d43cac905e9d1d35204a1084bd03ee2a4976b814f77784ab1a762ea8ed910b2b9dd87991ab05725ba663e0e4e37f7583203f4e144fdce1d512a0a3a0c2f611c52f4a9f9fc5f87d3258c77dd06c829e577151783ee64c56779e260d180578c6980e0d09c002f75222"}}) ioctl$VIDIOC_S_FMT(r0, 0x40045612, &(0x7f00000001c0)={0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) [ 457.527953] ================================================================== [ 457.535699] BUG: KASAN: use-after-free in v4l2_ctrl_grab+0x159/0x160 [ 457.542225] Read of size 8 at addr ffff8880a5adeba0 by task syz-executor.3/15394 [ 457.549772] [ 457.551461] CPU: 0 PID: 15394 Comm: syz-executor.3 Not tainted 4.19.84 #0 [ 457.558402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 457.567773] Call Trace: [ 457.570386] dump_stack+0x197/0x210 [ 457.574039] ? v4l2_ctrl_grab+0x159/0x160 [ 457.578208] print_address_description.cold+0x7c/0x20d [ 457.583509] ? v4l2_ctrl_grab+0x159/0x160 [ 457.587672] kasan_report.cold+0x8c/0x2ba [ 457.591902] ? vidioc_querycap+0x110/0x110 [ 457.596253] __asan_report_load8_noabort+0x14/0x20 [ 457.601205] v4l2_ctrl_grab+0x159/0x160 [ 457.605203] ? vidioc_querycap+0x110/0x110 [ 457.609452] vicodec_stop_streaming+0x158/0x1a0 [ 457.614137] ? vicodec_return_bufs+0x220/0x220 [ 457.618823] __vb2_queue_cancel+0xb1/0x790 [ 457.623088] ? vidioc_querycap+0x110/0x110 [ 457.627395] ? dev_debug_store+0x110/0x110 [ 457.631655] vb2_core_queue_release+0x28/0x80 [ 457.636250] vb2_queue_release+0x16/0x20 [ 457.640332] v4l2_m2m_ctx_release+0x2d/0x40 [ 457.644665] vicodec_release+0xc0/0x120 [ 457.648655] v4l2_release+0xf9/0x1a0 [ 457.652382] __fput+0x2dd/0x8b0 [ 457.655942] ____fput+0x16/0x20 [ 457.659324] task_work_run+0x145/0x1c0 [ 457.663240] exit_to_usermode_loop+0x273/0x2c0 [ 457.668022] do_syscall_64+0x53d/0x620 [ 457.671959] entry_SYSCALL_64_after_hwframe+0x49/0xbe 21:28:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000100)={0x0, 0x6}) r3 = syz_open_procfs(r2, &(0x7f0000000140)='net/\x00\x00\x00\x00\x00\x00\x00\x03a3wte\x00h\xfdj\xd6\xb5\xfe\x8e\xcb\f\xd4\x1a\xacng\x1d\xdc\t\xa7\x1ae\t\xe1\x90\x05<\x91\xc8\xdetIu\x7f\xf3}M:_\xad\xb7oDc4@\xca\xa1\x9b\xb2C\x8c\xd9X\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x9a>5r\x9c\xbc\x02d\x91\x11\x92\x1c3`A\xe0\x0e\x1c\x8b\x13hf\t\x1c\x1ez\xf1X\xf7\xbb\xab\x9a\xc0en#\xca\xea\xd1\xa2\'R\x02\x88\xad\xa7\xec\xc4\xea+\xbbm\x06\xd9\x82A\xbeV\b\x8cI\xb2gT\xc8B\xda\xa9C\xc0\xc8m\xc6\x01\x16c\xa4)\xf1\xde\xd8\'R\x12y\xbb\x15\x19\x0f\x87\xed\xc9\xd5#\x19\x7f\xbcJ\xd9\x14\xee\xb3\xbf=cN\xfd{\t\xfa\bm\xba\xd1S\xc1\x92\xd9\xdd\x026\xc6\xab\x1b<3\xc1\x9c\x0e&\xc3\xee 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 457.699274] RSP: 002b:00007f113eae1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 457.707010] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 000000000045a639 [ 457.714294] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 457.721615] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 21:28:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x0) r4 = dup3(r1, r3, 0x1c0000) openat$cgroup_subtree(r4, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) sendfile(r1, r2, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x0) [ 457.728904] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f113eae26d4 [ 457.736198] R13: 00000000004fb3b2 R14: 00000000004d3678 R15: 00000000ffffffff [ 457.743495] [ 457.745134] Allocated by task 15394: [ 457.748928] save_stack+0x45/0xd0 [ 457.752404] kasan_kmalloc+0xce/0xf0 [ 457.756138] __kmalloc_node+0x51/0x80 [ 457.759956] kvmalloc_node+0x68/0x100 [ 457.763781] v4l2_ctrl_new.part.0+0x214/0x1450 [ 457.768380] v4l2_ctrl_new_std+0x22d/0x360 [ 457.772627] vicodec_open+0x1a8/0xb30 [ 457.776436] v4l2_open+0x1b2/0x360 [ 457.779997] chrdev_open+0x245/0x6b0 [ 457.783728] do_dentry_open+0x4c3/0x1210 [ 457.787831] vfs_open+0xa0/0xd0 [ 457.791130] path_openat+0x10d7/0x45e0 [ 457.795031] do_filp_open+0x1a1/0x280 [ 457.798845] do_sys_open+0x3fe/0x550 [ 457.802567] __x64_sys_openat+0x9d/0x100 [ 457.806637] do_syscall_64+0xfd/0x620 [ 457.810446] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 457.815723] [ 457.817431] Freed by task 15394: [ 457.820813] save_stack+0x45/0xd0 [ 457.824277] __kasan_slab_free+0x102/0x150 [ 457.828527] kasan_slab_free+0xe/0x10 [ 457.832337] kfree+0xcf/0x220 [ 457.835451] kvfree+0x61/0x70 [ 457.838571] v4l2_ctrl_handler_free+0x4a8/0x7e0 [ 457.843251] vicodec_release+0x6b/0x120 [ 457.847239] v4l2_release+0xf9/0x1a0 [ 457.850961] __fput+0x2dd/0x8b0 [ 457.854256] ____fput+0x16/0x20 [ 457.857550] task_work_run+0x145/0x1c0 [ 457.861453] exit_to_usermode_loop+0x273/0x2c0 [ 457.866051] do_syscall_64+0x53d/0x620 [ 457.869950] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 457.875137] 21:28:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, @perf_bp={0x0}, 0x1010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(0x0, 0x5, 0x80040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0xfffffffffffffd5e) r1 = accept4(r0, 0x0, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x1000007ffff000) listen(0xffffffffffffffff, 0x0) [ 457.876775] The buggy address belongs to the object at ffff8880a5adeb80 [ 457.876775] which belongs to the cache kmalloc-256 of size 256 [ 457.889639] The buggy address is located 32 bytes inside of [ 457.889639] 256-byte region [ffff8880a5adeb80, ffff8880a5adec80) [ 457.901556] The buggy address belongs to the page: [ 457.909457] page:ffffea000296b780 count:1 mapcount:0 mapping:ffff88812c3f07c0 index:0x0 [ 457.917612] flags: 0x1fffc0000000100(slab) [ 457.921856] raw: 01fffc0000000100 ffffea00024dbc48 ffffea00027d3248 ffff88812c3f07c0 [ 457.929765] raw: 0000000000000000 ffff8880a5ade040 000000010000000c 0000000000000000 [ 457.937653] page dumped because: kasan: bad access detected [ 457.943395] [ 457.945031] Memory state around the buggy address: [ 457.949978] ffff8880a5adea80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 457.957354] ffff8880a5adeb00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 457.964816] >ffff8880a5adeb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 457.972185] ^ [ 457.976612] ffff8880a5adec00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 457.984072] ffff8880a5adec80: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 457.991527] ================================================================== [ 457.998894] Disabling lock debugging due to kernel taint [ 458.012673] Kernel panic - not syncing: panic_on_warn set ... [ 458.012673] [ 458.020099] CPU: 1 PID: 15394 Comm: syz-executor.3 Tainted: G B 4.19.84 #0 [ 458.028424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 458.037789] Call Trace: [ 458.040389] dump_stack+0x197/0x210 [ 458.044071] ? v4l2_ctrl_grab+0x159/0x160 [ 458.048298] panic+0x26a/0x50e [ 458.051503] ? __warn_printk+0xf3/0xf3 [ 458.055405] ? v4l2_ctrl_grab+0x159/0x160 [ 458.059632] ? preempt_schedule+0x4b/0x60 [ 458.061582] kobject: 'loop2' (0000000069446339): kobject_uevent_env [ 458.063795] ? ___preempt_schedule+0x16/0x18 [ 458.063809] ? trace_hardirqs_on+0x5e/0x220 [ 458.063825] ? v4l2_ctrl_grab+0x159/0x160 [ 458.063839] kasan_end_report+0x47/0x4f [ 458.063853] kasan_report.cold+0xa9/0x2ba [ 458.063865] ? vidioc_querycap+0x110/0x110 [ 458.063883] __asan_report_load8_noabort+0x14/0x20 [ 458.072003] kobject: 'loop2' (0000000069446339): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 458.074771] v4l2_ctrl_grab+0x159/0x160 [ 458.074784] ? vidioc_querycap+0x110/0x110 [ 458.074795] vicodec_stop_streaming+0x158/0x1a0 [ 458.074807] ? vicodec_return_bufs+0x220/0x220 [ 458.074821] __vb2_queue_cancel+0xb1/0x790 [ 458.074834] ? vidioc_querycap+0x110/0x110 [ 458.074845] ? dev_debug_store+0x110/0x110 [ 458.074862] vb2_core_queue_release+0x28/0x80 [ 458.080155] kobject: 'loop5' (00000000236f7685): kobject_uevent_env [ 458.083408] vb2_queue_release+0x16/0x20 [ 458.083426] v4l2_m2m_ctx_release+0x2d/0x40 [ 458.083438] vicodec_release+0xc0/0x120 [ 458.083451] v4l2_release+0xf9/0x1a0 [ 458.083464] __fput+0x2dd/0x8b0 [ 458.083477] ____fput+0x16/0x20 [ 458.083489] task_work_run+0x145/0x1c0 [ 458.083509] exit_to_usermode_loop+0x273/0x2c0 [ 458.089301] kobject: 'loop5' (00000000236f7685): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 458.091623] do_syscall_64+0x53d/0x620 [ 458.096428] kobject: 'loop0' (0000000027361cef): kobject_uevent_env [ 458.100783] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 458.100794] RIP: 0033:0x45a639 [ 458.100811] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 458.112178] kobject: 'loop0' (0000000027361cef): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 458.114213] RSP: 002b:00007f113eae1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 458.114231] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 000000000045a639 [ 458.118919] kobject: 'loop4' (0000000054427b11): kobject_uevent_env [ 458.123107] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 458.123114] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 458.123121] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f113eae26d4 [ 458.123128] R13: 00000000004fb3b2 R14: 00000000004d3678 R15: 00000000ffffffff [ 458.124760] Kernel Offset: disabled [ 458.296161] Rebooting in 86400 seconds..