00dc2976d153b4", 0x235}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f0000000580)={&(0x7f0000000340)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'ccm(fcrypt)\x00'}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000440)}, {&(0x7f0000000480)="263fc5ca47dadce2c845d1314e964bc34ec2f2b1f42dc5645e26674a44737001d91012917fae76a881c87bdc6f779197772e3ee76fc3f451502773c9", 0x3c}, {&(0x7f00000004c0)="c064a96d38772409a1a1fa215eda1d1971c605e184755893d8d5e2e0a9361244e6cdd30102ee27d0374abe497f7e433ee4b4b1939a80da523c0f7568a29ac86e8e68fc7c6881e802c5f0bd4b19c41c8d6d145feb891c00032fba56cd42a08d89847d9e955163e7da55cf5f5ac05baecc34921a4d2087f9b0fb4f3884", 0x7c}], 0x3, &(0x7f0000001480)=[{0x70, 0x10e, 0x71b, "c61a2f6cb50b31db93a3136623cbe712debabffaddb5382ed835caebea23a0a62785207373d114bcb0b312d0e7e1f6dbd816e89edb133030603b8a8c00d35b392df9654632a2df20850f4bcb38fb3553eb5d2dc2f9332de3c81fe25d3ca427"}, {0x68, 0x114, 0x5, "43ef0424f8e42b2dea40122601b151b86be6dd90903cf15e5d0b0dc8a2169fb346843d4ebba0c7a161c2ba996420e603a711a1e3d08914fd08a0b89cd0433a85cf9815aba95ed12414d3780122bc83e9b6fa07"}, {0xf8, 0x10c, 0x1, "7fbf2114350d02769e9f28ee99c24cd8dbfb9b03431928deee530cc54216c6c7493737f278fb6b15b998ea363ad68e02f6f3e87bf173c501b5f5e825907f6ab6cb4f7ac73d84ea8900ff9672fc29e4719b009c95f29311eb49c4379860e123a1966dcc068bd0fb40088c7b231f302ba3b757a32be08690b1676a9e65840e39968998f14f97a9510a407f0f921e432d0d7e81c7edb8e2ab89419d0768a2d744e852a005b1726afe78ecc2c9e9725a267a8fde6d75c12de0f84e1b179d2da912d051b2998ea70c1c555a84cb3b3fd3539ad36435ff0ad3ff406d94f566c521e000ae645a74a9"}, {0x1010, 0x107, 0x1, "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"}], 0x11e0}, 0x4000000) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:42:16 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) getpeername(0xffffffffffffffff, &(0x7f00000004c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r2, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r3 = dup(0xffffffffffffffff) write$cgroup_type(r3, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(0xffffffffffffffff) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000012003dc1000000000028001adc000023000000000000000000000000009bb200000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba5bf65d5cb1f576510761e8301ab9fb3b808126ab25923450843fbcfed1fc6ca2b6a2cf828d08b5500ab7b8247a06a83768f1bbd164db61d9528900224c4b742cc211cb152f68243aac6c53b591a18507e954d3f1c72abee8c25049de9f992962829f0d23174ed096c9d19a98a96bc7012bbec13d4042ba288ef9c0cd4b582b0029cd6f2ea9ab5fceb0e3683e344157cd6e1f39027e9"], 0x1}, 0x8}, 0x0) r4 = request_key(&(0x7f0000000340)='encrypted\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f0000000440)='md5sum\x00', 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x2}, 0x0, 0x0, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000002c0)=0x1c) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000480)={{}, 0x4, 0xffffffff, 0x4}) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:42:16 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') getdents(r0, &(0x7f0000000000)=""/27, 0x1b) 01:42:17 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400312def2baa714f7a0b0000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00000000180002000d000000030300000000000000"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0xd, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 01:42:17 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = gettid() tkill(r1, 0x16) tkill(r1, 0x9) [ 816.181972] ptrace attach of "/root/syz-executor.4"[24970] was attempted by "/root/syz-executor.4"[24973] 01:42:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001}) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 01:42:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') syz_open_procfs(0x0, &(0x7f0000000100)='net/netstat\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext, 0x48, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:42:17 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$vhci(r1, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x40000000004ffdf, 0x0) [ 816.560786] syz-executor.5: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 816.623134] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 816.628389] CPU: 1 PID: 24990 Comm: syz-executor.5 Not tainted 4.14.176-syzkaller #0 [ 816.636280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 816.645696] Call Trace: [ 816.648294] dump_stack+0x13e/0x194 [ 816.651929] warn_alloc.cold+0x96/0x1af [ 816.655912] ? zone_watermark_ok_safe+0x280/0x280 [ 816.660888] ? wait_for_completion+0x390/0x390 [ 816.665468] __alloc_pages_slowpath+0x2114/0x26c0 [ 816.670314] ? warn_alloc+0xf0/0xf0 [ 816.673932] ? find_held_lock+0x2d/0x110 [ 816.677985] ? fs_reclaim_acquire+0x10/0x10 [ 816.682300] __alloc_pages_nodemask+0x5d3/0x700 [ 816.686957] ? rcu_read_lock_sched_held+0x10a/0x130 [ 816.691958] ? __alloc_pages_nodemask+0x5e0/0x700 [ 816.696783] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 816.701791] alloc_pages_current+0xe7/0x1e0 [ 816.706098] kvm_mmu_create+0xd1/0x1c0 [ 816.709970] kvm_arch_vcpu_init+0x28b/0x8b0 [ 816.714271] ? alloc_pages_current+0xef/0x1e0 [ 816.718752] kvm_vcpu_init+0x26d/0x360 [ 816.722628] vmx_create_vcpu+0xf3/0x2900 [ 816.726676] ? __mutex_unlock_slowpath+0x75/0x780 [ 816.731502] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 816.736502] ? handle_rdmsr+0x6b0/0x6b0 [ 816.740468] kvm_vm_ioctl+0x49c/0x1430 [ 816.744341] ? __lock_acquire+0x5f7/0x4620 [ 816.748559] ? kvm_vcpu_release+0xa0/0xa0 [ 816.752693] ? trace_hardirqs_on+0x10/0x10 [ 816.756914] ? trace_hardirqs_on+0x10/0x10 [ 816.761135] ? save_trace+0x290/0x290 [ 816.764919] ? __might_fault+0x104/0x1b0 [ 816.768972] ? kvm_vcpu_release+0xa0/0xa0 [ 816.773104] do_vfs_ioctl+0x75a/0xfe0 [ 816.776891] ? selinux_file_mprotect+0x5c0/0x5c0 [ 816.781634] ? ioctl_preallocate+0x1a0/0x1a0 [ 816.786034] ? security_file_ioctl+0x76/0xb0 [ 816.790583] ? security_file_ioctl+0x83/0xb0 [ 816.795028] SyS_ioctl+0x7f/0xb0 [ 816.798390] ? do_vfs_ioctl+0xfe0/0xfe0 [ 816.802366] do_syscall_64+0x1d5/0x640 [ 816.806257] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 816.811442] RIP: 0033:0x45c889 [ 816.814632] RSP: 002b:00007f73f5256c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 816.822327] RAX: ffffffffffffffda RBX: 00007f73f52576d4 RCX: 000000000045c889 [ 816.829579] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 816.836830] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 816.844080] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 816.851340] R13: 0000000000000390 R14: 00000000004c60a9 R15: 000000000076bf0c [ 816.903315] Mem-Info: [ 816.905918] active_anon:793809 inactive_anon:7766 isolated_anon:0 [ 816.905918] active_file:14036 inactive_file:7076 isolated_file:0 [ 816.905918] unevictable:0 dirty:143 writeback:0 unstable:0 [ 816.905918] slab_reclaimable:52165 slab_unreclaimable:191165 [ 816.905918] mapped:62345 shmem:9587 pagetables:12437 bounce:0 [ 816.905918] free:445833 free_pcp:342 free_cma:0 [ 816.954454] Node 0 active_anon:1944212kB inactive_anon:16084kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216392kB dirty:4kB writeback:0kB shmem:16760kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1153024kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 816.987927] Node 1 active_anon:1231112kB inactive_anon:14980kB active_file:56136kB inactive_file:28304kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:32992kB dirty:568kB writeback:0kB shmem:21588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 817.020390] Node 0 DMA free:10324kB min:220kB low:272kB high:324kB active_anon:4164kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:124kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 01:42:18 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x40, 0x0, 0x0, 0x3c43, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14000, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000340)={0x2, 0x100, 0x1, {0x40, 0x3, 0x0, 0x7}}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = dup(r0) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket(0x10, 0x3, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) [ 817.054583] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 817.060542] Node 0 DMA32 free:22204kB min:36272kB low:45340kB high:54408kB active_anon:1940048kB inactive_anon:16084kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2621268kB mlocked:0kB kernel_stack:12096kB pagetables:30812kB bounce:0kB free_pcp:632kB local_pcp:356kB free_cma:0kB [ 817.145440] lowmem_reserve[]: 0 0 0 0 0 [ 817.150122] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 817.184893] lowmem_reserve[]: 0 0 0 0 0 [ 817.190515] Node 1 Normal free:1750016kB min:53612kB low:67012kB high:80412kB active_anon:1231200kB inactive_anon:14980kB active_file:56136kB inactive_file:28328kB unevictable:0kB writepending:596kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:8384kB pagetables:18924kB bounce:0kB free_pcp:976kB local_pcp:284kB free_cma:0kB [ 817.247192] lowmem_reserve[]: 0 0 0 0 0 [ 817.251352] Node 0 DMA: 1*4kB (M) 10*8kB (UM) 4*16kB (UM) 2*32kB (UM) 0*64kB 1*128kB (M) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (M) = 10324kB [ 817.270858] Node 0 DMA32: 241*4kB (UME) 103*8kB (UM) 55*16kB (UM) 570*32kB (UM) 2*64kB (UE) 9*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 22188kB [ 817.294153] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 817.309592] Node 1 Normal: 93*4kB (UME) 275*8kB (UME) 219*16kB (UME) 133*32kB (UME) 97*64kB (UM) 42*128kB (UM) 7*256kB (UM) 2*512kB (UE) 2*1024kB (M) 2*2048kB (UE) 420*4096kB (M) = 1751196kB [ 817.341393] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 01:42:18 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r4 = dup(0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000040)) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x57) ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:42:18 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x0, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = dup(r0) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3800000112003dc1000000000000000028001a000000000200000000000000000063000001e08a3b3b041a3fbd73464cca2235220900000200000000000000000000000000000000cd205753ff674fd65ca5ed8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000340)=0xa0a, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) [ 817.368598] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 817.401938] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 01:42:18 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$vhci(r1, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x40000000004ffdf, 0x0) [ 817.458938] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 817.486449] 30703 total pagecache pages [ 817.501235] 0 pages in swap cache [ 817.517448] Swap cache stats: add 0, delete 0, find 0/0 [ 817.536341] Free swap = 0kB [ 817.543647] Total swap = 0kB [ 817.548505] 1965979 pages RAM [ 817.551766] 0 pages HighMem/MovableOnly [ 817.559472] 339050 pages reserved [ 817.564203] 0 pages cma reserved 01:42:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) sendmsg$SOCK_DESTROY(0xffffffffffffffff, 0x0, 0x24000800) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x7}]}}]}, 0x38}}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 01:42:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00300002400ffffff7f00000410ffffa6fffff7", @ANYRES32, @ANYBLOB="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"], 0x8d0}}, 0x0) 01:42:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001}) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x9, 0x968c8f4345f083b1) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) [ 818.070477] netlink: 932 bytes leftover after parsing attributes in process `syz-executor.5'. 01:42:19 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = dup(r0) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb39808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:42:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="d00200002400ffffff7f00000410ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) 01:42:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001}) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x9, 0x968c8f4345f083b1) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 01:42:20 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r4 = dup(r0) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket(0x10, 0x3, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:42:20 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$vhci(r1, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x40000000004ffdf, 0x0) 01:42:20 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x1, 0x448}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(0xffffffffffffffff, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000540)=0xfffffffffffffe1c) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r4 = dup(0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}, 0x8, 0x0, 0x0, 0x4010}, 0x40841) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000080)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \b\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000900010073797a3100000000"], 0x20}}, 0x0) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r5, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8090}, 0x44005) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:42:20 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) r4 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000340)='cgroup.type\x00', 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000ebe000/0x4000)=nil, 0x4000, 0x2000000, 0x50, r4, 0xdd929000) r5 = dup(r0) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db61595289002241f4a2eda517b7fd941da66e6d0e21755ba0810299a42fe29c72319c75d28dfddb7d451f95ef1919ce000522c3b23180fd5c59f7055757b0a9f586040762b1bd55dca2637fc364b77ed74352c197056c7414db712c97986344f934170ffb66adc7ca95e295bf36a3e3a81b05faabda1eab5d09511c6962c44"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:42:20 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) r2 = open(&(0x7f0000000240)='./file1\x00', 0x141142, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r2, r1, 0x0, 0x10001) [ 819.269299] netlink: 676 bytes leftover after parsing attributes in process `syz-executor.4'. [ 819.336161] netlink: 676 bytes leftover after parsing attributes in process `syz-executor.4'. 01:42:20 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000040)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000002c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x3, [{{0xa, 0x0, 0x0, @local}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{0xa, 0x0, 0x0, @local}}]}, 0x210) [ 819.377145] new mount options do not match the existing superblock, will be ignored 01:42:20 executing program 4: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=""/109, 0x6d) [ 819.606222] new mount options do not match the existing superblock, will be ignored 01:42:20 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x8) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r3, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="07010000060000000000000000000000000000000000100008000000000000000529"], 0x22) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 01:42:20 executing program 4: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=""/109, 0x6d) 01:42:20 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={[{@fat=@gid={'gid'}}]}) [ 819.875562] FAT-fs (loop4): bogus number of reserved sectors [ 819.897704] FAT-fs (loop4): Can't find a valid FAT filesystem 01:42:21 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000100)={0x9c, 0x0, 0xfffffffffffffffd}) [ 819.959881] FAT-fs (loop4): bogus number of reserved sectors [ 819.967190] FAT-fs (loop4): Can't find a valid FAT filesystem 01:42:21 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$vhci(r1, &(0x7f0000000200)=ANY=[], 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x40000000004ffdf, 0x0) 01:42:21 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = dup(r0) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket(0x10, 0x3, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:42:21 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="4be624e60b8588ae2b8961abc53c", 0x0, 0xc2e}, 0x28) 01:42:21 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c43, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x57) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f0000000340)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = dup(0xffffffffffffffff) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:42:21 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = dup(r0) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000340)='system_u:object_r:crond_exec_t:s0\x00', 0x22) pipe(&(0x7f0000000000)) 01:42:21 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305829, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r1 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000018c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xc8, 0x2, @perf_bp={&(0x7f0000001880), 0xd}, 0x1184, 0x7, 0x3, 0x9, 0xb1d, 0x80000000, 0x400}, 0x0, 0x7, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000640)={0x0, 0x70, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xa6044, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x200, 0x4, @perf_bp={&(0x7f0000000380)}, 0x0, 0x80, 0x0, 0x0, 0x2, 0x3, 0x82}, r0, 0xa, r1, 0x6) r2 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = gettid() perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x7f, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x25a}, r3, 0x0, r2, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000540)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465c4d4049fc564e0b9cc7553358380b3a1f59916ffc9bf0bdf81509f07fb2ea80e5cf8dcf819bf58a4fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6e39f403ff065fd3072aae80677eeba68562eaeae2bcd87cef9000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x2e0, 0x2f9, 0x300, &(0x7f0000000040)="b9010300000ef000009e0ff088a81fffffe100004003633a77fbac141414e0000001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) sendmsg$inet(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000280)}, {&(0x7f00000002c0)="14c401053bee89470a4afab9b7cb53233d377332702698285c09137e42", 0x1d}, {&(0x7f0000000340)="954a3abdf63d1fe15eb72cb43af498477ffbcc1eb2ec7959994490c786242987", 0x20}, {&(0x7f0000000380)="b0316bd14d6d4db81550aa3209db89df5eba1bb7401467a7af4a08fcfe7a5dd0e3a1b63db761804526f45492377ccee550ffdc93ffc21090566f3ea733bd7cd5084e84b5deef05bdf7ed947f2af30cb840fba60ab3100d35ae44a762253329a781bcbc12a09a8af52582c66344c254", 0x6f}, {&(0x7f0000000400)="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", 0xff}], 0x5, &(0x7f0000000580)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x20}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2e}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @local}}}], 0xb8}, 0x11) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$TUNSETVNETLE(r5, 0x400454dc, &(0x7f00000000c0)=0x1) 01:42:21 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0xc07a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820004, 0x0, 0x0, [0x0, 0xeca7020000000000, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0x2c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) socket$kcm(0x11, 0x0, 0x300) 01:42:22 executing program 5: r0 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg(r0, &(0x7f0000002b00)={0x0, 0x0, 0x0}, 0x120) 01:42:22 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$vhci(r1, &(0x7f0000000200)=ANY=[], 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x40000000004ffdf, 0x0) 01:42:22 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x54, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89a0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xfd39, &(0x7f000000cf3d)=""/195}, 0x48) r4 = perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xfd39, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x2, &(0x7f0000000880)=ANY=[@ANYRESOCT], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r3}, 0x78) 01:42:22 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r2) socket$inet(0x10, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="2400000052001f0014f9f407000904000a000710080001", 0x17) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 01:42:22 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = dup(r0) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) r6 = syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x7, 0x84001) ioctl$TIOCL_GETSHIFTSTATE(r6, 0x541c, &(0x7f0000000380)={0x6, 0xeb}) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket(0x10, 0x3, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) [ 821.470301] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 821.483948] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=25342 comm=syz-executor.4 [ 821.527252] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=25342 comm=syz-executor.4 [ 821.542301] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=25342 comm=syz-executor.4 [ 821.554978] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=25342 comm=syz-executor.4 [ 821.570887] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=25342 comm=syz-executor.4 [ 821.583745] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=25342 comm=syz-executor.4 [ 821.596683] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=25342 comm=syz-executor.4 [ 821.610688] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=25342 comm=syz-executor.4 01:42:22 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = dup(r0) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r6, 0x203, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xe5}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040001}, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r7, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) [ 821.624411] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=25342 comm=syz-executor.4 [ 821.648219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=25342 comm=syz-executor.4 01:42:22 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xf, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000025000535d25a80648c63940d0124fc60", 0x14}], 0x2, 0x0, 0x0, 0xa00}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) close(r0) 01:42:22 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm-control\x00', 0x4800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000440)={0xfb0, 0x4234, 0x0, 'queue1\x00', 0xf321}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = dup(r2) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:42:23 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$vhci(r1, &(0x7f0000000200)=ANY=[], 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x40000000004ffdf, 0x0) 01:42:23 executing program 4: socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x2) 01:42:23 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x8082, 0x0) socket$kcm(0x2, 0xf, 0x84) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0x802}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x1b, &(0x7f0000000040)=r2, 0x52d) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x4, 0x70, 0x0, 0x0, 0x9, 0x0, 0x0, 0xe53c, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xc5d, 0x4}, 0x18200, 0x5, 0x2a}, 0x0, 0xb, 0xffffffffffffffff, 0x9) close(r2) socket$kcm(0xa, 0x100000000000001, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)=@in6={0xa, 0x0, 0xfffffffe, @loopback}, 0x80, 0x0}, 0x200008c2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={&(0x7f0000000040)=@un=@abs, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x1f, 0x7, 0x3, 0x8, 0x0, 0x4, 0x23008, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x799, 0x0, @perf_bp={&(0x7f0000000280), 0x1}, 0xb208, 0x84, 0x2, 0x0, 0x4, 0x4, 0x3}, 0x0, 0x9, r1, 0x1) 01:42:23 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x4) close(r0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) 01:42:23 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$kcm(0x11, 0x0, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xcc0, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f065581f020cff000e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x2c3, 0xd17e91c4eaae85ce}, 0x28) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) close(0xffffffffffffffff) 01:42:23 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$vhci(r1, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x40000000004ffdf, 0x0) 01:42:23 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x28}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 01:42:23 executing program 4: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}}, 0xfffffdef) ftruncate(r0, 0x1200) 01:42:24 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f0000000200)={r4, 0xa}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r7 = dup(r0) write$cgroup_type(r7, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket(0x10, 0x3, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r8, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:42:24 executing program 5: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) 01:42:24 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = dup(r0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB="f400000221"], &(0x7f0000000000)=0x3e2) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4f20, @multicast1}}, [0x3f, 0x4, 0x0, 0x9, 0x1, 0x6, 0x62e, 0xfffffffffffffff9, 0x800, 0x4, 0xc35a, 0x6, 0x472, 0xffffffff, 0x4]}, &(0x7f0000000440)=0x100) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[]}, 0x8, 0x0, 0x0, 0x40000}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) [ 823.150434] syz-executor.5 (25497) used greatest stack depth: 24144 bytes left 01:42:24 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) ioctl$int_in(r0, 0x5421, &(0x7f0000000340)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000380)=0x6) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = dup(0xffffffffffffffff) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000071000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642aad6473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x1}, 0x8}, 0x4000) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:42:24 executing program 5: syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x4000000100000e, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000000000d890000000000000d8a000000010000100000000001000000000000035ab424020004000004000000000000000000ec00000c090a020c", 0x7d}], 0x0, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 01:42:24 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) r0 = socket$kcm(0x2, 0x922000000001, 0x106) close(r0) 01:42:24 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x922000000001, 0x106) close(r0) 01:42:24 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000480)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000fefffe7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000c9be17044171e1d3d7b196d079c4d4758fa35d17c668a4b63e069efb29797573b8530e31ec24925095a163b9d4e76be266e31a80212240baa44e080addde36e5fdc6c42a7b3f912f6906a6e2313091dd61258a1fda45991fbdce6793c8a4785ee8b60092659b941bbd694d1f8898b3e6"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x2d1, 0x0, &(0x7f00000000c0)="b9ff0300000d698cb89e40f008001fffffff00004000632977", 0x0, 0x100, 0x6000000000000000}, 0x28) [ 823.483291] XFS (loop5): Mounting V4 Filesystem [ 823.500744] XFS (loop5): totally zeroed log [ 823.518220] XFS (loop5): Metadata corruption detected at xfs_agi_read_verify+0x24b/0x2c0, xfs_agi block 0x2 [ 823.536142] XFS (loop5): Unmount and run xfs_repair [ 823.579357] XFS (loop5): First 64 bytes of corrupted metadata buffer: [ 823.630777] ffff88809ec41ac0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 823.691284] ffff88809ec41ad0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 01:42:24 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$vhci(r1, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x40000000004ffdf, 0x0) [ 823.737984] ffff88809ec41ae0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 823.747276] ffff88809ec41af0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 823.758957] XFS (loop5): metadata I/O error: block 0x2 ("xfs_trans_read_buf_map") error 117 numblks 1 [ 823.769666] XFS (loop5): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0 01:42:24 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000480)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000fefffe7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000c9be17044171e1d3d7b196d079c4d4758fa35d17c668a4b63e069efb29797573b8530e31ec24925095a163b9d4e76be266e31a80212240baa44e080addde36e5fdc6c42a7b3f912f6906a6e2313091dd61258a1fda45991fbdce6793c8a4785ee8b60092659b941bbd694d1f8898b3e6"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x2d1, 0x0, &(0x7f00000000c0)="b9ff0300000d698cb89e40f008001fffffff00004000632977", 0x0, 0x100, 0x6000000000000000}, 0x28) [ 823.796764] XFS (loop5): failed to read root inode 01:42:25 executing program 5: getpid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) socket$inet6(0xa, 0x400000000001, 0x0) close(0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) open(0x0, 0x141042, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, 0x0) 01:42:25 executing program 5: perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 01:42:25 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000008000/0x2000)=nil, 0x2000, 0x1000002, 0x1010, r3, 0x0) r5 = dup(r0) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)}, 0x80) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a000000000022000000000000000000000000000000000000000000cded8640ac3695625863bd642a406473ef53904045b9b8f7dcc24c349199d46a7894a66c4ca54daba599688d6d40113baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db615952890"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket(0x10, 0x3, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) r7 = openat$cgroup_procs(r6, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) readv(r7, &(0x7f0000000740)=[{&(0x7f00000002c0)=""/38, 0x26}, {&(0x7f0000000300)=""/93, 0x5d}, {&(0x7f0000000380)=""/6, 0x6}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000500)=""/71, 0x47}, {&(0x7f0000000580)=""/151, 0x97}, {&(0x7f0000000640)=""/217, 0xd9}], 0x7) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:42:25 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000480)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000fefffe7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000c9be17044171e1d3d7b196d079c4d4758fa35d17c668a4b63e069efb29797573b8530e31ec24925095a163b9d4e76be266e31a80212240baa44e080addde36e5fdc6c42a7b3f912f6906a6e2313091dd61258a1fda45991fbdce6793c8a4785ee8b60092659b941bbd694d1f8898b3e6"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x2d1, 0x0, &(0x7f00000000c0)="b9ff0300000d698cb89e40f008001fffffff00004000632977", 0x0, 0x100, 0x6000000000000000}, 0x28) 01:42:25 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0x8}, 0xa09, 0x100, 0x0, 0x0, 0x2, 0x0, 0x2000}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r3, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r5, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) r6 = dup(r1) write$cgroup_type(r6, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r3) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000828f00000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r7, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:42:25 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r4 = dup(0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000340)={r4, r4, 0x4, r4}, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:42:25 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$vhci(r1, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x40000000004ffdf, 0x0) 01:42:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001c0005020000000087de1dd00a000000", @ANYRES32, @ANYBLOB="00000a00140001001800000063f1aac2000000000000000000000001"], 0x30}}, 0x0) 01:42:26 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="40010000020101"], 0x1}}, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 825.104026] netlink: 300 bytes leftover after parsing attributes in process `syz-executor.4'. 01:42:26 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r0, 0x4b41, 0x0) 01:42:26 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f00000000c0)=0xfff, 0x4) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) 01:42:26 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = dup(r0) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc128adf5fa54000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000010000cdac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b75bdb428d08b5500ab7b8247a06a8372beeaa9164db615000000"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket(0x10, 0x3, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:42:26 executing program 3: 01:42:26 executing program 3: 01:42:26 executing program 3: 01:42:26 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$vhci(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="e2"], 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x40000000004ffdf, 0x0) 01:42:26 executing program 3: 01:42:26 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000340)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r2, 0x2}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mmap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x6, 0xd03b6b475e2a0890, r3, 0xffffc000) r4 = dup(0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x20, 0x140b, 0x300, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0xed}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}}, 0x40) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:42:26 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$vhci(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="e2"], 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x40000000004ffdf, 0x0) 01:42:26 executing program 4: 01:42:26 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000140)="0f05", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRES16, @ANYBLOB="62c9182e0954ce2d2991be9fbdfb63faa7c097b99906069716069b2bec960bfbc7a8ab18ae7056ef32cd68b3dce33f621a01bf208ccec6f4e0bfc405c8ebb0c8ba39b0f9fe0939d5ae0fb2a8d2f9de0e154bf4683eb0c6e20d8d6de10efbc4ad1a72e90446832a61c44e7389c1f22deeab76a679c5de317e804ff9541f52ce5642dff46a0d4c8a51769278b965b4ab8b12ce144f8468b1bc0e3dd0b5998878bff3658121dd64b154d4fc21a7f797c11120d2cf3699222b7d", @ANYBLOB="153dc0c2d07162f9165e24810ab22f0600dcbca526b46023c1fd0d0f9ce50bcac34329660b30a3f2efa1c31a7ef5a3b92050d29ebe49c98c667aab9dd4270168811d6281d26a8e30846d14576707915a41ec59d9a60250265cd16f9dafbce5fa79f495b2173bdcf4d17c4b96c5516cef34de964e53"], 0x0, 0x12f}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xd) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 01:42:27 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$vhci(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="e2"], 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x40000000004ffdf, 0x0) 01:42:27 executing program 5: 01:42:27 executing program 0: 01:42:27 executing program 4: 01:42:27 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$vhci(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="e2"], 0x1) write$binfmt_misc(r1, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x40000000004ffdf, 0x0) 01:42:27 executing program 5: 01:42:27 executing program 4: 01:42:27 executing program 5: 01:42:27 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r4 = dup(0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3800000012003dc1000000000000000128001a0000000000000000000000000000000001e000000200000000020000000000000000000000cded8640ac3695625863bd642a2d6473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6cad08b5500ab7b8247a06a8372beeaa9164db6159528900224000000000025e18f473a9f377b73159d422b1f0cd027d1a9d55d4cfe8ac8b821d89f5273538b49317c6428d1f7914e8d48e85c733e5272ec4942"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:42:27 executing program 0: 01:42:27 executing program 4: 01:42:30 executing program 3: 01:42:30 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$vhci(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="e2"], 0x1) write$binfmt_misc(r1, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x40000000004ffdf, 0x0) 01:42:30 executing program 5: 01:42:30 executing program 4: 01:42:30 executing program 0: 01:42:30 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000004c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r4 = dup(0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340)='/dev/zero\x00', 0x400, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000380)={0x400, 0x1, 0x1800b, 0x4b2, 0x0, 0x1, 0x1, 0x401, 0x0}, &(0x7f0000000440)=0x20) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000480)={r7, 0x20}, 0x8) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:42:30 executing program 5: 01:42:30 executing program 4: 01:42:30 executing program 0: 01:42:30 executing program 5: 01:42:30 executing program 0: 01:42:30 executing program 4: 01:42:30 executing program 3: 01:42:30 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$vhci(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="e2"], 0x1) write$binfmt_misc(r1, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x40000000004ffdf, 0x0) 01:42:30 executing program 0: 01:42:30 executing program 4: 01:42:30 executing program 5: 01:42:30 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r4 = dup(0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3800000e12003dc1000000000000000028001a0000000000000000000000000000000001e0000002000000000000008640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf170b4360979dd29b1fc6ca2b6abdb428ff0f0000ab7b8247a06a8372beeaa9164db61595289002243f04e81e5e562a6baeca4edb2a06ed1cd1567d5c0668b34674001e1ca4dc1a441cbc74341b7d5a1e28ade28e"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VFIO_IOMMU_GET_INFO(r6, 0x3b70, &(0x7f0000000280)={0x18, 0x0, 0x0, 0x8001}) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:42:30 executing program 0: 01:42:30 executing program 3: 01:42:30 executing program 4: 01:42:30 executing program 5: 01:42:30 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$vhci(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="e2"], 0x1) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x40000000004ffdf, 0x0) 01:42:30 executing program 0: 01:42:30 executing program 3: 01:42:30 executing program 5: 01:42:30 executing program 4: 01:42:30 executing program 5: 01:42:30 executing program 3: 01:42:31 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000340)=0x80, 0x4) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r5 = dup(0xffffffffffffffff) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b54f00f9900695500ab7b8247a06a8372beeaa9164db61595289002246269f6fcd5b1439a0a3a59af3dcd019275e9337c8b971a2b3604a9b27005b77a9df81aa0a16dbb021abec5059df12419d447b1d1ceb561e1b2c01b3c702b"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x2}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000380)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:42:31 executing program 0: 01:42:31 executing program 4: 01:42:31 executing program 5: 01:42:31 executing program 3: 01:42:31 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$vhci(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="e2"], 0x1) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x40000000004ffdf, 0x0) 01:42:31 executing program 3: 01:42:31 executing program 4: 01:42:31 executing program 0: 01:42:31 executing program 5: 01:42:31 executing program 3: 01:42:31 executing program 4: 01:42:31 executing program 5: 01:42:31 executing program 0: 01:42:31 executing program 3: 01:42:31 executing program 4: 01:42:31 executing program 5: 01:42:32 executing program 3: 01:42:32 executing program 4: 01:42:32 executing program 5: 01:42:32 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(0xffffffffffffffff, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000280)=0xffffff8a) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r5, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) r6 = dup(0xffffffffffffffff) write$cgroup_type(r6, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) r7 = dup(r3) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3800000012003dc9000000000000000028001a0600000000000000000000fe00efff0001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b824700008372beeaa9164db61595289002246f140a708e29762de1c2b690b69f80e843d7768cba46ee5a11b8dce161eac152c4ee33ff43344556af"], 0x38}, 0x8}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = mq_open(&(0x7f0000000340)='net/tcp\x00', 0x64c4c9dae93f7fb7, 0x40, &(0x7f0000000380)={0x384, 0xc06, 0x40, 0x8}) ppoll(&(0x7f0000000440)=[{0xffffffffffffffff, 0x1}, {r7, 0x8008}, {0xffffffffffffffff, 0xc120}, {r2, 0x40}, {r8, 0x4}, {r0, 0x4108}, {r6}], 0x7, &(0x7f0000000480)={0x0, 0x989680}, &(0x7f00000004c0)={[0x2]}, 0x8) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r9, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:42:32 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$vhci(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="e2"], 0x1) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x40000000004ffdf, 0x0) 01:42:32 executing program 0: 01:42:32 executing program 0: 01:42:32 executing program 3: 01:42:32 executing program 4: 01:42:32 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000240)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r1, 0x0) 01:42:32 executing program 0: 01:42:32 executing program 3: 01:42:32 executing program 0: 01:42:32 executing program 4: 01:42:32 executing program 0: 01:42:32 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r4 = dup(0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:42:33 executing program 0: 01:42:33 executing program 3: 01:42:33 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$vhci(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="e2"], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x40000000004ffdf, 0x0) 01:42:33 executing program 5: 01:42:33 executing program 4: 01:42:33 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r4 = dup(0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r6, 0x4068aea3, &(0x7f0000000200)={0x79}) r7 = syz_open_procfs(0x0, &(0x7f0000000340)='coredump_filter\x00') ioctl$KVM_GET_VCPU_EVENTS(r7, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:42:33 executing program 5: 01:42:33 executing program 3: 01:42:33 executing program 4: 01:42:33 executing program 0: 01:42:33 executing program 4: 01:42:33 executing program 0: 01:42:33 executing program 3: 01:42:34 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$vhci(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="e2"], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x40000000004ffdf, 0x0) 01:42:34 executing program 5: 01:42:34 executing program 4: 01:42:34 executing program 0: 01:42:34 executing program 3: 01:42:34 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r4 = dup(0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x2e}], 0x1}, 0x4008001) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:42:34 executing program 5: 01:42:34 executing program 4: 01:42:34 executing program 0: 01:42:34 executing program 3: 01:42:34 executing program 5: 01:42:34 executing program 4: 01:42:34 executing program 3: 01:42:34 executing program 0: 01:42:34 executing program 5: 01:42:34 executing program 4: 01:42:34 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(0xffffffffffffffff, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = dup(0xffffffffffffffff) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:42:34 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$vhci(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="e2"], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x40000000004ffdf, 0x0) 01:42:34 executing program 5: 01:42:34 executing program 3: 01:42:34 executing program 0: 01:42:34 executing program 4: 01:42:35 executing program 3: 01:42:35 executing program 0: 01:42:35 executing program 4: 01:42:35 executing program 5: 01:42:35 executing program 3: 01:42:35 executing program 4: 01:42:35 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x1000007, 0x1010, r2, 0x0) r4 = dup(0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3800000012003dc10000000000000000280010000000000000000000000000003400000001e000000200000000000000020000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc675746abdb428d08b5500ab7b8247a06a8372beeaa9164db61595289053868eab060ec518f8d70847ec460224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:42:35 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$vhci(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="e2"], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 01:42:35 executing program 0: 01:42:35 executing program 5: 01:42:35 executing program 4: 01:42:35 executing program 3: 01:42:35 executing program 5: 01:42:35 executing program 4: 01:42:35 executing program 3: 01:42:35 executing program 0: 01:42:35 executing program 5: 01:42:35 executing program 3: 01:42:36 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r4 = dup(0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x57) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000440)=[@in6={0xa, 0x4e22, 0x4, @private0={0xfc, 0x0, [], 0x1}, 0x9}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e23, 0x3, @ipv4={[], [], @broadcast}, 0x80}, @in6={0xa, 0x4e20, 0x7, @local, 0x8}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x26}}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e26, 0x6, @loopback, 0x81}], 0xb0) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:42:36 executing program 3: 01:42:36 executing program 4: 01:42:36 executing program 0: 01:42:36 executing program 5: 01:42:36 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$vhci(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="e2"], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 01:42:36 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r4 = dup(0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1, 0x0, 0xfd60}, 0x0) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000010000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e831f009fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a04d8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:42:36 executing program 3: 01:42:36 executing program 4: 01:42:36 executing program 0: 01:42:36 executing program 5: 01:42:36 executing program 4: 01:42:36 executing program 0: 01:42:36 executing program 3: 01:42:36 executing program 5: 01:42:36 executing program 4: 01:42:36 executing program 3: 01:42:37 executing program 5: 01:42:37 executing program 0: 01:42:37 executing program 4: 01:42:37 executing program 3: 01:42:37 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$vhci(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="e2"], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 01:42:37 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = dup(0xffffffffffffffff) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) ioctl$LOOP_SET_CAPACITY(r6, 0x4c07) 01:42:37 executing program 4: 01:42:37 executing program 3: 01:42:37 executing program 5: 01:42:37 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') r3 = getgid() write$FUSE_DIRENTPLUS(r2, &(0x7f0000000080)=ANY=[@ANYRESOCT=r3], 0x17) 01:42:37 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) creat(0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 01:42:37 executing program 3: 01:42:37 executing program 5: 01:42:37 executing program 4: 01:42:37 executing program 3: 01:42:37 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x131000, 0x0) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000100)={0x1, 0x5, 0x100}) shmctl$SHM_UNLOCK(0x0, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 01:42:38 executing program 5: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x2000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="726177b9f70000000000000000000000000000000000000000000000000000000200000003000000880400000000000098000000000000009800000500000000f0030000f0030000f0030000f0030000f00300000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000010000070000000000ac1414aa00000000000000000000000076657468315f746f5f626f6e6400000065716c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001003580300000000000000000000000000000000000000005001686173686c696d697400000000000000000000000000000000000000000269705f7674693000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000fcffffff0e0000600000000000000000000000005001686173686c696d697400000001000000000000000000000000000000000276657468305f746f5f7b737200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000006e00000000000000000000000900000008000000000000000000000000000000480054454500000000000000000000ba60eabc545ffd22000000000000000001ac1414bb0000000000000000000000007465716c3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800"/1248], 0x1) r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c480200020000de010300000000e4ff064b3f013a00fb48a16700008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900010000000b0000db000004da3600"}, 0x80, 0x0}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x2000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="7400000010003b04fcecff000000000010000000", @ANYRES32=0x0, @ANYBLOB="000000000000010008000a00", @ANYRES32, @ANYBLOB="4c0012800b00010067726574617000003c00028006000e000300000006000e00030000000800150084df0600050009000200000008000700efa1def205000a000000000008001400ff010000"], 0x74}}, 0x0) 01:42:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000db9f51cc75cbcb628686424284ed2b943f2ed14389cb41577d392c36fcd8c96bb5c9f761a1ff96f35f894d077d6354d713e7fcd3bb283a296b964c84bcb59158def2ac03b5b6d06e0477d11e98bc77"], 0x34}}, 0x0) 01:42:38 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000a00)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000480000000000e1ff95000000000000002ba7e1d30cb599e83f24a3aa6bb3019c13bd23212fb56f040026fbfefc41056bd8174b7960317142fa9ea41d8123751c4e345c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404000000c788b277beee1cbf9b0a4def23d410f6accd3641110bec4e90a6341965c39e9ef8f6e3968f200e011ea665c45a3449abe802f5ab3e89cf6c06000000b8580218ce740068720000074e468eea3fd2f73902ebcfcf49822775985bf313405b433a8acd715f5888b2007f00000000000000000100000000000000010000000000000053350000000034a70c2ab40c7cf5691db43a5c000000000000000031000000000000000000e75a89faff01210cce39bf405f1e846c12423a164a33e680846f26ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617de7a6520655a805608df4d431623c850af895abba14f6fbd7fb5e2a431ab9142f3a06d55740a46792cbf4609646b6c5c29647d2f950a959cf9938d6df8600a62e96b7cb8e52cbdc2ba9d580609e31c7fa90e7e57a79d6fce424c2200af6c7784a1975fa657de38a3a61e44a9ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6edc71df48dca02113a38300cabf2b5543ffc1669557b3819d8c396d2c2361629d1822f722ec23812770d72cd00600000f7889b8c7044f563a1f68d4efe81a406cd497cc87cac6f45a6922ded2e295fdbc463f747c08f40105869035000000000000000000000000040395e3c07c702d5e417668c6e17a83e30f647aee1aaa11ab8e6ec9c87adf6fcdc5334de3d65029ccf57b6a68d183d8b1f1b4d84c029964c40bdd32cd345189e916bb53fe7e7332e207b185580b16fb21d7d5bb35301a4f3b4f37e05a27dba8f732b20a73e98330b335ace8aff2b7fc7017b3cffa193e92352bda32dd8277f07ea03278736cfdbc5f17994615a11909171c8c623eefa5945c3c235eda3eac19cfb010febfe6943aab81d6088171ae26625143afd029675f483b5f4d57835bfaff7ddeb7468e41d26b2fc3717ea3607045899fe27a7096c511e218d90c81f8e8d61b6062653c04095853b0b6ec83c08aae503d2643ec08221b"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) r2 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) connect$inet6(r2, &(0x7f00008c0000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 01:42:38 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x20}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x8}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) 01:42:38 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x6611, 0x0) r2 = accept(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000880)={r0}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1}, 0x80) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, 0x0) 01:42:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, 0x0) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) dup2(r0, r1) 01:42:38 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x6611, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000880)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x325, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1}, 0x80) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, 0x0) [ 837.353656] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 837.424938] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 837.449512] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 01:42:38 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x6611, 0x0) r2 = accept(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000880)={r0}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000040)={0xfffffffd, 0x80000001, 0x1, 0x30f, 0x3f, 0x3, 0x4}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x39e2}}], 0x18}, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1}, 0x80) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000a40)={'wg0\x00', {0x2, 0x4e24, @rand_addr=0x6}}) [ 837.577399] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.584299] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.604652] device bridge0 entered promiscuous mode [ 837.617923] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. [ 837.637181] bridge0: port 2(bridge_slave_1) entered blocking state [ 837.643922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 837.651509] bridge0: port 1(bridge_slave_0) entered blocking state [ 837.658251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 837.725488] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.732119] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.741083] device bridge0 entered promiscuous mode [ 837.757959] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.1'. [ 837.770788] bridge0: port 2(bridge_slave_1) entered blocking state [ 837.777478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 837.785056] bridge0: port 1(bridge_slave_0) entered blocking state [ 837.791781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 837.849614] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.856407] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.878873] device bridge0 entered promiscuous mode [ 837.908246] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 837.927813] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 837.949489] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 837.991984] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.4'. 01:42:39 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) 01:42:39 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue={0x7}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 838.032824] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.039617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 838.047267] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.054056] bridge0: port 1(bridge_slave_0) entered forwarding state 01:42:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="ff000000000000001c0012000c000100626f6e64000000000c0002000800010004000000f293b1f6ef59ed5c26845620d363b9bd1ca296c5ec09bf9c53374ce7c2bec128f6880766a781b7d853b9ebeb313acb15ace50c0b73db0bc941804eb14518c36313e396e9927ba0b89421ec59aaf25e12261abe52dca25634bc42a7b40866debe41cdca73c05918cc311a0d1d972fdb06d30e9fc11418e0ecb9c8ee651960ffd9acdaa4bc4ef90b2dc0b05b13a3c29a3d"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}]}, 0x3c}}, 0x0) [ 838.129512] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 838.146361] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.152904] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.192362] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. [ 838.219762] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.226249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 838.233033] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.239448] bridge0: port 1(bridge_slave_0) entered forwarding state 01:42:39 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x6611, 0x0) r2 = accept(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000880)={r0}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x366, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1}, 0x80) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, 0x0) [ 838.308786] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.315426] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.355121] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.1'. [ 838.367559] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.374046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 838.380871] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.387276] bridge0: port 1(bridge_slave_0) entered forwarding state 01:42:39 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x6611, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000880)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x325, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00010040d5ae7d0200ff050005", 0x2e}], 0x1}, 0x80) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, 0x0) [ 838.434213] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.440850] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.484497] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.4'. [ 838.500448] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.506976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 838.513747] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.520155] bridge0: port 1(bridge_slave_0) entered forwarding state 01:42:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) dup2(r0, r1) connect$inet6(0xffffffffffffffff, 0x0, 0x0) [ 838.572328] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 01:42:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) dup2(r0, r1) connect$inet6(0xffffffffffffffff, 0x0, 0x0) [ 838.677814] IPv6: ADDRCONF(NETDEV_UP): bond1: link is not ready [ 838.691308] 8021q: adding VLAN 0 to HW filter on device bond1 01:42:39 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup2(r3, r4) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000000)={0x1c, r7, 0x709, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY={0x8}]}, 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 838.815869] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.822461] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.862733] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. [ 838.884678] syz-executor.5 (26359) used greatest stack depth: 23920 bytes left [ 838.890535] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.898802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 838.906469] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.913181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 838.939811] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.946718] bridge0: port 1(bridge_slave_0) entered disabled state 01:42:40 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) [ 838.980932] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.1'. [ 838.990081] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.996756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 839.004408] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.011165] bridge0: port 1(bridge_slave_0) entered forwarding state 01:42:40 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000001c00050200000000000000000a000000", @ANYRES32, @ANYBLOB="0000200014000100ff0d000000ffff00000000000000eb01"], 0x30}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 839.058840] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 01:42:40 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046208, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = creat(0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x82, 0x0, &(0x7f0000000200)) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000100)=r0, 0x4) chdir(&(0x7f0000000040)='./file0\x00') pselect6(0x30, 0x0, &(0x7f00000000c0)={0xfffffffffffffffa, 0x0, 0x7, 0x0, 0x0, 0x5, 0x9, 0x22}, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x20}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffa}) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000500)=ANY=[@ANYPTR, @ANYRES32=0x0, @ANYPTR64, @ANYPTR64], 0x1c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x5]}, 0x8, 0x80800) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000140)) 01:42:40 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 01:42:40 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$batadv(0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x80102, 0x0) write$P9_RXATTRWALK(r0, &(0x7f0000000240)={0xf, 0x1f, 0x0, 0x8}, 0xf) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 01:42:42 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000001280)=[{&(0x7f0000000040)="800d5a77b63a73a6023129b0361865bfa6e4f34aa5ccb928", 0x18}, {0x0, 0x18}, {&(0x7f0000001240)="b5", 0x1}], 0x3) 01:42:42 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x14917e, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x2ffe00) ioctl$FITRIM(r1, 0x80047210, &(0x7f0000000200)) syz_open_procfs(0x0, 0x0) 01:42:42 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) close(r0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 01:42:42 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046208, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = creat(0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x82, 0x0, &(0x7f0000000200)) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000100)=r0, 0x4) chdir(&(0x7f0000000040)='./file0\x00') pselect6(0x30, 0x0, &(0x7f00000000c0)={0xfffffffffffffffa, 0x0, 0x7, 0x0, 0x0, 0x5, 0x9, 0x22}, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x20}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffa}) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000500)=ANY=[@ANYPTR, @ANYRES32=0x0, @ANYPTR64, @ANYPTR64], 0x1c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x5]}, 0x8, 0x80800) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000140)) 01:42:42 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x2, &(0x7f0000000000)) 01:42:42 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000280)={r3, 0x6}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r4 = dup(0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) finit_module(r5, &(0x7f0000000340)='nl80211\x00', 0x3) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e0000002000000000000000000000000000000947849770d6fa9a200cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d0000000ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:42:42 executing program 4: socket$inet6(0xa, 0x803, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) 01:42:42 executing program 0: clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0xcc, 0x9}, 0x2c) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@mcast1, @in=@multicast2}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0xe8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r1, &(0x7f0000000080)}, 0x20) 01:42:42 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002400)=ANY=[@ANYBLOB='mpol=pretive:0B']) 01:42:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x100, 0x0) syz_open_procfs(0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000180)=ANY=[@ANYRES16, @ANYBLOB], 0x2}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x6, 0x0, 0x6, 0x9}, {0x0, 0xea, 0x3, 0x3ff}]}) 01:42:42 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000005e00010000000000000000000000000a140000003eab01000062bc1e506fecd900000000ec711130704513e455a32b5e0293a9ce8290e06e61371f522fe80f0b348545dde6c6213906e4046d1e9d0c6ea05a9eaffd6e9e36b08250cc9b81e4e943e3d024828abeacd53dcbc8a2a18620eb76f9f650331122a1ddcdd83740de84ba69d28341551bf90d79971b031cedc8c57dcef7335e2b19849465ae6bcea78dfdfaef87882bba924280fae1"], 0x28}}, 0x0) [ 841.317351] tmpfs: Bad value 'pretive:0B' for mount option 'mpol' 01:42:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x70bd2a}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x0, 0x1, 0x0, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000000)={0x1ff, 0x3}) 01:42:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x100, 0x0) syz_open_procfs(0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16], 0x2}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x6, 0x0, 0x6, 0x9}, {0x0, 0xea, 0x3, 0x3ff}]}) [ 841.388561] tmpfs: Bad value 'pretive:0B' for mount option 'mpol' [ 841.504074] syz-executor.5: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 841.552016] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 841.569719] CPU: 1 PID: 26503 Comm: syz-executor.5 Not tainted 4.14.176-syzkaller #0 [ 841.577649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 841.587010] Call Trace: [ 841.589611] dump_stack+0x13e/0x194 [ 841.593247] warn_alloc.cold+0x96/0x1af [ 841.597225] ? zone_watermark_ok_safe+0x280/0x280 [ 841.602082] ? wait_for_completion+0x390/0x390 [ 841.606680] __alloc_pages_slowpath+0x2114/0x26c0 [ 841.611544] ? warn_alloc+0xf0/0xf0 [ 841.615206] ? find_held_lock+0x2d/0x110 [ 841.619400] ? fs_reclaim_acquire+0x10/0x10 [ 841.623758] __alloc_pages_nodemask+0x5d3/0x700 [ 841.628443] ? rcu_read_lock_sched_held+0x10a/0x130 [ 841.633469] ? __alloc_pages_nodemask+0x5e0/0x700 [ 841.638320] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 841.643353] alloc_pages_current+0xe7/0x1e0 [ 841.647680] kvm_mmu_create+0xd1/0x1c0 [ 841.651575] kvm_arch_vcpu_init+0x28b/0x8b0 [ 841.655896] ? alloc_pages_current+0xef/0x1e0 [ 841.660400] kvm_vcpu_init+0x26d/0x360 [ 841.664300] vmx_create_vcpu+0xf3/0x2900 [ 841.668368] ? __mutex_unlock_slowpath+0x75/0x780 [ 841.673217] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 841.678246] ? handle_rdmsr+0x6b0/0x6b0 [ 841.682239] kvm_vm_ioctl+0x49c/0x1430 [ 841.686135] ? __lock_acquire+0x5f7/0x4620 [ 841.690490] ? kvm_vcpu_release+0xa0/0xa0 [ 841.694662] ? trace_hardirqs_on+0x10/0x10 [ 841.694680] ? trace_hardirqs_on+0x10/0x10 [ 841.694695] ? save_trace+0x290/0x290 [ 841.706954] ? __might_fault+0x104/0x1b0 [ 841.711038] ? kvm_vcpu_release+0xa0/0xa0 [ 841.715193] do_vfs_ioctl+0x75a/0xfe0 [ 841.719000] ? selinux_file_mprotect+0x5c0/0x5c0 [ 841.723766] ? ioctl_preallocate+0x1a0/0x1a0 [ 841.728189] ? security_file_ioctl+0x76/0xb0 [ 841.732606] ? security_file_ioctl+0x83/0xb0 [ 841.737025] SyS_ioctl+0x7f/0xb0 [ 841.740402] ? do_vfs_ioctl+0xfe0/0xfe0 [ 841.744392] do_syscall_64+0x1d5/0x640 [ 841.748295] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 841.753492] RIP: 0033:0x45c889 [ 841.756697] RSP: 002b:00007f73f5256c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 841.764415] RAX: ffffffffffffffda RBX: 00007f73f52576d4 RCX: 000000000045c889 [ 841.771804] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 841.779080] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 841.786359] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 841.793640] R13: 0000000000000390 R14: 00000000004c60a9 R15: 000000000076bf0c [ 841.893964] Mem-Info: [ 841.896528] active_anon:794095 inactive_anon:7889 isolated_anon:0 [ 841.896528] active_file:14044 inactive_file:8505 isolated_file:0 [ 841.896528] unevictable:0 dirty:997 writeback:0 unstable:0 [ 841.896528] slab_reclaimable:54161 slab_unreclaimable:196786 [ 841.896528] mapped:62583 shmem:9756 pagetables:12462 bounce:0 [ 841.896528] free:436322 free_pcp:625 free_cma:0 [ 841.938710] Node 0 active_anon:1944212kB inactive_anon:16080kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216420kB dirty:4kB writeback:0kB shmem:16756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1153024kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 841.968045] Node 1 active_anon:1232268kB inactive_anon:15476kB active_file:56168kB inactive_file:33520kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:33912kB dirty:3384kB writeback:0kB shmem:22268kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 842.004837] Node 0 DMA free:10324kB min:220kB low:272kB high:324kB active_anon:4164kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:124kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 842.037484] lowmem_reserve[]: 0 2557 2557 2557 2557 01:42:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c}, 0x1c}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000000)={0x0, 0x3}) 01:42:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x70bd2a}, 0x1c}}, 0x44085) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}}, 0x80) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000000)={0x1ff, 0x3}) 01:42:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x70bd2a}, 0x1c}}, 0x44085) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}}, 0x80) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:42:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100}, 0x1c}}, 0x44085) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000000)={0x0, 0x3}) 01:42:43 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r4 = dup(0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b845dc330da5e008126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000440)) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x6) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r5, 0x8018456f, &(0x7f0000000380)=""/14) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) [ 842.044056] Node 0 DMA32 free:20392kB min:36272kB low:45340kB high:54408kB active_anon:1940048kB inactive_anon:16080kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2621268kB mlocked:0kB kernel_stack:12096kB pagetables:30812kB bounce:0kB free_pcp:1472kB local_pcp:736kB free_cma:0kB [ 842.103621] lowmem_reserve[]: 0 0 0 0 0 [ 842.117363] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 842.126223] syz-executor.4: [ 842.158659] syz-executor.3: [ 842.161349] syz-executor.0: [ 842.163374] page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 842.176179] page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 842.181886] syz-executor.3 cpuset= [ 842.194003] page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 842.234755] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 842.248197] / mems_allowed=0-1 [ 842.259303] CPU: 1 PID: 26544 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 842.267223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 842.276586] Call Trace: [ 842.279200] dump_stack+0x13e/0x194 [ 842.282832] warn_alloc.cold+0x96/0x1af [ 842.286930] ? zone_watermark_ok_safe+0x280/0x280 [ 842.290534] syz-executor.4 cpuset= [ 842.291799] ? wait_for_completion+0x390/0x390 [ 842.291817] __alloc_pages_slowpath+0x2114/0x26c0 [ 842.291843] ? warn_alloc+0xf0/0xf0 [ 842.291854] ? find_held_lock+0x2d/0x110 [ 842.291864] ? fs_reclaim_acquire+0x10/0x10 [ 842.291880] __alloc_pages_nodemask+0x5d3/0x700 [ 842.291893] ? rcu_read_lock_sched_held+0x10a/0x130 [ 842.291900] ? __alloc_pages_nodemask+0x5e0/0x700 [ 842.291908] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 842.291925] alloc_pages_current+0xe7/0x1e0 [ 842.301382] syz-executor.5: [ 842.305009] kvm_mmu_create+0xd1/0x1c0 [ 842.308619] page allocation failure: order:0 [ 842.312673] kvm_arch_vcpu_init+0x28b/0x8b0 [ 842.312683] ? alloc_pages_current+0xef/0x1e0 [ 842.312694] kvm_vcpu_init+0x26d/0x360 [ 842.312705] vmx_create_vcpu+0xf3/0x2900 [ 842.312719] ? __mutex_unlock_slowpath+0x75/0x780 [ 842.312728] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 842.312738] ? handle_rdmsr+0x6b0/0x6b0 [ 842.312751] kvm_vm_ioctl+0x49c/0x1430 [ 842.312764] ? __lock_acquire+0x5f7/0x4620 [ 842.335880] / [ 842.336745] ? kvm_vcpu_release+0xa0/0xa0 [ 842.352762] , mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask= [ 842.356658] ? trace_hardirqs_on+0x10/0x10 [ 842.356675] ? trace_hardirqs_on+0x10/0x10 [ 842.356690] ? save_trace+0x290/0x290 [ 842.356700] ? __might_fault+0x104/0x1b0 [ 842.356716] ? kvm_vcpu_release+0xa0/0xa0 [ 842.370350] mems_allowed=0-1 [ 842.373963] do_vfs_ioctl+0x75a/0xfe0 [ 842.373977] ? selinux_file_mprotect+0x5c0/0x5c0 [ 842.373986] ? ioctl_preallocate+0x1a0/0x1a0 [ 842.374003] ? security_file_ioctl+0x76/0xb0 [ 842.374013] ? security_file_ioctl+0x83/0xb0 [ 842.374025] SyS_ioctl+0x7f/0xb0 [ 842.374033] ? do_vfs_ioctl+0xfe0/0xfe0 [ 842.374045] do_syscall_64+0x1d5/0x640 [ 842.374059] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 842.374066] RIP: 0033:0x45c889 [ 842.374074] RSP: 002b:00007f6f6e1b7c78 EFLAGS: 00000246 [ 842.405329] (null) [ 842.407270] ORIG_RAX: 0000000000000010 [ 842.407276] RAX: ffffffffffffffda RBX: 00007f6f6e1b86d4 RCX: 000000000045c889 [ 842.407281] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 842.407287] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 842.407293] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 842.407298] R13: 0000000000000390 R14: 00000000004c60a9 R15: 000000000076bf0c [ 842.443996] lowmem_reserve[]: [ 842.444522] CPU: 0 PID: 26547 Comm: syz-executor.4 Not tainted 4.14.176-syzkaller #0 [ 842.451513] syz-executor.1: [ 842.451897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 842.466196] 0 [ 842.468109] Call Trace: [ 842.468127] dump_stack+0x13e/0x194 [ 842.468139] warn_alloc.cold+0x96/0x1af [ 842.468150] ? zone_watermark_ok_safe+0x280/0x280 [ 842.474688] page allocation failure: order:0 [ 842.475657] ? wait_for_completion+0x390/0x390 [ 842.507602] , mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask= [ 842.508804] __alloc_pages_slowpath+0x2114/0x26c0 [ 842.508827] ? warn_alloc+0xf0/0xf0 [ 842.525007] 0 [ 842.527072] ? find_held_lock+0x2d/0x110 [ 842.527084] ? fs_reclaim_acquire+0x10/0x10 [ 842.527102] __alloc_pages_nodemask+0x5d3/0x700 [ 842.594230] ? rcu_read_lock_sched_held+0x10a/0x130 [ 842.599234] ? __alloc_pages_nodemask+0x5e0/0x700 [ 842.604060] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 842.609067] alloc_pages_current+0xe7/0x1e0 [ 842.613376] kvm_mmu_create+0xd1/0x1c0 [ 842.617251] kvm_arch_vcpu_init+0x28b/0x8b0 [ 842.621565] ? alloc_pages_current+0xef/0x1e0 [ 842.626048] kvm_vcpu_init+0x26d/0x360 [ 842.629921] vmx_create_vcpu+0xf3/0x2900 [ 842.633967] ? __mutex_unlock_slowpath+0x75/0x780 [ 842.638797] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 842.643801] ? handle_rdmsr+0x6b0/0x6b0 [ 842.647762] kvm_vm_ioctl+0x49c/0x1430 [ 842.651640] ? __lock_acquire+0x5f7/0x4620 [ 842.655868] ? kvm_vcpu_release+0xa0/0xa0 [ 842.660004] ? trace_hardirqs_on+0x10/0x10 [ 842.664242] ? trace_hardirqs_on+0x10/0x10 [ 842.668464] ? save_trace+0x290/0x290 [ 842.672249] ? __might_fault+0x104/0x1b0 [ 842.676688] ? kvm_vcpu_release+0xa0/0xa0 [ 842.680851] do_vfs_ioctl+0x75a/0xfe0 [ 842.684665] ? selinux_file_mprotect+0x5c0/0x5c0 [ 842.689432] ? ioctl_preallocate+0x1a0/0x1a0 [ 842.693865] ? security_file_ioctl+0x76/0xb0 [ 842.698292] ? security_file_ioctl+0x83/0xb0 [ 842.702693] SyS_ioctl+0x7f/0xb0 [ 842.706049] ? do_vfs_ioctl+0xfe0/0xfe0 [ 842.710010] do_syscall_64+0x1d5/0x640 [ 842.713891] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 842.719069] RIP: 0033:0x45c889 [ 842.722283] RSP: 002b:00007f27682f6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 842.729974] RAX: ffffffffffffffda RBX: 00007f27682f76d4 RCX: 000000000045c889 [ 842.737233] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 842.744487] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 842.751739] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 842.758995] R13: 0000000000000390 R14: 00000000004c60a9 R15: 000000000076bf0c [ 842.770118] CPU: 0 PID: 26545 Comm: syz-executor.3 Not tainted 4.14.176-syzkaller #0 [ 842.779091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 842.784074] 0 [ 842.788453] Call Trace: [ 842.788474] dump_stack+0x13e/0x194 [ 842.788488] warn_alloc.cold+0x96/0x1af [ 842.788499] ? zone_watermark_ok_safe+0x280/0x280 [ 842.798184] 0 [ 842.800469] ? wait_for_completion+0x390/0x390 [ 842.800486] __alloc_pages_slowpath+0x2114/0x26c0 [ 842.805438] (null) [ 842.807143] ? warn_alloc+0xf0/0xf0 [ 842.807154] ? find_held_lock+0x2d/0x110 [ 842.807165] ? fs_reclaim_acquire+0x10/0x10 [ 842.819571] syz-executor.1 cpuset= [ 842.822384] __alloc_pages_nodemask+0x5d3/0x700 [ 842.822398] ? rcu_read_lock_sched_held+0x10a/0x130 [ 842.822407] ? __alloc_pages_nodemask+0x5e0/0x700 [ 842.822416] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 842.822433] alloc_pages_current+0xe7/0x1e0 [ 842.822446] kvm_mmu_create+0xd1/0x1c0 [ 842.827472] 0 [ 842.830838] kvm_arch_vcpu_init+0x28b/0x8b0 [ 842.830850] ? alloc_pages_current+0xef/0x1e0 [ 842.830862] kvm_vcpu_init+0x26d/0x360 [ 842.830874] vmx_create_vcpu+0xf3/0x2900 [ 842.830889] ? __mutex_unlock_slowpath+0x75/0x780 [ 842.830900] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 842.830911] ? handle_rdmsr+0x6b0/0x6b0 [ 842.837853] / [ 842.839930] kvm_vm_ioctl+0x49c/0x1430 [ 842.849800] ? __lock_acquire+0x5f7/0x4620 [ 842.849812] ? kvm_vcpu_release+0xa0/0xa0 [ 842.849824] ? trace_hardirqs_on+0x10/0x10 [ 842.861800] mems_allowed=0-1 [ 842.863032] ? trace_hardirqs_on+0x10/0x10 [ 842.863047] ? save_trace+0x290/0x290 [ 842.863060] ? __might_fault+0x104/0x1b0 [ 842.868242] Node 1 [ 842.869176] ? kvm_vcpu_release+0xa0/0xa0 [ 842.884877] Normal free:1715112kB min:53612kB low:67012kB high:80412kB active_anon:1231700kB inactive_anon:15212kB active_file:56112kB inactive_file:30780kB unevictable:0kB writepending:120kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:8832kB pagetables:19104kB bounce:0kB free_pcp:972kB local_pcp:540kB free_cma:0kB [ 842.886415] do_vfs_ioctl+0x75a/0xfe0 [ 842.886430] ? selinux_file_mprotect+0x5c0/0x5c0 [ 842.886443] ? ioctl_preallocate+0x1a0/0x1a0 [ 842.905924] lowmem_reserve[]: [ 842.909370] ? security_file_ioctl+0x76/0xb0 [ 842.909379] ? security_file_ioctl+0x83/0xb0 [ 842.909391] SyS_ioctl+0x7f/0xb0 [ 842.937451] 0 [ 842.965693] ? do_vfs_ioctl+0xfe0/0xfe0 [ 842.965709] do_syscall_64+0x1d5/0x640 [ 842.965725] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 842.965734] RIP: 0033:0x45c889 [ 842.965738] RSP: 002b:00007f083e4e8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 842.965747] RAX: ffffffffffffffda RBX: 00007f083e4e96d4 RCX: 000000000045c889 [ 842.965752] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 842.965756] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 842.965761] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 842.965765] R13: 0000000000000390 R14: 00000000004c60a9 R15: 000000000076bf0c [ 843.055882] CPU: 1 PID: 26565 Comm: syz-executor.1 Not tainted 4.14.176-syzkaller #0 [ 843.058530] syz-executor.5 cpuset= [ 843.066028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 843.066032] Call Trace: [ 843.066050] dump_stack+0x13e/0x194 [ 843.066064] warn_alloc.cold+0x96/0x1af [ 843.066073] ? zone_watermark_ok_safe+0x280/0x280 [ 843.066089] ? wait_for_completion+0x390/0x390 [ 843.066102] __alloc_pages_slowpath+0x2114/0x26c0 [ 843.066122] ? warn_alloc+0xf0/0xf0 [ 843.106633] / mems_allowed=0-1 [ 843.107373] ? find_held_lock+0x2d/0x110 [ 843.107388] ? fs_reclaim_acquire+0x10/0x10 [ 843.118971] __alloc_pages_nodemask+0x5d3/0x700 [ 843.123648] ? rcu_read_lock_sched_held+0x10a/0x130 [ 843.128670] ? __alloc_pages_nodemask+0x5e0/0x700 [ 843.133518] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 843.138543] alloc_pages_current+0xe7/0x1e0 [ 843.142888] kvm_mmu_create+0xd1/0x1c0 [ 843.146784] kvm_arch_vcpu_init+0x28b/0x8b0 [ 843.151159] ? alloc_pages_current+0xef/0x1e0 [ 843.155660] kvm_vcpu_init+0x26d/0x360 [ 843.159541] vmx_create_vcpu+0xf3/0x2900 [ 843.163608] ? __mutex_unlock_slowpath+0x75/0x780 [ 843.168465] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 843.173921] ? handle_rdmsr+0x6b0/0x6b0 [ 843.177952] kvm_vm_ioctl+0x49c/0x1430 [ 843.181845] ? __lock_acquire+0x5f7/0x4620 [ 843.186072] ? kvm_vcpu_release+0xa0/0xa0 [ 843.190228] ? trace_hardirqs_on+0x10/0x10 [ 843.194454] ? trace_hardirqs_on+0x10/0x10 [ 843.198697] ? save_trace+0x290/0x290 [ 843.202671] ? __might_fault+0x104/0x1b0 [ 843.206743] ? kvm_vcpu_release+0xa0/0xa0 [ 843.210895] do_vfs_ioctl+0x75a/0xfe0 [ 843.214706] ? selinux_file_mprotect+0x5c0/0x5c0 [ 843.219469] ? ioctl_preallocate+0x1a0/0x1a0 [ 843.223890] ? security_file_ioctl+0x76/0xb0 [ 843.228653] ? security_file_ioctl+0x83/0xb0 [ 843.233074] SyS_ioctl+0x7f/0xb0 [ 843.236444] ? do_vfs_ioctl+0xfe0/0xfe0 [ 843.240426] do_syscall_64+0x1d5/0x640 [ 843.244334] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 843.249602] RIP: 0033:0x45c889 [ 843.252781] RSP: 002b:00007fed3131bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 843.260577] RAX: ffffffffffffffda RBX: 00007fed3131c6d4 RCX: 000000000045c889 [ 843.267921] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 843.275173] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 843.282424] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 843.289677] R13: 0000000000000390 R14: 00000000004c60a9 R15: 000000000076bf0c [ 843.323508] CPU: 0 PID: 26517 Comm: syz-executor.5 Not tainted 4.14.176-syzkaller #0 [ 843.331460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 843.340816] Call Trace: [ 843.343457] dump_stack+0x13e/0x194 [ 843.347355] warn_alloc.cold+0x96/0x1af [ 843.351957] ? zone_watermark_ok_safe+0x280/0x280 [ 843.359251] ? wait_for_completion+0x390/0x390 [ 843.363937] __alloc_pages_slowpath+0x2114/0x26c0 [ 843.368807] ? warn_alloc+0xf0/0xf0 [ 843.372766] 0 [ 843.377005] ? find_held_lock+0x2d/0x110 [ 843.377018] ? fs_reclaim_acquire+0x10/0x10 [ 843.377039] __alloc_pages_nodemask+0x5d3/0x700 [ 843.377052] ? rcu_read_lock_sched_held+0x10a/0x130 [ 843.377063] ? __alloc_pages_nodemask+0x5e0/0x700 [ 843.379101] Mem-Info: [ 843.382900] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 843.382921] alloc_pages_current+0xe7/0x1e0 [ 843.382936] kvm_mmu_create+0xd1/0x1c0 [ 843.382948] kvm_arch_vcpu_init+0x28b/0x8b0 [ 843.382955] ? alloc_pages_current+0xef/0x1e0 [ 843.382966] kvm_vcpu_init+0x26d/0x360 [ 843.382978] vmx_create_vcpu+0xf3/0x2900 [ 843.382993] ? __mutex_unlock_slowpath+0x75/0x780 [ 843.383007] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 843.394417] 0 [ 843.396977] ? handle_rdmsr+0x6b0/0x6b0 [ 843.396995] kvm_vm_ioctl+0x49c/0x1430 [ 843.397010] ? __lock_acquire+0x5f7/0x4620 [ 843.397022] ? kvm_vcpu_release+0xa0/0xa0 [ 843.402356] active_anon:793995 inactive_anon:7818 isolated_anon:0 [ 843.402356] active_file:14044 inactive_file:7697 isolated_file:0 [ 843.402356] unevictable:0 dirty:29 writeback:20 unstable:0 [ 843.402356] slab_reclaimable:54276 slab_unreclaimable:197956 [ 843.402356] mapped:62585 shmem:9686 pagetables:12493 bounce:0 [ 843.402356] free:435791 free_pcp:622 free_cma:0 [ 843.404710] ? trace_hardirqs_on+0x10/0x10 [ 843.404727] ? trace_hardirqs_on+0x10/0x10 [ 843.404741] ? save_trace+0x290/0x290 [ 843.404752] ? __might_fault+0x104/0x1b0 [ 843.404767] ? kvm_vcpu_release+0xa0/0xa0 01:42:44 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) clone(0x80800300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x0, 0x0, 0xd0e0000, 0x0, 0x100, 0x170, 0x1d8, 0x1d8, 0x170, 0x1d8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'veth0_to_team\x00'}, 0x0, 0x70, 0x98, 0x0, {0x6203}}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x2e00, 0xf000}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) [ 843.410490] Node 0 active_anon:1944212kB inactive_anon:16080kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216424kB dirty:4kB writeback:0kB shmem:16756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1153024kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 843.418899] do_vfs_ioctl+0x75a/0xfe0 [ 843.418916] ? selinux_file_mprotect+0x5c0/0x5c0 [ 843.418928] ? ioctl_preallocate+0x1a0/0x1a0 [ 843.418948] ? security_file_ioctl+0x76/0xb0 [ 843.418955] ? security_file_ioctl+0x83/0xb0 [ 843.418966] SyS_ioctl+0x7f/0xb0 [ 843.428898] 0 [ 843.432331] ? do_vfs_ioctl+0xfe0/0xfe0 [ 843.432347] do_syscall_64+0x1d5/0x640 [ 843.432365] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 843.432373] RIP: 0033:0x45c889 [ 843.432377] RSP: 002b:00007f73f5235c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 843.432386] RAX: ffffffffffffffda RBX: 00007f73f52366d4 RCX: 000000000045c889 [ 843.432391] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 843.432395] RBP: 000000000076bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 843.432403] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 843.440414] 0 [ 843.441802] R13: 0000000000000390 R14: 00000000004c60a9 R15: 000000000076bfac [ 843.583021] Node 1 active_anon:1231868kB inactive_anon:15192kB active_file:56172kB inactive_file:30784kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:33916kB dirty:112kB writeback:80kB shmem:21988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 843.684071] Node 0 DMA free:10324kB min:220kB low:272kB high:324kB active_anon:4164kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:124kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 843.694099] NFQUEUE: number of queues (61440) out of range (got 73215) [ 843.719558] Node 0 DMA: 1*4kB (M) 10*8kB (UM) 4*16kB (UM) 2*32kB (UM) 0*64kB 1*128kB (M) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (M) = 10324kB 01:42:44 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r4 = dup(0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ubi_ctrl\x00', 0x80, 0x0) fcntl$dupfd(r6, 0x406, r5) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:42:44 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0xe7, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss={0x2, 0xfff}, @timestamp, @window], 0x143) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x8f8dd, 0x0, 0x0, 0x0) [ 843.739548] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 843.754487] Node 0 DMA32 free:20540kB min:36272kB low:45340kB high:54408kB active_anon:1940048kB inactive_anon:16080kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2621268kB mlocked:0kB kernel_stack:12096kB pagetables:30812kB bounce:0kB free_pcp:1404kB local_pcp:700kB free_cma:0kB 01:42:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x549c599b1b8191c5, 0x2) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000000c0)={0x0, 0xffffffff}) [ 843.784786] Node 0 DMA32: 315*4kB (UME) 129*8kB (UME) 22*16kB (UME) 514*32kB (UME) 3*64kB (UE) 10*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20564kB [ 843.805372] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 843.827832] lowmem_reserve[]: 0 0 0 0 0 01:42:45 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYRES32], 0x4) shutdown(r0, 0x1) [ 843.846089] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 843.875118] Node 1 Normal: 165*4kB (UME) 527*8kB (UM) 67*16kB (UM) 38*32kB (UM) 154*64kB (UM) 65*128kB (UM) 46*256kB (UM) 26*512kB (UE) 11*1024kB (UM) 2*2048kB (UE) 403*4096kB (M) = 1716476kB [ 843.906505] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 843.915682] lowmem_reserve[]: 0 0 0 0 0 [ 843.919798] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 843.931834] Node 1 Normal free:1714752kB min:53612kB low:67012kB high:80412kB active_anon:1231868kB inactive_anon:15192kB active_file:56172kB inactive_file:30784kB unevictable:0kB writepending:192kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:8448kB pagetables:19184kB bounce:0kB free_pcp:832kB local_pcp:588kB free_cma:0kB [ 843.962994] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 843.975239] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 843.985009] 31441 total pagecache pages [ 843.989175] 0 pages in swap cache [ 843.995259] lowmem_reserve[]: 0 0 0 0 0 [ 844.001249] Swap cache stats: add 0, delete 0, find 0/0 [ 844.006753] Node 0 DMA: 1*4kB (M) 10*8kB (UM) 4*16kB (UM) 2*32kB (UM) 0*64kB 1*128kB (M) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (M) = 10324kB [ 844.022214] Free swap = 0kB [ 844.025349] Total swap = 0kB [ 844.028462] 1965979 pages RAM [ 844.033237] 0 pages HighMem/MovableOnly [ 844.037331] Node 0 DMA32: 334*4kB (UME) 133*8kB (UME) 23*16kB (UME) 514*32kB (UME) 3*64kB (UE) 10*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20688kB 01:42:45 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x100) 01:42:45 executing program 4: socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x4a, &(0x7f0000001480)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000810000008100000086dd605c72f3000c110020010000000000005c88000000000000fe80000000000000000000000000000000000000000c907801000000"], 0x0) [ 844.054654] 339050 pages reserved [ 844.058235] 0 pages cma reserved [ 844.070288] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 844.086249] Node 1 Normal: 134*4kB (UME) 216*8kB (UM) 154*16kB (UM) 43*32kB (UM) 155*64kB (UM) 66*128kB (UM) 46*256kB (UM) 26*512kB (UE) 11*1024kB (UM) 2*2048kB (UE) 403*4096kB (M) = 1715608kB 01:42:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x70bd2a}, 0x1c}}, 0x44085) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000000)={0x1ff, 0x3}) [ 844.119927] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 844.137124] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 844.153510] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 844.175253] syz-executor.5: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 844.188353] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 844.199372] 31441 total pagecache pages [ 844.205938] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 844.214141] 0 pages in swap cache [ 844.217774] CPU: 1 PID: 26669 Comm: syz-executor.5 Not tainted 4.14.176-syzkaller #0 [ 844.225662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 844.235021] Call Trace: [ 844.237626] dump_stack+0x13e/0x194 [ 844.241267] warn_alloc.cold+0x96/0x1af [ 844.245248] ? zone_watermark_ok_safe+0x280/0x280 [ 844.250107] ? wait_for_completion+0x390/0x390 [ 844.254700] __alloc_pages_slowpath+0x2114/0x26c0 [ 844.259564] ? warn_alloc+0xf0/0xf0 [ 844.263200] ? find_held_lock+0x2d/0x110 [ 844.267268] ? fs_reclaim_acquire+0x10/0x10 [ 844.271610] __alloc_pages_nodemask+0x5d3/0x700 [ 844.276300] ? rcu_read_lock_sched_held+0x10a/0x130 [ 844.281324] ? __alloc_pages_nodemask+0x5e0/0x700 [ 844.286172] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 844.291213] alloc_pages_current+0xe7/0x1e0 [ 844.295555] kvm_mmu_create+0xd1/0x1c0 [ 844.299461] kvm_arch_vcpu_init+0x28b/0x8b0 [ 844.303896] ? alloc_pages_current+0xef/0x1e0 [ 844.308403] kvm_vcpu_init+0x26d/0x360 [ 844.312302] vmx_create_vcpu+0xf3/0x2900 [ 844.316374] ? __mutex_unlock_slowpath+0x75/0x780 [ 844.321221] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 844.326256] ? handle_rdmsr+0x6b0/0x6b0 [ 844.330247] kvm_vm_ioctl+0x49c/0x1430 [ 844.334150] ? __lock_acquire+0x5f7/0x4620 [ 844.338397] ? kvm_vcpu_release+0xa0/0xa0 [ 844.342557] ? trace_hardirqs_on+0x10/0x10 [ 844.346808] ? trace_hardirqs_on+0x10/0x10 [ 844.351060] ? save_trace+0x290/0x290 [ 844.354874] ? __might_fault+0x104/0x1b0 [ 844.358949] ? kvm_vcpu_release+0xa0/0xa0 [ 844.363112] do_vfs_ioctl+0x75a/0xfe0 [ 844.366935] ? selinux_file_mprotect+0x5c0/0x5c0 [ 844.371707] ? ioctl_preallocate+0x1a0/0x1a0 [ 844.372303] Swap cache stats: add 0, delete 0, find 0/0 [ 844.376137] ? security_file_ioctl+0x76/0xb0 [ 844.376148] ? security_file_ioctl+0x83/0xb0 [ 844.376162] SyS_ioctl+0x7f/0xb0 [ 844.376173] ? do_vfs_ioctl+0xfe0/0xfe0 [ 844.376185] do_syscall_64+0x1d5/0x640 [ 844.376202] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 844.407109] RIP: 0033:0x45c889 [ 844.410301] RSP: 002b:00007f73f5256c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 844.418021] RAX: ffffffffffffffda RBX: 00007f73f52576d4 RCX: 000000000045c889 [ 844.425302] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 844.432582] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 844.433269] Free swap = 0kB [ 844.439861] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 844.439867] R13: 0000000000000390 R14: 00000000004c60a9 R15: 000000000076bf0c [ 844.452143] warn_alloc_show_mem: 4 callbacks suppressed [ 844.452147] Mem-Info: [ 844.494018] active_anon:794483 inactive_anon:8070 isolated_anon:0 [ 844.494018] active_file:14046 inactive_file:7957 isolated_file:0 [ 844.494018] unevictable:0 dirty:82 writeback:0 unstable:0 [ 844.494018] slab_reclaimable:54300 slab_unreclaimable:196940 [ 844.494018] mapped:62634 shmem:9940 pagetables:12616 bounce:0 [ 844.494018] free:435748 free_pcp:440 free_cma:0 [ 844.543692] Node 0 active_anon:1944212kB inactive_anon:16080kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216428kB dirty:4kB writeback:0kB shmem:16756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1153024kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 844.577223] Node 1 active_anon:1233820kB inactive_anon:16200kB active_file:56176kB inactive_file:31828kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34108kB dirty:324kB writeback:0kB shmem:23004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 844.581187] Total swap = 0kB [ 844.647593] Node 0 DMA free:10324kB min:220kB low:272kB high:324kB active_anon:4164kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:124kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 844.685054] 1965979 pages RAM [ 844.688350] 0 pages HighMem/MovableOnly [ 844.696850] 339050 pages reserved 01:42:45 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfffffffffffffec2, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x2d000, 0x0) 01:42:45 executing program 4: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f00000012c0)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.nlink\x00', &(0x7f0000000240)={'L+', 0x3f}, 0x16, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000015c0)='net/vlan/config\x00') socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) close(r1) r3 = creat(&(0x7f0000000400)='./file0\x00', 0xa1) write$binfmt_script(r3, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x2) close(r3) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@loopback, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in6}}, &(0x7f00000000c0)=0xe8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="5fe6e39266007e2fcf939e8918e92605495b4c6a8588b1bb786b5a96249174d0209f94", @ANYRES16=0x0, @ANYBLOB="080025bd7000fedbdf254500000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 01:42:45 executing program 3: semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x2, 0x0, 0x0, 0x0, 0x0, 0xc4}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="440f20c066350a000000440f22c00f01c46564f30f0966b8000000000f23c80f21f866350800e0000f23f8f20f35660f113ff26c0f0fcb9e2e0f011c365c", 0x3e}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000440)="6fa199f1453fe17a1b0a5823636b25d08cd4415af1881b1df98f288f31107590bf727081da6317ef0fefb2ae0d5dc09b8b08fa418807be9c230424264052222269c07f7926d9abcdef3f92abfaa09d08de986adf1041dab1ee89310dd09c70e1c4fd7ce790c6a59eb3adf15ffeaac63ad3db1262f61377a6d634bc92e4d63846a6a4bedee5e0992e1494939ce3dbc844f73b6635787e4c5d257c78596f4ce07ed38d5a671b2b536a277ed3082d37c72301627aaea57a921fc7796af10086bfdab51ee0bed74701265aa234034c6681e7748577c81620a7765d15fd38ee530b644db1decd65c964c55dca34bb428f962b4dee61a192b9fb01763e91b9bcd096dc92050f0573dc7c375141e5d0492d51d387324047478ba6d51ec8fe697b85a0e027c857f67bcdd6a3d42ffbdf9d0b340ea565c2f6a8b34ea6c1c136fb122046f591a9ce5166476a694424b07d3f4e49e8fb0aac11df5a4ad8e642ba3c1afffa31225dac59a3cfb79685440fdd90c2ef7d18414b5007776d1484c4ab633aad3f84991dd91a822d5fb47f575136cb1d67afea7279f3ab58bd2b1cd56946cbd1060ec83a2c2bd66bf7d0ed19f6fe7c2602077489250dc4c02ca968fcf4bb83d27f9cd57f60d1923e3e3a2f600c53013b69a75461709ab14f4c60d0c4fce8efe2f25e195448bef1347bc58863275c19421331f518019606fc12e49eddd3a3f9c44a78abb3e1c983a7441447f74c979a70c40d56f23f7e84d73cca16d744bef0a52bd2eaf86c082923dfb7878596765b0f1e800b59e9a34b57caa30048f52fe8cda838979c1d05334c6683cfee634182c0652a89f39f15b71dcab67c403141f90f10b98a95fcf151c1d465e23e651da740cf860663b89de1beecb025add441ee0552aef088c225b41f667c043772b8c0fb48cb8d935e622240ca83b8a37e9189ed40d16f6aec9fcd5626ad6aaf8163e769d9e5a6331a3c6cb01de55a1f26c79aec08c604f071b6d36a5fdf575a5bf365490d5277e8e157e50ae4146eecf3f12a3982104c123f567b4a7d60f56461e0c4b726e99a808ac03d3e91a14201bc96a9f9c1e6bf507f1dc259663a6372e501dbc1e74cdb2562874315c70b8db1e84d1d5a4a792c37b017c686fe966c4ada9024718d9f5862c18329d09a3ccc84be85ca66736c31ea264e6db01c286d340337bf7ff9f527f83db0be2f4edcc161a82011199df73099f812f133541cf862107b6e4be297ebcadc447cf797f32ee0a8e0a34820f74f5e5a336bb861c1e0218d724d2214f714b37f6ad903c5283d3b3285d907f0d9745be5c5a98caa0fa76820bee0d2d63bdb1c7bccfa182f0cef24ec9c63e19afc42538cbd0c2446a32a69fcb7898a6a20074f41782d407ee3a302bd96a0a5cea66f5102638545be636cbf22be0e92e86c82c506ebae39769a365eaa2db1cbc6ef24c6ab612c350f7fba390039bdab00356fe45e44ddee03cf36582d68d45a5dbdcb3cf7f4c58250f76c9a05e98986029eda9cd1616612e7ce5b6933c97316cfa6f4a021b3b8a49623a0f3e1d7c8dd98698533802d4b7f95ba0541d8fdfc0af8a4a808c1c158034395d30ef84290d526f3e96f187de92efd6bf33c200020991ecd9057d306685caf1e79c45703f0c2c82c503802a58a365b6209d5517640f55bab9432b8b3b73f869517a17cb5453e3279cd13719ce27343274fd8aa1acdf08b60d0d80dcd8dcf7e114a554293dd3368a15ffbf06e7cf9d56c50ffaaeabddb395ba9ca75f69794bd821b16ba7d91e8705b3aceb424a450c97707eb51acac4f6358d66f64d341d4e6e049b8c291968bb06d223e0317124a1b699ee0009a26c6720525e09a31ae3cce5a2a914b92b2e1add5a5ad93ddfea997bee35f8b2f220b964eb11af34dace373dc32bc49f880990069267e615ef14945d9255d8a8ad189c457b904504386b2b9f92dea42b3bee356d3ca0b9004d71f0fd147bc5c169ddb4f522b9a86de03e7c46ab6cdcd4571ae39762f52dafcd702997ca3384a226a632ffa1677876f56a65ec9960d0d10f539ea82a4d1e277e2051b48f7bfc18dcee2356213c52662d037903b8960531865b087772bad1c8ac525c3acf2f336e5dcfd2bb8ffba2e5c26debab58edd71f70dd1d34d0e29344ef95dbcfabd4d9b948581c2e4b71f935db14f5f71e027a9317f828a3f74523b5eec71e1d505355526733187f3c0affc103b59ed46d29b97892590e77a556759c8722c20715de728eb3881871d26a7101922bc0d037e061e9ac10b771913b805a286227da93bdceafbc346892530d2df8e9400c9001225964836d2be333c17482e328a81f0525a53160d1ca1210fc2ff558727167b6b4da5e59c9f7a2aeffcfbecf1ebb620d3ea96405c41542d17500592a16e263a70850f12ff03cdb42d97a4d3eeec61640a6e0b091aeddd938b65933b7a269bef56f0025163f4d61fd12b430f90cda28378aa6174b2847d18ceffb385e774443c714af726a8a4297bf0025fb8928240c48adf54b1ec687d687fc6dcec8e80f3d39c3a03e1d2b7fb8ff828bc76d1f476af498a4276210be35a178220c92d6a832c2b47c93259dcd2e7efb01d790910c53d457d8654655eec9044ca5df05c2faf3c881865b9d4a8dcc2ebdaccb569ec3414efd0b2cae924634e88778c47776c03c762fe6e808674b3ab6434e9f1d8af6968e012c0bc0ea9d7e414d749f76b00e4ac819ded06f7baf146cea39ffdff1ee6f9daf77cc8f133ed2b44e34aa8d064c7e8dd1de217da5cab7bab79aff6dce7474b97fa10e19bc45b87b87eda2b85a8e58e4f4d21caed70c1a89e1c6a6a5a89f7e3abb2069f2db24701b9580a47f75538595046f0d323ebfaad6aa9fb8a8881f1e775bb6c628ad79e40f37871b65ff14cd7d197f04aead7eb2139623ebef1a9c8ea935dc7d1c407190f551e8b8cad612f000f9da3a827a9820f07340de5eef017751f622da52f8494d2a11d0d4458c3c5531bb675932639acfab97919564e182a6d8924aceb3b978d94e27f387d04c85d143c9801314d7363d8a1c4d678b8584208fcb724e2b20d68745b6045254ac5f53c03789ce54df5242c4c6d9fbc238c724294aa8925877fd818eedfbcc1ba0d2265fff9923ed3694d01e34a85d0cb4e0d03c5c718a65e6382dc4d8b0744f7a6e75a712e4347b35af8979f01ac0cb5079837e9a2642fe68e92d06a9d72f191710563305198a33fa7dc37feb445fb32ad750c43e6864c14781912fe6f3c9df8aebb616d85ce6c65588bccd7974b60a2c1555745dda10a38c86a7786cc9eb8e58d991fda95af2ac69b26eb3a982e1c5a50e4a8ab7112552ca4c1500ebab9f45a322d89bf1788d54a590085d401d69fc798875033706862fca3a12cc19665a7d641ecc6a78c067ea2372685bd9ef60a717b78a79e7e0f233c30ce7b5ac18d03e23b846d50c6e97ebe85f4572478da4e3610033bba89cd0144398669f7a95efcecd3c8fa5afa645ecd6441c3f3bb9525aeee211135b2c37c6337b7d6786f92fc3cce156f0134489f1b120fe611377ddff3610ec76d31eb51f08b3f0c6fe9f9180c9ab31ad5d6a95bead8d56074099b710f776adf5bac1989d62dd2211a485d155ffa96532925fe61a9c0f3c58bad66198440fa535b7d666a30c0df444ab1c3d0088850a4a467a78e7bf9700993f137f842dc7044d2e135dcdc0d9cdf4444df257292a935ee9b44364127522cfa0a4541754b1aa2442c7913ade89af3fe46b73691137059e823ba5339e8c5da8fff5557519f2b7f246f5eca86bb467ca3492ba36ca17c8844412636cdbe3fd5af67a77cf4fab1a4cf7e6b19025257957532bd3211fc641ff22f1cf33af03440e21000ac151640521f06e59ff55bf924432c399aee0b035eaa37e310f0c60f589a4fe84b557ed711272516faac83866b47565dc8a5e99d11400917384714b78b7a0ea51da57fdc47c45efc31dbc2f1c44030cb567f31dc6ad9edebedf2242eb66ba01828636dfd5b1a42cb5cc52b9d415093f15dbf6b9a6b819ec419c528587e46f7be78d8a1bf394708968e1d0ecadaa705e2c8694740a0966a847483b9459b94894011d3e89eec1c75e759ae5a39509c36a73df031ac87271398de6b39b5718b49a65af7e66ab537892ef21ba45f4ca72db83ae4eabe0615d4992465aca78014d16685f4514927f9579753db8f0f4e90695c02af228371bb5854b67203d82c974bd184cb994c988f5a911997db1df5d648b8d7ee01dde8df258487d61ce0b6c23936aa1566b2a1dcb95b1f41be426a1a2853cb87d9ec28d710a4d47fa1dbabe321a493d8a824589a0d0b5b71ce7eaf35d90b91f06d79364129bdc9951d86e580d5567944a0", 0xc16}], 0x2, &(0x7f0000001580)=[@iv={0x18}], 0x18, 0x20000000}, 0x4) [ 844.729243] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 844.731035] 0 pages cma reserved [ 844.738322] Node 0 DMA32 free:20664kB min:36272kB low:45340kB high:54408kB active_anon:1940048kB inactive_anon:16080kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2621268kB mlocked:0kB kernel_stack:12096kB pagetables:30812kB bounce:0kB free_pcp:1324kB local_pcp:700kB free_cma:0kB 01:42:45 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r4 = dup(0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x202, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f00000002c0)=r5) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000001e0000002000000000000000000000000000d0000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e09000000b3b80834af46f523450843fbcfed1fc6ce2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db61595289002ff862d3a113f24adb86c71c4460f4f484a38a744dd0493e92d427cb5619a28102ec8f61fe90d82a5b9a64a8b9371faf27793577586bc7031fa1fa2be9517e827335de2a7433d2cb99c951467282febd426e412d5c4656e"], 0x38}, 0x8}, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000440)={{0x7f, 0x7f}, 'port1\x00', 0x4, 0x40, 0x1fc00, 0x1, 0xd, 0x10000, 0x6, 0x0, 0x7, 0x9}) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:42:46 executing program 1: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lstat(0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="440f20c066350a000000440f22c00f01c46564f30f0966b8000000000f23c80f21f866350800e0000f23f8f20f35660f113ff26c0f0fcb9e2e0f011c365c", 0x3e}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="31204b55dbfccc5d", 0x8}, {&(0x7f0000000440)="6fa199f1453fe17a1b0a5823636b25d08cd4415af1881b1df98f288f31107590bf727081da6317ef0fefb2ae0d5dc09b8b08fa418807be9c230424264052222269c07f7926d9abcdef3f92abfaa09d08de986adf1041dab1ee89310dd09c70e1c4fd7ce790c6a59eb3adf15ffeaac63ad3db1262f61377a6d634bc92e4d63846a6a4bedee5e0992e1494939ce3dbc844f73b6635787e4c5d257c78596f4ce07ed38d5a671b2b536a277ed3082d37c72301627aaea57a921fc7796af10086bfdab51ee0bed74701265aa234034c6681e7748577c81620a7765d15fd38ee530b644db1decd65c964c55dca34bb428f962b4dee61a192b9fb01763e91b9bcd096dc92050f0573dc7c375141e5d0492d51d387324047478ba6d51ec8fe697b85a0e027c857f67bcdd6a3d42ffbdf9d0b340ea565c2f6a8b34ea6c1c136fb122046f591a9ce5166476a694424b07d3f4e49e8fb0aac11df5a4ad8e642ba3c1afffa31225dac59a3cfb79685440fdd90c2ef7d18414b5007776d1484c4ab633aad3f84991dd91a822d5fb47f575136cb1d67afea7279f3ab58bd2b1cd56946cbd1060ec83a2c2bd66bf7d0ed19f6fe7c2602077489250dc4c02ca968fcf4bb83d27f9cd57f60d1923e3e3a2f600c53013b69a75461709ab14f4c60d0c4fce8efe2f25e195448bef1347bc58863275c19421331f518019606fc12e49eddd3a3f9c44a78abb3e1c983a7441447f74c979a70c40d56f23f7e84d73cca16d744bef0a52bd2eaf86c082923dfb7878596765b0f1e800b59e9a34b57caa30048f52fe8cda838979c1d05334c6683cfee634182c0652a89f39f15b71dcab67c403141f90f10b98a95fcf151c1d465e23e651da740cf860663b89de1beecb025add441ee0552aef088c225b41f667c043772b8c0fb48cb8d935e622240ca83b8a37e9189ed40d16f6aec9fcd5626ad6aaf8163e769d9e5a6331a3c6cb01de55a1f26c79aec08c604f071b6d36a5fdf575a5bf365490d5277e8e157e50ae4146eecf3f12a3982104c123f567b4a7d60f56461e0c4b726e99a808ac03d3e91a14201bc96a9f9c1e6bf507f1dc259663a6372e501dbc1e74cdb2562874315c70b8db1e84d1d5a4a792c37b017c686fe966c4ada9024718d9f5862c18329d09a3ccc84be85ca66736c31ea264e6db01c286d340337bf7ff9f527f83db0be2f4edcc161a82011199df73099f812f133541cf862107b6e4be297ebcadc447cf797f32ee0a8e0a34820f74f5e5a336bb861c1e0218d724d2214f714b37f6ad903c5283d3b3285d907f0d9745be5c5a98caa0fa76820bee0d2d63bdb1c7bccfa182f0cef24ec9c63e19afc42538cbd0c2446a32a69fcb7898a6a20074f41782d407ee3a302bd96a0a5cea66f5102638545be636cbf22be0e92e86c82c506ebae39769a365eaa2db1cbc6ef24c6ab612c350f7fba390039bdab00356fe45e44ddee03cf36582d68d45a5dbdcb3cf7f4c58250f76c9a05e98986029eda9cd1616612e7ce5b6933c97316cfa6f4a021b3b8a49623a0f3e1d7c8dd98698533802d4b7f95ba0541d8fdfc0af8a4a808c1c158034395d30ef84290d526f3e96f187de92efd6bf33c200020991ecd9057d306685caf1e79c45703f0c2c82c503802a58a365b6209d5517640f55bab9432b8b3b73f869517a17cb5453e3279cd13719ce27343274fd8aa1acdf08b60d0d80dcd8dcf7e114a554293dd3368a15ffbf06e7cf9d56c50ffaaeabddb395ba9ca75f69794bd821b16ba7d91e8705b3aceb424a450c97707eb51acac4f6358d66f64d341d4e6e049b8c291968bb06d223e0317124a1b699ee0009a26c6720525e09a31ae3cce5a2a914b92b2e1add5a5ad93ddfea997bee35f8b2f220b964eb11af34dace373dc32bc49f880990069267e615ef14945d9255d8a8ad189c457b904504386b2b9f92dea42b3bee356d3ca0b9004d71f0fd147bc5c169ddb4f522b9a86de03e7c46ab6cdcd4571ae39762f52dafcd702997ca3384a226a632ffa1677876f56a65ec9960d0d10f539ea82a4d1e277e2051b48f7bfc18dcee2356213c52662d037903b8960531865b087772bad1c8ac525c3acf2f336e5dcfd2bb8ffba2e5c26debab58edd71f70dd1d34d0e29344ef95dbcfabd4d9b948581c2e4b71f935db14f5f71e027a9317f828a3f74523b5eec71e1d505355526733187f3c0affc103b59ed46d29b97892590e77a556759c8722c20715de728eb3881871d26a7101922bc0d037e061e9ac10b771913b805a286227da93bdceafbc346892530d2df8e9400c9001225964836d2be333c17482e328a81f0525a53160d1ca1210fc2ff558727167b6b4da5e59c9f7a2aeffcfbecf1ebb620d3ea96405c41542d17500592a16e263a70850f12ff03cdb42d97a4d3eeec61640a6e0b091aeddd938b65933b7a269bef56f0025163f4d61fd12b430f90cda28378aa6174b2847d18ceffb385e774443c714af726a8a4297bf0025fb8928240c48adf54b1ec687d687fc6dcec8e80f3d39c3a03e1d2b7fb8ff828bc76d1f476af498a4276210be35a178220c92d6a832c2b47c93259dcd2e7efb01d790910c53d457d8654655eec9044ca5df05c2faf3c881865b9d4a8dcc2ebdaccb569ec3414efd0b2cae924634e88778c47776c03c762fe6e808674b3ab6434e9f1d8af6968e012c0bc0ea9d7e414d749f76b00e4ac819ded06f7baf146cea39ffdff1ee6f9daf77cc8f133ed2b44e34aa8d064c7e8dd1de217da5cab7bab79aff6dce7474b97fa10e19bc45b87b87eda2b85a8e58e4f4d21caed70c1a89e1c6a6a5a89f7e3abb2069f2db24701b9580a47f75538595046f0d323ebfaad6aa9fb8a8881f1e775bb6c628ad79e40f37871b65ff14cd7d197f04aead7eb2139623ebef1a9c8ea935dc7d1c407190f551e8b8cad612f000f9da3a827a9820f07340de5eef017751f622da52f8494d2a11d0d4458c3c5531bb675932639acfab97919564e182a6d8924aceb3b978d94e27f387d04c85d143c9801314d7363d8a1c4d678b8584208fcb724e2b20d68745b6045254ac5f53c03789ce54df5242c4c6d9fbc238c724294aa8925877fd818eedfbcc1ba0d2265fff9923ed3694d01e34a85d0cb4e0d03c5c718a65e6382dc4d8b0744f7a6e75a712e4347b35af8979f01ac0cb5079837e9a2642fe68e92d06a9d72f191710563305198a33fa7dc37feb445fb32ad750c43e6864c14781912fe6f3c9df8aebb616d85ce6c65588bccd7974b60a2c1555745dda10a38c86a7786cc9eb8e58d991fda95af2ac69b26eb3a982e1c5a50e4a8ab7112552ca4c1500ebab9f45a322d89bf1788d54a590085d401d69fc798875033706862fca3a12cc19665a7d641ecc6a78c067ea2372685bd9ef60a717b78a79e7e0f233c30ce7b5ac18d03e23b846d50c6e97ebe85f4572478da4e3610033bba89cd0144398669f7a95efcecd3c8fa5afa645ecd6441c3f3bb9525aeee211135b2c37c6337b7d6786f92fc3cce156f0134489f1b120fe611377ddff3610ec76d31eb51f08b3f0c6fe9f9180c9ab31ad5d6a95bead8d56074099b710f776adf5bac1989d62dd2211a485d155ffa96532925fe61a9c0f3c58bad66198440fa535b7d666a30c0df444ab1c3d0088850a4a467a78e7bf9700993f137f842dc7044d2e135dcdc0d9cdf4444df257292a935ee9b44364127522cfa0a4541754b1aa2442c7913ade89af3fe46b73691137059e823ba5339e8c5da8fff5557519f2b7f246f5eca86bb467ca3492ba36ca17c8844412636cdbe3fd5af67a77cf4fab1a4cf7e6b19025257957532bd3211fc641ff22f1cf33af03440e21000ac151640521f06e59ff55bf924432c399aee0b035eaa37e310f0c60f589a4fe84b557ed711272516faac83866b47565dc8a5e99d11400917384714b78b7a0ea51da57fdc47c45efc31dbc2f1c44030cb567f31dc6ad9edebedf2242eb66ba01828636dfd5b1a42cb5cc52b9d415093f15dbf6b9a6b819ec419c528587e46f7be78d8a1bf394708968e1d0ecadaa705e2c8694740a0966a847483b9459b94894011d3e89eec1c75e759ae5a39509c36a73df031ac87271398de6b39b5718b49a65af7e66ab537892ef21ba45f4ca72db83ae4eabe0615d4992465aca78014d16685f4514927f9579753db8f0f4e90695c02af228371bb5854b67203d82c974bd184cb994c988f5a911997db1df5d648b8d7ee01dde8df258487d61ce0b6c23936aa1566b2a1dcb95b1f41be426a1a2853cb87d9ec28d710a4d47fa1dbabe321a493d8a824589a0d0b5b71ce7eaf35d90b91f06d79364129bdc9951d86e580d5567944a043121c9c6a4e24aafaa726fd9d55f679ddfe8f62e1e76fd512ae79ce72e5becd33089d6cf0b5a50435c7673f10cb138bbc9410f1648067f26f3ee34277f240d4279b4daff45aa156da5fe3f29fa00b693bc8121ad69119a11fc5fe02502b7eeb8408048d7dc89f4a7dff234e1aafe2478b0f1cde18aaeb8cadf33ddf26fb17542f90e74ab07632028cebc5f4f7d8179d8638c23d8dd87a2dbb0958d5abd24dc9c4c89d346c019e0df7d6734e8263973bf335bb49adcb015cb6acf52b9f09761a8102573df00a431d988300eddda34c91eef7e303f028de8194f2d2c1a547c5387dbba64329a727d73750dda154b68f3dc71787b700464ca60e60bf358520a831bf983c26c8b2258e41c911b96f448447feed4900ad5a15340395f60e48f2d3ce8a0424a65d8d6af5405904d69618cf5cdf7311b4a438c95c90afd60d5cb54aefd281f30c223f4258b7af6eaf98f6241d3f0089389ce77ed00d4500fc1a030d09c5560add779cbdb6e36f58f05f0f96185605a7c9a742f1f8c9c4f7e1c7f251a1", 0xd96}, {0x0}, {0x0}], 0x4, &(0x7f0000001580)=[@assoc={0x18}], 0x18, 0x20000000}, 0x0) [ 844.865273] syz-executor.3: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 844.887059] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 844.892984] CPU: 1 PID: 26702 Comm: syz-executor.3 Not tainted 4.14.176-syzkaller #0 [ 844.900888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 844.910374] Call Trace: [ 844.912973] dump_stack+0x13e/0x194 [ 844.916614] warn_alloc.cold+0x96/0x1af [ 844.920618] ? zone_watermark_ok_safe+0x280/0x280 [ 844.925618] ? wait_for_completion+0x390/0x390 [ 844.930216] __alloc_pages_slowpath+0x2114/0x26c0 [ 844.935082] ? warn_alloc+0xf0/0xf0 [ 844.938718] ? find_held_lock+0x2d/0x110 [ 844.942823] ? fs_reclaim_acquire+0x10/0x10 [ 844.947164] __alloc_pages_nodemask+0x5d3/0x700 [ 844.951847] ? rcu_read_lock_sched_held+0x10a/0x130 [ 844.956885] ? __alloc_pages_nodemask+0x5e0/0x700 [ 844.961815] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 844.966837] alloc_pages_current+0xe7/0x1e0 [ 844.971166] kvm_mmu_create+0xd1/0x1c0 [ 844.975049] kvm_arch_vcpu_init+0x28b/0x8b0 [ 844.979365] ? alloc_pages_current+0xef/0x1e0 [ 844.983853] kvm_vcpu_init+0x26d/0x360 [ 844.987729] vmx_create_vcpu+0xf3/0x2900 [ 844.991882] ? __mutex_unlock_slowpath+0x75/0x780 [ 844.996717] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 845.001727] ? handle_rdmsr+0x6b0/0x6b0 [ 845.005707] kvm_vm_ioctl+0x49c/0x1430 [ 845.009582] ? __lock_acquire+0x5f7/0x4620 [ 845.013819] ? kvm_vcpu_release+0xa0/0xa0 [ 845.018057] ? trace_hardirqs_on+0x10/0x10 [ 845.022293] ? trace_hardirqs_on+0x10/0x10 [ 845.026523] ? save_trace+0x290/0x290 [ 845.030310] ? __might_fault+0x104/0x1b0 [ 845.034361] ? kvm_vcpu_release+0xa0/0xa0 [ 845.038498] do_vfs_ioctl+0x75a/0xfe0 [ 845.042288] ? selinux_file_mprotect+0x5c0/0x5c0 [ 845.047029] ? ioctl_preallocate+0x1a0/0x1a0 [ 845.051431] ? security_file_ioctl+0x76/0xb0 [ 845.055823] ? security_file_ioctl+0x83/0xb0 [ 845.060218] SyS_ioctl+0x7f/0xb0 [ 845.063585] ? do_vfs_ioctl+0xfe0/0xfe0 [ 845.067545] do_syscall_64+0x1d5/0x640 [ 845.071421] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 845.076605] RIP: 0033:0x45c889 [ 845.079780] RSP: 002b:00007f083e4e8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 845.087471] RAX: ffffffffffffffda RBX: 00007f083e4e96d4 RCX: 000000000045c889 [ 845.094727] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 845.101991] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 01:42:46 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4182) memfd_create(&(0x7f0000000240)='.^\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000001c0)={0x0, {}, 0x0, {}, 0x0, 0x1, 0x11, 0x0, "b04a82706694a7d154c629f75b71a95a8f3b289271c607adb22d4d534f4cf29cff0359ad514d3aa20d7beebc689ab001521f48dc57122f1b38e9e8af694c0d43", "0be5a941c04045ff21d735bd90f8c3e2c4a016dd0fa49bebf7a08c305bee6fd6"}) [ 845.109377] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 845.116667] R13: 0000000000000390 R14: 00000000004c60a9 R15: 000000000076bf0c [ 845.136717] lowmem_reserve[]: 0 0 0 0 0 [ 845.147916] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 01:42:46 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') write$FUSE_DIRENTPLUS(r0, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x14) [ 845.210786] syz-executor.1: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 845.227772] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 845.245890] lowmem_reserve[]: 0 0 0 0 0 [ 845.251306] CPU: 1 PID: 26722 Comm: syz-executor.1 Not tainted 4.14.176-syzkaller #0 [ 845.259215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 845.268577] Call Trace: [ 845.271175] dump_stack+0x13e/0x194 [ 845.274815] warn_alloc.cold+0x96/0x1af [ 845.278795] ? zone_watermark_ok_safe+0x280/0x280 [ 845.283654] ? wait_for_completion+0x390/0x390 [ 845.288253] __alloc_pages_slowpath+0x2114/0x26c0 [ 845.293117] ? warn_alloc+0xf0/0xf0 [ 845.296748] ? find_held_lock+0x2d/0x110 [ 845.300817] ? fs_reclaim_acquire+0x10/0x10 [ 845.305156] __alloc_pages_nodemask+0x5d3/0x700 [ 845.309838] ? rcu_read_lock_sched_held+0x10a/0x130 [ 845.314979] ? __alloc_pages_nodemask+0x5e0/0x700 [ 845.319833] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 845.324872] alloc_pages_current+0xe7/0x1e0 [ 845.329209] kvm_mmu_create+0xd1/0x1c0 [ 845.333114] kvm_arch_vcpu_init+0x28b/0x8b0 [ 845.337445] ? alloc_pages_current+0xef/0x1e0 [ 845.341955] kvm_vcpu_init+0x26d/0x360 [ 845.345974] vmx_create_vcpu+0xf3/0x2900 [ 845.350060] ? __mutex_unlock_slowpath+0x75/0x780 [ 845.354926] ? drop_futex_key_refs.isra.0+0x17/0x80 01:42:46 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x1004e20, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) sendto$inet(r0, &(0x7f00000001c0)="73fa46f8bf09ab6e7b1dee79d827383a62aa83935b7ed5ca5c14d70409a996a1de1cf7f93a4586", 0x27, 0x4008800, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="bf141b8dbc80c1c73d2bd85724aa4e063f9b124c514dd5c504cd97048692", 0x1e}], 0x1) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)=""/130, 0x82}], 0x1}}], 0x1, 0x0, 0x0) [ 845.360087] ? handle_rdmsr+0x6b0/0x6b0 [ 845.364082] kvm_vm_ioctl+0x49c/0x1430 [ 845.367989] ? __lock_acquire+0x5f7/0x4620 [ 845.372237] ? kvm_vcpu_release+0xa0/0xa0 [ 845.376403] ? trace_hardirqs_on+0x10/0x10 [ 845.380654] ? trace_hardirqs_on+0x10/0x10 [ 845.385010] ? save_trace+0x290/0x290 [ 845.388823] ? __might_fault+0x104/0x1b0 [ 845.392906] ? kvm_vcpu_release+0xa0/0xa0 [ 845.397073] do_vfs_ioctl+0x75a/0xfe0 [ 845.400896] ? selinux_file_mprotect+0x5c0/0x5c0 [ 845.405671] ? ioctl_preallocate+0x1a0/0x1a0 01:42:46 executing program 0: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000040)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="440f20c066350a000000440f22c00f01c46564f30f0966b8000000000f23c80f21f866350800e0000f23f8f20f35660f113ff26c0f0fcb9e2e0f011c365c", 0x3e}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 845.410103] ? security_file_ioctl+0x76/0xb0 [ 845.414526] ? security_file_ioctl+0x83/0xb0 [ 845.418952] SyS_ioctl+0x7f/0xb0 [ 845.422325] ? do_vfs_ioctl+0xfe0/0xfe0 [ 845.426311] do_syscall_64+0x1d5/0x640 [ 845.430208] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 845.435402] RIP: 0033:0x45c889 [ 845.438596] RSP: 002b:00007fed3131bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 845.446336] RAX: ffffffffffffffda RBX: 00007fed3131c6d4 RCX: 000000000045c889 [ 845.453697] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 845.460985] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 845.468262] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 845.475543] R13: 0000000000000390 R14: 00000000004c60a9 R15: 000000000076bf0c [ 845.493065] Node 1 Normal free:1712500kB min:53612kB low:67012kB high:80412kB active_anon:1232328kB inactive_anon:15232kB active_file:56172kB inactive_file:30856kB unevictable:0kB writepending:100kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:8768kB pagetables:19524kB bounce:0kB free_pcp:644kB local_pcp:280kB free_cma:0kB 01:42:46 executing program 4: open(0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = socket(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000140)="08418330e91000105ac071") r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8400f7fffff8) r4 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r1, r4, 0x0, 0x8400f7fffff8) [ 845.559664] syz-executor.0: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 845.568384] lowmem_reserve[]: 0 0 0 0 0 [ 845.581827] Node 0 DMA: 1*4kB (M) 10*8kB (UM) 4*16kB (UM) 2*32kB (UM) 0*64kB 1*128kB (M) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (M) = 10324kB [ 845.598509] Node 0 DMA32: 334*4kB (UME) 132*8kB (UME) 21*16kB (UME) 515*32kB (UME) 3*64kB (UE) 10*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20680kB [ 845.624382] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 845.638010] Node 1 Normal: 316*4kB (UME) 844*8kB (UME) 358*16kB (UM) 49*32kB (UME) 153*64kB (UM) 29*128kB (ME) 13*256kB (UME) 25*512kB (U) 11*1024kB (UM) 2*2048kB (UE) 403*4096kB (M) = 1710992kB [ 845.654264] syz-executor.0 cpuset= [ 845.658109] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 845.671195] / mems_allowed=0-1 [ 845.674194] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 845.686257] audit: type=1804 audit(1586914966.827:77): pid=26749 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir200419092/syzkaller.KE9CZs/1060/bus" dev="sda1" ino=15807 res=1 [ 845.687994] CPU: 0 PID: 26745 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 845.718298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 845.727664] Call Trace: [ 845.730263] dump_stack+0x13e/0x194 [ 845.733905] warn_alloc.cold+0x96/0x1af [ 845.735085] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 845.737883] ? zone_watermark_ok_safe+0x280/0x280 [ 845.737905] ? wait_for_completion+0x390/0x390 [ 845.737920] __alloc_pages_slowpath+0x2114/0x26c0 [ 845.737941] ? warn_alloc+0xf0/0xf0 [ 845.762467] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 845.764636] ? find_held_lock+0x2d/0x110 [ 845.764650] ? fs_reclaim_acquire+0x10/0x10 [ 845.764672] __alloc_pages_nodemask+0x5d3/0x700 [ 845.764684] ? rcu_read_lock_sched_held+0x10a/0x130 [ 845.764694] ? __alloc_pages_nodemask+0x5e0/0x700 [ 845.790313] 31791 total pagecache pages [ 845.791315] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 845.791336] alloc_pages_current+0xe7/0x1e0 [ 845.791351] kvm_mmu_create+0xd1/0x1c0 [ 845.791364] kvm_arch_vcpu_init+0x28b/0x8b0 [ 845.791371] ? alloc_pages_current+0xef/0x1e0 [ 845.791383] kvm_vcpu_init+0x26d/0x360 [ 845.797536] 0 pages in swap cache [ 845.800185] vmx_create_vcpu+0xf3/0x2900 [ 845.800203] ? __mutex_unlock_slowpath+0x75/0x780 [ 845.800214] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 845.800227] ? handle_rdmsr+0x6b0/0x6b0 [ 845.816272] Swap cache stats: add 0, delete 0, find 0/0 [ 845.817739] kvm_vm_ioctl+0x49c/0x1430 [ 845.817755] ? __lock_acquire+0x5f7/0x4620 [ 845.817766] ? kvm_vcpu_release+0xa0/0xa0 [ 845.817777] ? trace_hardirqs_on+0x10/0x10 [ 845.817791] ? trace_hardirqs_on+0x10/0x10 [ 845.828991] Free swap = 0kB [ 845.829607] ? save_trace+0x290/0x290 [ 845.829618] ? __might_fault+0x104/0x1b0 [ 845.829634] ? kvm_vcpu_release+0xa0/0xa0 [ 845.839779] Total swap = 0kB [ 845.843530] do_vfs_ioctl+0x75a/0xfe0 [ 845.843543] ? selinux_file_mprotect+0x5c0/0x5c0 [ 845.843555] ? ioctl_preallocate+0x1a0/0x1a0 [ 845.843576] ? security_file_ioctl+0x76/0xb0 [ 845.843586] ? security_file_ioctl+0x83/0xb0 [ 845.843598] SyS_ioctl+0x7f/0xb0 [ 845.843605] ? do_vfs_ioctl+0xfe0/0xfe0 [ 845.843617] do_syscall_64+0x1d5/0x640 [ 845.853720] 1965979 pages RAM [ 845.856814] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 845.856823] RIP: 0033:0x45c889 [ 845.856829] RSP: 002b:00007f6f6e1b7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 845.856840] RAX: ffffffffffffffda RBX: 00007f6f6e1b86d4 RCX: 000000000045c889 [ 845.856845] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 01:42:47 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r2, 0x48280) fcntl$setstatus(r1, 0x4, 0x6100) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x60120, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ftruncate(r4, 0x40) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000040000000000000000000000000000000000000000000000000000000000000000000000ceaa823ebf80982a1841f818fa594314a74d"], 0x87ffffc) [ 845.856849] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 845.856858] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 845.869565] 0 pages HighMem/MovableOnly [ 845.873775] R13: 0000000000000390 R14: 00000000004c60a9 R15: 000000000076bf0c [ 845.937453] Mem-Info: [ 846.001230] audit: type=1804 audit(1586914967.147:78): pid=26757 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir200419092/syzkaller.KE9CZs/1060/bus" dev="sda1" ino=15807 res=1 [ 846.123302] audit: type=1800 audit(1586914967.267:79): pid=26773 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="bus" dev="loop2" ino=146 res=0 [ 846.158391] 339050 pages reserved [ 846.166962] 0 pages cma reserved [ 846.189747] audit: type=1800 audit(1586914967.267:80): pid=26773 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="bus" dev="loop2" ino=146 res=0 [ 846.196610] active_anon:794360 inactive_anon:8071 isolated_anon:0 [ 846.196610] active_file:14046 inactive_file:9210 isolated_file:0 [ 846.196610] unevictable:0 dirty:1197 writeback:0 unstable:0 [ 846.196610] slab_reclaimable:54346 slab_unreclaimable:198247 [ 846.196610] mapped:62680 shmem:10018 pagetables:12504 bounce:0 01:42:47 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0xa808) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) 01:42:47 executing program 3: semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x2, 0x0, 0x0, 0x0, 0x0, 0xc4}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="440f20c066350a000000440f22c00f01c46564f30f0966b8000000000f23c80f21f866350800e0000f23f8f20f35660f113ff26c0f0fcb9e2e0f011c365c", 0x3e}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000440)="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", 0xc16}], 0x2, &(0x7f0000001580)=[@iv={0x18}], 0x18, 0x20000000}, 0x4) 01:42:47 executing program 1: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', 0x0, 0xe900, 0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) open(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400f7fffff8) r3 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r0, r3, 0x0, 0x8400f7fffff8) [ 846.196610] free:433485 free_pcp:460 free_cma:0 [ 846.316467] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 846.354396] audit: type=1804 audit(1586914967.497:81): pid=26806 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir012911039/syzkaller.iRljkr/1210/bus" dev="sda1" ino=15821 res=1 01:42:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2a}, 0x1c}}, 0x44085) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000000)={0x0, 0x3}) [ 846.426025] FAT-fs (loop2): Filesystem has been set read-only 01:42:47 executing program 3: [ 846.495079] Node 0 active_anon:1944212kB inactive_anon:16080kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216456kB dirty:4kB writeback:0kB shmem:16756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1153024kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes 01:42:47 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r0, 0x0) [ 846.512949] audit: type=1804 audit(1586914967.557:82): pid=26812 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.1" name="/root/syzkaller-testdir012911039/syzkaller.iRljkr/1210/bus" dev="sda1" ino=15821 res=1 [ 846.555662] audit: type=1804 audit(1586914967.567:83): pid=26766 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir200419092/syzkaller.KE9CZs/1060/bus" dev="sda1" ino=15807 res=1 [ 846.610849] audit: type=1804 audit(1586914967.757:84): pid=26757 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir200419092/syzkaller.KE9CZs/1060/bus" dev="sda1" ino=15807 res=1 01:42:47 executing program 4: semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x2, 0x0, 0x0, 0x0, 0x0, 0xc4}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="440f20c066350a000000440f22c00f01c46564f30f0966b8000000000f23c80f21f866350800e0000f23f8f20f35660f113ff26c0f0fcb9e2e0f011c365c", 0x3e}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000440)="6fa199f1453fe17a1b0a5823636b25d08cd4415af1881b1df98f288f31107590bf727081da6317ef0fefb2ae0d5dc09b8b08fa418807be9c230424264052222269c07f7926d9abcdef3f92abfaa09d08de986adf1041dab1ee89310dd09c70e1c4fd7ce790c6a59eb3adf15ffeaac63ad3db1262f61377a6d634bc92e4d63846a6a4bedee5e0992e1494939ce3dbc844f73b6635787e4c5d257c78596f4ce07ed38d5a671b2b536a277ed3082d37c72301627aaea57a921fc7796af10086bfdab51ee0bed74701265aa234034c6681e7748577c81620a7765d15fd38ee530b644db1decd65c964c55dca34bb428f962b4dee61a192b9fb01763e91b9bcd096dc92050f0573dc7c375141e5d0492d51d387324047478ba6d51ec8fe697b85a0e027c857f67bcdd6a3d42ffbdf9d0b340ea565c2f6a8b34ea6c1c136fb122046f591a9ce5166476a694424b07d3f4e49e8fb0aac11df5a4ad8e642ba3c1afffa31225dac59a3cfb79685440fdd90c2ef7d18414b5007776d1484c4ab633aad3f84991dd91a822d5fb47f575136cb1d67afea7279f3ab58bd2b1cd56946cbd1060ec83a2c2bd66bf7d0ed19f6fe7c2602077489250dc4c02ca968fcf4bb83d27f9cd57f60d1923e3e3a2f600c53013b69a75461709ab14f4c60d0c4fce8efe2f25e195448bef1347bc58863275c19421331f518019606fc12e49eddd3a3f9c44a78abb3e1c983a7441447f74c979a70c40d56f23f7e84d73cca16d744bef0a52bd2eaf86c082923dfb7878596765b0f1e800b59e9a34b57caa30048f52fe8cda838979c1d05334c6683cfee634182c0652a89f39f15b71dcab67c403141f90f10b98a95fcf151c1d465e23e651da740cf860663b89de1beecb025add441ee0552aef088c225b41f667c043772b8c0fb48cb8d935e622240ca83b8a37e9189ed40d16f6aec9fcd5626ad6aaf8163e769d9e5a6331a3c6cb01de55a1f26c79aec08c604f071b6d36a5fdf575a5bf365490d5277e8e157e50ae4146eecf3f12a3982104c123f567b4a7d60f56461e0c4b726e99a808ac03d3e91a14201bc96a9f9c1e6bf507f1dc259663a6372e501dbc1e74cdb2562874315c70b8db1e84d1d5a4a792c37b017c686fe966c4ada9024718d9f5862c18329d09a3ccc84be85ca66736c31ea264e6db01c286d340337bf7ff9f527f83db0be2f4edcc161a82011199df73099f812f133541cf862107b6e4be297ebcadc447cf797f32ee0a8e0a34820f74f5e5a336bb861c1e0218d724d2214f714b37f6ad903c5283d3b3285d907f0d9745be5c5a98caa0fa76820bee0d2d63bdb1c7bccfa182f0cef24ec9c63e19afc42538cbd0c2446a32a69fcb7898a6a20074f41782d407ee3a302bd96a0a5cea66f5102638545be636cbf22be0e92e86c82c506ebae39769a365eaa2db1cbc6ef24c6ab612c350f7fba390039bdab00356fe45e44ddee03cf36582d68d45a5dbdcb3cf7f4c58250f76c9a05e98986029eda9cd1616612e7ce5b6933c97316cfa6f4a021b3b8a49623a0f3e1d7c8dd98698533802d4b7f95ba0541d8fdfc0af8a4a808c1c158034395d30ef84290d526f3e96f187de92efd6bf33c200020991ecd9057d306685caf1e79c45703f0c2c82c503802a58a365b6209d5517640f55bab9432b8b3b73f869517a17cb5453e3279cd13719ce27343274fd8aa1acdf08b60d0d80dcd8dcf7e114a554293dd3368a15ffbf06e7cf9d56c50ffaaeabddb395ba9ca75f69794bd821b16ba7d91e8705b3aceb424a450c97707eb51acac4f6358d66f64d341d4e6e049b8c291968bb06d223e0317124a1b699ee0009a26c6720525e09a31ae3cce5a2a914b92b2e1add5a5ad93ddfea997bee35f8b2f220b964eb11af34dace373dc32bc49f880990069267e615ef14945d9255d8a8ad189c457b904504386b2b9f92dea42b3bee356d3ca0b9004d71f0fd147bc5c169ddb4f522b9a86de03e7c46ab6cdcd4571ae39762f52dafcd702997ca3384a226a632ffa1677876f56a65ec9960d0d10f539ea82a4d1e277e2051b48f7bfc18dcee2356213c52662d037903b8960531865b087772bad1c8ac525c3acf2f336e5dcfd2bb8ffba2e5c26debab58edd71f70dd1d34d0e29344ef95dbcfabd4d9b948581c2e4b71f935db14f5f71e027a9317f828a3f74523b5eec71e1d505355526733187f3c0affc103b59ed46d29b97892590e77a556759c8722c20715de728eb3881871d26a7101922bc0d037e061e9ac10b771913b805a286227da93bdceafbc346892530d2df8e9400c9001225964836d2be333c17482e328a81f0525a53160d1ca1210fc2ff558727167b6b4da5e59c9f7a2aeffcfbecf1ebb620d3ea96405c41542d17500592a16e263a70850f12ff03cdb42d97a4d3eeec61640a6e0b091aeddd938b65933b7a269bef56f0025163f4d61fd12b430f90cda28378aa6174b2847d18ceffb385e774443c714af726a8a4297bf0025fb8928240c48adf54b1ec687d687fc6dcec8e80f3d39c3a03e1d2b7fb8ff828bc76d1f476af498a4276210be35a178220c92d6a832c2b47c93259dcd2e7efb01d790910c53d457d8654655eec9044ca5df05c2faf3c881865b9d4a8dcc2ebdaccb569ec3414efd0b2cae924634e88778c47776c03c762fe6e808674b3ab6434e9f1d8af6968e012c0bc0ea9d7e414d749f76b00e4ac819ded06f7baf146cea39ffdff1ee6f9daf77cc8f133ed2b44e34aa8d064c7e8dd1de217da5cab7bab79aff6dce7474b97fa10e19bc45b87b87eda2b85a8e58e4f4d21caed70c1a89e1c6a6a5a89f7e3abb2069f2db24701b9580a47f75538595046f0d323ebfaad6aa9fb8a8881f1e775bb6c628ad79e40f37871b65ff14cd7d197f04aead7eb2139623ebef1a9c8ea935dc7d1c407190f551e8b8cad612f000f9da3a827a9820f07340de5eef017751f622da52f8494d2a11d0d4458c3c5531bb675932639acfab97919564e182a6d8924aceb3b978d94e27f387d04c85d143c9801314d7363d8a1c4d678b8584208fcb724e2b20d68745b6045254ac5f53c03789ce54df5242c4c6d9fbc238c724294aa8925877fd818eedfbcc1ba0d2265fff9923ed3694d01e34a85d0cb4e0d03c5c718a65e6382dc4d8b0744f7a6e75a712e4347b35af8979f01ac0cb5079837e9a2642fe68e92d06a9d72f191710563305198a33fa7dc37feb445fb32ad750c43e6864c14781912fe6f3c9df8aebb616d85ce6c65588bccd7974b60a2c1555745dda10a38c86a7786cc9eb8e58d991fda95af2ac69b26eb3a982e1c5a50e4a8ab7112552ca4c1500ebab9f45a322d89bf1788d54a590085d401d69fc798875033706862fca3a12cc19665a7d641ecc6a78c067ea2372685bd9ef60a717b78a79e7e0f233c30ce7b5ac18d03e23b846d50c6e97ebe85f4572478da4e3610033bba89cd0144398669f7a95efcecd3c8fa5afa645ecd6441c3f3bb9525aeee211135b2c37c6337b7d6786f92fc3cce156f0134489f1b120fe611377ddff3610ec76d31eb51f08b3f0c6fe9f9180c9ab31ad5d6a95bead8d56074099b710f776adf5bac1989d62dd2211a485d155ffa96532925fe61a9c0f3c58bad66198440fa535b7d666a30c0df444ab1c3d0088850a4a467a78e7bf9700993f137f842dc7044d2e135dcdc0d9cdf4444df257292a935ee9b44364127522cfa0a4541754b1aa2442c7913ade89af3fe46b73691137059e823ba5339e8c5da8fff5557519f2b7f246f5eca86bb467ca3492ba36ca17c8844412636cdbe3fd5af67a77cf4fab1a4cf7e6b19025257957532bd3211fc641ff22f1cf33af03440e21000ac151640521f06e59ff55bf924432c399aee0b035eaa37e310f0c60f589a4fe84b557ed711272516faac83866b47565dc8a5e99d11400917384714b78b7a0ea51da57fdc47c45efc31dbc2f1c44030cb567f31dc6ad9edebedf2242eb66ba01828636dfd5b1a42cb5cc52b9d415093f15dbf6b9a6b819ec419c528587e46f7be78d8a1bf394708968e1d0ecadaa705e2c8694740a0966a847483b9459b94894011d3e89eec1c75e759ae5a39509c36a73df031ac87271398de6b39b5718b49a65af7e66ab537892ef21ba45f4ca72db83ae4eabe0615d4992465aca78014d16685f4514927f9579753db8f0f4e90695c02af228371bb5854b67203d82c974bd184cb994c988f5a911997db1df5d648b8d7ee01dde8df258487d61ce0b6c23936aa1566b2a1dcb95b1f41be426a1a2853cb87d9ec28d710a4d47fa1dbabe321a493d8a824589a0d0b5b71ce7eaf35d90b91f06d79364129bdc9951d86e580d5567944a043121c9c6a4e", 0xc1c}], 0x2, &(0x7f0000001580)=[@iv={0x18}, @iv={0x18}], 0x30, 0x20000000}, 0x4) [ 846.613164] Node 1 active_anon:1233428kB inactive_anon:16204kB active_file:56180kB inactive_file:32036kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34264kB dirty:1084kB writeback:0kB shmem:23316kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 01:42:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="440f20c066350a000000440f22c00f01c46564f30f0966b8000000000f23c80f21f866350800e0000f23f8f20f35660f113ff26c0f0fcb9e2e0f011c365c", 0x3e}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)}, {&(0x7f0000000440)="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", 0xc16}], 0x2, 0x0, 0x0, 0x20000000}, 0x4) 01:42:47 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x24008806, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) r1 = dup2(r0, r0) write$cgroup_type(r1, &(0x7f0000000140)='threaded\x00', 0xfffffcc5) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$unix(r1, &(0x7f0000000140)=@abs, 0x6e) [ 846.748844] warn_alloc: 3 callbacks suppressed [ 846.748849] syz-executor.4: [ 846.759042] audit: type=1804 audit(1586914967.777:85): pid=26815 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir200419092/syzkaller.KE9CZs/1060/bus" dev="sda1" ino=15807 res=1 [ 846.789929] page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 846.830681] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 846.847358] CPU: 1 PID: 26826 Comm: syz-executor.4 Not tainted 4.14.176-syzkaller #0 [ 846.855287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 846.864651] Call Trace: [ 846.867254] dump_stack+0x13e/0x194 [ 846.870894] warn_alloc.cold+0x96/0x1af [ 846.874882] ? zone_watermark_ok_safe+0x280/0x280 [ 846.879746] ? wait_for_completion+0x390/0x390 [ 846.884341] __alloc_pages_slowpath+0x2114/0x26c0 [ 846.889184] ? warn_alloc+0xf0/0xf0 [ 846.892798] ? find_held_lock+0x2d/0x110 [ 846.896843] ? fs_reclaim_acquire+0x10/0x10 [ 846.901170] __alloc_pages_nodemask+0x5d3/0x700 [ 846.905825] ? rcu_read_lock_sched_held+0x10a/0x130 [ 846.910837] ? __alloc_pages_nodemask+0x5e0/0x700 [ 846.915665] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 846.920692] alloc_pages_current+0xe7/0x1e0 [ 846.925000] kvm_mmu_create+0xd1/0x1c0 [ 846.928874] kvm_arch_vcpu_init+0x28b/0x8b0 [ 846.933179] ? alloc_pages_current+0xef/0x1e0 [ 846.937657] kvm_vcpu_init+0x26d/0x360 [ 846.941549] vmx_create_vcpu+0xf3/0x2900 [ 846.945606] ? __mutex_unlock_slowpath+0x75/0x780 [ 846.950462] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 846.955472] ? handle_rdmsr+0x6b0/0x6b0 [ 846.959441] kvm_vm_ioctl+0x49c/0x1430 [ 846.963319] ? __lock_acquire+0x5f7/0x4620 [ 846.967557] ? kvm_vcpu_release+0xa0/0xa0 [ 846.971716] ? trace_hardirqs_on+0x10/0x10 [ 846.975960] ? trace_hardirqs_on+0x10/0x10 [ 846.980189] ? save_trace+0x290/0x290 [ 846.983989] ? __might_fault+0x104/0x1b0 [ 846.988064] ? kvm_vcpu_release+0xa0/0xa0 [ 846.992201] do_vfs_ioctl+0x75a/0xfe0 [ 846.995990] ? selinux_file_mprotect+0x5c0/0x5c0 [ 847.000742] ? ioctl_preallocate+0x1a0/0x1a0 [ 847.005141] ? security_file_ioctl+0x76/0xb0 [ 847.009545] ? security_file_ioctl+0x83/0xb0 [ 847.013947] SyS_ioctl+0x7f/0xb0 [ 847.017301] ? do_vfs_ioctl+0xfe0/0xfe0 [ 847.021265] do_syscall_64+0x1d5/0x640 [ 847.025142] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 847.030321] RIP: 0033:0x45c889 [ 847.033496] RSP: 002b:00007f27682f6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 847.041190] RAX: ffffffffffffffda RBX: 00007f27682f76d4 RCX: 000000000045c889 [ 847.048457] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 847.055728] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 847.062992] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 847.070392] R13: 0000000000000390 R14: 00000000004c60a9 R15: 000000000076bf0c [ 847.092907] syz-executor.3: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 847.099452] Node 0 DMA free:10324kB min:220kB low:272kB high:324kB active_anon:4164kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:124kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 847.121804] audit: type=1804 audit(1586914967.777:86): pid=26817 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir200419092/syzkaller.KE9CZs/1060/bus" dev="sda1" ino=15807 res=1 [ 847.178237] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 847.196229] print_req_error: I/O error, dev loop1, sector 0 [ 847.198798] CPU: 1 PID: 26843 Comm: syz-executor.3 Not tainted 4.14.176-syzkaller #0 [ 847.209869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 847.219234] Call Trace: [ 847.221838] dump_stack+0x13e/0x194 [ 847.225481] warn_alloc.cold+0x96/0x1af [ 847.229461] ? zone_watermark_ok_safe+0x280/0x280 [ 847.234365] ? wait_for_completion+0x390/0x390 [ 847.238962] __alloc_pages_slowpath+0x2114/0x26c0 [ 847.243832] ? warn_alloc+0xf0/0xf0 [ 847.247567] ? find_held_lock+0x2d/0x110 [ 847.251637] ? fs_reclaim_acquire+0x10/0x10 [ 847.255958] __alloc_pages_nodemask+0x5d3/0x700 [ 847.260638] ? rcu_read_lock_sched_held+0x10a/0x130 [ 847.265659] ? __alloc_pages_nodemask+0x5e0/0x700 [ 847.270520] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 847.275651] alloc_pages_current+0xe7/0x1e0 [ 847.279998] kvm_mmu_create+0xd1/0x1c0 [ 847.283897] kvm_arch_vcpu_init+0x28b/0x8b0 [ 847.288217] ? alloc_pages_current+0xef/0x1e0 [ 847.292735] kvm_vcpu_init+0x26d/0x360 [ 847.296635] vmx_create_vcpu+0xf3/0x2900 [ 847.300702] ? __mutex_unlock_slowpath+0x75/0x780 [ 847.305551] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 847.310563] ? handle_rdmsr+0x6b0/0x6b0 [ 847.314534] kvm_vm_ioctl+0x49c/0x1430 [ 847.318725] ? __lock_acquire+0x5f7/0x4620 [ 847.322967] ? kvm_vcpu_release+0xa0/0xa0 [ 847.327122] ? trace_hardirqs_on+0x10/0x10 [ 847.331355] ? trace_hardirqs_on+0x10/0x10 [ 847.335596] ? save_trace+0x290/0x290 [ 847.339394] ? __might_fault+0x104/0x1b0 [ 847.343465] ? kvm_vcpu_release+0xa0/0xa0 [ 847.347611] do_vfs_ioctl+0x75a/0xfe0 [ 847.351411] ? selinux_file_mprotect+0x5c0/0x5c0 [ 847.356156] ? ioctl_preallocate+0x1a0/0x1a0 [ 847.360584] ? security_file_ioctl+0x76/0xb0 [ 847.365006] ? security_file_ioctl+0x83/0xb0 [ 847.369424] SyS_ioctl+0x7f/0xb0 [ 847.372793] ? do_vfs_ioctl+0xfe0/0xfe0 [ 847.376771] do_syscall_64+0x1d5/0x640 [ 847.380665] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 847.385862] RIP: 0033:0x45c889 [ 847.389038] RSP: 002b:00007f083e4e8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 847.396738] RAX: ffffffffffffffda RBX: 00007f083e4e96d4 RCX: 000000000045c889 [ 847.404007] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 847.411278] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 847.418548] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 847.425844] R13: 0000000000000390 R14: 00000000004c60a9 R15: 000000000076bf0c [ 847.446484] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 847.471201] Node 0 DMA32 free:20768kB min:36272kB low:45340kB high:54408kB active_anon:1940048kB inactive_anon:16080kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2621268kB mlocked:0kB kernel_stack:12096kB pagetables:30812kB bounce:0kB free_pcp:1308kB local_pcp:620kB free_cma:0kB [ 847.489135] warn_alloc_show_mem: 2 callbacks suppressed [ 847.489139] Mem-Info: [ 847.509219] active_anon:794407 inactive_anon:7821 isolated_anon:0 [ 847.509219] active_file:14068 inactive_file:7759 isolated_file:0 [ 847.509219] unevictable:0 dirty:134 writeback:2 unstable:0 [ 847.509219] slab_reclaimable:54433 slab_unreclaimable:198782 [ 847.509219] mapped:62686 shmem:9693 pagetables:12525 bounce:0 [ 847.509219] free:434409 free_pcp:626 free_cma:0 [ 847.555712] Node 0 active_anon:1944212kB inactive_anon:16080kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216456kB dirty:4kB writeback:0kB shmem:16756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1153024kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 847.588754] lowmem_reserve[]: 0 0 0 0 0 [ 847.591423] Node 1 active_anon:1233416kB inactive_anon:15204kB active_file:56264kB inactive_file:33336kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34288kB dirty:2332kB writeback:8kB shmem:22016kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 847.629676] Node 0 DMA free:10324kB min:220kB low:272kB high:324kB active_anon:4164kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:124kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 847.635241] Node 0 [ 847.663943] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 847.673303] Node 0 DMA32 free:20768kB min:36272kB low:45340kB high:54408kB active_anon:1940048kB inactive_anon:16080kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2621268kB mlocked:0kB kernel_stack:12096kB pagetables:30812kB bounce:0kB free_pcp:1344kB local_pcp:712kB free_cma:0kB [ 847.719046] lowmem_reserve[]: 0 0 0 0 0 [ 847.729143] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 847.758700] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 847.766285] lowmem_reserve[]: 0 0 0 0 0 [ 847.788303] Node 1 Normal free:1707500kB min:53612kB low:67012kB high:80412kB active_anon:1233816kB inactive_anon:15204kB active_file:56264kB inactive_file:30936kB unevictable:0kB writepending:340kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:8416kB pagetables:19164kB bounce:0kB free_pcp:980kB local_pcp:320kB free_cma:0kB [ 847.793655] lowmem_reserve[]: [ 847.819519] lowmem_reserve[]: 0 0 0 0 0 [ 847.823754] 0 [ 847.827107] Node 0 DMA: 1*4kB (M) 10*8kB (UM) 4*16kB (UM) 2*32kB (UM) 0*64kB 1*128kB (M) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (M) = 10324kB [ 847.829076] 0 [ 847.850021] Node 0 [ 847.850068] 0 [ 847.852377] DMA32: 334*4kB (UME) 139*8kB (UME) 21*16kB [ 847.855967] 0 0 [ 847.863957] (UME) 516*32kB (UME) 3*64kB (UE) 10*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20768kB [ 847.878039] Node 1 Normal free:1706324kB min:53612kB low:67012kB high:80412kB active_anon:1233816kB inactive_anon:15204kB active_file:56264kB inactive_file:30936kB unevictable:0kB writepending:44kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:8480kB pagetables:19164kB bounce:0kB free_pcp:1084kB local_pcp:652kB free_cma:0kB [ 847.887326] syz-executor.4: [ 847.909779] lowmem_reserve[]: [ 847.912288] Node 0 [ 847.914107] 0 [ 847.916438] Normal: [ 847.918361] 0 [ 847.920008] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB [ 847.924601] 0 [ 847.925717] 0*4096kB [ 847.939410] 0 0 [ 847.944955] Node 0 DMA: 1*4kB (M) 10*8kB (UM) 4*16kB (UM) 2*32kB (UM) 0*64kB 1*128kB (M) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (M) = 10324kB [ 847.954369] page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 847.961152] Node 0 DMA32: 334*4kB (UME) 139*8kB (UME) 21*16kB (UME) 516*32kB (UME) 3*64kB (UE) 10*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20768kB [ 847.969169] = 0kB [ 847.985910] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 847.998965] Node 1 Normal: 260*4kB (UME) 1478*8kB (UME) 858*16kB (UME) 228*32kB (UME) 134*64kB (UM) 13*128kB (M) 3*256kB (ME) 2*512kB (UE) 8*1024kB (UME) 1*2048kB (U) 403*4096kB (M) = 1706848kB [ 848.017500] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 848.018634] syz-executor.4 cpuset= [ 848.027229] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 848.033160] Node 1 Normal: 260*4kB (UME) 1459*8kB (UME) 867*16kB (UME) 228*32kB (UME) 134*64kB (UM) 13*128kB (M) 3*256kB (ME) 2*512kB (UE) 8*1024kB (UME) 1*2048kB (U) 403*4096kB (M) = 1706840kB [ 848.041252] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 848.057420] / mems_allowed=0-1 [ 848.069793] CPU: 0 PID: 26867 Comm: syz-executor.4 Not tainted 4.14.176-syzkaller #0 [ 848.077677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 848.077736] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 848.087026] Call Trace: [ 848.087044] dump_stack+0x13e/0x194 [ 848.087058] warn_alloc.cold+0x96/0x1af [ 848.087066] ? zone_watermark_ok_safe+0x280/0x280 [ 848.087083] ? wait_for_completion+0x390/0x390 [ 848.087095] __alloc_pages_slowpath+0x2114/0x26c0 [ 848.095853] 31477 total pagecache pages [ 848.098247] ? warn_alloc+0xf0/0xf0 [ 848.098258] ? find_held_lock+0x2d/0x110 [ 848.106313] 0 pages in swap cache [ 848.110661] ? fs_reclaim_acquire+0x10/0x10 [ 848.110681] __alloc_pages_nodemask+0x5d3/0x700 [ 848.110694] ? rcu_read_lock_sched_held+0x10a/0x130 [ 848.110702] ? __alloc_pages_nodemask+0x5e0/0x700 [ 848.110709] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 848.110727] alloc_pages_current+0xe7/0x1e0 [ 848.119805] Swap cache stats: add 0, delete 0, find 0/0 [ 848.120153] kvm_mmu_create+0xd1/0x1c0 [ 848.125134] Free swap = 0kB [ 848.127772] kvm_arch_vcpu_init+0x28b/0x8b0 [ 848.127783] ? alloc_pages_current+0xef/0x1e0 [ 848.127800] kvm_vcpu_init+0x26d/0x360 [ 848.133705] Total swap = 0kB [ 848.135294] vmx_create_vcpu+0xf3/0x2900 [ 848.135311] ? __mutex_unlock_slowpath+0x75/0x780 [ 848.135324] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 848.139705] 1965979 pages RAM [ 848.144297] ? handle_rdmsr+0x6b0/0x6b0 [ 848.144314] kvm_vm_ioctl+0x49c/0x1430 [ 848.144328] ? __lock_acquire+0x5f7/0x4620 [ 848.144338] ? kvm_vcpu_release+0xa0/0xa0 [ 848.144350] ? trace_hardirqs_on+0x10/0x10 [ 848.144363] ? trace_hardirqs_on+0x10/0x10 [ 848.144375] ? save_trace+0x290/0x290 [ 848.151400] 0 pages HighMem/MovableOnly [ 848.154230] ? __might_fault+0x104/0x1b0 [ 848.154252] ? kvm_vcpu_release+0xa0/0xa0 [ 848.162681] 339050 pages reserved [ 848.163571] do_vfs_ioctl+0x75a/0xfe0 [ 848.163585] ? selinux_file_mprotect+0x5c0/0x5c0 [ 848.171750] 0 pages cma reserved [ 848.172816] ? ioctl_preallocate+0x1a0/0x1a0 [ 848.172838] ? security_file_ioctl+0x76/0xb0 [ 848.226998] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 848.229289] ? security_file_ioctl+0x83/0xb0 [ 848.229305] SyS_ioctl+0x7f/0xb0 [ 848.233733] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 848.237399] ? do_vfs_ioctl+0xfe0/0xfe0 [ 848.237413] do_syscall_64+0x1d5/0x640 [ 848.237429] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 848.244601] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 848.245434] RIP: 0033:0x45c889 [ 848.249669] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 848.253000] RSP: 002b:00007f27682b4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 848.253010] RAX: ffffffffffffffda RBX: 00007f27682b56d4 RCX: 000000000045c889 [ 848.253015] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 848.253020] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 848.253024] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 848.253029] R13: 0000000000000390 R14: 00000000004c60a9 R15: 000000000076c04c [ 848.378412] 31479 total pagecache pages 01:42:49 executing program 0: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) 01:42:49 executing program 2: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000a00)={{{@in6=@local, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@ipv4={[], [], @empty}}}, &(0x7f0000000040)=0xe8) lstat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x4}, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="440f20c066350a000000440f22c00f01c46564f30f0966b8000000000f23c80f21f866350800e0000f23f8f20f35660f113ff26c0f0fcb9e2e0f011c365c", 0x3e}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) open$dir(0x0, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000440)="6fa199f1453fe17a1b0a5823636b25d08cd4415af1881b1df98f288f31107590bf727081da6317ef0fefb2ae0d5dc09b8b08fa418807be9c230424264052222269c07f7926d9abcdef3f92abfaa09d08de986adf1041dab1ee89310dd09c70e1c4fd7ce790c6a59eb3adf15ffeaac63ad3db1262f61377a6d634bc92e4d63846a6a4bedee5e0992e1494939ce3dbc844f73b6635787e4c5d257c78596f4ce07ed38d5a671b2b536a277ed3082d37c72301627aaea57a921fc7796af10086bfdab51ee0bed74701265aa234034c6681e7748577c81620a7765d15fd38ee530b644db1decd65c964c55dca34bb428f962b4dee61a192b9fb01763e91b9bcd096dc92050f0573dc7c375141e5d0492d51d387324047478ba6d51ec8fe697b85a0e027c857f67bcdd6a3d42ffbdf9d0b340ea565c2f6a8b34ea6c1c136fb122046f591a9ce5166476a694424b07d3f4e49e8fb0aac11df5a4ad8e642ba3c1afffa31225dac59a3cfb79685440fdd90c2ef7d18414b5007776d1484c4ab633aad3f84991dd91a822d5fb47f575136cb1d67afea7279f3ab58bd2b1cd56946cbd1060ec83a2c2bd66bf7d0ed19f6fe7c2602077489250dc4c02ca968fcf4bb83d27f9cd57f60d1923e3e3a2f600c53013b69a75461709ab14f4c60d0c4fce8efe2f25e195448bef1347bc58863275c19421331f518019606fc12e49eddd3a3f9c44a78abb3e1c983a7441447f74c979a70c40d56f23f7e84d73cca16d744bef0a52bd2eaf86c082923dfb7878596765b0f1e800b59e9a34b57caa30048f52fe8cda838979c1d05334c6683cfee634182c0652a89f39f15b71dcab67c403141f90f10b98a95fcf151c1d465e23e651da740cf860663b89de1beecb025add441ee0552aef088c225b41f667c043772b8c0fb48cb8d935e622240ca83b8a37e9189ed40d16f6aec9fcd5626ad6aaf8163e769d9e5a6331a3c6cb01de55a1f26c79aec08c604f071b6d36a5fdf575a5bf365490d5277e8e157e50ae4146eecf3f12a3982104c123f567b4a7d60f56461e0c4b726e99a808ac03d3e91a14201bc96a9f9c1e6bf507f1dc259663a6372e501dbc1e74cdb2562874315c70b8db1e84d1d5a4a792c37b017c686fe966c4ada9024718d9f5862c18329d09a3ccc84be85ca66736c31ea264e6db01c286d340337bf7ff9f527f83db0be2f4edcc161a82011199df73099f812f133541cf862107b6e4be297ebcadc447cf797f32ee0a8e0a34820f74f5e5a336bb861c1e0218d724d2214f714b37f6ad903c5283d3b3285d907f0d9745be5c5a98caa0fa76820bee0d2d63bdb1c7bccfa182f0cef24ec9c63e19afc42538cbd0c2446a32a69fcb7898a6a20074f41782d407ee3a302bd96a0a5cea66f5102638545be636cbf22be0e92e86c82c506ebae39769a365eaa2db1cbc6ef24c6ab612c350f7fba390039bdab00356fe45e44ddee03cf36582d68d45a5dbdcb3cf7f4c58250f76c9a05e98986029eda9cd1616612e7ce5b6933c97316cfa6f4a021b3b8a49623a0f3e1d7c8dd98698533802d4b7f95ba0541d8fdfc0af8a4a808c1c158034395d30ef84290d526f3e96f187de92efd6bf33c200020991ecd9057d306685caf1e79c45703f0c2c82c503802a58a365b6209d5517640f55bab9432b8b3b73f869517a17cb5453e3279cd13719ce27343274fd8aa1acdf08b60d0d80dcd8dcf7e114a554293dd3368a15ffbf06e7cf9d56c50ffaaeabddb395ba9ca75f69794bd821b16ba7d91e8705b3aceb424a450c97707eb51acac4f6358d66f64d341d4e6e049b8c291968bb06d223e0317124a1b699ee0009a26c6720525e09a31ae3cce5a2a914b92b2e1add5a5ad93ddfea997bee35f8b2f220b964eb11af34dace373dc32bc49f880990069267e615ef14945d9255d8a8ad189c457b904504386b2b9f92dea42b3bee356d3ca0b9004d71f0fd147bc5c169ddb4f522b9a86de03e7c46ab6cdcd4571ae39762f52dafcd702997ca3384a226a632ffa1677876f56a65ec9960d0d10f539ea82a4d1e277e2051b48f7bfc18dcee2356213c52662d037903b8960531865b087772bad1c8ac525c3acf2f336e5dcfd2bb8ffba2e5c26debab58edd71f70dd1d34d0e29344ef95dbcfabd4d9b948581c2e4b71f935db14f5f71e027a9317f828a3f74523b5eec71e1d505355526733187f3c0affc103b59ed46d29b97892590e77a556759c8722c20715de728eb3881871d26a7101922bc0d037e061e9ac10b771913b805a286227da93bdceafbc346892530d2df8e9400c9001225964836d2be333c17482e328a81f0525a53160d1ca1210fc2ff558727167b6b4da5e59c9f7a2aeffcfbecf1ebb620d3ea96405c41542d17500592a16e263a70850f12ff03cdb42d97a4d3eeec61640a6e0b091aeddd938b65933b7a269bef56f0025163f4d61fd12b430f90cda28378aa6174b2847d18ceffb385e774443c714af726a8a4297bf0025fb8928240c48adf54b1ec687d687fc6dcec8e80f3d39c3a03e1d2b7fb8ff828bc76d1f476af498a4276210be35a178220c92d6a832c2b47c93259dcd2e7efb01d790910c53d457d8654655eec9044ca5df05c2faf3c881865b9d4a8dcc2ebdaccb569ec3414efd0b2cae924634e88778c47776c03c762fe6e808674b3ab6434e9f1d8af6968e012c0bc0ea9d7e414d749f76b00e4ac819ded06f7baf146cea39ffdff1ee6f9daf77cc8f133ed2b44e34aa8d064c7e8dd1de217da5cab7bab79aff6dce7474b97fa10e19bc45b87b87eda2b85a8e58e4f4d21caed70c1a89e1c6a6a5a89f7e3abb2069f2db24701b9580a47f75538595046f0d323ebfaad6aa9fb8a8881f1e775bb6c628ad79e40f37871b65ff14cd7d197f04aead7eb2139623ebef1a9c8ea935dc7d1c407190f551e8b8cad612f000f9da3a827a9820f07340de5eef017751f622da52f8494d2a11d0d4458c3c5531bb675932639acfab97919564e182a6d8924aceb3b978d94e27f387d04c85d143c9801314d7363d8a1c4d678b8584208fcb724e2b20d68745b6045254ac5f53c03789ce54df5242c4c6d9fbc238c724294aa8925877fd818eedfbcc1ba0d2265fff9923ed3694d01e34a85d0cb4e0d03c5c718a65e6382dc4d8b0744f7a6e75a712e4347b35af8979f01ac0cb5079837e9a2642fe68e92d06a9d72f191710563305198a33fa7dc37feb445fb32ad750c43e6864c14781912fe6f3c9df8aebb616d85ce6c65588bccd7974b60a2c1555745dda10a38c86a7786cc9eb8e58d991fda95af2ac69b26eb3a982e1c5a50e4a8ab7112552ca4c1500ebab9f45a322d89bf1788d54a590085d401d69fc798875033706862fca3a12cc19665a7d641ecc6a78c067ea2372685bd9ef60a717b78a79e7e0f233c30ce7b5ac18d03e23b846d50c6e97ebe85f4572478da4e3610033bba89cd0144398669f7a95efcecd3c8fa5afa645ecd6441c3f3bb9525aeee211135b2c37c6337b7d6786f92fc3cce156f0134489f1b120fe611377ddff3610ec76d31eb51f08b3f0c6fe9f9180c9ab31ad5d6a95bead8d56074099b710f776adf5bac1989d62dd2211a485d155ffa96532925fe61a9c0f3c58bad66198440fa535b7d666a30c0df444ab1c3d0088850a4a467a78e7bf9700993f137f842dc7044d2e135dcdc0d9cdf4444df257292a935ee9b44364127522cfa0a4541754b1aa2442c7913ade89af3fe46b73691137059e823ba5339e8c5da8fff5557519f2b7f246f5eca86bb467ca3492ba36ca17c8844412636cdbe3fd5af67a77cf4fab1a4cf7e6b19025257957532bd3211fc641ff22f1cf33af03440e21000ac151640521f06e59ff55bf924432c399aee0b035eaa37e310f0c60f589a4fe84b557ed711272516faac83866b47565dc8a5e99d11400917384714b78b7a0ea51da57fdc47c45efc31dbc2f1c44030cb567f31dc6ad9edebedf2242eb66ba01828636dfd5b1a42cb5cc52b9d415093f15dbf6b9a6b819ec419c528587e46f7be78d8a1bf394708968e1d0ecadaa705e2c8694740a0966a847483b9459b94894011d3e89eec1c75e759ae5a39509c36a73df031ac87271398de6b39b5718b49a65af7e66ab537892ef21ba45f4ca72db83ae4eabe0615d4992465aca78014d16685f4514927f9579753db8f0f4e90695c02af228371bb5854b67203d82c974bd184cb994c988f5a911997db1df5d648b8d7ee01dde8df258487d61ce0b6c23936aa1566b2a1dcb95b1f41be426a1a2853cb87d9ec28d710a4d47fa1dbabe321a493d8a824589a0d0b5b71ce7eaf35d90b91f06d79364129bdc9951d86e580d5567944a043121c9c6a4e24aafaa726fd9d55f679ddfe8f62e1e76fd512ae79ce", 0xc32}, {0x0}, {&(0x7f0000000240)="f576", 0x2}, {&(0x7f0000000280)}], 0x5, &(0x7f0000001580)=[@iv={0x18}, @iv={0x18}, @iv={0x18}, @assoc={0x18, 0x117, 0x4, 0x7}], 0x60, 0x20000000}, 0x4) 01:42:49 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0401273, &(0x7f0000000000)={[], 0x0, 0x400, 0x800008}) 01:42:49 executing program 3: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) 01:42:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'veth1_vlan\x00', 0x0}) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="7c00000024006967980900000000000000002000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000900010067726564000000004c0002000800050000000000080005000000000038000300050000000000000040ceb860000000000000000000000000020000000000da6e0856d62c"], 0x7c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0x5, &(0x7f0000000100)}], 0x492492492492642, 0x0) 01:42:49 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000000)=""/112, 0x70) lseek(r0, 0xfffffffffffffffe, 0x1) [ 848.383959] 0 pages in swap cache [ 848.387421] Swap cache stats: add 0, delete 0, find 0/0 [ 848.392871] Free swap = 0kB [ 848.395882] Total swap = 0kB [ 848.398966] 1965979 pages RAM [ 848.403906] 0 pages HighMem/MovableOnly [ 848.407935] 339050 pages reserved [ 848.411455] 0 pages cma reserved 01:42:49 executing program 5: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x20, 0x2, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) [ 848.475592] syz-executor.2: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 848.508385] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 848.531975] CPU: 0 PID: 26890 Comm: syz-executor.2 Not tainted 4.14.176-syzkaller #0 [ 848.539906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 848.549265] Call Trace: [ 848.551851] dump_stack+0x13e/0x194 [ 848.555467] warn_alloc.cold+0x96/0x1af [ 848.559426] ? zone_watermark_ok_safe+0x280/0x280 [ 848.564259] ? wait_for_completion+0x390/0x390 [ 848.568841] __alloc_pages_slowpath+0x2114/0x26c0 [ 848.573696] ? warn_alloc+0xf0/0xf0 [ 848.577339] ? find_held_lock+0x2d/0x110 [ 848.581391] ? fs_reclaim_acquire+0x10/0x10 [ 848.585713] __alloc_pages_nodemask+0x5d3/0x700 [ 848.590385] ? rcu_read_lock_sched_held+0x10a/0x130 [ 848.595396] ? __alloc_pages_nodemask+0x5e0/0x700 [ 848.600231] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 848.605244] alloc_pages_current+0xe7/0x1e0 [ 848.609572] kvm_mmu_create+0xd1/0x1c0 [ 848.613459] kvm_arch_vcpu_init+0x28b/0x8b0 [ 848.617775] ? alloc_pages_current+0xef/0x1e0 [ 848.622272] kvm_vcpu_init+0x26d/0x360 [ 848.626168] vmx_create_vcpu+0xf3/0x2900 [ 848.630226] ? __mutex_unlock_slowpath+0x75/0x780 [ 848.635067] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 848.640079] ? handle_rdmsr+0x6b0/0x6b0 [ 848.644046] kvm_vm_ioctl+0x49c/0x1430 [ 848.647920] ? __lock_acquire+0x5f7/0x4620 [ 848.652139] ? kvm_vcpu_release+0xa0/0xa0 [ 848.656298] ? trace_hardirqs_on+0x10/0x10 [ 848.660535] ? trace_hardirqs_on+0x10/0x10 [ 848.664767] ? save_trace+0x290/0x290 [ 848.668553] ? __might_fault+0x104/0x1b0 [ 848.672612] ? kvm_vcpu_release+0xa0/0xa0 [ 848.676744] do_vfs_ioctl+0x75a/0xfe0 [ 848.680532] ? selinux_file_mprotect+0x5c0/0x5c0 [ 848.685793] ? ioctl_preallocate+0x1a0/0x1a0 [ 848.690217] ? security_file_ioctl+0x76/0xb0 [ 848.694607] ? security_file_ioctl+0x83/0xb0 [ 848.699000] SyS_ioctl+0x7f/0xb0 [ 848.702363] ? do_vfs_ioctl+0xfe0/0xfe0 [ 848.706325] do_syscall_64+0x1d5/0x640 [ 848.710205] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 848.715391] RIP: 0033:0x45c889 [ 848.718595] RSP: 002b:00007f12a54e4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 01:42:49 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 01:42:49 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:42:49 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x41000, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9c12) unlink(&(0x7f0000000680)='./file0\x00') truncate(&(0x7f00000001c0)='./file0\x00', 0x0) [ 848.726300] RAX: ffffffffffffffda RBX: 00007f12a54e56d4 RCX: 000000000045c889 [ 848.733696] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 848.740959] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 848.748230] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 848.755500] R13: 0000000000000390 R14: 00000000004c60a9 R15: 000000000076bf0c 01:42:50 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) [ 848.854743] warn_alloc_show_mem: 2 callbacks suppressed [ 848.854748] Mem-Info: [ 848.872421] active_anon:794029 inactive_anon:7821 isolated_anon:0 [ 848.872421] active_file:14047 inactive_file:7894 isolated_file:0 [ 848.872421] unevictable:0 dirty:183 writeback:0 unstable:0 [ 848.872421] slab_reclaimable:54349 slab_unreclaimable:198806 [ 848.872421] mapped:62703 shmem:9693 pagetables:12516 bounce:0 01:42:50 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000000c0)=']\'\x00', 0x0) dup3(r1, r0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 01:42:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=ANY=[@ANYBLOB="24000000070601082c0000000000000000000003050001000600000008210640000067ec86736083c9d80fd4ed7e69c834ec19f6ebb2850832e9b232b1be2139dac38db3be8a7e584232af1ea762570d6c2d6bd17a81008b2fa7f5b99d03b82c78cd972ed977e0b787b5243519bfa3b9f17846ff00b4adace6400f1e96779ff69927768f2941fb0206512014e0eae8dbce5fe17b559f5f9e12c9a8f79fe3c35b8c1e9199b558df1c92904d114f8352e89c3dab08521bea40a3027af8b7e3a35a5ff31065b1fc8c52a8c1af08044dfeee25a9dcc68b977d9bdaae739346300ae5eacf460c7cdce38ee9ad072aed5e993503b991e95dc06fe0973871114a149957d5c6dbf26c10a4a80960827277da7ec39c2ea12ec7b6f2a7c0deebfa9c1d08d408a41b29fd93c35f97600c626ba47e07000000535e3959139e2ac4bff43e50e06d66a1b24089f9da7b3b87cb2dcade282e40c88f075c6959cc4c123843b72ed18d3d88f2147926039cd858fe177882fe203d5660ea88693fb56a23c71022995c14bae89895b190b136fa528f9123416462563f9966aba68255eb70fcc2c5d91e5626d9c551570565b022c323b7e8363868061874d8fee15fb6d78a41425668f26af49b391b98d47947f9c85709d43ccf957abe8a8ac9a6af3cc8c34742f08c8e1cec68000a55bb699ed3c6cb40c2035e14ec5214ca6eb16be0828bbbad96d50158b99705dc1ad41619acf9a6a4440ce4642c3291dcc74f497e8fc89239555c19a4649afbaffab8fbafb870723d244bec1153e490ea149a88ebbca1c0f32af6b4672eff533c379e143301983806bfe19f605ba55bd92d19534fca13aafe00000000000000075013771c32a664641e8a612d8a216108d731659ee57b5aa329835febbafec3ef11707e7036840df726626c742184045a8abb06193781628f893c0c0401d25f93e65ec2e581634231463e0c02deab81b4e78ff1fc0deabb0fc636c0c3a9b88b5f43274024193736284d5c983f7169af2137c70a7e74b0f03a30f3001f8d97a504050000001cc405c464a5027e6fb0c294220fe167f9f831e3c75d067c907f311e108b379848ae2fe605a605b9a3dfe1cb336cb7033245d21a5074cddfebb44ca2340cd65d3a7c2468976f21eb7dae9200138c5a370efb23ad51bc0e649980669615663c2f0ee5dc13ce0aaf0d679e5752749191abfa1e9ba0546466c048390f9c507e95f3dc62d62d8d87898f90630510fc64f6e2f633060acd14e5f04073eb332d1b78a7f9e79d6395e3c4fb3d1f301c2dffabf6b2bae9df6898488b14a1544251a7a077da08ba1de78d74189b857ca4270c7be74db206aa5c70f1c3395e391c330563a8a5b5cdac67e9376a3c39e90f665ed0f537ab80afa59a73c7bc0335bf995cc682e675102078e1bba91bd5ae3b275dfd3cdd4976070000000000000089ff526a9028eb7955a0076606833c71c22d96a379c80d28c6adec13682a62a6c24c00000000000000000000000000000000000000000000ad46811d358479265832304815ee166882d7f9abd49bea0cec7123916c60c58cc14e4bf39be81885263200d60de8b650c608a23575067b5d627e25bb05ff2f87b8f592caffcc98aad086a3b8fef463e5a96da7da7127aae8c1a603f57ceeefa4c0e3bca099d9375f9aedde6076a291c9e15b3e8dc4a4c38c8988fcf086ec7ffd7adb8e346f1ec78cc9e179c9d6da67b875d40300348c296fe3a53bb319f9874218bfdf50be5552c0539b74b670186e00d81adb280b33858a60c284c62fdb837f858aad2a329f4be014065547f2410685d32d492186888f4e353774fce70a74575609403b5668c877275fea252f2fe2929fc03415000000000000000000da28995122706fe826a8009978e8532d199c6622165f672bb12773efdbc151c0eec95b70481bb4ea529c3bf2e0a020960a599d81ca355a896ad3d269015348361315ddfb80e88a1091402d722140eb1daa689feee17c39b3ba7e15f85b60c8183cf4a3bd2399780f19f47c07dfb67689eb039d5b32b51340bdcbb5b6b9a2c3e8dc0559777a2c9472d89e5634079062951a6dfdb558762efa86009c5839264b802afbfbcceef7319d9c0318d59d3a55b4b95fed265bfb1866ace84d872e6d8dfa521d57c6bcd157b1783fde0473b05261f589c1cfac7caeadbbad361b50224642fe01b331f8075348ee29f01500"], 0x24}, 0x1, 0x0, 0x0, 0x4040050}, 0x0) [ 848.872421] free:434850 free_pcp:525 free_cma:0 [ 848.945132] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 848.955963] Node 0 active_anon:1944212kB inactive_anon:16080kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216456kB dirty:4kB writeback:4kB shmem:16756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1153024kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 848.990512] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 849.005988] Node 1 active_anon:1231964kB inactive_anon:15204kB active_file:56184kB inactive_file:34020kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34396kB dirty:3256kB writeback:4kB shmem:22016kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 849.044601] Node 0 DMA free:10324kB min:220kB low:272kB high:324kB active_anon:4164kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:124kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 849.082613] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 849.087691] Node 0 DMA32 free:20940kB min:36272kB low:45340kB high:54408kB active_anon:1940048kB inactive_anon:16080kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2621268kB mlocked:0kB kernel_stack:12096kB pagetables:30812kB bounce:0kB free_pcp:1272kB local_pcp:648kB free_cma:0kB [ 849.119298] lowmem_reserve[]: 0 0 0 0 0 [ 849.128001] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 849.158452] lowmem_reserve[]: 0 0 0 0 0 [ 849.163720] Node 1 Normal free:1702440kB min:53612kB low:67012kB high:80412kB active_anon:1232144kB inactive_anon:15204kB active_file:56184kB inactive_file:37324kB unevictable:0kB writepending:6628kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:8512kB pagetables:19148kB bounce:0kB free_pcp:860kB local_pcp:708kB free_cma:0kB [ 849.198528] lowmem_reserve[]: 0 0 0 0 0 [ 849.203773] Node 0 DMA: 1*4kB (M) 10*8kB (UM) 4*16kB (UM) 2*32kB (UM) 0*64kB 1*128kB (M) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (M) = 10324kB [ 849.222072] Node 0 DMA32: 353*4kB (UME) 147*8kB (UME) 23*16kB (UME) 517*32kB (UME) 3*64kB (UE) 10*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20972kB [ 849.236901] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 849.247740] Node 1 Normal: 34*4kB (UME) 1325*8kB (UME) 1013*16kB (UE) 240*32kB (UME) 98*64kB (UM) 15*128kB (UM) 3*256kB (ME) 1*512kB (E) 5*1024kB (UME) 1*2048kB (U) 403*4096kB (M) = 1701952kB [ 849.265486] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 849.279702] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 849.289903] syz-executor.2: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 849.307326] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 849.317420] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 849.324778] CPU: 0 PID: 26936 Comm: syz-executor.2 Not tainted 4.14.176-syzkaller #0 [ 849.332680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 849.342047] Call Trace: [ 849.344650] dump_stack+0x13e/0x194 [ 849.348287] warn_alloc.cold+0x96/0x1af [ 849.352263] ? zone_watermark_ok_safe+0x280/0x280 [ 849.357097] ? wait_for_completion+0x390/0x390 [ 849.361672] __alloc_pages_slowpath+0x2114/0x26c0 [ 849.366508] ? warn_alloc+0xf0/0xf0 [ 849.370134] ? find_held_lock+0x2d/0x110 [ 849.374185] ? fs_reclaim_acquire+0x10/0x10 [ 849.378495] __alloc_pages_nodemask+0x5d3/0x700 [ 849.383270] ? rcu_read_lock_sched_held+0x10a/0x130 [ 849.388286] ? __alloc_pages_nodemask+0x5e0/0x700 [ 849.393134] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 849.398169] alloc_pages_current+0xe7/0x1e0 [ 849.402486] kvm_mmu_create+0xd1/0x1c0 [ 849.406362] kvm_arch_vcpu_init+0x28b/0x8b0 [ 849.410710] ? alloc_pages_current+0xef/0x1e0 [ 849.415194] kvm_vcpu_init+0x26d/0x360 [ 849.419070] vmx_create_vcpu+0xf3/0x2900 [ 849.423134] ? __mutex_unlock_slowpath+0x75/0x780 [ 849.427961] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 849.432974] ? handle_rdmsr+0x6b0/0x6b0 [ 849.436947] kvm_vm_ioctl+0x49c/0x1430 [ 849.440820] ? __lock_acquire+0x5f7/0x4620 [ 849.445052] ? kvm_vcpu_release+0xa0/0xa0 [ 849.449188] ? trace_hardirqs_on+0x10/0x10 [ 849.453411] ? trace_hardirqs_on+0x10/0x10 [ 849.457632] ? save_trace+0x290/0x290 [ 849.461417] ? __might_fault+0x104/0x1b0 [ 849.465465] ? kvm_vcpu_release+0xa0/0xa0 [ 849.469599] do_vfs_ioctl+0x75a/0xfe0 [ 849.473387] ? selinux_file_mprotect+0x5c0/0x5c0 [ 849.478127] ? ioctl_preallocate+0x1a0/0x1a0 [ 849.482526] ? security_file_ioctl+0x76/0xb0 [ 849.486914] ? security_file_ioctl+0x83/0xb0 [ 849.491321] SyS_ioctl+0x7f/0xb0 [ 849.494673] ? do_vfs_ioctl+0xfe0/0xfe0 [ 849.498653] do_syscall_64+0x1d5/0x640 [ 849.502553] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 849.507738] RIP: 0033:0x45c889 [ 849.510912] RSP: 002b:00007f12a54a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 849.518618] RAX: ffffffffffffffda RBX: 00007f12a54a36d4 RCX: 000000000045c889 [ 849.525887] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 849.533155] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 849.540428] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 849.547691] R13: 0000000000000390 R14: 00000000004c60a9 R15: 000000000076c04c [ 849.573818] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 849.593820] 34562 total pagecache pages [ 849.602308] 0 pages in swap cache [ 849.606498] Swap cache stats: add 0, delete 0, find 0/0 [ 849.616600] Free swap = 0kB [ 849.623054] Total swap = 0kB [ 849.629021] 1965979 pages RAM [ 849.637333] 0 pages HighMem/MovableOnly [ 849.642296] 339050 pages reserved [ 849.645851] 0 pages cma reserved 01:42:50 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) 01:42:50 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:42:50 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x80000000000004) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000100)=0xfffffffffffffffe, 0x4) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x380000, @empty}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, &(0x7f0000000140)=0x20) 01:42:50 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/if_inet6\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 01:42:50 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:42:50 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000180)=""/106, 0x18) ftruncate(0xffffffffffffffff, 0x0) 01:42:50 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @dev}, 0xc) 01:42:50 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:42:51 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) 01:42:51 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:42:51 executing program 1: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="053dc1b6bea1", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a46000", 0x18, 0x3a, 0x0, @initdev={0xfe, 0x88, [0x8, 0x0, 0x0, 0x0, 0xd], 0x0, 0x0}, @mcast2, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @remote}}}}}}, 0x0) 01:42:51 executing program 3: syz_emit_ethernet(0x300506, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0) 01:42:51 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:42:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) shutdown(r1, 0x1) r4 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x3d000000) 01:42:51 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) 01:42:51 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:42:51 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in=@empty}, [@srcaddr={0x14, 0xd, @in6=@dev}]}, 0x3c}, 0x8}, 0x0) 01:42:51 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) open$dir(0x0, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) clone(0x1000000000011, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x5, 0x0) keyctl$revoke(0x3, 0x0) request_key(&(0x7f0000000140)='cifs.idmap\x00', 0x0, 0x0, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) 01:42:51 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000000400)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 850.036955] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 01:42:51 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:42:51 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00'}) [ 850.104384] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 850.159904] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 01:42:51 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:42:51 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r2 = dup2(r1, r0) fcntl$setpipe(r2, 0x407, 0x0) 01:42:51 executing program 3: r0 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x7) 01:42:51 executing program 2: r0 = open(&(0x7f0000000000)='./file0\x00', 0x212042, 0x0) flistxattr(r0, 0x0, 0x0) [ 850.836773] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 01:42:52 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 01:42:52 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8903, 0x0) 01:42:52 executing program 3: syz_emit_ethernet(0x4e, &(0x7f0000000d40)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, [], @remote}}}}}}, 0x0) 01:42:52 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:42:52 executing program 2: 01:42:52 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8903, &(0x7f0000000340)={@dev}) 01:42:52 executing program 3: r0 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) dup2(r2, r1) futimesat(r1, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={{0x0, 0x2710}, {0x77359400}}) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) epoll_pwait(r0, &(0x7f0000000080)=[{}, {}, {}], 0x3, 0x5bde3d1f, &(0x7f00000000c0)={[0x5]}, 0x8) mknodat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x7) fgetxattr(r0, &(0x7f0000000040)=@known='system.sockprotoname\x00', &(0x7f0000000280)=""/191, 0xbf) r3 = semget$private(0x0, 0x4, 0x200) personality(0x0) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000000)=""/166) semctl$GETNCNT(r3, 0x1, 0xe, &(0x7f0000000680)=""/168) semctl$SETVAL(r3, 0x4, 0x10, &(0x7f0000000180)=0x8001) 01:42:52 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) close(r0) socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 01:42:52 executing program 2: r0 = open(&(0x7f0000000000)='./file0\x00', 0x212042, 0x0) write$P9_RGETLOCK(r0, 0x0, 0x0) 01:42:52 executing program 0: 01:42:52 executing program 3: 01:42:52 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:42:52 executing program 1: 01:42:52 executing program 5: 01:42:52 executing program 0: 01:42:52 executing program 1: 01:42:52 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0) 01:42:52 executing program 3: 01:42:52 executing program 0: 01:42:52 executing program 5: 01:42:52 executing program 1: [ 851.137169] Unknown ioctl -2147200512 01:42:52 executing program 3: 01:42:52 executing program 0: 01:42:52 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:42:52 executing program 5: 01:42:52 executing program 1: 01:42:52 executing program 5: 01:42:52 executing program 0: 01:42:52 executing program 2: 01:42:52 executing program 3: 01:42:52 executing program 5: 01:42:52 executing program 2: 01:42:52 executing program 1: 01:42:52 executing program 0: 01:42:52 executing program 5: 01:42:52 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:42:52 executing program 3: 01:42:52 executing program 0: 01:42:52 executing program 1: 01:42:52 executing program 5: 01:42:52 executing program 2: 01:42:52 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:42:52 executing program 0: 01:42:52 executing program 3: 01:42:52 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="050000000100000000005f3e2a606f26f98aae000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00ecffc80000000000c400000000000002020204060b951ef6000000000000001346b71ae68601600a2703a8775d31f87ad1e4d3c8ba251598917d207ddf98236e7c0a29382d9f40d364551321fff46f3432f2d483699c421376289a0872e38667475a9e5ef23d6aa0275feb8490174a69c397ce9b602f12d2675be463655f5c66e91ccb1e37ec331ac03c0a8d7b9a9f44496023becd58b8c8d2e11c70f6964397f0067774d2880b0a2460b619997238e3e885050b9380acb44e305047f880b32f4d0b92b235394e865c4136"], 0x20000108}}, 0x0) 01:42:52 executing program 2: 01:42:52 executing program 3: 01:42:52 executing program 0: 01:42:52 executing program 5: 01:42:52 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:42:52 executing program 1: 01:42:52 executing program 0: 01:42:52 executing program 2: 01:42:52 executing program 5: 01:42:52 executing program 3: 01:42:52 executing program 1: 01:42:52 executing program 0: 01:42:52 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:42:52 executing program 1: 01:42:52 executing program 0: 01:42:52 executing program 3: 01:42:52 executing program 2: 01:42:52 executing program 5: 01:42:52 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:42:52 executing program 0: 01:42:52 executing program 1: 01:42:52 executing program 5: 01:42:52 executing program 2: 01:42:52 executing program 0: 01:42:52 executing program 3: 01:42:52 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:42:53 executing program 5: 01:42:53 executing program 1: 01:42:53 executing program 2: 01:42:53 executing program 3: 01:42:53 executing program 0: 01:42:53 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:42:53 executing program 3: 01:42:53 executing program 1: 01:42:53 executing program 5: 01:42:53 executing program 0: 01:42:53 executing program 2: 01:42:53 executing program 1: 01:42:53 executing program 3: 01:42:53 executing program 5: 01:42:53 executing program 0: 01:42:53 executing program 2: 01:42:53 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:42:53 executing program 3: 01:42:53 executing program 1: 01:42:53 executing program 0: 01:42:53 executing program 2: 01:42:53 executing program 5: 01:42:53 executing program 3: 01:42:53 executing program 0: 01:42:53 executing program 5: 01:42:53 executing program 1: 01:42:53 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:42:53 executing program 3: 01:42:53 executing program 2: 01:42:53 executing program 0: 01:42:53 executing program 1: 01:42:53 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:42:53 executing program 5: 01:42:53 executing program 0: 01:42:53 executing program 2: 01:42:53 executing program 3: 01:42:53 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:42:53 executing program 1: 01:42:53 executing program 0: 01:42:53 executing program 5: 01:42:53 executing program 2: 01:42:53 executing program 3: 01:42:53 executing program 0: 01:42:53 executing program 1: 01:42:53 executing program 5: 01:42:53 executing program 3: 01:42:53 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:42:53 executing program 2: 01:42:53 executing program 0: 01:42:53 executing program 3: 01:42:53 executing program 2: 01:42:53 executing program 5: 01:42:53 executing program 1: 01:42:53 executing program 0: 01:42:53 executing program 3: 01:42:53 executing program 2: 01:42:53 executing program 5: 01:42:53 executing program 0: 01:42:53 executing program 1: 01:42:53 executing program 4: vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0) 01:42:53 executing program 3: 01:42:53 executing program 5: 01:42:53 executing program 2: 01:42:53 executing program 5: 01:42:53 executing program 1: 01:42:53 executing program 4: vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0) 01:42:53 executing program 0: 01:42:53 executing program 5: 01:42:53 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007260000004007a2a30000000000", @ANYRES32, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 01:42:53 executing program 2: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @remote}, 0xc) 01:42:53 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x80000000000004) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b80)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000c1030000030000002004000000000000800200000000000000000000000000005003000050030000500300005003000050030000030000000000000000000000fe8000000000000000000000000000bbff020000000000000000000000006382000000000000000000000000000000000000000000000000000000000000000076657468315f746f5f626f6e640000006e657470636930000000000f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500280020000000000000000000000000000000000000000000000005001686173686c696d69740000000000000000000000000000000000000000027465a16d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000fe18b61a000800000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000173797a6b616c6c657231000000000000000000000000000004000000000000000000000005000000a60000000000000000000000000000003000434f4e4e4d41524b00000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800434c4153534946590000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000009, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 01:42:53 executing program 4: vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0) 01:42:53 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x50, 0x0, 0x0, 0xffff00000}, {0x80000006}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000002280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:42:53 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x1) syz_emit_ethernet(0x46, &(0x7f0000000580)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd601bd4300008010000000000000000bb2001000000000000000000000000000000000000040590781eb631ba006cc307"], 0x0) 01:42:54 executing program 3: unshare(0x6c060000) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00'], 0x1}}, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0200fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740c00000000d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @local}}) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @local}}, 0x0, 0x5, 0x2}, 0x235) bind$inet(r3, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) recvmsg(r3, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14, 0x3e8}, 0x0) write$binfmt_elf64(r3, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) accept4(r0, 0x0, &(0x7f0000000380), 0x0) [ 852.873228] cannot load conntrack support for proto=10 01:42:54 executing program 2: socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x80000000, 0x206c0) r0 = socket(0x11, 0x0, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) poll(0x0, 0x0, 0x8000000000000200) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f0000000040)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) 01:42:54 executing program 4: pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0) 01:42:54 executing program 4: pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0) [ 852.967986] netlink: 40067 bytes leftover after parsing attributes in process `syz-executor.3'. [ 852.973661] cannot load conntrack support for proto=10 [ 852.993034] cannot load conntrack support for proto=10 01:42:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="af9a974cb7e1"}, 0x14) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc}]}]}]}, 0x34}}, 0x0) 01:42:54 executing program 4: pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0) [ 853.067001] IPVS: ftp: loaded support on port[0] = 21 01:42:54 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:42:54 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:42:54 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) socket$packet(0x11, 0x4000000000000a, 0x300) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) 01:42:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010b0000000000000000001500001400020077673000"/34], 0x28}}, 0x0) 01:42:54 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:42:54 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}}) write$tun(r0, &(0x7f00000002c0)={@void, @val, @mpls={[], @ipv4=@dccp={{0x7, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x21, 0x0, @dev, @remote, {[@timestamp={0x44, 0x4, 0x10}, @noop]}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "a7c96f", 0x0, "3dca06"}}}}}, 0x36) [ 853.794283] netlink: 40067 bytes leftover after parsing attributes in process `syz-executor.3'. [ 854.031745] IPVS: ftp: loaded support on port[0] = 21 01:42:56 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x20a}}) 01:42:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000000c0)="b9ff0300000d698cb89e40f008001fffffff00004000632977", 0x0, 0x100, 0x6000000000000000}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 01:42:56 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) 01:42:56 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:42:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f00000000c0)={@loopback, @remote}, &(0x7f0000001440)=0x8) 01:42:56 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x10d17e, 0x0) ioctl$FITRIM(r1, 0x40047211, &(0x7f0000000200)={0x41}) write$binfmt_elf64(r1, &(0x7f0000000700)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 01:42:56 executing program 1: openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x800000080004103) [ 854.995043] kauditd_printk_skb: 3 callbacks suppressed [ 854.995050] audit: type=1800 audit(1586914976.127:90): pid=27377 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="bus" dev="loop5" ino=147 res=0 01:42:56 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYRESOCT, @ANYRES64, @ANYBLOB="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"], 0x0, 0x141}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/6, 0x6}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 01:42:56 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:42:56 executing program 2: socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x206c0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f0000000040)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) 01:42:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = semget$private(0x0, 0x4000000009, 0x0) semop(r2, &(0x7f0000000380)=[{0x0, 0x0, 0x1000}], 0x1) r3 = semget$private(0x0, 0x4000000009, 0x0) semop(r3, &(0x7f0000000380), 0x1d) 01:42:56 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e20, 0x7, @mcast1, 0xffffff76}, 0x1c) io_submit(0x0, 0x0, 0x0) socket$inet(0x2, 0x803, 0xa0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg$inet(r4, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1b1, 0x0) socket$inet(0x2, 0x0, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x3f) [ 855.126352] audit: type=1800 audit(1586914976.177:91): pid=27377 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="bus" dev="loop5" ino=147 res=0 01:42:56 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:42:56 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0), 0x0, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:42:56 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYRESOCT, @ANYRES64, @ANYBLOB="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", @ANYRESDEC], 0x0, 0x155}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/6, 0x6}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 01:42:56 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0), 0x0, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:42:56 executing program 0: getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x7}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg$inet(r3, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1b1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet(0x2, 0x1, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x3f) 01:42:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r0, 0x4b4d, &(0x7f0000001600)) 01:42:57 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0x100}}) 01:42:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) 01:42:59 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0), 0x0, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:42:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 01:42:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_int(r2, 0x0, 0xb, 0x0, &(0x7f0000000000)) 01:42:59 executing program 2: socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x206c0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f0000000040)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) 01:42:59 executing program 1: socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x80000000, 0x206c0) socket(0x11, 0x3, 0x0) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) futex(&(0x7f0000000040)=0x2, 0x8b, 0x2, 0x0, 0x0, 0x0) 01:42:59 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:42:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000080)=""/133) 01:42:59 executing program 3: setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) futex(&(0x7f0000000040)=0x2, 0x8b, 0x2, 0x0, 0x0, 0x0) 01:42:59 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:42:59 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) syncfs(r1) 01:42:59 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:42:59 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1b}, 0x4}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='pagemap\x00') sendfile(r0, r3, 0x0, 0xedc0) 01:42:59 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:00 executing program 5: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x120}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 01:43:00 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r0, 0xee00, 0x0) 01:43:00 executing program 1: getpid() sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, 0x0, 0x800000080004103) 01:43:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3e) ioctl$void(r0, 0xc0045878) 01:43:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r0, 0x4b49, 0x0) 01:43:00 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:00 executing program 3: socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x80000000, 0x206c0) r0 = socket(0x11, 0x3, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f0000000040)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) 01:43:00 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) 01:43:00 executing program 0: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="cd7d0004000000000000003590aa596bffe500020000"], 0x16}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x120}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 01:43:00 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcf", 0x5}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:00 executing program 5: socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f0000000040)=0x2, 0x8b, 0x2, 0x0, 0x0, 0x0) 01:43:00 executing program 0: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x206c0) r0 = socket(0x11, 0x3, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f0000000040)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) 01:43:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000040)) 01:43:00 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcf", 0x5}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:01 executing program 1: r0 = getpgrp(0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() select(0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xd) ptrace$cont(0x18, r1, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}}}, 0x78) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 01:43:01 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}}, 0x38) 01:43:01 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcf", 0x5}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:01 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) 01:43:01 executing program 5: socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) futex(&(0x7f0000000040)=0x2, 0x8b, 0x2, 0x0, 0x0, 0x0) 01:43:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0xfffffffffffffffc, 0x0, 0x2, 0x4, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000380)=[{0x1, 0xffff, 0x1000}, {0x0, 0xfffe, 0x800}], 0x2) semop(0x0, &(0x7f0000000380)=[{0x1, 0x2e5}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) 01:43:01 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb", 0x8}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:01 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) dup2(r1, r0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) 01:43:01 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) dup2(r1, r0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, 0x0, 0x0) 01:43:01 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb", 0x8}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:01 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb", 0x8}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:01 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) dup2(r1, r0) setsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) 01:43:01 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66", 0x9}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000200)="be", 0x1, r0) 01:43:01 executing program 1: r0 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="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", 0x109}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x1d, 0x0, 0x5d, &(0x7f0000000200)=ANY=[]}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 01:43:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x0, 0x0, 0x0) 01:43:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) 01:43:01 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66", 0x9}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:01 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) dup2(r1, r0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 01:43:01 executing program 2: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) poll(&(0x7f0000000540)=[{}], 0x1, 0x100) 01:43:01 executing program 5: r0 = eventfd(0xfbfffff8) timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000100)='encrypted\x00', 0x0, 0x0, 0x0, r2) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0x5421, 0x0) write$P9_RLOCK(0xffffffffffffffff, 0x0, 0x0) write$P9_RLCREATE(0xffffffffffffffff, 0x0, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) close(r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e5e, @dev}, 0x10) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x2}, &(0x7f0000000040)=0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000080)) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$P9_RLOCK(0xffffffffffffffff, 0x0, 0x0) timer_settime(r4, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) write(r1, &(0x7f00000000c0)="d6d14346ab41e1fa5dde8454053e60fb51bf4f563668ece60d45cf7f061c0d", 0x1f) 01:43:02 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66", 0x9}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:02 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x88031, 0xffffffffffffffff, 0x0) r0 = inotify_init() inotify_add_watch(r0, 0x0, 0x20a) 01:43:02 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x5452, &(0x7f00000002c0)={'team0\x00'}) 01:43:02 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xa}], 0x1, 0x0) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:02 executing program 3: 01:43:02 executing program 0: 01:43:02 executing program 5: 01:43:02 executing program 3: 01:43:02 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xa}], 0x1, 0x0) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:02 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x5450, 0x0) 01:43:02 executing program 2: 01:43:02 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) dup2(r1, r0) setsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x0) 01:43:02 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xa}], 0x1, 0x0) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:02 executing program 5: 01:43:02 executing program 3: 01:43:02 executing program 0: 01:43:02 executing program 3: 01:43:02 executing program 0: 01:43:02 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:02 executing program 3: 01:43:02 executing program 5: 01:43:02 executing program 2: 01:43:02 executing program 1: 01:43:02 executing program 0: 01:43:02 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:02 executing program 2: 01:43:02 executing program 1: 01:43:02 executing program 3: 01:43:02 executing program 5: 01:43:02 executing program 0: 01:43:02 executing program 2: 01:43:02 executing program 5: 01:43:02 executing program 3: 01:43:02 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:02 executing program 0: 01:43:02 executing program 1: 01:43:02 executing program 5: 01:43:02 executing program 0: 01:43:02 executing program 1: 01:43:02 executing program 3: 01:43:02 executing program 2: 01:43:02 executing program 5: 01:43:02 executing program 3: 01:43:02 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:02 executing program 0: 01:43:02 executing program 1: 01:43:02 executing program 2: 01:43:02 executing program 3: 01:43:02 executing program 0: 01:43:02 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:02 executing program 5: 01:43:02 executing program 1: 01:43:02 executing program 3: 01:43:02 executing program 2: 01:43:02 executing program 0: 01:43:02 executing program 2: 01:43:02 executing program 0: 01:43:02 executing program 3: 01:43:02 executing program 5: 01:43:02 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:02 executing program 1: 01:43:02 executing program 5: 01:43:03 executing program 1: 01:43:03 executing program 0: 01:43:03 executing program 3: 01:43:03 executing program 2: 01:43:03 executing program 3: 01:43:03 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:03 executing program 2: 01:43:03 executing program 3: 01:43:03 executing program 5: 01:43:03 executing program 0: 01:43:03 executing program 1: 01:43:03 executing program 2: 01:43:03 executing program 3: 01:43:03 executing program 0: 01:43:03 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:03 executing program 2: 01:43:03 executing program 5: 01:43:03 executing program 0: 01:43:03 executing program 3: 01:43:03 executing program 1: 01:43:03 executing program 0: 01:43:03 executing program 3: 01:43:03 executing program 1: 01:43:03 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:03 executing program 0: 01:43:03 executing program 5: 01:43:03 executing program 2: 01:43:03 executing program 3: 01:43:03 executing program 1: 01:43:03 executing program 5: 01:43:03 executing program 2: 01:43:03 executing program 0: 01:43:03 executing program 3: 01:43:03 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:03 executing program 0: 01:43:03 executing program 1: 01:43:03 executing program 5: 01:43:03 executing program 2: 01:43:03 executing program 3: 01:43:03 executing program 5: 01:43:03 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:03 executing program 3: 01:43:03 executing program 1: 01:43:03 executing program 0: 01:43:03 executing program 2: 01:43:03 executing program 5: 01:43:03 executing program 3: 01:43:03 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:03 executing program 1: 01:43:03 executing program 2: 01:43:03 executing program 0: 01:43:03 executing program 5: 01:43:03 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="ab", 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000080)="080db5055e0bcfe847a071") r3 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r3, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000003580)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 01:43:03 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:03 executing program 0: socket(0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x6}, 0x20) 01:43:03 executing program 1: 01:43:03 executing program 5: 01:43:03 executing program 2: 01:43:03 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:03 executing program 1: 01:43:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) 01:43:03 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_genetlink_get_family_id$ipvs(0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x9c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878254}, 0x9c) 01:43:03 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x74, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xff}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x6}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 01:43:04 executing program 1: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200001a0000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="700e00002c00270d00"/20, @ANYRES32=r4, @ANYBLOB="00000000000000000a000000090001007273767000000000400e02003c0e0600380e01000a0001007065646974000000240e0280200e04000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e5ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400060064c0ae320d3986156e95471b1fc81d294a818f90295e337b896edd7faa8039dc2847780f"], 0xe70}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 862.808999] net_ratelimit: 246 callbacks suppressed [ 862.809012] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 01:43:04 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, &(0x7f0000000040), &(0x7f0000001a40)=0x4) 01:43:04 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x9c) r1 = socket$inet6(0xa, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x12061, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878254}, 0x9c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) 01:43:04 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:04 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) [ 863.003938] audit: type=1804 audit(1586914984.138:92): pid=27910 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir320776190/syzkaller.UR0kHq/956/cgroup.controllers" dev="sda1" ino=16563 res=1 01:43:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000001300)=[{&(0x7f0000000000)=""/105, 0x69}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) shutdown(r1, 0x0) socket$inet6_tcp(0x1c, 0x1, 0x0) r3 = msgget$private(0x0, 0x1fd) r4 = socket$inet_udplite(0x2, 0x2, 0x88) msgsnd(r3, &(0x7f00000008c0)=ANY=[@ANYRES32=r4], 0x1, 0x2800) msgsnd(r3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES64=r4], 0x2, 0x800) msgrcv(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002693d39a23252d048b0bee59e0172e79000020000000000000000000000000000000000000004000000000000000800000005a46356150b45ac40313aa8825e0d94da1e66ba2bfd53f0590c841721f479fd472aefb7a9ee6ec3b36bf111b2bc9b3c3d82d0902884c077016"], 0x1, 0x3, 0x1000) msgsnd(r3, &(0x7f0000000080)={0x1, "a0f27967d36ffc8d99c2686e3582ee9e25c122bc468b24c7b2ee53f0b56b2f6b28e491e06f21f6ea76a775dd42a49193b0fd269bbbc5"}, 0x3e, 0x0) shutdown(r2, 0x0) 01:43:04 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) [ 863.148090] audit: type=1804 audit(1586914984.168:93): pid=27898 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir953281042/syzkaller.9WJPBq/1060/cgroup.controllers" dev="sda1" ino=16558 res=1 01:43:04 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000001300)=[{&(0x7f0000000000)=""/105, 0x69}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xd) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) shutdown(r1, 0x0) socket$inet6_tcp(0x1c, 0x1, 0x0) r3 = msgget$private(0x0, 0x1fd) r4 = socket$inet_udplite(0x2, 0x2, 0x88) msgsnd(r3, &(0x7f00000008c0)=ANY=[@ANYRES32=r4], 0x1, 0x2800) msgsnd(r3, &(0x7f0000000a00)=ANY=[@ANYBLOB="0100400000000000216af91fe73eb7dadad105e41353d43d9e011d839167793ab9a5c7287dc8405b8030ad3c22e8ccca755523976af0000000000000005e4b013189f13c0a325eecbb9cd0701133ede33f2149778ad7b1b79c1327caa2b403bb230180185ad5cac161bbeb45dcba2e211687869d3d888c35748c84c7902465f60305801819f454e34761b39f10d603748a148938ab30f752f62630e1a3c1a10700010030104d599c4ee97b0a51e07cccaf7246405af3f0a7d9684e6501bcff60e873aa442bb9ac6e9dcf0bff2f3819b90b807c77dc97ffc8a553e29a32d7296367eff83dbb89ce85232f440000000000000000000000000000009e2378ff2f63d44ead26b9792f058f6649d86d86e39719eeff2ddad42c622a02d3e541c666d0be3e02e1848a89806ad41ce5aa0d06bc93eb478e70c239d6046e530853f678d4d1567785355440d5e84aa0fa4baad8c96b69d43086e0b81ff90fb970cd47015cf8537a8ba25dfe752c8a1ae2b479608890e1729c3ba59ca04d71cfad3b65d643951ea1d7d3cb8b96971c987a7a96f30dac872a5f9396519e6dcbb600c906f19928b3e78c010d8d4e15aa084bdb238dd957bc3a40a859a6f5123e575f07a8456c4e84fb2d5a22f110269f5a8b9d55e04f4e8c34480b8c1e9666923974fa5c8d0a4ef0cb8116e9aae0bc067c652080f74736533807e778a2244954000b7cbeec509bfb3e8c84ab4f61e0aaaa0dfa6b9c40fd486beacaf44b1e7933f3df10b3a64cc878ea59530e7d6ef5fe0201a2f41c8136ee99144bdf2579cadb3fec812f05e7fce0704db76fe200abefad9e4f4995a3fdb02d778d8323bf844db37c9e8ed9f6581984116fda356b6e637ab56e1d1f0ae60b967ed9721301", @ANYRES64=r4], 0x2, 0x800) msgrcv(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002693d39a23252d048b0bee59e0172e79000020000000000000000000000000000000000000004000000000000000800000005a46356150b45ac40313aa8825e0d94da1e66ba2bfd53f0590c841721f479fd472aefb7a9ee6ec3b36bf111b2bc9b3c3d82d0902884c077016"], 0x1, 0x3, 0x1000) msgsnd(r3, &(0x7f0000000080)={0x1, "a0f27967d36ffc8d99c2686e3582ee9e25c122bc468b24c7b2ee53f0b56b2f6b28e491e06f21f6ea76a775dd42a49193b0fd269bbbc5"}, 0x3e, 0x0) msgrcv(r3, &(0x7f00000000c0)={0x0, ""/67}, 0x4b, 0x1, 0x1000) 01:43:04 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:04 executing program 2: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x10206, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x80000000000012, r0, 0x0) mmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x7, 0x11, r0, 0x0) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) ftruncate(r1, 0x3750) mlockall(0x2) r2 = open$dir(&(0x7f0000000700)='./file0\x00', 0x202, 0x0) mlock(&(0x7f0000ff8000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) mmap(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x3, 0x80011, r2, 0x0) 01:43:04 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000240)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r0, 0x0) 01:43:04 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:04 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:04 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYPTR], 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket(0x10, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 01:43:04 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="050000000100000000005f3e2a606f26f98aae003f00000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00ecffc80000000000c400000000000002020204060b951ef6000000000000001346b71ae68601600a2703a8775d31f87ad1e4d3c8ba251598917d207ddf98236e7c0a29382d9f40d364551321fff46f3432f2d483699c421376289a0872e38667475a9e5ef23d6aa0275feb8490174a69c397ce9b602f12d2675be463655f5c66e91ccb1e37ec331ac03c0a8d7b9a9f44496023becd58b8c8d2e11c70f6964397f0067774d2880b0a2460b619997238e3e885050b9380acb44e305047f880b32f4d0b92b235394e865c4136"], 0x20000108}}, 0x0) 01:43:04 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) [ 863.732074] audit: type=1804 audit(1586914984.868:94): pid=27978 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir191315424/syzkaller.UhyPXq/1024/cgroup.controllers" dev="sda1" ino=16578 res=1 01:43:05 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) keyctl$dh_compute(0x17, &(0x7f00000001c0), &(0x7f0000000240)=""/112, 0x70, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x80100, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000140)=0x2) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) 01:43:05 executing program 0: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r1) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r5 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$unix(r2, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r6, r4}}}], 0x20}, 0x0) 01:43:05 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) [ 864.140500] hfsplus: unable to find HFS+ superblock 01:43:05 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0x0, 0x200, 0x0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast1, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x1c0, 0x200, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x4, 0x3}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 01:43:05 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0x0, 0x200, 0x0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast1, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x1c0, 0x200, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x4}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x3f00, 0x5, 0xa6}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 01:43:05 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 01:43:05 executing program 0: open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='[::/'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) 01:43:05 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:05 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:05 executing program 5: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r1) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r3 = getpid() r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$unix(r2, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {r3, r5}}}], 0x20}, 0x0) 01:43:05 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000000c0)={{0x1b, 0x5b, 0x8, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f00000000000000}]}, 0x78) 01:43:05 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) [ 864.426942] libceph: parse_ips bad ip '[:' [ 864.438687] libceph: parse_ips bad ip '[:' [ 864.458838] xt_hashlimit: overflow, try lower: 0/0 01:43:05 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9ae0278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}}], 0x400000000000009, 0x4000000) 01:43:05 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b1a, &(0x7f00000001c0)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x00\x00@\x00\x00\x00\x04\x00!\x00\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02\xffa\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x9d\aj\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cyg-\x97\xa1\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0\xd8\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x99') ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000000)=0x60, 0x2) timer_getoverrun(0x0) getpid() semctl$IPC_INFO(0x0, 0x4, 0x3, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) prctl$PR_SET_PDEATHSIG(0x1, 0x12000000017) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x14569d0eeb5fa152, 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x88000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28031, 0xffffffffffffffff, 0x0) 01:43:05 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0x0, 0x200, 0x0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast1, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x1c0, 0x200, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5"}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 01:43:05 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x545d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00x\x00'}) 01:43:05 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/250, 0x7ffff048}], 0x1, 0xe17) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x0) 01:43:05 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) [ 864.805756] hfsplus: unable to find HFS+ superblock 01:43:06 executing program 0: open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='[:]:'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) 01:43:06 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:06 executing program 5: socket$key(0xf, 0x3, 0x2) r0 = dup(0xffffffffffffffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) r4 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r4, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x1}}, 0x10) rt_sigaction(0x17, &(0x7f0000b4a000)={0xfffffffffffffffd, 0x80000001, 0x0}, 0x0, 0x8, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$P9_ROPEN(r2, &(0x7f0000000080)={0x18, 0x71, 0x1, {{0x4, 0x1, 0x7}, 0xfff}}, 0x18) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e21, 0x1ff, @private0={0xfc, 0x0, [], 0x1}, 0x10001}, {0xa, 0x4e21, 0x31d7400, @private0, 0x81}, 0x2, [0x40001, 0x7fffffff, 0x8, 0x7e, 0xa, 0x10000, 0x3, 0x4]}, 0x5c) 01:43:06 executing program 2: perf_event_open(&(0x7f0000000bc0)={0x2, 0x70, 0x96, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200)=0xfffff1ff, 0x400c00) 01:43:06 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) keyctl$dh_compute(0x17, &(0x7f00000001c0), &(0x7f0000000240)=""/112, 0x70, &(0x7f0000000580)={0x0}) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x80100, 0x0) ioctl$TIOCPKT(r2, 0x5420, 0x0) [ 865.000268] libceph: parse_ips bad ip '[:]' 01:43:06 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5412, &(0x7f0000000100)={0x3a, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00x\x00'}) 01:43:06 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f80)=ANY=[@ANYBLOB="ae24"], 0x1}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0x2f5}, {&(0x7f00000023c0)=""/49, 0xfbe3}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x2f5, &(0x7f0000008000)={0x0, 0x989680}) 01:43:06 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffffef, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x8900, &(0x7f0000000200)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x14}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe, 0x1, 'wireguard\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) 01:43:06 executing program 0: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffffef, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x8900, &(0x7f0000000200)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x14, 0x0, 0x0, 0x0, 0x9}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe, 0x1, 'wireguard\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) [ 865.145436] hfsplus: unable to find HFS+ superblock 01:43:06 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f00000002c0), 0x4) 01:43:06 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:06 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r1, 0x1000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) keyctl$dh_compute(0x17, &(0x7f00000001c0), &(0x7f0000000240)=""/112, 0x70, &(0x7f0000000580)={0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000380)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x0, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000140)=0x2) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) 01:43:06 executing program 1: open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='[::.],0:'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) 01:43:06 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) keyctl$dh_compute(0x17, &(0x7f00000001c0), &(0x7f0000000240)=""/112, 0x70, &(0x7f0000000580)={0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000380)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x0, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000140)=0x2) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) socket(0x0, 0x0, 0x0) 01:43:06 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\f\x00\x00\x00\x00x\x00'}) [ 865.345166] libceph: parse_ips bad ip '[::.],0' [ 865.367830] libceph: parse_ips bad ip '[::.],0' 01:43:07 executing program 5: r0 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0x9) clone(0x80000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 01:43:07 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x40}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:07 executing program 1: open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='\\'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) 01:43:07 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) keyctl$dh_compute(0x17, &(0x7f00000001c0), &(0x7f0000000240)=""/112, 0x70, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x0, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000140)=0x2) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) 01:43:07 executing program 3: socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000220002000000", @ANYRES32=r2, @ANYBLOB="08000400ffffffff08000200e000002d"], 0x28}}, 0x0) [ 865.842341] hfsplus: unable to find HFS+ superblock 01:43:07 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x40}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:07 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x80100, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) socket(0x0, 0x2, 0x0) 01:43:07 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) sendfile(r1, r0, 0x0, 0xddf5) [ 865.885266] ceph: device name is missing path (no : separator in \) [ 865.903872] ceph: device name is missing path (no : separator in \) [ 865.997041] selinux_nlmsg_perm: 69 callbacks suppressed [ 865.997061] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket pig=28183 comm=syz-executor.3 01:43:07 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) syz_mount_image$hfsplus(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x80100, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000140)=0x2) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) socket(0x0, 0x2, 0x0) 01:43:07 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x40}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:07 executing program 5: clone(0x944845fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 01:43:07 executing program 3: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) keyctl$dh_compute(0x17, &(0x7f00000001c0), &(0x7f0000000240)=""/112, 0x70, &(0x7f0000000580)={0x0}) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x80100, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000140)=0x2) 01:43:07 executing program 5: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r1, 0x1000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) syz_mount_image$hfsplus(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x80100, 0x0) [ 866.163482] audit: type=1400 audit(1586914987.298:95): avc: denied { sys_admin } for pid=28200 comm="syz-executor.5" capability=21 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=cap_userns permissive=1 01:43:07 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:07 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) [ 866.302555] hfsplus: unable to find HFS+ superblock 01:43:07 executing program 0: pipe(&(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) pipe(&(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 01:43:07 executing program 5: unshare(0x2a000400) r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0xab05) 01:43:07 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r2) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000400)={0x14, 0x88, 0xfa00, {r4, 0x10, 0x0, @in={0x2, 0x0, @local}}}, 0x90) 01:43:07 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0xa, 0x83, 0x6c0d, 0x1}, 0x3c) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000080)={0xa00000, 0x3036, 0x897, r0, 0x0, &(0x7f0000000000)={0x990964, 0x80200000, [], @value=0x2}}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4040, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0xe00}], 0xe, 0x0) [ 866.931377] NOHZ: local_softirq_pending 08 01:43:08 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc1004110, 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(0x0, &(0x7f00000005c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB]) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) 01:43:08 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x40}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:08 executing program 5: open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='[::'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) [ 867.026321] hfsplus: unable to find HFS+ superblock [ 867.038580] libceph: parse_ips bad ip '[:' 01:43:08 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}}, 0xfffffdef) ftruncate(r0, 0xfff000) 01:43:08 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0xa, 0x83, 0x6c0d, 0x1}, 0x3c) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000080)={0x0, 0x3036, 0x897, r1, 0x0, &(0x7f0000000000)={0x990964, 0x80200000, [], @value=0x2}}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4040, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0xe00}], 0xe, 0x0) 01:43:08 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0x0, 0x200, 0x0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast1, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x1c0, 0x200, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x4}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x300, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 01:43:08 executing program 5: open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000340)=ANY=[@ANYBLOB='[:].],0:'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) 01:43:08 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x40}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) [ 867.174452] xt_hashlimit: Unknown mode mask 300, kernel too old? [ 867.195156] xt_hashlimit: Unknown mode mask 300, kernel too old? [ 867.198283] libceph: parse_ips bad ip '[:].],0' [ 867.236477] libceph: parse_ips bad ip '[:].],0' 01:43:08 executing program 5: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0x0, 0x200, 0x0, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast1, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x1c0, 0x200, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x4}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x300, 0x0, 0x4, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@ipv4={[], [], @remote}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 01:43:08 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000900)=ANY=[@ANYBLOB="0024ade3c90400000054db4f00000000bb54c9de08000000000000009fff2286fd1b0779fbd593af5745500108d1aa36113ecc6ab366e7b7819960eb9e501ff574869fa6b8ce269474907d765dcd3666a035934b7b2377a7bff1670dc14f1449c468420e545210d431dd91a778b734d1a484aeec55ccc714506f84390000000000736eaffbf483a812fb4b3be9b2871ce0f3534576b635ea8a6e56f3d989a087717bd0e6ce8ecec24c3bd08f275567a2f4ac5e3da1343f2c91f8925a014a50d125ed9a87314530d9678c010071e339e297d366bde3cc5643a2a270347f3f8a2a5efcdbaf4774156f18b127c11d2ed869cd5eb9e3585385f411084ea7a7a132fd3c252021b00ab3cd6863edbe8ef83e269fff6a8e6e2adce8b6be1e5c27e5ce45f17c89ac8c8e3db3e4cc682bf2d7e63cd0c7502b40eed07ccc50f5311196e266428d9fd242e0b5c60be0a9fda82c455d7818346b94fbd21e5480431e3f33e7ff48c045b206beee871eba174556950a1f47c8f785a20ba976e2687ddba6143a2492b9b6d6d39225e22c5541874956dec77797967348ad1828a9a3fc9d8267e949c5caa3a8959f027294b1b1f9319c49277bb31a8383910e2ae66870d4d0d0a130"], &(0x7f00000002c0)=0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000340)={@dev={0xfe, 0x80, [], 0x16}, 0x59, r1}) setsockopt$inet6_int(r0, 0x29, 0xfb, &(0x7f00000001c0)=0x8, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @dev, 0x1ffffff}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bond_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8936, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x28c, 0x3ef, 0x200000000000000, 0x30c, 0x0, 0x8, 0xe003, 0x33c, 0x0, 0x0, 0x3603, 0x252, 0x8]}, 0x75, r2}) r3 = socket$l2tp(0x18, 0x1, 0x1) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rtc0\x00', 0x101002, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@empty, @empty, @empty, 0x3, 0x0, 0x22, 0x0, 0x100000000, 0x800208, r2}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000ac0)=ANY=[@ANYBLOB="210000004dc3bff6a3d819d4caffffff7f270008c0cc545640afff9af97288ee0bb983881a4d5271b477752b236ac8a5cffba513d97cc2d108efcf86a162af492933a098526f332f90472159"], &(0x7f0000000880)=0x1) rename(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00') setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000008c0)=@sack_info={0x0, 0x2e75, 0x815}, 0xc) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000740)={@ipv4={[], [], @multicast1}, @remote, @mcast2, 0x0, 0x0, 0x3, 0x400, 0x4, 0x80200260, r1}) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000280)=0x8) getsockname(r4, &(0x7f00000007c0)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f0000000600)=0x80) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000640)=ANY=[@ANYBLOB="db392490a794f2ca6f725bff3d5b57e5e1681adb2fece9368e9bddccb257f5570fb85371cc21f38f8d35be75533e72d4732952671b3f00000053feb77ad539a841a7c52eab606b66bfe0848b007dd5d0a081448252504caa4c54f8f9"], &(0x7f00000005c0)=0x1) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x509000, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r5, 0x5382, &(0x7f0000000480)) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = inotify_init1(0x0) r7 = dup2(r6, r6) fcntl$getownex(r7, 0x10, &(0x7f0000000240)) capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)) mq_open(&(0x7f0000000000)='.\x1f\x05', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400080, 0x0) getresgid(&(0x7f00000004c0), &(0x7f0000000540), &(0x7f0000000280)) 01:43:08 executing program 0: 01:43:08 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x40}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) [ 867.317302] overlayfs: filesystem on './file0' not supported as upperdir 01:43:08 executing program 2: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@pqnoenforce='pqnoenforce'}]}) 01:43:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000001600)) 01:43:08 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000012c0)=ANY=[@ANYRESOCT, @ANYRESHEX, @ANYPTR, @ANYRESDEC], 0x4) [ 867.394793] xt_hashlimit: Unknown mode mask 300, kernel too old? 01:43:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x0, 0x0) 01:43:08 executing program 0: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000000)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r1, 0x1000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef) keyctl$dh_compute(0x17, &(0x7f00000001c0), &(0x7f0000000240)=""/112, 0x70, &(0x7f0000000580)={0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x80100, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000140)=0x2) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) socket(0x0, 0x2, 0x0) 01:43:08 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x3c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffdfe, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000022000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000040)="0f98e60f01df26260f01c2d3a95cb6b807018ec80f01c40f9da6f2fff30f1ec366b9800000c00f326635001000000f30c10d00", 0x33}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:43:08 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)) close(r1) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002600070517d31168de39c7b17c000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000"], 0x3}}, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) dup(r1) 01:43:08 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x3c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:08 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x3c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:08 executing program 3: r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000340)="10", 0x1}], 0x1}, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000080), 0x4) [ 867.615866] syz-executor.1: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 867.642947] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 867.672043] CPU: 1 PID: 28344 Comm: syz-executor.1 Not tainted 4.14.176-syzkaller #0 [ 867.679951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 867.689309] Call Trace: [ 867.691903] dump_stack+0x13e/0x194 [ 867.695545] warn_alloc.cold+0x96/0x1af [ 867.699532] ? zone_watermark_ok_safe+0x280/0x280 [ 867.704405] ? wait_for_completion+0x390/0x390 [ 867.709009] __alloc_pages_slowpath+0x2114/0x26c0 [ 867.713886] ? warn_alloc+0xf0/0xf0 [ 867.717520] ? find_held_lock+0x2d/0x110 [ 867.721594] ? fs_reclaim_acquire+0x10/0x10 [ 867.725938] __alloc_pages_nodemask+0x5d3/0x700 [ 867.730621] ? rcu_read_lock_sched_held+0x10a/0x130 [ 867.735645] ? __alloc_pages_nodemask+0x5e0/0x700 [ 867.740501] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 867.745559] alloc_pages_current+0xe7/0x1e0 [ 867.749907] kvm_mmu_create+0xd1/0x1c0 [ 867.753800] kvm_arch_vcpu_init+0x28b/0x8b0 [ 867.758138] ? alloc_pages_current+0xef/0x1e0 [ 867.762646] kvm_vcpu_init+0x26d/0x360 [ 867.766659] vmx_create_vcpu+0xf3/0x2900 [ 867.770744] ? __mutex_unlock_slowpath+0x75/0x780 [ 867.775604] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 867.780635] ? handle_rdmsr+0x6b0/0x6b0 [ 867.784636] kvm_vm_ioctl+0x49c/0x1430 [ 867.788542] ? __lock_acquire+0x5f7/0x4620 [ 867.792793] ? kvm_vcpu_release+0xa0/0xa0 [ 867.796957] ? trace_hardirqs_on+0x10/0x10 [ 867.801213] ? trace_hardirqs_on+0x10/0x10 [ 867.805464] ? save_trace+0x290/0x290 [ 867.809390] ? __might_fault+0x104/0x1b0 [ 867.813469] ? kvm_vcpu_release+0xa0/0xa0 [ 867.817635] do_vfs_ioctl+0x75a/0xfe0 [ 867.821449] ? selinux_file_mprotect+0x5c0/0x5c0 [ 867.826224] ? ioctl_preallocate+0x1a0/0x1a0 [ 867.830649] ? security_file_ioctl+0x76/0xb0 [ 867.835068] ? security_file_ioctl+0x83/0xb0 [ 867.839490] SyS_ioctl+0x7f/0xb0 [ 867.842866] ? do_vfs_ioctl+0xfe0/0xfe0 [ 867.847018] do_syscall_64+0x1d5/0x640 [ 867.850924] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 867.856123] RIP: 0033:0x45c889 [ 867.859319] RSP: 002b:00007fed3131bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 01:43:09 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000100000204000400050005000900000005000600000000000800030009000000"], 0x30}, 0x1, 0x6c}, 0x0) [ 867.867036] RAX: ffffffffffffffda RBX: 00007fed3131c6d4 RCX: 000000000045c889 [ 867.874313] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 867.881605] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 867.888894] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 867.896176] R13: 0000000000000390 R14: 00000000004c60a9 R15: 000000000076bf0c [ 867.955301] warn_alloc_show_mem: 1 callbacks suppressed [ 867.955304] Mem-Info: [ 867.963804] active_anon:797309 inactive_anon:7825 isolated_anon:0 [ 867.963804] active_file:14090 inactive_file:7734 isolated_file:0 [ 867.963804] unevictable:0 dirty:56 writeback:0 unstable:0 [ 867.963804] slab_reclaimable:54514 slab_unreclaimable:199580 [ 867.963804] mapped:62533 shmem:9696 pagetables:13069 bounce:0 [ 867.963804] free:430269 free_pcp:244 free_cma:0 [ 867.964120] XFS (loop2): Invalid superblock magic number [ 868.003075] Node 0 active_anon:1944212kB inactive_anon:16080kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216484kB dirty:0kB writeback:4kB shmem:16756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1153024kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 868.033759] Node 1 active_anon:1244860kB inactive_anon:15216kB active_file:56368kB inactive_file:30948kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:33680kB dirty:348kB writeback:0kB shmem:22028kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 868.063783] Node 0 DMA free:10324kB min:220kB low:272kB high:324kB active_anon:4164kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:124kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 868.091440] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 868.096487] Node 0 DMA32 free:19892kB min:36272kB low:45340kB high:54408kB active_anon:1940048kB inactive_anon:16080kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2621268kB mlocked:0kB kernel_stack:12096kB pagetables:30812kB bounce:0kB free_pcp:16kB local_pcp:4kB free_cma:0kB [ 868.139502] lowmem_reserve[]: 0 0 0 0 0 [ 868.143953] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 868.171287] lowmem_reserve[]: 0 0 0 0 0 [ 868.175311] Node 1 Normal free:1691704kB min:53612kB low:67012kB high:80412kB active_anon:1243892kB inactive_anon:15216kB active_file:56368kB inactive_file:30948kB unevictable:0kB writepending:348kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:9344kB pagetables:20956kB bounce:0kB free_pcp:880kB local_pcp:284kB free_cma:0kB [ 868.206799] lowmem_reserve[]: 0 0 0 0 0 [ 868.228541] Node 0 DMA: 1*4kB (M) 6*8kB (UM) 6*16kB (UM) 2*32kB (UM) 0*64kB 1*128kB (M) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (M) = 10324kB [ 868.242938] Node 0 DMA32: 377*4kB (UME) 128*8kB (UME) 25*16kB (UME) 484*32kB (UME) 3*64kB (UE) 10*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19892kB [ 868.260331] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB 01:43:09 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffffef, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x8900, &(0x7f0000000200)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x14, 0x0, 0x0, 0x0, 0x9}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe, 0x1, 'wireguard\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) 01:43:09 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x40}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:09 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="480000001400e702095f9f95274b0a000a840200400402000000000000006fab078a6a36d47a56aa68c6f8c36d96bd7c497626ff00034000d90000000000000000634310e68b0c89", 0x48}], 0x1}, 0x0) [ 868.271187] Node 1 Normal: 440*4kB (UME) 180*8kB (UME) 147*16kB (UME) 27*32kB (UME) 9*64kB (UME) 38*128kB (UME) 51*256kB (UM) 30*512kB (UM) 8*1024kB (UE) 3*2048kB (UME) 400*4096kB (M) = 1693008kB [ 868.290408] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 868.300764] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 868.309950] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 868.318807] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 01:43:09 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x40}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) [ 868.333774] 31526 total pagecache pages [ 868.340678] 0 pages in swap cache [ 868.351911] Swap cache stats: add 0, delete 0, find 0/0 [ 868.372142] Free swap = 0kB 01:43:09 executing program 0: syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x0, 0x2) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fanotify_init(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 01:43:09 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000380)=""/233, 0xffbe) [ 868.389128] Total swap = 0kB [ 868.396793] 1965979 pages RAM [ 868.403465] 0 pages HighMem/MovableOnly [ 868.414193] 339050 pages reserved [ 868.430773] 0 pages cma reserved 01:43:09 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mount(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x2000020, 0x0) 01:43:09 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x40}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:09 executing program 2: ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000240)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000100)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000280)}], 0x1, &(0x7f0000001280)}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="80f3c7a6ee479ec9ada9f3c2835171b76723e8b5dd355e16f32922c33b19a006c7dfcfe638e4f04cc9062fb0739e510a9c68aee156a6ab61fdf88e17309aa659ea90fae936a6704aa4698586b004a180f181c22ee24363bfdb7e690d36810a79f2243c0eb51fff11cde2e94ed1112b22861945e19cb9f21bdbbce1d71a3f23e193f55d9b05a2ad5eb7634a14788f1e2934242fb467a394c578e346ff88d5d07717a60acded5598a9c5be3a05460a324c586b72323fd6503e8b145900"/218], 0xda00) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) socket$kcm(0x2b, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x248800) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="0400ff004a210e0a548eff518d356e52f3a6ec50f6055e1bb898ae0e680a5688645096ad860a7964ff14ea6c2376f5e90191c6d89c7b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000002c0)=0x14) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pid(r4, &(0x7f0000000200), 0x12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 01:43:09 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x38, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x38}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:09 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/wireless\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x4800) 01:43:09 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 01:43:09 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x38, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x38}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:09 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents(r2, &(0x7f0000000880)=""/34, 0x22) 01:43:09 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/wireless\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x4800) 01:43:09 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x38, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x38}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:10 executing program 0: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) dup2(r2, r0) 01:43:10 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xaf930100, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000f6ff0000140012800a00010076786c616e0000000400028008000a00", @ANYRES32, @ANYBLOB="cfda22fae580aa8f6d84cfa01659eb4aea5916da8c9d05dd2967cef5716f0e28729b29aa4d452ec655b08328927288ee054a0526dfb5e8a8dd70320cfc608b9f140db0daf6d8bc9155381dbcf413e25b8a5d0fb3f90002e90651e6b938456f5f3bae8ee6b3fe2375e3890b5241d6cebbdfd64283ff1db50089d37800004e20964737d5ae2c9dd66501879e646100a589b200a758385dde9ab05fdb3679e718ce3ebdbf735d5cdd179aafe69dde374978db0c51d548ec9225cf07b28a2f0a"], 0x3c}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 01:43:10 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') preadv(r0, &(0x7f00000017c0), 0x30e, 0x0) 01:43:10 executing program 5: open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000100000204000400050005000900000005000600000000000800030009000000"], 0x30}, 0x1, 0x6c}, 0x0) 01:43:10 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xffffffff, 0x0) 01:43:10 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000001c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x11, 0xc, "b04a82706694a7d154c629f75b71a95a8f3b289271c607adb22d4d534f4cf29cff0359ad514d3aa20d7beebc689ab001521f48dc57122f1b38e9e8af694c0d43", "0be5a941c04045ff21d735bd90f8c3e2c4a016dd0fa49bebf7a08c305bee6fd6"}) 01:43:10 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) sendfile(r1, r0, 0x0, 0xddf5) 01:43:10 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) dup2(r1, r2) 01:43:10 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xffffffff, 0x0) 01:43:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000038, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xe) close(r1) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002600070517d31168de39c7b17c000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002000000"], 0x3}}, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) dup(r1) 01:43:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0xc4000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x5, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 01:43:10 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 01:43:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_setlink={0x24, 0x12, 0xa29, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4, 0xc}]}, 0x24}}, 0x0) [ 869.381426] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket pig=28499 comm=syz-executor.1 01:43:10 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xffffffff, 0x0) 01:43:10 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000380)='vfat\x00', &(0x7f00000003c0)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='usefree']) 01:43:10 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) sendfile(r1, r0, 0x0, 0xddf5) 01:43:10 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0) 01:43:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 01:43:10 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0) [ 869.626386] FAT-fs (loop3): bogus number of reserved sectors [ 869.637056] FAT-fs (loop3): Can't find a valid FAT filesystem [ 869.656995] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket pig=28530 comm=syz-executor.1 01:43:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000010000507000c00"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000e3ff22c0306554362dddcb892ef8051404bde5bf296e3d566a03d724f7eac1ef33adfdbe08b8c5236b93b9791fa6000000000000", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_INPUT(r4, 0x80045626, &(0x7f0000000240)) r5 = socket(0x10, 0x2, 0x8) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 01:43:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000038, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xe) close(r1) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002600070517d31168de39c7b17c000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002000000"], 0x3}}, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) dup(r1) 01:43:10 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0) 01:43:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000038, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xe) close(r1) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002600070517d31168de39c7b17c000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002000000"], 0x3}}, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) dup(r1) 01:43:10 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 01:43:10 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) sendfile(r1, r0, 0x0, 0xddf5) [ 869.775996] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 869.884777] batman_adv: batadv0: Adding interface: veth11 [ 869.891061] batman_adv: batadv0: The MTU of interface veth11 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. 01:43:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r0, &(0x7f0000000380)=""/234, 0xea) [ 869.936199] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket pig=28560 comm=syz-executor.1 [ 869.970379] batman_adv: batadv0: Not using interface veth11 (retrying later): interface not active 01:43:11 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x0, 0x0) 01:43:11 executing program 5: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000100)=@builtin='builtin_trusted\x00') [ 870.009391] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 01:43:11 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x0, 0x0) 01:43:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) 01:43:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r0, &(0x7f0000000380)=""/234, 0xea) 01:43:11 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x0, 0x0) 01:43:11 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x30e, 0x0) 01:43:11 executing program 0: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(r1) dup2(r4, r0) 01:43:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r0, &(0x7f0000000380)=""/234, 0xea) 01:43:11 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000000)=0x60, 0x2) timer_getoverrun(0x0) getpid() semctl$IPC_INFO(0x0, 0x4, 0x3, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) prctl$PR_SET_PDEATHSIG(0x1, 0x12000000017) creat(0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, &(0x7f0000000340)=0xc10, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 01:43:11 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x8001a0, 0x1c, 0x5ac484bb51fa106a, &(0x7f0000000380)="4d50b441e692763513ef874565580000ffff00000000122e25d30806", 0x0, 0x403, 0x0, 0x22d}, 0x28) 01:43:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000038, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xe) close(r1) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002600070517d31168de39c7b17c000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002000000"], 0x3}}, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) dup(r1) 01:43:11 executing program 0: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) dup2(r2, r0) 01:43:11 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') 01:43:11 executing program 0: 01:43:11 executing program 2: 01:43:11 executing program 0: 01:43:11 executing program 0: 01:43:11 executing program 1: 01:43:11 executing program 2: 01:43:11 executing program 4: 01:43:11 executing program 5: 01:43:11 executing program 0: 01:43:11 executing program 3: 01:43:11 executing program 1: 01:43:11 executing program 5: 01:43:11 executing program 0: 01:43:11 executing program 2: 01:43:11 executing program 4: 01:43:11 executing program 0: 01:43:11 executing program 4: 01:43:11 executing program 1: 01:43:11 executing program 2: 01:43:11 executing program 5: 01:43:11 executing program 3: 01:43:11 executing program 0: 01:43:11 executing program 4: 01:43:12 executing program 1: 01:43:12 executing program 5: 01:43:12 executing program 3: 01:43:12 executing program 2: 01:43:12 executing program 0: 01:43:12 executing program 4: 01:43:12 executing program 1: 01:43:12 executing program 5: 01:43:12 executing program 3: 01:43:12 executing program 0: 01:43:12 executing program 2: 01:43:12 executing program 4: 01:43:12 executing program 1: 01:43:12 executing program 3: 01:43:12 executing program 0: 01:43:12 executing program 5: 01:43:12 executing program 2: 01:43:12 executing program 0: 01:43:12 executing program 4: 01:43:12 executing program 5: 01:43:12 executing program 1: 01:43:12 executing program 3: 01:43:12 executing program 2: 01:43:12 executing program 5: 01:43:12 executing program 4: 01:43:12 executing program 1: 01:43:12 executing program 0: 01:43:12 executing program 5: 01:43:12 executing program 3: 01:43:12 executing program 2: 01:43:12 executing program 0: 01:43:12 executing program 4: 01:43:12 executing program 1: 01:43:12 executing program 3: 01:43:12 executing program 2: 01:43:12 executing program 0: 01:43:12 executing program 5: 01:43:12 executing program 4: 01:43:12 executing program 1: 01:43:12 executing program 3: 01:43:12 executing program 2: 01:43:12 executing program 0: 01:43:12 executing program 4: 01:43:12 executing program 5: 01:43:12 executing program 0: 01:43:12 executing program 4: 01:43:12 executing program 1: 01:43:12 executing program 3: 01:43:12 executing program 2: 01:43:12 executing program 5: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r1) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r5 = getpid() r6 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$unix(r2, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {r5, r7, r4}}}], 0x20}, 0x0) 01:43:12 executing program 0: 01:43:12 executing program 1: 01:43:12 executing program 3: 01:43:12 executing program 4: 01:43:12 executing program 0: 01:43:12 executing program 2: 01:43:12 executing program 5: 01:43:12 executing program 1: 01:43:12 executing program 3: 01:43:12 executing program 0: 01:43:12 executing program 4: 01:43:12 executing program 1: 01:43:12 executing program 2: 01:43:12 executing program 0: 01:43:12 executing program 3: 01:43:12 executing program 4: 01:43:12 executing program 5: 01:43:12 executing program 1: 01:43:12 executing program 2: 01:43:12 executing program 0: 01:43:12 executing program 3: 01:43:12 executing program 5: 01:43:12 executing program 1: 01:43:12 executing program 4: 01:43:12 executing program 0: 01:43:12 executing program 5: 01:43:13 executing program 2: 01:43:13 executing program 3: 01:43:13 executing program 5: 01:43:13 executing program 3: 01:43:13 executing program 2: 01:43:13 executing program 1: 01:43:13 executing program 4: 01:43:13 executing program 0: 01:43:13 executing program 1: 01:43:13 executing program 3: 01:43:13 executing program 0: 01:43:13 executing program 4: 01:43:13 executing program 5: 01:43:13 executing program 2: 01:43:13 executing program 0: 01:43:13 executing program 1: 01:43:13 executing program 3: 01:43:13 executing program 4: 01:43:13 executing program 2: 01:43:13 executing program 5: 01:43:13 executing program 0: 01:43:13 executing program 1: 01:43:13 executing program 4: 01:43:13 executing program 3: 01:43:13 executing program 5: 01:43:13 executing program 2: 01:43:13 executing program 5: 01:43:13 executing program 2: 01:43:13 executing program 3: 01:43:13 executing program 0: 01:43:13 executing program 1: 01:43:13 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000080)="080db5055e0bcfe847a071") recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 01:43:13 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="ab553f", 0x3) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="080db5055e0bcfe847a071") r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r2, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 01:43:13 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000080)="080db5055e0bcfe847a071") r3 = accept$alg(r0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000003580)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 01:43:13 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x38, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x38}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:13 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:13 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:13 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:13 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:13 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r4 = dup(0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:13 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000340)=0x80, 0x4) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r5 = dup(0xffffffffffffffff) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b54f00f9900695500ab7b8247a06a8372beeaa9164db61595289002246269f6fcd5b1439a0a3a59af3dcd019275e9337c8b971a2b3604a9b27005b77a9df81aa0a16dbb021abec5059df12419d447b1d1ceb561e1b2c01b3c702b"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x2}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000380)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:13 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r4 = dup(0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3800000012003dc1000000000000000128001a0000000000000000000000000000000001e000000200000000020000000000000000000000cded8640ac3695625863bd642a2d6473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6cad08b5500ab7b8247a06a8372beeaa9164db6159528900224000000000025e18f473a9f377b73159d422b1f0cd027d1a9d55d4cfe8ac8b821d89f5273538b49317c6428d1f7914e8d48e85c733e5272ec4942"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:13 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = dup(r0) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc128adf5fa54000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000010000cdac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b75bdb428d08b5500ab7b8247a06a8372beeaa9164db615000000"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket(0x10, 0x3, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:13 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = dup(r0) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb39808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:13 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:13 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:13 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:14 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:14 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:14 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:14 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:14 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r4 = dup(0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:14 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:14 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r4 = dup(0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3800000012003dc1000000000000000128001a0000000000000000000000000000000001e000000200000000020000000000000000000000cded8640ac3695625863bd642a2d6473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6cad08b5500ab7b8247a06a8372beeaa9164db6159528900224000000000025e18f473a9f377b73159d422b1f0cd027d1a9d55d4cfe8ac8b821d89f5273538b49317c6428d1f7914e8d48e85c733e5272ec4942"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:14 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000340)=0x80, 0x4) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r5 = dup(0xffffffffffffffff) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b54f00f9900695500ab7b8247a06a8372beeaa9164db61595289002246269f6fcd5b1439a0a3a59af3dcd019275e9337c8b971a2b3604a9b27005b77a9df81aa0a16dbb021abec5059df12419d447b1d1ceb561e1b2c01b3c702b"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x2}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000380)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:14 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = dup(r0) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc128adf5fa54000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000010000cdac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b75bdb428d08b5500ab7b8247a06a8372beeaa9164db615000000"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket(0x10, 0x3, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:14 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = dup(r0) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb39808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:14 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:14 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:14 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:15 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:15 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:15 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:15 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:15 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r4 = dup(0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000040)) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x57) ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:16 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r4 = dup(0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3800000012003dc1000000000000000128001a0000000000000000000000000000000001e000000200000000020000000000000000000000cded8640ac3695625863bd642a2d6473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6cad08b5500ab7b8247a06a8372beeaa9164db6159528900224000000000025e18f473a9f377b73159d422b1f0cd027d1a9d55d4cfe8ac8b821d89f5273538b49317c6428d1f7914e8d48e85c733e5272ec4942"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:16 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:16 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000340)=0x80, 0x4) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r5 = dup(0xffffffffffffffff) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b54f00f9900695500ab7b8247a06a8372beeaa9164db61595289002246269f6fcd5b1439a0a3a59af3dcd019275e9337c8b971a2b3604a9b27005b77a9df81aa0a16dbb021abec5059df12419d447b1d1ceb561e1b2c01b3c702b"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x2}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000380)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:16 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = dup(r0) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc128adf5fa54000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000010000cdac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b75bdb428d08b5500ab7b8247a06a8372beeaa9164db615000000"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket(0x10, 0x3, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:16 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = dup(r0) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb39808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:16 executing program 4: vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0) 01:43:16 executing program 4: vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0) 01:43:16 executing program 4: vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0) 01:43:16 executing program 4: pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0) 01:43:16 executing program 4: pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0) 01:43:16 executing program 4: pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0) 01:43:16 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r4 = dup(0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000040)) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x57) ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:16 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r4 = dup(0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:17 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={0x0, 0x2}) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000200)={0x79}) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x81, r4}) syz_open_procfs(r3, &(0x7f0000000040)='net/protocols\x00') r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_XSAVE(r5, 0x5000aea5, &(0x7f0000000240)={[0x5, 0x1144000, 0x49f, 0x6b, 0x5, 0x43d00000, 0xff, 0x270, 0x3, 0x787, 0x58, 0x2, 0x100, 0x3, 0x6, 0x3, 0x4, 0x23, 0x7, 0xfffff8c9, 0x3ff, 0x6, 0x0, 0x203f92ea, 0x6, 0x3, 0x0, 0x8, 0x400, 0x2, 0x401, 0x1f97, 0xad, 0xffffffa2, 0x3, 0x1000, 0x2000, 0x7, 0x7, 0x3, 0xa0b, 0x4, 0x6, 0x7fffffff, 0x5, 0x1ff, 0x80000000, 0x6, 0x3, 0x7, 0x3, 0x3ff, 0x715885aa, 0x7, 0xcce, 0x7, 0xfff, 0x8000000, 0x8, 0x0, 0x1f, 0x2, 0x1, 0x1fc5, 0x0, 0xa8ab, 0xfffffff7, 0x401, 0x9, 0x20, 0x23, 0x0, 0x2, 0x1, 0x2, 0x5, 0xff, 0x80000001, 0x1ff, 0xd53, 0x1f, 0x0, 0x1ff, 0x6, 0x4, 0x8000, 0x2, 0x4, 0xfffffffe, 0x1b90703c, 0x2, 0x1ff, 0x4fbd, 0x230, 0x4, 0x7fe00, 0x8, 0x756f, 0x3, 0x7ff, 0x28000000, 0x5, 0x7, 0x9, 0x101, 0x9, 0x6, 0x6, 0x1, 0x13, 0x8, 0xffff, 0x0, 0x8, 0x0, 0x6, 0x1ff, 0x3, 0x6, 0x0, 0x8001, 0x3f, 0x10001, 0x42, 0xfff, 0x20, 0xffff, 0x3, 0x3, 0x9, 0x3, 0x6, 0x7, 0x3ff, 0xffffffff, 0x1, 0x1f, 0x3, 0xffffffc1, 0x1, 0x1, 0xffff, 0x4, 0x4, 0x800, 0x4a, 0x9, 0x7, 0x0, 0x1, 0x9, 0x10000, 0xfffffffd, 0x4, 0x9, 0x40, 0x5, 0x7, 0x8, 0x400, 0x1000, 0x20, 0x5, 0x4, 0x7fffffff, 0x7fffffff, 0x3, 0x6, 0x9, 0xfffffffb, 0x9, 0x1f, 0x20, 0xef9c, 0x4, 0x10001, 0xffff7fff, 0x1, 0x6, 0x7, 0x6, 0x1200, 0xffffffff, 0xffffffff, 0x6, 0x40, 0xffff, 0x4, 0x80000001, 0x8, 0x10000, 0x6, 0x8, 0x2, 0x1, 0x8000, 0x3, 0x5, 0x10001, 0x3ff, 0x8, 0x7, 0x7, 0x0, 0x3, 0x80000000, 0xfd, 0x8, 0x8, 0xffffffff, 0xeba4, 0x200, 0x9, 0x7fffffff, 0x101, 0x2, 0x7, 0x1, 0x9, 0x800, 0x3f, 0x2, 0x2, 0xdf, 0x0, 0xe0, 0x2, 0x81, 0x8, 0x7, 0x8000, 0x74000000, 0x0, 0x2e069b97, 0x6, 0x0, 0x80000000, 0x247, 0x9, 0x800, 0x2, 0x100, 0x6b, 0x7, 0x80000001, 0x38000000, 0x3, 0x80000001, 0x7, 0x1, 0x9, 0xa06d, 0x3, 0x2, 0x101, 0x8a3, 0x298, 0xffff, 0x7287, 0x4, 0x2, 0xffffffff, 0x1, 0x1, 0x5, 0x8000, 0x817, 0x0, 0x7fffffff, 0x6, 0x7, 0x436, 0x2, 0x4, 0x1f, 0x6, 0x5, 0x10001, 0x101, 0x47, 0x9, 0x3, 0x1000, 0x0, 0x1, 0xfffffff8, 0x7, 0x8, 0x6e82, 0x59a, 0x1, 0x8000, 0x9b4, 0x5, 0x3, 0x3, 0x7, 0x5, 0x3, 0x1, 0x3, 0x101, 0x80000001, 0x10000, 0x0, 0xfffffff7, 0x7, 0x3, 0x7, 0x7, 0x4, 0x2, 0x8, 0x8, 0x6, 0x0, 0x6, 0x1ff, 0x0, 0x66, 0x0, 0x4, 0x0, 0x7ff, 0x3, 0x9, 0x40, 0x7, 0xfffffe00, 0x3, 0x5, 0x20, 0x7, 0x0, 0x0, 0x800, 0x3, 0x4, 0x8000, 0x8, 0x9, 0xd1d, 0xffffff6c, 0x4, 0x0, 0x8, 0x2d, 0x5f6, 0x4, 0x5, 0xd510, 0x4, 0x80000001, 0x401, 0x1000, 0x7, 0x7fffffff, 0x1, 0xffffff81, 0x8, 0x3ff, 0x80000000, 0x6, 0x400, 0x40000000, 0x0, 0x9, 0x67d56b3, 0x9, 0x80, 0xb96, 0x10000, 0xff, 0x7fffffff, 0x7, 0x8001, 0x8, 0x3fc0000, 0x2, 0x3, 0xf0b, 0x4, 0x6, 0x5, 0xb5c, 0xffffffe1, 0x9, 0x20, 0x9, 0x4ad, 0x2, 0x1, 0xffff, 0x5, 0x9, 0xfffffff8, 0x4, 0x2f, 0x200, 0x8, 0xce7, 0x0, 0x7fffffff, 0x81, 0x1ff, 0x1, 0x2, 0x81, 0x5, 0xfff, 0x9, 0x3, 0x0, 0x6, 0x8000, 0x94, 0x7, 0x1, 0x2, 0x1, 0x1a, 0x4e7, 0xfffffffa, 0x0, 0x20, 0x2e, 0x8646, 0x7fffffff, 0x1, 0x3ff, 0x2, 0x8, 0xb470, 0x99, 0x5, 0xfffffff7, 0x1, 0x19, 0x46, 0x62, 0x9c59, 0x1e, 0x1, 0x2, 0x25, 0x0, 0x81, 0x44, 0x5, 0x8, 0x101, 0x8, 0x10001, 0x2, 0x2, 0x80, 0x6, 0x3e5, 0x3, 0x0, 0x0, 0xca, 0x9, 0x101, 0x8, 0x4, 0x198, 0x81, 0xfff, 0x51, 0x7, 0x9, 0x20, 0x1f, 0x2, 0x401, 0x3ff, 0x3, 0x9, 0xff, 0x1, 0x0, 0x8001, 0x80000000, 0xff, 0x0, 0x1, 0x9, 0x0, 0x5, 0x7, 0x2, 0x2, 0x3, 0x3, 0x93, 0x7, 0x3ff, 0x3, 0x8, 0x3ff, 0x2a8f4daa, 0x7f, 0x5, 0x0, 0x3ff, 0x1, 0x3bbc, 0x3, 0x7, 0x7, 0x1, 0x80, 0x100, 0xffffff99, 0x2f, 0x9, 0x5, 0x1, 0x1, 0xa84f847, 0x20, 0x3, 0x1ff, 0x8000, 0x80000001, 0x80000001, 0xffff, 0x1, 0x6, 0x7, 0x5, 0x5, 0x9, 0x8, 0x7, 0x0, 0x92f, 0x147d, 0xffffffff, 0x0, 0xfffffffb, 0x401, 0x356, 0x10001, 0x6, 0x9, 0x20, 0x3, 0x8, 0x1, 0x7, 0x7ff, 0x3, 0xfffffb58, 0x400, 0x7, 0x8, 0x3, 0x401, 0x0, 0x1, 0x200, 0x7, 0xfff, 0x9, 0x9, 0x10000, 0x22b, 0x10001, 0x9, 0x3, 0x6, 0x1000, 0x1, 0x2, 0xa70, 0x1000, 0xd3, 0x8, 0x5, 0x8, 0x0, 0xffffffc0, 0x370, 0xfffffff8, 0xbe, 0x80, 0x2, 0x5, 0x2, 0x100, 0x6, 0x5, 0x3, 0xff, 0x0, 0x5, 0x2, 0x7f, 0x7, 0x5, 0x3b, 0x4, 0x9, 0xfffffffc, 0x400, 0x6, 0x9, 0x0, 0x2, 0x7fffffff, 0x4, 0xffffffff, 0x100, 0x557749e0, 0x1, 0x3, 0x55, 0x2000000, 0x4, 0x0, 0x6364, 0x8, 0x1, 0x8, 0xfffffff9, 0x0, 0x7784, 0x7, 0x7, 0x0, 0x0, 0x6, 0xfffffffb, 0x9, 0x72c, 0x1ff, 0x8, 0x7c94, 0x3, 0xfffffff7, 0x0, 0x4, 0x5, 0x5, 0x0, 0x8, 0x11f, 0x7, 0x2, 0x3, 0x401, 0x0, 0x4, 0xfffffff9, 0x4, 0x8, 0x212e, 0x5, 0xe7f, 0xfffffffd, 0x6, 0x0, 0x451, 0x10000, 0x2, 0x4c, 0x3, 0x8, 0x8, 0x9, 0x1, 0x4, 0x2, 0x200, 0x4, 0x20, 0x400, 0x3182775e, 0x80000000, 0x9, 0x7cc8, 0x0, 0xfffffffa, 0x7fff, 0x2, 0x48d, 0xd5, 0x8, 0x4, 0x6, 0x7, 0xffffffff, 0x16, 0x60000, 0x3, 0xe0000000, 0x7, 0x800, 0xfff, 0x7ff, 0x5, 0x200, 0x8, 0x1, 0x2, 0x684, 0x6, 0x8, 0x0, 0x4, 0x7, 0x2, 0x9, 0xacad, 0x6, 0xdc, 0x44c4, 0x480000, 0x68c00000, 0x850, 0x5, 0x5e2, 0x9, 0x8f90, 0xffff, 0x8000, 0x8, 0x0, 0x8, 0xfffffff9, 0xffff, 0x0, 0xdc7f, 0x20, 0x2, 0x100, 0x7fff, 0x1000, 0x9, 0x2, 0xaa, 0x5, 0xfffffffb, 0x5, 0x6, 0xd5a, 0x1, 0x0, 0x0, 0x80, 0x0, 0x0, 0x4, 0x7fff, 0x23, 0x8, 0x1, 0x1, 0x5, 0x7, 0x9, 0xa27, 0x401, 0x1, 0x200, 0x1000, 0x31c, 0x2, 0x5, 0x9, 0x7, 0x2, 0x5, 0x82, 0x1, 0x2, 0xffffff80, 0xa090, 0x7, 0xfffffffb, 0x28e, 0x9, 0xe3, 0x1, 0xfffffff9, 0xae0, 0x1, 0x1000, 0x7, 0x9, 0x76, 0x3, 0x8, 0x3, 0x1ff, 0x4765, 0x10001, 0x2, 0x200, 0x0, 0x7, 0x3d, 0x8, 0x400, 0x3, 0x1000, 0x7, 0x9, 0x81, 0x40, 0x1ff, 0x2, 0x1000, 0x0, 0xfffffc01, 0x8, 0xffff, 0x7, 0x6, 0x4, 0x6, 0x46, 0x909, 0xc78, 0x200, 0x4, 0x4, 0x3, 0x0, 0x4, 0x6, 0x1f, 0x7fff, 0x7, 0x3, 0x7, 0x6d72700e, 0x8, 0x8, 0x8, 0x7, 0x401, 0xffffff01, 0x3b16, 0xef, 0x9, 0x1000, 0x0, 0x1, 0x7, 0x6, 0x1, 0x80000001, 0x3, 0x1, 0x7, 0x2, 0x5, 0x7, 0x9, 0x7, 0x80, 0xffff, 0x6, 0x3ff, 0xd3, 0xdbe2, 0x61, 0x1, 0x1, 0x5, 0x6, 0xa2, 0x9, 0x6, 0x1, 0x200, 0x400, 0x8000, 0x1ff, 0x7, 0x8000, 0x3, 0x3, 0x570f, 0x824, 0x0, 0x2cd1, 0x3, 0xa8, 0x6, 0xffffffc0, 0x1, 0x1, 0x10, 0x80000000, 0xff, 0x6, 0x1, 0xe1ec, 0xe106, 0x1, 0xf, 0x79e44131, 0x1, 0xf0b5, 0x2, 0x2, 0x7, 0x1, 0x9, 0x3, 0x80, 0x1e06, 0x732a, 0x9, 0x10000, 0x2, 0x2b, 0x0, 0x8900, 0xbb, 0x6675, 0x7fffffff, 0x0, 0x8, 0x1, 0xfffe0000, 0x9, 0xb45, 0x6, 0x4, 0x7, 0x8001, 0x8, 0x0, 0x6, 0xa23, 0x80000001, 0x4, 0x6, 0x5, 0x3, 0x8000, 0x1ff, 0xffff, 0x6, 0x4, 0x4, 0x200, 0x1, 0x6, 0x1, 0x80000001, 0x6, 0xffffff01, 0x3, 0x4, 0xfffffff8, 0x1, 0x9, 0x5, 0x81, 0x10001, 0x3ff, 0x39d, 0x8, 0x6, 0xffffff62, 0x95c8f52, 0x7fff, 0x2, 0x2, 0x0, 0xfff, 0x8000, 0xff, 0x47, 0xff, 0x7fff, 0x0, 0xbff, 0x101, 0x1f, 0x4, 0x9, 0x83e, 0x79, 0x80000001, 0x20, 0x6, 0x1, 0x8, 0x80000001, 0x7, 0x2, 0x0, 0x7f, 0xfffffffe, 0x4, 0xfffff800, 0x5, 0x3, 0x470a3252, 0x1000, 0x1, 0x218, 0x3ff, 0x4, 0x10000, 0x5, 0x3, 0x401, 0x467, 0x8, 0x44, 0x1f, 0x1f, 0x3, 0x0, 0x1000, 0x7]}) 01:43:17 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:17 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x29, 0x5, 0x0) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={0x0, 0x2}) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 01:43:17 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r4 = dup(0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000380)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x57) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r5, 0x4112, 0x0) 01:43:17 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:17 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:17 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) [ 876.263826] syz-executor.5: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 876.295003] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 876.332010] CPU: 1 PID: 29116 Comm: syz-executor.5 Not tainted 4.14.176-syzkaller #0 [ 876.340144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 876.349534] Call Trace: [ 876.352138] dump_stack+0x13e/0x194 [ 876.355773] warn_alloc.cold+0x96/0x1af [ 876.359748] ? zone_watermark_ok_safe+0x280/0x280 [ 876.364602] ? wait_for_completion+0x390/0x390 [ 876.369188] __alloc_pages_slowpath+0x2114/0x26c0 [ 876.374045] ? warn_alloc+0xf0/0xf0 [ 876.377678] ? find_held_lock+0x2d/0x110 [ 876.381771] ? fs_reclaim_acquire+0x10/0x10 [ 876.386102] __alloc_pages_nodemask+0x5d3/0x700 [ 876.390772] ? rcu_read_lock_sched_held+0x10a/0x130 [ 876.395788] ? __alloc_pages_nodemask+0x5e0/0x700 [ 876.400641] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 876.405707] alloc_pages_current+0xe7/0x1e0 [ 876.410039] kvm_mmu_create+0xd1/0x1c0 [ 876.413930] kvm_arch_vcpu_init+0x28b/0x8b0 [ 876.418266] ? alloc_pages_current+0xef/0x1e0 [ 876.422766] kvm_vcpu_init+0x26d/0x360 [ 876.426674] vmx_create_vcpu+0xf3/0x2900 [ 876.430746] ? __mutex_unlock_slowpath+0x75/0x780 [ 876.435624] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 876.440656] ? handle_rdmsr+0x6b0/0x6b0 [ 876.444651] kvm_vm_ioctl+0x49c/0x1430 [ 876.448550] ? __lock_acquire+0x5f7/0x4620 [ 876.452934] ? kvm_vcpu_release+0xa0/0xa0 [ 876.457097] ? trace_hardirqs_on+0x10/0x10 [ 876.461345] ? trace_hardirqs_on+0x10/0x10 [ 876.465597] ? save_trace+0x290/0x290 [ 876.469405] ? __might_fault+0x104/0x1b0 [ 876.473517] ? kvm_vcpu_release+0xa0/0xa0 [ 876.477677] do_vfs_ioctl+0x75a/0xfe0 [ 876.481486] ? selinux_file_mprotect+0x5c0/0x5c0 [ 876.486252] ? ioctl_preallocate+0x1a0/0x1a0 [ 876.490675] ? security_file_ioctl+0x76/0xb0 [ 876.495084] ? security_file_ioctl+0x83/0xb0 [ 876.499590] SyS_ioctl+0x7f/0xb0 [ 876.502960] ? do_vfs_ioctl+0xfe0/0xfe0 [ 876.506939] do_syscall_64+0x1d5/0x640 [ 876.511795] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 876.516986] RIP: 0033:0x45c889 [ 876.520172] RSP: 002b:00007f73f5235c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 876.527966] RAX: ffffffffffffffda RBX: 00007f73f52366d4 RCX: 000000000045c889 [ 876.535244] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006 [ 876.542522] RBP: 000000000076bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 876.549802] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 876.557188] R13: 0000000000000390 R14: 00000000004c60a9 R15: 000000000076bfac 01:43:17 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:17 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) [ 876.684314] Mem-Info: [ 876.686946] active_anon:797186 inactive_anon:7840 isolated_anon:0 [ 876.686946] active_file:14240 inactive_file:7605 isolated_file:0 [ 876.686946] unevictable:0 dirty:201 writeback:0 unstable:0 [ 876.686946] slab_reclaimable:54951 slab_unreclaimable:198542 [ 876.686946] mapped:62532 shmem:9727 pagetables:12995 bounce:0 [ 876.686946] free:430154 free_pcp:304 free_cma:0 01:43:17 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0), 0x0, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:17 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r4 = dup(0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000040)) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') preadv(r6, &(0x7f00000017c0), 0x3da, 0x57) ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) [ 876.755988] Node 0 active_anon:1944192kB inactive_anon:16080kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216484kB dirty:4kB writeback:0kB shmem:16756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1153024kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 876.878401] Node 1 active_anon:1244452kB inactive_anon:15280kB active_file:56952kB inactive_file:30420kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:33744kB dirty:800kB writeback:0kB shmem:22152kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 876.906868] Node 0 DMA free:10324kB min:220kB low:272kB high:324kB active_anon:4164kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:124kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 876.961854] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 876.967087] Node 0 DMA32 free:21608kB min:36272kB low:45340kB high:54408kB active_anon:1940028kB inactive_anon:16080kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2621268kB mlocked:0kB kernel_stack:12096kB pagetables:30812kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB 01:43:18 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x0, &(0x7f0000000400)}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$vhci(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="e2"], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x40000000004ffdf, 0x0) [ 877.009013] lowmem_reserve[]: 0 0 0 0 0 [ 877.019334] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 877.054719] lowmem_reserve[]: 0 0 0 0 0 [ 877.059426] Node 1 Normal free:1689896kB min:53612kB low:67012kB high:80412kB active_anon:1244364kB inactive_anon:15288kB active_file:56948kB inactive_file:30436kB unevictable:0kB writepending:872kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:8992kB pagetables:20976kB bounce:0kB free_pcp:1120kB local_pcp:496kB free_cma:0kB [ 877.097311] lowmem_reserve[]: 0 0 0 0 0 [ 877.102663] Node 0 DMA: 1*4kB (M) 6*8kB (UM) 6*16kB (UM) 2*32kB (UM) 0*64kB 1*128kB (M) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (M) = 10324kB [ 877.127760] Node 0 DMA32: 404*4kB (UME) 188*8kB (UME) 39*16kB (UME) 512*32kB (UME) 3*64kB (UE) 10*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 21600kB [ 877.147441] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 877.162229] Node 1 Normal: 133*4kB (UME) 181*8kB (UM) 116*16kB (UME) 71*32kB (UME) 25*64kB (UME) 27*128kB (UME) 50*256kB (U) 30*512kB (UM) 9*1024kB (UME) 2*2048kB (UE) 400*4096kB (M) = 1691036kB [ 877.181056] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 877.205504] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 877.225166] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 877.246123] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 877.266569] 31577 total pagecache pages [ 877.277649] 0 pages in swap cache [ 877.286086] Swap cache stats: add 0, delete 0, find 0/0 [ 877.296244] Free swap = 0kB [ 877.299609] Total swap = 0kB [ 877.302691] 1965979 pages RAM [ 877.305850] 0 pages HighMem/MovableOnly 01:43:18 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000340)=0x2) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket(0x10, 0x3, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:18 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0), 0x0, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:18 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x29, 0x5, 0x0) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={0x0, 0x2}) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) [ 877.315428] 339050 pages reserved [ 877.319833] 0 pages cma reserved 01:43:18 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r4 = dup(0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000380)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x57) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r5, 0x4112, 0x0) 01:43:18 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0), 0x0, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:18 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:18 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:18 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:18 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:18 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:18 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) getsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = dup(r0) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843c4afed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224c091bb8c23b5a922fc0db13af026b684ef89b4d2d734a95acb7a773143279857158061826420a3795fcdd5815cb42d766f2103e9d83727c03c4093cd90060e9d22325fc9291b5db5c64b17d348786ebc09"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:19 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:19 executing program 5: perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r4 = dup(0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r7, 0x4068aea3, &(0x7f0000000200)={0x79}) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000340)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:19 executing program 3: perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x9, 0x0, 0x3, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r4 = dup(0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) r5 = dup(r1) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x57) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000340)={0x20, 0xfffffffffffffffe, 0x5, {0x3, 0x0, 0x400, 0x9}}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRESDEC], 0x1}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) listen(r5, 0x6) 01:43:19 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcf", 0x5}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:19 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r4 = dup(0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000380)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x57) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r5, 0x4112, 0x0) 01:43:19 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = dup(r0) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000da5d9cf40000000001e00000020000000000000000000000000000cded8640ac36544e5863bd3baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db61595289002240000"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket(0x10, 0x3, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:19 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcf", 0x5}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:19 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcf", 0x5}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:19 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb", 0x8}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:19 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb", 0x8}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:19 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb", 0x8}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:19 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) getsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = dup(r0) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843c4afed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224c091bb8c23b5a922fc0db13af026b684ef89b4d2d734a95acb7a773143279857158061826420a3795fcdd5815cb42d766f2103e9d83727c03c4093cd90060e9d22325fc9291b5db5c64b17d348786ebc09"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:19 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66", 0x9}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:20 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f00000005c0)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r4 = dup(r0) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00168f1bfb055c95b438a3ab63", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fd5bdf250400000108007682", @ANYRES32, @ANYBLOB="0d4022000000008ce73aa40ce9ee74000800fe4a67afa460ed358d570a74629f1800ffffffff05001300020000000200"], 0x4c}, 0x1, 0x0, 0x0, 0x400c0}, 0x8000) r5 = dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer2\x00', 0x101000, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000080)) setsockopt$inet_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f0000000340)={0x4}, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:20 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66", 0x9}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:20 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key(0x0, &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000000c0)="fb", 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r0) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000240)="1ddf5d0a75e1c45d1679dca1fdd5e5ff47d5cf59e486a170cf36ee8439e2ca04ac38f74453f00a6b55cfecab7812334888dff4b28d76622e733d38689ef7b49f2759b9e71411ca01a4a41b22b42c626a549a3bffd4c3ac162041939765dd8124b3cd797857f97f47bfbc37797f", 0x6d, r0) r2 = add_key(0x0, &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000000c0)="fb", 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r2) r3 = add_key(0x0, &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000000c0)="fb", 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r3) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r1, r2, r3}, &(0x7f00000002c0)=""/137, 0x89, &(0x7f0000000480)={&(0x7f0000000380)={'poly1305-generic\x00'}, &(0x7f00000003c0)="83b0deab5ac95dac057211bf10521b9000e0a3d6cbdbaf0213354e5eaf47c16593ec3955010f379633a690106a771041b51ec5c063604a2209c0f78e1fd2491b2ca91943daac64727794cf9ecedd0bc28333edae2b5962ba6b75ca927505a4905d75e608bd086dedcd1b0cbbd515ebfb7a711f0db77e326e0271ca2e4c60e7f504143395ccad96ed73445a3f640baa11ac6556725aabb5ffb32d71c1bc38238e9164bb", 0xa3}) r4 = socket$kcm(0x10, 0x2, 0x10) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={0x0, 0x2}) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 01:43:20 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r4 = dup(0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473ef5316bd487929d9760a736dbc31d4aba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:20 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66", 0x9}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:20 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = dup(r0) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000da5d9cf40000000001e00000020000000000000000000000000000cded8640ac36544e5863bd3baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db61595289002240000"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket(0x10, 0x3, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:20 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xa}], 0x1, 0x0) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:20 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xa}], 0x1, 0x0) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:20 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xa}], 0x1, 0x0) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:20 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:21 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) getsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = dup(r0) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843c4afed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224c091bb8c23b5a922fc0db13af026b684ef89b4d2d734a95acb7a773143279857158061826420a3795fcdd5815cb42d766f2103e9d83727c03c4093cd90060e9d22325fc9291b5db5c64b17d348786ebc09"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:21 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:21 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000003c0)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = dup(r0) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) r6 = dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efab3b30951c8602aeafa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db615aa28900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x200401, 0x10) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000440)={0x10000, &(0x7f0000000240), 0x2, r7, 0xc}) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:21 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:21 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}}, 0xfffffdef) ftruncate(r0, 0x2500) 01:43:21 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:21 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:21 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = dup(r0) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000da5d9cf40000000001e00000020000000000000000000000000000cded8640ac36544e5863bd3baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db61595289002240000"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket(0x10, 0x3, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:22 executing program 3: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = dup(r0) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f00000007c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x374, 0x12, 0x4, 0x70bd29, 0x25dfdbfc, {0x3, 0x4, 0x3f, 0x0, {0x4e24, 0x4e22, [0x3, 0x1, 0x2], [0x2, 0x1, 0x200], 0x0, [0x8, 0x2]}, 0x6, 0x20}, [@INET_DIAG_REQ_BYTECODE={0x6f, 0x1, "4e0683e901be2c913615572c2d65b312d01178e36201631db24d4adecb8886640df1065b808c876280554b12d080e6753e9c977a43993e3538af96fe0216c3d8e71da46c73f5d96ad8b93bfd77d45a92ea5a863c100c89e47e71407bb297508240537195d0c72544b90766"}, @INET_DIAG_REQ_BYTECODE={0xd3, 0x1, "1d1b07d8344c53b5e26547043e945645b2b57bfb1a5209daf4e73254e554e66bb496470d2ff0ac95e634631bbd10779c92f7a34832a1ae57c6f0c232544ddc78aca5043bbfb99dd3852555603526a17103c04218cf93e5d4984a1ebabc1e4d82bd0625e6562f2025d1fecc1c20c9f513dce91232fe785bb7124ae9dd38f8cf11fd676d6a0af3ce29b78cc3d4275b694dd26566ee37f6772f8f57eaa0adb6c581bb00cfa7314026960eed65b8bffbf3a99d9b07494f380bd50a04e6db2a0637740604727ba671fe907aea38b0855177"}, @INET_DIAG_REQ_BYTECODE={0x4b, 0x1, "686d304374aa7c6b0818d97c79796b008bd7b76285d21cb289ad3115aeb2e241dc8ffd24ad9633342d2cc8b57e0f42cc3ea98590dadbc044afcd90c8aff3f9d9ff440f34509abd"}, @INET_DIAG_REQ_BYTECODE={0x8b, 0x1, "51a2696b4bd1e7cddd442368acb906e70289ccca95a7f3806a1ca0fbf02cb817ed9acd91a84a8e2ad8bc00ba10a932e4a089b31c4afa72de908ed16d18cedb20993605b3e78127e27a6c7834890b3fa4cc27a0f97a74cf728a542f7ec9769d5576500d7e38335de3785628dfd052b3c7c002f5e0484969242d66a5610792a7284fd0c8793e1236"}, @INET_DIAG_REQ_BYTECODE={0x9c, 0x1, "662ace9173b21175a733d52f1a4df4be6fab85ed4315c69e05bdb83dee3a5dcd96146e2e962e98ec0abfae81a92ebb053b66d551a1d8e6ce22b79a4b32d7d6571f5c657b379891c1ed0e8fb338cfc559bfa9f910b4455e8fdc4802791fb9993a1ece11ff9cca2ebffed0a2ab5ba6b9ee692842f28c380f37f4a53252b1817b2dfe7123fa477bd444040ce544b19fb653073f42f80e12b148"}, @INET_DIAG_REQ_BYTECODE={0x70, 0x1, "233b449e4de7b5bf124aafb147017408d7892dc43abcd4d607d22c5fb9e3ce2228b3cb83571cb3880e8ddb685a3660c05ea03da287b1fc184d8e60a8328d4764a61a5b6e419da9f2bbd6ff241f15cda305587df8b8037fbc93b3ce6ebe84628c46d30b52e9411e64ae4dd75c"}]}, 0x374}, 0x1, 0x0, 0x0, 0x20}, 0x4) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"/330], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:22 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:22 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r4 = dup(0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) r5 = dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r7, 0x4068aea3, &(0x7f0000000200)={0x79}) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000340)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:22 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:22 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000340)={0x0, 0x100, 0x1000}, 0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = dup(0xffffffffffffffff) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x2e}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000080)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:22 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:22 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000003c0)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = dup(r0) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) r6 = dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efab3b30951c8602aeafa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db615aa28900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x200401, 0x10) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000440)={0x10000, &(0x7f0000000240), 0x2, r7, 0xc}) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:22 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:22 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:22 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:22 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:22 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r4 = dup(0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self\x00', 0x400000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) recvfrom$netrom(0xffffffffffffffff, &(0x7f0000000380)=""/1, 0x1, 0x100, &(0x7f0000000440)={{0x3, @default, 0x5}, [@null, @bcast, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x1}, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:23 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r4 = dup(0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:23 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:23 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r4 = dup(0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000001e00000020000000000000000000000000000ac3695625863bd642a406473efaba599688d6d403baaa7421e8301ab9fb3b808126acf5f23450843fbcfed1fc6ce2b6abdc47fffeba9a5f92547a06a8372bfbf175c83eaa9160000000000000000006cea7fb1d9cf1f42f42d433b2238ef82d53c540a17a8d62a0d76eabb1927293ef54a0e2e4a4e0ead906c6aeb2037e1ce97580bc37834000000000000"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:23 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:23 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={0x0, 0x2}) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x400000, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0x80184132, &(0x7f0000000340)) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000280)={0x0, 0x0, [0x4, 0x0, 0x1, 0xc345]}) ptrace$getsig(0x4202, r1, 0x9, &(0x7f0000000180)) 01:43:23 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:23 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000003c0)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = dup(r0) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) r6 = dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efab3b30951c8602aeafa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db615aa28900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x200401, 0x10) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000440)={0x10000, &(0x7f0000000240), 0x2, r7, 0xc}) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:23 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:23 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x40}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:23 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x40}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:23 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x40}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:23 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r4 = dup(0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self\x00', 0x400000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) recvfrom$netrom(0xffffffffffffffff, &(0x7f0000000380)=""/1, 0x1, 0x100, &(0x7f0000000440)={{0x3, @default, 0x5}, [@null, @bcast, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x1}, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:24 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r4 = dup(0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:24 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:24 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r4 = dup(0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000001e00000020000000000000000000000000000ac3695625863bd642a406473efaba599688d6d403baaa7421e8301ab9fb3b808126acf5f23450843fbcfed1fc6ce2b6abdc47fffeba9a5f92547a06a8372bfbf175c83eaa9160000000000000000006cea7fb1d9cf1f42f42d433b2238ef82d53c540a17a8d62a0d76eabb1927293ef54a0e2e4a4e0ead906c6aeb2037e1ce97580bc37834000000000000"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:24 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:24 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={0x0, 0x2}) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x400000, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0x80184132, &(0x7f0000000340)) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000280)={0x0, 0x0, [0x4, 0x0, 0x1, 0xc345]}) ptrace$getsig(0x4202, r1, 0x9, &(0x7f0000000180)) 01:43:24 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:24 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x10, 0x2, 0x10) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={0x0, 0x2}) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 01:43:24 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x40}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:24 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x40}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:24 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x40}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:24 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x3c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:24 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r4 = dup(0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self\x00', 0x400000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) recvfrom$netrom(0xffffffffffffffff, &(0x7f0000000380)=""/1, 0x1, 0x100, &(0x7f0000000440)={{0x3, @default, 0x5}, [@null, @bcast, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000012003dc13f0000000000000000000000000001e000000200000000000000000040ac3695622a406473efaba599688d6d403b5963450843fbcfed1fc6ca2b6abdb428d08b5500ab3b8247a06a8372beeaa9164dd063fbc0b4099a1cb615952890022400000000000000000000000000000000000054e9bb9500047b95f370711831c335dde9c5ecac19dcff655657294be699c794870ab6242c591f8eb86521a5587fdc7a8537c6cca4d29c9ee2cbe931edcb5df96fe2a1ba76a667dd8542a44fead5f077d510f90318b2d42b4f37afc60000e48e6c8eb1a0cb3a5c11f9ddb53303c8233788cfa797f15c860b4b004f0c62001fab5274b4225f4867febd443e07979a112353a58d3460110f9976f9b082bdc6e15007d62ce9eb31483ba60a7854a695eb702a48651d5799056dd8dcb499a8cfcaa155207eb9993f4e2d167d7e16c73bc1ab0b7197d2c462ec8d10283e4a526ba0b31dddb2f55622903eb5d06bf0773b9845de479188395f7957f710083a6dcb609e759c9f5b388972fc1bcf05a3bc2a4f10c5a2dd29bb288fc4071a3f05d6516d758eb93de65c28adfd55b5eeb21138f54e73ba4e0587743d5f5dd5a6b079f6dfdc6eff5c8a11f9fe9216f37b"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x1}, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:24 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r4 = dup(0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:24 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x3c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:25 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r4 = dup(0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000001e00000020000000000000000000000000000ac3695625863bd642a406473efaba599688d6d403baaa7421e8301ab9fb3b808126acf5f23450843fbcfed1fc6ce2b6abdc47fffeba9a5f92547a06a8372bfbf175c83eaa9160000000000000000006cea7fb1d9cf1f42f42d433b2238ef82d53c540a17a8d62a0d76eabb1927293ef54a0e2e4a4e0ead906c6aeb2037e1ce97580bc37834000000000000"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:25 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x3c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x3c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:25 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={0x0, 0x2}) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x400000, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0x80184132, &(0x7f0000000340)) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000280)={0x0, 0x0, [0x4, 0x0, 0x1, 0xc345]}) ptrace$getsig(0x4202, r1, 0x9, &(0x7f0000000180)) 01:43:25 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x40}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:25 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x10, 0x2, 0x10) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={0x0, 0x2}) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 01:43:25 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x40}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:25 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x40}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:25 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x38, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x38}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:25 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x38, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x38}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:25 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x57) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000280)={0x2, 0xfffffff9}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={0x0, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x1010, r3, 0x0) r4 = dup(r0) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000012003dc10000000000338c28f041fadb918f483b45a567361ae7c8c3d7251a0000000000000000000000000000000001e049a2dac6a282faa42c247b9c3d160ea0588a0200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224f2307fb860691c46cbec92ea6464e6fbd8a135dd963d4ffb224ba48bedc301"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:25 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r4 = dup(0xffffffffffffffff) getrlimit(0x4, &(0x7f0000000340)) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='cpuset\x00') ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000480)={0x4000, 0x10000}) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000040)) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000380)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:25 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x38, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x38}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:26 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm_plock\x00', 0x28000, 0x0) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000440)={[{0xfffffff9, 0xfffb, 0x1, 0xff, 0x34, 0x7, 0x9, 0x9a, 0x40, 0x5, 0x80}, {0xffffe589, 0x100, 0xff, 0x2, 0x4d, 0x1, 0x80, 0x0, 0x40, 0x7, 0x80, 0x3f, 0x4}, {0x9, 0x5, 0x7f, 0x29, 0x7, 0x2, 0x6, 0x6, 0x2, 0x5, 0x1, 0x3, 0x7}], 0x1}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r5 = dup(0xffffffffffffffff) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f00000004c0)={0x0, 0x2}) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:26 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xffffffff, 0x0) 01:43:26 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = dup(r0) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001a000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket(0x10, 0x3, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:26 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xffffffff, 0x0) 01:43:26 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x10, 0x2, 0x10) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={0x0, 0x2}) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 01:43:26 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xffffffff, 0x0) 01:43:26 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0) 01:43:26 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0) 01:43:26 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0) 01:43:26 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000180)={0x7fff, 0x7, 0x4, 0x0, 0x8, {}, {0x1, 0x2, 0x80, 0x3, 0x7f, 0x4, "222d044a"}, 0x8, 0x1, @planes=&(0x7f0000000040)={0x9, 0x1ff, @fd, 0xdb93}, 0xc, 0x0, r0}) sendmsg$nl_route_sched(r1, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000280)=@gettaction={0x250, 0x32, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x5}, @action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x14, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc76}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @action_gd=@TCA_ACT_TAB={0x50, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}]}, @action_gd=@TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7fffffff}, @action_gd=@TCA_ACT_TAB={0x58, 0x1, [{0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x88, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe02}}, {0x14, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x40000}, 0x40000c1) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={0x0, 0x2}) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 01:43:26 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = dup(0xffffffffffffffff) write$cgroup_type(r3, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:26 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x0, 0x0) 01:43:27 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm_plock\x00', 0x28000, 0x0) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000440)={[{0xfffffff9, 0xfffb, 0x1, 0xff, 0x34, 0x7, 0x9, 0x9a, 0x40, 0x5, 0x80}, {0xffffe589, 0x100, 0xff, 0x2, 0x4d, 0x1, 0x80, 0x0, 0x40, 0x7, 0x80, 0x3f, 0x4}, {0x9, 0x5, 0x7f, 0x29, 0x7, 0x2, 0x6, 0x6, 0x2, 0x5, 0x1, 0x3, 0x7}], 0x1}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r5 = dup(0xffffffffffffffff) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f00000004c0)={0x0, 0x2}) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:27 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x0, 0x0) 01:43:27 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = dup(0xffffffffffffffff) write$cgroup_type(r3, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:27 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x0, 0x0) 01:43:27 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={0x0, 0x2}) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000340)) r1 = open(0x0, 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r3 = fanotify_init(0x0, 0x0) fanotify_mark(r3, 0x2000000000000011, 0x2, r2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x102) fanotify_mark(r3, 0x1, 0x20, r4, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="ff3f62e668fb"], 0x6) sendfile(r5, r5, &(0x7f0000000240), 0x7fff) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 01:43:27 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) ioctl$SOUND_MIXER_READ_RECSRC(0xffffffffffffffff, 0x80044dff, &(0x7f0000000380)) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = dup(r0) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340)='/dev/video35\x00', 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket(0x10, 0x3, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:27 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = dup(0xffffffffffffffff) write$cgroup_type(r3, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:27 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = dup(0xffffffffffffffff) write$cgroup_type(r3, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:28 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm_plock\x00', 0x28000, 0x0) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000440)={[{0xfffffff9, 0xfffb, 0x1, 0xff, 0x34, 0x7, 0x9, 0x9a, 0x40, 0x5, 0x80}, {0xffffe589, 0x100, 0xff, 0x2, 0x4d, 0x1, 0x80, 0x0, 0x40, 0x7, 0x80, 0x3f, 0x4}, {0x9, 0x5, 0x7f, 0x29, 0x7, 0x2, 0x6, 0x6, 0x2, 0x5, 0x1, 0x3, 0x7}], 0x1}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r5 = dup(0xffffffffffffffff) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f00000004c0)={0x0, 0x2}) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:28 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = dup(0xffffffffffffffff) write$cgroup_type(r3, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:28 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = dup(0xffffffffffffffff) write$cgroup_type(r3, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:28 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = dup(r0) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x57) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000340)=@int=0x4, 0x4) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:28 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = dup(0xffffffffffffffff) write$cgroup_type(r3, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:28 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = dup(0xffffffffffffffff) write$cgroup_type(r3, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:29 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r4 = dup(0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_GET_MAGIC(r5, 0x80046402, &(0x7f0000000340)) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:29 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = dup(0xffffffffffffffff) write$cgroup_type(r3, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:29 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r4 = dup(0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000340), &(0x7f0000000380)=0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:29 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f00000002c0)='security.evm\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="fb7c749295a25fb9ea7ddf1f67270402"], 0x2, 0x2) r5 = dup(r0) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000280)=ANY=[]}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:29 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = dup(0xffffffffffffffff) write$cgroup_type(r3, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:29 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getpeername(r3, &(0x7f0000000440)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000340)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r5, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) r6 = dup(r0) write$cgroup_type(r6, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket(0x10, 0x3, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:30 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r4 = dup(0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_GET_MAGIC(r5, 0x80046402, &(0x7f0000000340)) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:30 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r4 = dup(0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a000000000000000000000000000000748893df85410001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:30 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = dup(0xffffffffffffffff) write$cgroup_type(r3, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a", 0x23}], 0x1}, 0x0) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:30 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f00000002c0)='security.evm\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="fb7c749295a25fb9ea7ddf1f67270402"], 0x2, 0x2) r5 = dup(r0) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000280)=ANY=[]}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:30 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = dup(r0) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0007000000000000000000000000000000ffffffff0000000000000000006473efaba599018000000000fffa126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b822400"/111], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket(0x10, 0x3, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:30 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) write$P9_RREADDIR(r1, &(0x7f0000000240)={0xe4, 0x29, 0x1, {0x9f, [{{0x20, 0x0, 0x3}, 0x800, 0x0, 0x7, './file0'}, {{0x20, 0x0, 0x6}, 0xd6, 0x1, 0x7, './file1'}, {{0x80, 0x1, 0x5}, 0xd7b, 0x8, 0x7, './file0'}, {{0x2, 0x0, 0x5}, 0x1, 0x7, 0x7, './file0'}, {{0x10, 0x0, 0x1}, 0xcb, 0x6f, 0x7, './file0'}, {{0x80, 0x1, 0x4}, 0xe000, 0x6, 0x7, './file0'}, {{0x10, 0x1}, 0x3, 0x1, 0x7, './file0'}]}}, 0xe4) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f0000000000)={r3}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x1c3003, 0x20) ioctl$DRM_IOCTL_LOCK(r4, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 01:43:31 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r4 = dup(0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_GET_MAGIC(r5, 0x80046402, &(0x7f0000000340)) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:31 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r4 = dup(r0) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625861bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db61595289002247af4188ef19367536721ce94d0a3e6cb589bca32f6686a95a7da9a26f603"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') semget$private(0x0, 0x1, 0x10) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000280)='tls\x00', 0x4) socket(0x10, 0x3, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:31 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r4 = dup(0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a000000000000000000000000000000748893df85410001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:31 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f00000002c0)='security.evm\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="fb7c749295a25fb9ea7ddf1f67270402"], 0x2, 0x2) r5 = dup(r0) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000280)=ANY=[]}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:31 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = dup(r0) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0007000000000000000000000000000000ffffffff0000000000000000006473efaba599018000000000fffa126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b822400"/111], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket(0x10, 0x3, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:31 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = dup(r0) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000001000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:32 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = dup(r0) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x57) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000440)=""/171) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:32 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r4 = dup(0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a000000000000000000000000000000748893df85410001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:32 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r4 = dup(r0) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625861bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db61595289002247af4188ef19367536721ce94d0a3e6cb589bca32f6686a95a7da9a26f603"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') semget$private(0x0, 0x1, 0x10) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000280)='tls\x00', 0x4) socket(0x10, 0x3, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:32 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = dup(0xffffffffffffffff) write$cgroup_type(r3, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:32 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = dup(r0) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0007000000000000000000000000000000ffffffff0000000000000000006473efaba599018000000000fffa126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b822400"/111], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket(0x10, 0x3, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:32 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = dup(r0) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000001000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:33 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={0x0, 0x2}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 01:43:33 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = dup(0xffffffffffffffff) write$cgroup_type(r3, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:33 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r4 = dup(r0) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625861bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db61595289002247af4188ef19367536721ce94d0a3e6cb589bca32f6686a95a7da9a26f603"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') semget$private(0x0, 0x1, 0x10) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000280)='tls\x00', 0x4) socket(0x10, 0x3, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:33 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = dup(r0) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001ab902000000000000000000000000000001e000000200000000000000000000000000002a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket(0x10, 0x3, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:33 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) getsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f0000000340)=0x1000, &(0x7f0000000380)=0x4) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = dup(r0) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) ioctl$RTC_VL_READ(r5, 0x80047013, &(0x7f0000000440)) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:33 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = dup(r0) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000001000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:33 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r0, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = dup(0xffffffffffffffff) write$cgroup_type(r2, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:34 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = dup(0xffffffffffffffff) write$cgroup_type(r3, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:34 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = dup(r0) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a0828372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:34 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(0xffffffffffffffff, &(0x7f00000004c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0xffffffffffffff1f) request_key(&(0x7f0000000380)='id_resolver\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)='lo\x00', 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = dup(r0) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) r6 = dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) ioctl$VIDIOC_ENUMAUDIO(r6, 0xc0345641, &(0x7f0000000340)={0x6, "7fa73fbc9c72722e5a9f6e7827cb5fee76b31bd19d090ffb188f58b50ebc0d59"}) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket(0x10, 0x3, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:34 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(0xffffffffffffffff, &(0x7f00000004c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0xffffffffffffff1f) request_key(&(0x7f0000000380)='id_resolver\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)='lo\x00', 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = dup(r0) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) r6 = dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) ioctl$VIDIOC_ENUMAUDIO(r6, 0xc0345641, &(0x7f0000000340)={0x6, "7fa73fbc9c72722e5a9f6e7827cb5fee76b31bd19d090ffb188f58b50ebc0d59"}) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket(0x10, 0x3, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:34 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x10000000, &(0x7f0000000380)='I', &(0x7f0000000440), &(0x7f0000000480), &(0x7f0000001480)="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") r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r4 = dup(0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="2e00000080008151e00f80ecdb4cb904044865160b115b0010000000000004140e000a0002000000dc2d76d153b4", 0x2e}], 0x1}, 0x4048004) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f00000004c0)=0x52) pipe(&(0x7f0000000000)) 01:43:34 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = dup(r0) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012023dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9f3f1e7c8235782a5745b428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:35 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x10, r3, 0x0) r5 = dup(r0) write$cgroup_type(r5, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) 01:43:35 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r3 = dup(r0) write$cgroup_type(r3, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:35 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={0x0, 0x2}) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 01:43:35 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r3, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r4 = dup(0xffffffffffffffff) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000440)=0xfffffe01, 0x4) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00') pipe(&(0x7f0000000000)) 01:43:35 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x10, r3, 0x0) r4 = dup(r0) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:36 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r4 = dup(r0) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:36 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={0x0, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r4 = dup(r0) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:36 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, 0x0) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r4 = dup(r0) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:36 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r3 = dup(r0) write$cgroup_type(r3, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:36 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = dup(r0) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) move_pages(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000ffe000/0x2000)=nil], &(0x7f0000000380)=[0x81, 0x7f], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:36 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x10, r3, 0x0) r4 = dup(r0) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:37 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r4 = dup(r0) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:37 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={0x0, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r4 = dup(r0) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:37 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r3 = dup(r0) write$cgroup_type(r3, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:37 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, 0x0) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r4 = dup(r0) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:37 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = dup(r0) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) move_pages(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000ffe000/0x2000)=nil], &(0x7f0000000380)=[0x81, 0x7f], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000000000000000028001a0000000000000000000000000000000001e000000200000000000000000000000000000000cded8640ac3695625863bd642a406473efaba599688d6d403baaa7761e8301ab9fb3b808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db6159528900224"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:37 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x10, r3, 0x0) r4 = dup(r0) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:38 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={0x0, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r4 = dup(r0) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:38 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r4 = dup(r0) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:38 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = dup(r0) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:38 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, 0x0) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r4 = dup(r0) write$cgroup_type(r4, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:38 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = dup(r0) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:38 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = dup(r0) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012003dc1000100000000000028001a000000000000000000000000000000000000000000000000000000000018e972b1681aadb9625863bd642a406473efaba599688db808126acf5923450843fbcfed1fc6ca2b6abdb428d08b5500ab7b8247a06a8372beeaa9164db615952890022400000000000000"], 0x38}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$revoke(0x3, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000300)='user\x00', 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:39 executing program 5 (fault-call:5 fault-nth:0): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:39 executing program 1 (fault-call:8 fault-nth:0): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) [ 898.013574] FAULT_INJECTION: forcing a failure. [ 898.013574] name failslab, interval 1, probability 0, space 0, times 0 [ 898.052648] CPU: 1 PID: 31053 Comm: syz-executor.1 Not tainted 4.14.176-syzkaller #0 [ 898.060803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 898.070203] Call Trace: [ 898.072810] dump_stack+0x13e/0x194 [ 898.076456] should_fail.cold+0x10a/0x14b [ 898.080624] should_failslab+0xd6/0x130 [ 898.084615] kmem_cache_alloc_node+0x288/0x7a0 [ 898.089212] ? netlink_broadcast+0x40/0x40 [ 898.093458] ? lock_acquire+0x170/0x3f0 [ 898.097444] __alloc_skb+0x9a/0x4c0 [ 898.101084] ? skb_trim+0x160/0x160 [ 898.104731] ? netlink_autobind.isra.0+0xa9/0x290 [ 898.109579] ? netlink_autobind.isra.0+0x1c5/0x290 [ 898.114520] netlink_sendmsg+0x7de/0xbe0 [ 898.118588] ? netlink_unicast+0x620/0x620 [ 898.122827] ? __lock_is_held+0xad/0x140 [ 898.126895] ? security_socket_sendmsg+0x83/0xb0 [ 898.131686] ? netlink_unicast+0x620/0x620 [ 898.135930] sock_sendmsg+0xc5/0x100 [ 898.139659] sock_no_sendpage+0xe5/0x110 [ 898.143728] ? sock_kzfree_s+0x50/0x50 [ 898.147640] ? sock_kzfree_s+0x50/0x50 [ 898.151529] kernel_sendpage+0x82/0xd0 [ 898.155428] sock_sendpage+0x84/0xa0 [ 898.159149] pipe_to_sendpage+0x226/0x2d0 [ 898.163303] ? kernel_sendpage+0xd0/0xd0 [ 898.167368] ? direct_splice_actor+0x160/0x160 [ 898.171958] ? splice_from_pipe_next.part.0+0x1e4/0x290 [ 898.177336] __splice_from_pipe+0x332/0x740 [ 898.181711] ? direct_splice_actor+0x160/0x160 [ 898.186309] ? direct_splice_actor+0x160/0x160 [ 898.191002] splice_from_pipe+0xc6/0x120 [ 898.195087] ? splice_shrink_spd+0xb0/0xb0 [ 898.199348] ? rw_verify_area+0xe1/0x2a0 [ 898.203401] ? splice_from_pipe+0x120/0x120 [ 898.207718] SyS_splice+0xca0/0x1230 [ 898.211450] ? SyS_write+0x14d/0x210 [ 898.215159] ? compat_SyS_vmsplice+0x250/0x250 [ 898.219747] ? SyS_clock_settime+0x1a0/0x1a0 [ 898.224164] ? do_syscall_64+0x4c/0x640 [ 898.228132] ? compat_SyS_vmsplice+0x250/0x250 [ 898.232708] do_syscall_64+0x1d5/0x640 [ 898.236593] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 898.241769] RIP: 0033:0x45c889 [ 898.244956] RSP: 002b:00007fed3131bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 898.252662] RAX: ffffffffffffffda RBX: 00007fed3131c6d4 RCX: 000000000045c889 [ 898.259951] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 898.267335] RBP: 000000000076bf00 R08: 00000000ffffffff R09: 0000000000000000 [ 898.274624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 898.282025] R13: 0000000000000ba4 R14: 00000000004ce6f2 R15: 0000000000000000 [ 898.299789] FAULT_INJECTION: forcing a failure. [ 898.299789] name failslab, interval 1, probability 0, space 0, times 0 [ 898.316690] CPU: 1 PID: 31057 Comm: syz-executor.5 Not tainted 4.14.176-syzkaller #0 [ 898.324607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 898.334080] Call Trace: [ 898.336694] dump_stack+0x13e/0x194 [ 898.340337] should_fail.cold+0x10a/0x14b [ 898.344502] should_failslab+0xd6/0x130 [ 898.348611] kmem_cache_alloc_node+0x288/0x7a0 [ 898.353335] ? netlink_broadcast+0x40/0x40 [ 898.357575] ? lock_acquire+0x170/0x3f0 [ 898.361563] __alloc_skb+0x9a/0x4c0 [ 898.365229] ? skb_trim+0x160/0x160 [ 898.365242] ? netlink_autobind.isra.0+0xa9/0x290 [ 898.365251] ? netlink_autobind.isra.0+0x1c5/0x290 [ 898.365264] netlink_sendmsg+0x7de/0xbe0 [ 898.365278] ? netlink_unicast+0x620/0x620 [ 898.365288] ? __lock_is_held+0xad/0x140 [ 898.365305] ? security_socket_sendmsg+0x83/0xb0 [ 898.391193] ? netlink_unicast+0x620/0x620 [ 898.391205] sock_sendmsg+0xc5/0x100 [ 898.391218] sock_no_sendpage+0xe5/0x110 [ 898.391228] ? sock_kzfree_s+0x50/0x50 [ 898.391250] ? sock_kzfree_s+0x50/0x50 [ 898.391260] kernel_sendpage+0x82/0xd0 [ 898.419652] sock_sendpage+0x84/0xa0 [ 898.423380] pipe_to_sendpage+0x226/0x2d0 [ 898.427630] ? kernel_sendpage+0xd0/0xd0 [ 898.431711] ? direct_splice_actor+0x160/0x160 [ 898.436308] ? splice_from_pipe_next.part.0+0x1e4/0x290 [ 898.441690] __splice_from_pipe+0x332/0x740 [ 898.446039] ? direct_splice_actor+0x160/0x160 [ 898.450640] ? direct_splice_actor+0x160/0x160 [ 898.455244] splice_from_pipe+0xc6/0x120 [ 898.459317] ? splice_shrink_spd+0xb0/0xb0 [ 898.463571] ? rw_verify_area+0xe1/0x2a0 [ 898.467642] ? splice_from_pipe+0x120/0x120 [ 898.471997] SyS_splice+0xca0/0x1230 [ 898.475726] ? SyS_write+0x14d/0x210 [ 898.479452] ? compat_SyS_vmsplice+0x250/0x250 [ 898.484129] ? SyS_clock_settime+0x1a0/0x1a0 [ 898.488553] ? do_syscall_64+0x4c/0x640 [ 898.492532] ? compat_SyS_vmsplice+0x250/0x250 [ 898.497119] do_syscall_64+0x1d5/0x640 [ 898.501015] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 898.506212] RIP: 0033:0x45c889 [ 898.509406] RSP: 002b:00007f73f5256c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 898.517122] RAX: ffffffffffffffda RBX: 00007f73f52576d4 RCX: 000000000045c889 [ 898.524394] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 898.531681] RBP: 000000000076bf00 R08: 00000000ffffffff R09: 0000000000000000 [ 898.538951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 898.538957] R13: 0000000000000ba4 R14: 00000000004ce6f2 R15: 0000000000000000 01:43:39 executing program 1 (fault-call:8 fault-nth:1): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:39 executing program 5 (fault-call:5 fault-nth:1): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:39 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = dup(r0) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:39 executing program 0 (fault-call:10 fault-nth:0): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$vhci(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="e2"], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x40000000004ffdf, 0x0) [ 898.666823] FAULT_INJECTION: forcing a failure. [ 898.666823] name failslab, interval 1, probability 0, space 0, times 0 [ 898.711560] CPU: 0 PID: 31083 Comm: syz-executor.5 Not tainted 4.14.176-syzkaller #0 [ 898.719514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 898.720112] FAULT_INJECTION: forcing a failure. [ 898.720112] name failslab, interval 1, probability 0, space 0, times 0 [ 898.729020] Call Trace: [ 898.729044] dump_stack+0x13e/0x194 [ 898.729062] should_fail.cold+0x10a/0x14b [ 898.729078] should_failslab+0xd6/0x130 [ 898.729089] kmem_cache_alloc_node_trace+0x292/0x7b0 [ 898.729101] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 898.729111] ? __alloc_skb+0x9a/0x4c0 [ 898.729122] __kmalloc_node_track_caller+0x38/0x70 [ 898.729133] __kmalloc_reserve.isra.0+0x35/0xd0 [ 898.729143] __alloc_skb+0xca/0x4c0 [ 898.729153] ? skb_trim+0x160/0x160 [ 898.729163] ? netlink_autobind.isra.0+0xa9/0x290 [ 898.729172] ? netlink_autobind.isra.0+0x1c5/0x290 [ 898.729183] netlink_sendmsg+0x7de/0xbe0 [ 898.729195] ? netlink_unicast+0x620/0x620 [ 898.729202] ? __lock_is_held+0xad/0x140 [ 898.729221] ? security_socket_sendmsg+0x83/0xb0 [ 898.812896] ? netlink_unicast+0x620/0x620 [ 898.817145] sock_sendmsg+0xc5/0x100 [ 898.820867] sock_no_sendpage+0xe5/0x110 [ 898.825016] ? sock_kzfree_s+0x50/0x50 [ 898.829093] ? sock_kzfree_s+0x50/0x50 [ 898.832988] kernel_sendpage+0x82/0xd0 [ 898.836876] sock_sendpage+0x84/0xa0 [ 898.840600] pipe_to_sendpage+0x226/0x2d0 [ 898.844912] ? kernel_sendpage+0xd0/0xd0 [ 898.848985] ? direct_splice_actor+0x160/0x160 [ 898.853576] ? splice_from_pipe_next.part.0+0x1e4/0x290 [ 898.858963] __splice_from_pipe+0x332/0x740 [ 898.863303] ? direct_splice_actor+0x160/0x160 [ 898.867897] ? direct_splice_actor+0x160/0x160 [ 898.872498] splice_from_pipe+0xc6/0x120 [ 898.876570] ? splice_shrink_spd+0xb0/0xb0 [ 898.880843] ? rw_verify_area+0xe1/0x2a0 [ 898.884912] ? splice_from_pipe+0x120/0x120 [ 898.889243] SyS_splice+0xca0/0x1230 [ 898.892979] ? SyS_write+0x14d/0x210 [ 898.896723] ? compat_SyS_vmsplice+0x250/0x250 [ 898.901310] ? SyS_clock_settime+0x1a0/0x1a0 [ 898.905722] ? do_syscall_64+0x4c/0x640 [ 898.909698] ? compat_SyS_vmsplice+0x250/0x250 [ 898.914285] do_syscall_64+0x1d5/0x640 [ 898.918180] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 898.923384] RIP: 0033:0x45c889 [ 898.926569] RSP: 002b:00007f73f5256c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 898.934285] RAX: ffffffffffffffda RBX: 00007f73f52576d4 RCX: 000000000045c889 [ 898.941563] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 898.948933] RBP: 000000000076bf00 R08: 00000000ffffffff R09: 0000000000000000 [ 898.956209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 898.963985] R13: 0000000000000ba4 R14: 00000000004ce6f2 R15: 0000000000000001 [ 898.973317] CPU: 1 PID: 31089 Comm: syz-executor.1 Not tainted 4.14.176-syzkaller #0 [ 898.981324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 898.990686] Call Trace: [ 898.993292] dump_stack+0x13e/0x194 [ 898.996934] should_fail.cold+0x10a/0x14b [ 899.001099] should_failslab+0xd6/0x130 [ 899.005085] kmem_cache_alloc_node_trace+0x292/0x7b0 [ 899.010202] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 899.016184] ? __alloc_skb+0x9a/0x4c0 [ 899.019989] __kmalloc_node_track_caller+0x38/0x70 [ 899.024956] __kmalloc_reserve.isra.0+0x35/0xd0 [ 899.029635] __alloc_skb+0xca/0x4c0 [ 899.029647] ? skb_trim+0x160/0x160 [ 899.029660] ? netlink_autobind.isra.0+0xa9/0x290 [ 899.041744] ? netlink_autobind.isra.0+0x1c5/0x290 [ 899.046695] netlink_sendmsg+0x7de/0xbe0 [ 899.050784] ? netlink_unicast+0x620/0x620 [ 899.055021] ? __lock_is_held+0xad/0x140 [ 899.055039] ? security_socket_sendmsg+0x83/0xb0 [ 899.055048] ? netlink_unicast+0x620/0x620 [ 899.055060] sock_sendmsg+0xc5/0x100 [ 899.071791] sock_no_sendpage+0xe5/0x110 [ 899.075868] ? sock_kzfree_s+0x50/0x50 [ 899.079788] ? sock_kzfree_s+0x50/0x50 [ 899.083732] kernel_sendpage+0x82/0xd0 [ 899.087644] sock_sendpage+0x84/0xa0 [ 899.091370] pipe_to_sendpage+0x226/0x2d0 [ 899.095530] ? kernel_sendpage+0xd0/0xd0 [ 899.099613] ? direct_splice_actor+0x160/0x160 [ 899.104215] ? splice_from_pipe_next.part.0+0x1e4/0x290 [ 899.109599] __splice_from_pipe+0x332/0x740 [ 899.113937] ? direct_splice_actor+0x160/0x160 [ 899.118528] ? direct_splice_actor+0x160/0x160 [ 899.123116] splice_from_pipe+0xc6/0x120 [ 899.127181] ? splice_shrink_spd+0xb0/0xb0 [ 899.131430] ? rw_verify_area+0xe1/0x2a0 [ 899.135500] ? splice_from_pipe+0x120/0x120 [ 899.139833] SyS_splice+0xca0/0x1230 [ 899.143560] ? SyS_write+0x14d/0x210 [ 899.147285] ? compat_SyS_vmsplice+0x250/0x250 [ 899.151870] ? SyS_clock_settime+0x1a0/0x1a0 [ 899.151884] ? do_syscall_64+0x4c/0x640 [ 899.151893] ? compat_SyS_vmsplice+0x250/0x250 [ 899.151905] do_syscall_64+0x1d5/0x640 [ 899.168877] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 899.174069] RIP: 0033:0x45c889 [ 899.177264] RSP: 002b:00007fed312fac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 899.184973] RAX: ffffffffffffffda RBX: 00007fed312fb6d4 RCX: 000000000045c889 [ 899.184979] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 899.184984] RBP: 000000000076bfa0 R08: 00000000ffffffff R09: 0000000000000000 01:43:40 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = dup(r0) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) [ 899.184990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 899.184995] R13: 0000000000000ba4 R14: 00000000004ce6f2 R15: 0000000000000001 [ 899.235717] FAULT_INJECTION: forcing a failure. [ 899.235717] name failslab, interval 1, probability 0, space 0, times 0 [ 899.285834] CPU: 1 PID: 31095 Comm: syz-executor.0 Not tainted 4.14.176-syzkaller #0 [ 899.293766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 899.303127] Call Trace: [ 899.305736] dump_stack+0x13e/0x194 [ 899.309384] should_fail.cold+0x10a/0x14b [ 899.313549] should_failslab+0xd6/0x130 [ 899.317540] kmem_cache_alloc_node+0x288/0x7a0 [ 899.322131] __alloc_skb+0x9a/0x4c0 [ 899.325747] ? skb_trim+0x160/0x160 [ 899.329371] ? finish_task_switch+0x178/0x620 [ 899.333874] ? __sched_fork+0x752/0xa80 [ 899.337855] ? switch_mm_irqs_off+0x5db/0xec0 [ 899.342387] sk_stream_alloc_skb+0xaf/0x780 [ 899.346741] ? tcp_send_mss+0x9f/0x2e0 [ 899.350638] ? tcp_keepalive_timer.cold+0x22/0x22 [ 899.355496] do_tcp_sendpages+0x795/0x1750 [ 899.359753] ? sk_stream_alloc_skb+0x780/0x780 [ 899.364350] tcp_sendpage_locked+0x81/0x130 [ 899.368691] tcp_sendpage+0x3a/0x60 [ 899.372398] inet_sendpage+0x155/0x590 [ 899.376299] ? tcp_sendpage_locked+0x130/0x130 [ 899.380894] ? inet_sendmsg+0x4d0/0x4d0 [ 899.384876] kernel_sendpage+0x82/0xd0 [ 899.388773] sock_sendpage+0x84/0xa0 [ 899.392495] pipe_to_sendpage+0x226/0x2d0 [ 899.396655] ? kernel_sendpage+0xd0/0xd0 [ 899.400741] ? direct_splice_actor+0x160/0x160 [ 899.405424] ? splice_from_pipe_next.part.0+0x1e4/0x290 [ 899.410808] __splice_from_pipe+0x332/0x740 [ 899.415146] ? direct_splice_actor+0x160/0x160 [ 899.419741] ? direct_splice_actor+0x160/0x160 [ 899.424333] splice_from_pipe+0xc6/0x120 [ 899.428525] ? splice_shrink_spd+0xb0/0xb0 [ 899.432778] ? rw_verify_area+0xe1/0x2a0 [ 899.436856] ? splice_from_pipe+0x120/0x120 [ 899.441190] SyS_splice+0xca0/0x1230 [ 899.444918] ? SyS_write+0x14d/0x210 [ 899.448645] ? compat_SyS_vmsplice+0x250/0x250 [ 899.453241] ? SyS_clock_settime+0x1a0/0x1a0 [ 899.457662] ? do_syscall_64+0x4c/0x640 [ 899.461648] ? compat_SyS_vmsplice+0x250/0x250 [ 899.466246] do_syscall_64+0x1d5/0x640 [ 899.470154] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 899.475352] RIP: 0033:0x45c889 [ 899.478549] RSP: 002b:00007f6f6e154c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 01:43:40 executing program 5 (fault-call:5 fault-nth:2): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:40 executing program 3 (fault-call:3 fault-nth:0): syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}}, 0xfffffdef) ftruncate(r0, 0x0) [ 899.486267] RAX: ffffffffffffffda RBX: 00007f6f6e1556d4 RCX: 000000000045c889 [ 899.493552] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 899.500830] RBP: 000000000076c0e0 R08: 040000000004ffdf R09: 0000000000000000 [ 899.508110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 899.515389] R13: 0000000000000ba4 R14: 00000000004ce6f2 R15: 0000000000000000 01:43:40 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000090000000000000000000000000000000d000300686173683a6e657400000900020073797a31000000000500010006000000050005000a00000000000096fde19f33a150c57e66ccfc054e2a3b16df86256f131e638acd0892b0d5df57765846b30458ba8e14e44f66931968a15e0049d91f1b15dd8b51c5d34dea2e67ecc063699c4dbd274e5430fb7b2cbda6403f40b1c1dbdaf6d2bb209fac155155622cc8aa06bae9e4d9401e39c5e9052fd305955633382cb872f141c20c21046eba957149"], 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:40 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) write$vhci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="fc43e892a4b672b296a502a7be453e358edc9ad84700a208c798174c01e134c24300da1c161d2c781c9932ee734281216efb567e4e851f66f8ffde724d944e4d18ad696e692cf1b57a59c226315c8e"], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x40000000004ffdf, 0x0) 01:43:40 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000020601080000000000000000000002000d80b0b7a194569c797a310000000005000106060000000000000000"], 0x48}}, 0x0) splice(r0, 0x0, r0, 0x0, 0xffffffff, 0x9) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB="f400000221"], &(0x7f0000000000)=0x3e2) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x1, 0x7000, 0x4008, 0xffff7fff, 0x2, 0x6, 0x9, 0x4}, &(0x7f00000001c0)=0x20) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000040)={0x1a0, 0x12, &(0x7f0000000340)}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x57) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_buf(r4, 0x107, 0x16, &(0x7f00000002c0)="743772dce626fb29f67eb101632031b64882c093c3e1bd6e44b40feb14b09956dfa083c7da2f3694e34ea3b49aad496c72d5894203f50c851471c9c35ea794caffb5b9019a3728874811e617df2ff07cf886bbd2", 0x54) ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0x40084146, &(0x7f0000000000)=0x8) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r5, 0x4068aea3, &(0x7f0000000200)={0x79}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) pread64(r6, &(0x7f0000000200)=""/160, 0xa0, 0x2f) 01:43:40 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r5, 0x4068aea3, &(0x7f0000000200)={0x79}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_GET_ONE_REG(r6, 0x4010aeab, &(0x7f0000000000)={0x3f, 0x1}) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r7) sendto$inet(r7, 0x0, 0x0, 0x2004877d, &(0x7f0000e68000)={0x2, 0x4e23, @remote}, 0x10) write$vhci(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="e2"], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x40000000004ffdf, 0x0) [ 899.776024] syz-executor.5: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) 01:43:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000200)={0x79}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r4, 0x4068aea3, &(0x7f0000000200)={0x79}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x89000a, &(0x7f0000000580)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRESDEC=r0, @ANYRES16=r2, @ANYRESHEX, @ANYBLOB="90befca24b49e0faab3f9860ef062818a4d5b8fc3371aea98ae981759c1fb43bd860a317e6a4b1165dc7f8cb8c0378a3b90c9caeda55761a219a2f4d6036fdde91", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRESHEX=r5, @ANYRES16=0x0, @ANYBLOB="2adb5696b0284a6b89f3362faa16506f8992b3"]], @ANYBLOB="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"]) r6 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) write$binfmt_elf32(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000000000000000000000000000002000"/56], 0xfffffdef) ftruncate(r6, 0x0) [ 899.825832] syz-executor.5 cpuset=/ mems_allowed=0-1 01:43:41 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000000)=0x6) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:41 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = dup(r0) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) [ 899.916107] CPU: 1 PID: 31137 Comm: syz-executor.5 Not tainted 4.14.176-syzkaller #0 [ 899.924038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 899.933400] Call Trace: [ 899.936004] dump_stack+0x13e/0x194 [ 899.939646] warn_alloc.cold+0x96/0x1af [ 899.943630] ? zone_watermark_ok_safe+0x280/0x280 [ 899.948622] ? wait_for_completion+0x390/0x390 [ 899.952034] syz-executor.3: page allocation failure: order:0 [ 899.953329] __alloc_pages_slowpath+0x2114/0x26c0 [ 899.953351] ? warn_alloc+0xf0/0xf0 [ 899.968048] ? find_held_lock+0x2d/0x110 [ 899.972121] ? fs_reclaim_acquire+0x10/0x10 [ 899.976458] __alloc_pages_nodemask+0x5d3/0x700 [ 899.981120] ? rcu_read_lock_sched_held+0x10a/0x130 [ 899.986273] ? __alloc_pages_nodemask+0x5e0/0x700 [ 899.991106] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 899.996117] alloc_pages_current+0xe7/0x1e0 [ 900.000429] kvm_mmu_create+0xd1/0x1c0 [ 900.004301] kvm_arch_vcpu_init+0x28b/0x8b0 [ 900.008607] ? alloc_pages_current+0xef/0x1e0 [ 900.013102] kvm_vcpu_init+0x26d/0x360 [ 900.016995] vmx_create_vcpu+0xf3/0x2900 [ 900.021090] ? __mutex_unlock_slowpath+0x75/0x780 [ 900.025925] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 900.030951] ? handle_rdmsr+0x6b0/0x6b0 [ 900.034954] kvm_vm_ioctl+0x49c/0x1430 [ 900.038881] ? __lock_acquire+0x5f7/0x4620 [ 900.043124] ? kvm_vcpu_release+0xa0/0xa0 [ 900.047280] ? trace_hardirqs_on+0x10/0x10 [ 900.051514] ? trace_hardirqs_on+0x10/0x10 [ 900.055745] ? save_trace+0x290/0x290 [ 900.059550] ? __might_fault+0x104/0x1b0 [ 900.063611] ? kvm_vcpu_release+0xa0/0xa0 [ 900.067756] do_vfs_ioctl+0x75a/0xfe0 [ 900.071567] ? selinux_file_mprotect+0x5c0/0x5c0 [ 900.076310] ? ioctl_preallocate+0x1a0/0x1a0 [ 900.080707] ? security_file_ioctl+0x76/0xb0 [ 900.085101] ? security_file_ioctl+0x83/0xb0 [ 900.089497] SyS_ioctl+0x7f/0xb0 [ 900.092856] ? do_vfs_ioctl+0xfe0/0xfe0 [ 900.096816] do_syscall_64+0x1d5/0x640 [ 900.100706] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 900.105880] RIP: 0033:0x45c889 [ 900.109055] RSP: 002b:00007f73f5256c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 900.116749] RAX: ffffffffffffffda RBX: 00007f73f52576d4 RCX: 000000000045c889 [ 900.124010] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000008 [ 900.132148] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 900.139422] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 900.146683] R13: 0000000000000390 R14: 00000000004c60a9 R15: 000000000076bf0c [ 900.179451] syz-executor.3: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 900.191594] , mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 900.219469] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 900.227069] syz-executor.3: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 900.241463] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 900.246783] CPU: 1 PID: 31157 Comm: syz-executor.3 Not tainted 4.14.176-syzkaller #0 [ 900.254680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 900.263482] syz-executor.3 cpuset= [ 900.264033] Call Trace: [ 900.264054] dump_stack+0x13e/0x194 [ 900.272818] / [ 900.273779] warn_alloc.cold+0x96/0x1af [ 900.275073] mems_allowed=0-1 [ 900.275502] ? zone_watermark_ok_safe+0x280/0x280 [ 900.287451] ? wait_for_completion+0x390/0x390 [ 900.292055] __alloc_pages_slowpath+0x2114/0x26c0 [ 900.292088] ? warn_alloc+0xf0/0xf0 [ 900.292100] ? find_held_lock+0x2d/0x110 [ 900.292114] ? fs_reclaim_acquire+0x10/0x10 [ 900.309445] __alloc_pages_nodemask+0x5d3/0x700 [ 900.314302] ? rcu_read_lock_sched_held+0x10a/0x130 [ 900.319414] ? __alloc_pages_nodemask+0x5e0/0x700 [ 900.324870] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 900.330769] alloc_pages_current+0xe7/0x1e0 [ 900.335185] kvm_mmu_create+0xd1/0x1c0 [ 900.339166] kvm_arch_vcpu_init+0x28b/0x8b0 [ 900.339179] ? alloc_pages_current+0xef/0x1e0 [ 900.339192] kvm_vcpu_init+0x26d/0x360 [ 900.339205] vmx_create_vcpu+0xf3/0x2900 [ 900.339222] ? __mutex_unlock_slowpath+0x75/0x780 [ 900.361002] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 900.366038] ? handle_rdmsr+0x6b0/0x6b0 [ 900.370205] kvm_vm_ioctl+0x49c/0x1430 [ 900.374856] ? __lock_acquire+0x5f7/0x4620 [ 900.379194] ? kvm_vcpu_release+0xa0/0xa0 [ 900.383348] ? trace_hardirqs_on+0x10/0x10 [ 900.387600] ? trace_hardirqs_on+0x10/0x10 [ 900.392110] ? save_trace+0x290/0x290 [ 900.395916] ? __might_fault+0x104/0x1b0 [ 900.399986] ? kvm_vcpu_release+0xa0/0xa0 [ 900.404147] do_vfs_ioctl+0x75a/0xfe0 [ 900.407963] ? selinux_file_mprotect+0x5c0/0x5c0 [ 900.413000] ? ioctl_preallocate+0x1a0/0x1a0 [ 900.417434] ? security_file_ioctl+0x76/0xb0 [ 900.421947] ? security_file_ioctl+0x83/0xb0 [ 900.426376] SyS_ioctl+0x7f/0xb0 [ 900.429754] ? do_vfs_ioctl+0xfe0/0xfe0 [ 900.433754] do_syscall_64+0x1d5/0x640 [ 900.437658] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 900.443985] RIP: 0033:0x45c889 [ 900.447193] RSP: 002b:00007f083e4e8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 900.454910] RAX: ffffffffffffffda RBX: 00007f083e4e96d4 RCX: 000000000045c889 [ 900.462184] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006 [ 900.469469] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 01:43:41 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r2, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)={r4, 0x2}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = dup(r0) write$cgroup_type(r5, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x1}, 0x8}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') pipe(&(0x7f0000000000)) 01:43:41 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000020601080000000000000000000000000d000300000000000900020073797a31000000000500010006000000050005000a000000"], 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) [ 900.476754] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 900.484056] R13: 0000000000000390 R14: 00000000004c60a9 R15: 000000000076bf0c [ 900.524875] CPU: 0 PID: 31171 Comm: syz-executor.3 Not tainted 4.14.176-syzkaller #0 [ 900.532797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 900.542153] Call Trace: [ 900.544749] dump_stack+0x13e/0x194 [ 900.548381] warn_alloc.cold+0x96/0x1af [ 900.552365] ? zone_watermark_ok_safe+0x280/0x280 [ 900.557225] ? wait_for_completion+0x390/0x390 [ 900.561826] __alloc_pages_slowpath+0x2114/0x26c0 [ 900.566730] ? warn_alloc+0xf0/0xf0 [ 900.570366] ? find_held_lock+0x2d/0x110 [ 900.574437] ? fs_reclaim_acquire+0x10/0x10 [ 900.578790] __alloc_pages_nodemask+0x5d3/0x700 [ 900.583463] ? rcu_read_lock_sched_held+0x10a/0x130 [ 900.588483] ? __alloc_pages_nodemask+0x5e0/0x700 [ 900.596167] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 900.597161] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 900.610756] alloc_pages_current+0xe7/0x1e0 [ 900.615093] kvm_mmu_create+0xd1/0x1c0 [ 900.619003] kvm_arch_vcpu_init+0x28b/0x8b0 [ 900.623339] ? alloc_pages_current+0xef/0x1e0 [ 900.627853] kvm_vcpu_init+0x26d/0x360 [ 900.631751] vmx_create_vcpu+0xf3/0x2900 [ 900.635832] ? __mutex_unlock_slowpath+0x75/0x780 [ 900.640676] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 900.645691] ? handle_rdmsr+0x6b0/0x6b0 [ 900.649675] kvm_vm_ioctl+0x49c/0x1430 [ 900.653576] ? __lock_acquire+0x5f7/0x4620 [ 900.657818] ? kvm_vcpu_release+0xa0/0xa0 [ 900.661983] ? trace_hardirqs_on+0x10/0x10 [ 900.666230] ? trace_hardirqs_on+0x10/0x10 [ 900.670487] ? save_trace+0x290/0x290 [ 900.674294] ? __might_fault+0x104/0x1b0 [ 900.678370] ? kvm_vcpu_release+0xa0/0xa0 [ 900.682536] do_vfs_ioctl+0x75a/0xfe0 [ 900.686350] ? selinux_file_mprotect+0x5c0/0x5c0 [ 900.691121] ? ioctl_preallocate+0x1a0/0x1a0 [ 900.695551] ? security_file_ioctl+0x76/0xb0 [ 900.699966] ? security_file_ioctl+0x83/0xb0 [ 900.704405] SyS_ioctl+0x7f/0xb0 [ 900.707811] ? do_vfs_ioctl+0xfe0/0xfe0 [ 900.711795] do_syscall_64+0x1d5/0x640 [ 900.715700] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 900.720915] RIP: 0033:0x45c889 [ 900.724101] RSP: 002b:00007f083e4a6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 900.731805] RAX: ffffffffffffffda RBX: 00007f083e4a76d4 RCX: 000000000045c889 [ 900.739079] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000008 [ 900.746361] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 900.753638] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 900.760948] R13: 0000000000000390 R14: 00000000004c60a9 R15: 000000000076c04c [ 900.784670] CPU: 1 PID: 31169 Comm: syz-executor.3 Not tainted 4.14.176-syzkaller #0 [ 900.792730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 900.802094] Call Trace: [ 900.804696] dump_stack+0x13e/0x194 [ 900.808336] warn_alloc.cold+0x96/0x1af [ 900.812682] ? zone_watermark_ok_safe+0x280/0x280 [ 900.817551] ? wait_for_completion+0x390/0x390 [ 900.822164] __alloc_pages_slowpath+0x2114/0x26c0 [ 900.827033] ? warn_alloc+0xf0/0xf0 [ 900.830678] ? find_held_lock+0x2d/0x110 [ 900.834755] ? fs_reclaim_acquire+0x10/0x10 [ 900.839111] __alloc_pages_nodemask+0x5d3/0x700 [ 900.843801] ? rcu_read_lock_sched_held+0x10a/0x130 [ 900.848827] ? __alloc_pages_nodemask+0x5e0/0x700 [ 900.853687] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 900.858730] alloc_pages_current+0xe7/0x1e0 [ 900.863074] kvm_mmu_create+0xd1/0x1c0 [ 900.867327] kvm_arch_vcpu_init+0x28b/0x8b0 [ 900.872531] ? alloc_pages_current+0xef/0x1e0 [ 900.877121] kvm_vcpu_init+0x26d/0x360 [ 900.881221] vmx_create_vcpu+0xf3/0x2900 [ 900.885663] ? __mutex_unlock_slowpath+0x75/0x780 [ 900.890702] ? handle_rdmsr+0x6b0/0x6b0 [ 900.894790] kvm_vm_ioctl+0x49c/0x1430 [ 900.898698] ? __lock_acquire+0x5f7/0x4620 [ 900.903055] ? kvm_vcpu_release+0xa0/0xa0 [ 900.907221] ? trace_hardirqs_on+0x10/0x10 [ 900.911483] ? trace_hardirqs_on+0x10/0x10 [ 900.915821] ? save_trace+0x290/0x290 [ 900.919629] ? __might_fault+0x104/0x1b0 [ 900.923704] ? kvm_vcpu_release+0xa0/0xa0 [ 900.927860] do_vfs_ioctl+0x75a/0xfe0 [ 900.931670] ? selinux_file_mprotect+0x5c0/0x5c0 [ 900.936451] ? ioctl_preallocate+0x1a0/0x1a0 [ 900.940885] ? security_file_ioctl+0x76/0xb0 [ 900.945304] ? security_file_ioctl+0x83/0xb0 [ 900.949729] SyS_ioctl+0x7f/0xb0 [ 900.953113] ? do_vfs_ioctl+0xfe0/0xfe0 [ 900.957104] do_syscall_64+0x1d5/0x640 [ 900.961008] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 900.966290] RIP: 0033:0x45c889 [ 900.969484] RSP: 002b:00007f083e4c7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 900.977189] RAX: ffffffffffffffda RBX: 00007f083e4c86d4 RCX: 000000000045c889 [ 900.977195] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006 [ 900.977201] RBP: 000000000076bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 900.977207] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 900.977213] R13: 0000000000000390 R14: 00000000004c60a9 R15: 000000000076bfac [ 901.157785] Mem-Info: [ 901.161296] active_anon:797721 inactive_anon:7955 isolated_anon:0 [ 901.161296] active_file:14239 inactive_file:7698 isolated_file:0 [ 901.161296] unevictable:0 dirty:6 writeback:16 unstable:0 [ 901.161296] slab_reclaimable:57025 slab_unreclaimable:201961 [ 901.161296] mapped:63004 shmem:9956 pagetables:13043 bounce:0 [ 901.161296] free:423883 free_pcp:426 free_cma:0 01:43:42 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$KVM_ENABLE_CAP(r4, 0x4068aea3, &(0x7f0000000200)={0x81, 0x0, [0xfffffffffffffffb, 0x0, 0x81, 0xfffffffffffffffe]}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0x40, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r7, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x3f7, 0x300, 0x70bd28, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x42) [ 901.199422] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 901.224883] Node 0 active_anon:1944176kB inactive_anon:16080kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216516kB dirty:4kB writeback:0kB shmem:16756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1153024kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 901.287828] syz-executor.1: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 901.327426] syz-executor.1 cpuset=/ mems_allowed=0-1 01:43:42 executing program 4 (fault-call:10 fault-nth:0): perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = dup(0xffffffffffffffff) write$cgroup_type(r3, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0) syz_genetlink_get_family_id$nl80211(0x0) pipe(0x0) [ 901.342514] Node 1 active_anon:1246608kB inactive_anon:15740kB active_file:56952kB inactive_file:30988kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:35800kB dirty:120kB writeback:64kB shmem:23068kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 901.371373] syz-executor.1: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 901.397420] CPU: 1 PID: 31228 Comm: syz-executor.1 Not tainted 4.14.176-syzkaller #0 [ 901.405322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 901.414685] Call Trace: [ 901.417457] dump_stack+0x13e/0x194 [ 901.421101] warn_alloc.cold+0x96/0x1af [ 901.425438] ? zone_watermark_ok_safe+0x280/0x280 [ 901.434080] ? wait_for_completion+0x390/0x390 [ 901.439115] __alloc_pages_slowpath+0x2114/0x26c0 [ 901.444003] ? warn_alloc+0xf0/0xf0 [ 901.447647] ? find_held_lock+0x2d/0x110 [ 901.451732] ? fs_reclaim_acquire+0x10/0x10 [ 901.456077] __alloc_pages_nodemask+0x5d3/0x700 [ 901.460765] ? rcu_read_lock_sched_held+0x10a/0x130 [ 901.465792] ? __alloc_pages_nodemask+0x5e0/0x700 [ 901.470651] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 901.475696] alloc_pages_current+0xe7/0x1e0 [ 901.480041] kvm_mmu_create+0xd1/0x1c0 [ 901.483232] FAULT_INJECTION: forcing a failure. [ 901.483232] name failslab, interval 1, probability 0, space 0, times 0 [ 901.484540] kvm_arch_vcpu_init+0x28b/0x8b0 [ 901.484551] ? alloc_pages_current+0xef/0x1e0 [ 901.484565] kvm_vcpu_init+0x26d/0x360 [ 901.484585] vmx_create_vcpu+0xf3/0x2900 [ 901.514326] ? __mutex_unlock_slowpath+0x75/0x780 [ 901.519179] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 901.524547] ? handle_rdmsr+0x6b0/0x6b0 [ 901.528521] kvm_vm_ioctl+0x49c/0x1430 [ 901.532404] ? __lock_acquire+0x5f7/0x4620 [ 901.536626] ? kvm_vcpu_release+0xa0/0xa0 [ 901.540757] ? trace_hardirqs_on+0x10/0x10 [ 901.544976] ? trace_hardirqs_on+0x10/0x10 [ 901.549208] ? save_trace+0x290/0x290 [ 901.552994] ? __might_fault+0x104/0x1b0 [ 901.557042] ? kvm_vcpu_release+0xa0/0xa0 [ 901.561174] do_vfs_ioctl+0x75a/0xfe0 [ 901.564991] ? selinux_file_mprotect+0x5c0/0x5c0 [ 901.569762] ? ioctl_preallocate+0x1a0/0x1a0 [ 901.574166] ? security_file_ioctl+0x76/0xb0 [ 901.578687] ? security_file_ioctl+0x83/0xb0 [ 901.583091] SyS_ioctl+0x7f/0xb0 [ 901.586448] ? do_vfs_ioctl+0xfe0/0xfe0 [ 901.590759] do_syscall_64+0x1d5/0x640 [ 901.598542] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 901.603714] RIP: 0033:0x45c889 [ 901.606887] RSP: 002b:00007fed3131bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 901.614586] RAX: ffffffffffffffda RBX: 00007fed3131c6d4 RCX: 000000000045c889 [ 901.621840] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006 [ 901.629091] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 901.636344] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 901.643609] R13: 0000000000000390 R14: 00000000004c60a9 R15: 000000000076bf0c [ 901.709037] CPU: 0 PID: 31239 Comm: syz-executor.4 Not tainted 4.14.176-syzkaller #0 [ 901.710532] syz-executor.1 cpuset= [ 901.716953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 901.716960] Call Trace: [ 901.716980] dump_stack+0x13e/0x194 [ 901.716997] should_fail.cold+0x10a/0x14b [ 901.740437] should_failslab+0xd6/0x130 [ 901.744432] kmem_cache_alloc_node+0x288/0x7a0 [ 901.749029] ? netlink_broadcast+0x40/0x40 [ 901.753271] ? lock_acquire+0x170/0x3f0 [ 901.755490] / [ 901.757254] __alloc_skb+0x9a/0x4c0 [ 901.761689] mems_allowed=0-1 [ 901.762586] ? skb_trim+0x160/0x160 [ 901.769299] ? netlink_autobind.isra.0+0xa9/0x290 [ 901.774147] ? netlink_autobind.isra.0+0x1c5/0x290 [ 901.779083] netlink_sendmsg+0x7de/0xbe0 [ 901.779954] Node 0 [ 901.783238] ? netlink_unicast+0x620/0x620 [ 901.783249] ? SYSC_sendto+0x2b0/0x2b0 [ 901.793588] ? security_socket_sendmsg+0x83/0xb0 [ 901.798360] ? netlink_unicast+0x620/0x620 [ 901.802609] sock_sendmsg+0xc5/0x100 [ 901.806335] ___sys_sendmsg+0x70a/0x840 [ 901.807024] DMA free:10340kB min:220kB low:272kB high:324kB active_anon:4164kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:124kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 901.810485] ? trace_hardirqs_on+0x10/0x10 [ 901.810497] ? copy_msghdr_from_user+0x380/0x380 [ 901.810509] ? lock_downgrade+0x6e0/0x6e0 [ 901.810520] ? find_held_lock+0x2d/0x110 [ 901.810533] ? lock_downgrade+0x6e0/0x6e0 [ 901.810548] ? __fget+0x228/0x360 [ 901.810561] ? __fget_light+0x199/0x1f0 [ 901.810571] ? sockfd_lookup_light+0xb2/0x160 [ 901.810582] __sys_sendmsg+0xa3/0x120 [ 901.810591] ? SyS_shutdown+0x160/0x160 [ 901.810602] ? wait_for_completion+0x390/0x390 [ 901.810617] ? SyS_read+0x210/0x210 [ 901.810626] ? SyS_clock_settime+0x1a0/0x1a0 [ 901.810639] SyS_sendmsg+0x27/0x40 [ 901.900669] ? __sys_sendmsg+0x120/0x120 [ 901.904726] do_syscall_64+0x1d5/0x640 [ 901.908786] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 901.910466] lowmem_reserve[]: [ 901.913960] RIP: 0033:0x45c889 [ 901.913966] RSP: 002b:00007f27682d5c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 901.913977] RAX: ffffffffffffffda RBX: 00007f27682d66d4 RCX: 000000000045c889 [ 901.930502] 0 [ 901.935770] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 901.935775] RBP: 000000000076bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 901.935779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 901.935784] R13: 00000000000009f7 R14: 00000000004ccb31 R15: 0000000000000000 [ 901.974595] CPU: 1 PID: 31235 Comm: syz-executor.1 Not tainted 4.14.176-syzkaller #0 [ 901.982685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 901.992395] Call Trace: [ 901.994998] dump_stack+0x13e/0x194 [ 901.998639] warn_alloc.cold+0x96/0x1af [ 902.002716] ? zone_watermark_ok_safe+0x280/0x280 [ 902.007584] ? wait_for_completion+0x390/0x390 [ 902.012180] __alloc_pages_slowpath+0x2114/0x26c0 [ 902.017054] ? warn_alloc+0xf0/0xf0 [ 902.020689] ? find_held_lock+0x2d/0x110 [ 902.024758] ? fs_reclaim_acquire+0x10/0x10 [ 902.030316] __alloc_pages_nodemask+0x5d3/0x700 [ 902.034997] ? rcu_read_lock_sched_held+0x10a/0x130 [ 902.040982] ? __alloc_pages_nodemask+0x5e0/0x700 [ 902.045839] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 902.050874] alloc_pages_current+0xe7/0x1e0 [ 902.055251] kvm_mmu_create+0xd1/0x1c0 [ 902.059150] kvm_arch_vcpu_init+0x28b/0x8b0 [ 902.063482] ? alloc_pages_current+0xef/0x1e0 [ 902.067993] kvm_vcpu_init+0x26d/0x360 [ 902.071922] vmx_create_vcpu+0xf3/0x2900 [ 902.076707] ? __mutex_unlock_slowpath+0x75/0x780 [ 902.081567] ? handle_rdmsr+0x6b0/0x6b0 [ 902.085578] kvm_vm_ioctl+0x49c/0x1430 [ 902.089477] ? __lock_acquire+0x5f7/0x4620 [ 902.093724] ? kvm_vcpu_release+0xa0/0xa0 [ 902.097885] ? trace_hardirqs_on+0x10/0x10 [ 902.102141] ? trace_hardirqs_on+0x10/0x10 [ 902.106500] ? save_trace+0x290/0x290 [ 902.110315] ? __might_fault+0x104/0x1b0 [ 902.114390] ? kvm_vcpu_release+0xa0/0xa0 [ 902.118558] do_vfs_ioctl+0x75a/0xfe0 [ 902.122372] ? selinux_file_mprotect+0x5c0/0x5c0 [ 902.127148] ? ioctl_preallocate+0x1a0/0x1a0 [ 902.131604] ? security_file_ioctl+0x76/0xb0 [ 902.136215] ? security_file_ioctl+0x83/0xb0 [ 902.140642] SyS_ioctl+0x7f/0xb0 [ 902.144020] ? do_vfs_ioctl+0xfe0/0xfe0 [ 902.148005] do_syscall_64+0x1d5/0x640 [ 902.151914] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 902.157372] RIP: 0033:0x45c889 01:43:43 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x58080, &(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRESDEC]) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}}, 0xfffffdef) ftruncate(r0, 0x0) [ 902.160561] RSP: 002b:00007fed312fac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 902.168278] RAX: ffffffffffffffda RBX: 00007fed312fb6d4 RCX: 000000000045c889 [ 902.175561] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006 [ 902.182841] RBP: 000000000076bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 902.191036] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 902.198849] R13: 0000000000000390 R14: 00000000004c60a9 R15: 000000000076bfac [ 902.226997] 2557 2557 2557 2557 [ 902.231956] Node 0 DMA32 free:20628kB min:36272kB low:45340kB high:54408kB active_anon:1940012kB inactive_anon:16080kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2621268kB mlocked:0kB kernel_stack:12096kB pagetables:30812kB bounce:0kB free_pcp:312kB local_pcp:128kB free_cma:0kB [ 902.353214] lowmem_reserve[]: 0 0 0 0 0 [ 902.369596] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 01:43:43 executing program 2 (fault-call:2 fault-nth:0): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, 0x0, 0x0) [ 902.504554] lowmem_reserve[]: 0 0 0 0 0 [ 902.514856] Node 1 Normal free:1660976kB min:53612kB low:67012kB high:80412kB active_anon:1245068kB inactive_anon:15748kB active_file:57232kB inactive_file:35964kB unevictable:0kB writepending:5400kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:8992kB pagetables:21052kB bounce:0kB free_pcp:1020kB local_pcp:428kB free_cma:0kB 01:43:43 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x10000, 0x0) r2 = dup(r1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r4, 0x4068aea3, &(0x7f0000000200)={0x79}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r7, 0x4068aea3, &(0x7f0000000200)={0x79}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r8, 0x4048ae9b, &(0x7f00000000c0)={0x40001, 0x0, [0x7, 0xc4, 0x5282185f, 0x7, 0xe8b40000000000, 0x8, 0x8, 0x1]}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r2, 0xc0045520, &(0x7f0000000000)=0x4) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000180)={0x7fff, 0x4c8, 0x80, 0x1, 0x20, "e82550cc5135b980926e8f3ca16049c60f7594", 0xffffffff, 0x2}) [ 902.597226] lowmem_reserve[]: 0 0 0 0 0 [ 902.601873] Node 0 DMA: 1*4kB (M) 8*8kB (UM) 6*16kB (UM) 2*32kB (UM) 0*64kB 1*128kB (M) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (M) = 10340kB [ 902.637202] Node 0 DMA32: 287*4kB (UME) 131*8kB (UM) 38*16kB (UM) 514*32kB (UM) 2*64kB (U) 10*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20660kB [ 902.662557] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 902.692568] Node 1 Normal: 39*4kB (UME) 61*8kB (UME) 29*16kB (UME) 14*32kB (UE) 7*64kB (UME) 4*128kB (UE) 11*256kB (UME) 29*512kB (UM) 10*1024kB (UME) 2*2048kB (UE) 395*4096kB (M) = 1652436kB [ 902.726971] syz-executor.2: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 902.737764] warn_alloc_show_mem: 3 callbacks suppressed [ 902.737766] Mem-Info: [ 902.745678] active_anon:797286 inactive_anon:7957 isolated_anon:0 [ 902.745678] active_file:14309 inactive_file:10817 isolated_file:0 [ 902.745678] unevictable:0 dirty:3156 writeback:0 unstable:0 [ 902.745678] slab_reclaimable:57108 slab_unreclaimable:202387 [ 902.745678] mapped:62832 shmem:9961 pagetables:12997 bounce:0 [ 902.745678] free:421167 free_pcp:45 free_cma:0 [ 902.807193] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 902.812363] CPU: 1 PID: 31272 Comm: syz-executor.2 Not tainted 4.14.176-syzkaller #0 [ 902.820274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 902.829212] syz-executor.2: [ 902.829910] Call Trace: [ 902.829930] dump_stack+0x13e/0x194 [ 902.829944] warn_alloc.cold+0x96/0x1af [ 902.829956] ? zone_watermark_ok_safe+0x280/0x280 [ 902.848414] ? wait_for_completion+0x390/0x390 [ 902.853028] __alloc_pages_slowpath+0x2114/0x26c0 [ 902.857869] ? warn_alloc+0xf0/0xf0 [ 902.861481] ? find_held_lock+0x2d/0x110 [ 902.865611] ? fs_reclaim_acquire+0x10/0x10 [ 902.869923] __alloc_pages_nodemask+0x5d3/0x700 [ 902.874593] ? rcu_read_lock_sched_held+0x10a/0x130 [ 902.880381] ? __alloc_pages_nodemask+0x5e0/0x700 [ 902.885207] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 902.890223] alloc_pages_current+0xe7/0x1e0 [ 902.894792] kvm_mmu_create+0xd1/0x1c0 [ 902.899041] kvm_arch_vcpu_init+0x28b/0x8b0 [ 902.903622] ? alloc_pages_current+0xef/0x1e0 [ 902.908128] kvm_vcpu_init+0x26d/0x360 [ 902.912035] vmx_create_vcpu+0xf3/0x2900 [ 902.916189] ? __mutex_unlock_slowpath+0x75/0x780 [ 902.921027] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 902.926031] ? handle_rdmsr+0x6b0/0x6b0 [ 902.929993] kvm_vm_ioctl+0x49c/0x1430 [ 902.933878] ? __lock_acquire+0x5f7/0x4620 [ 902.938106] ? kvm_vcpu_release+0xa0/0xa0 [ 902.942272] ? trace_hardirqs_on+0x10/0x10 [ 902.946518] ? trace_hardirqs_on+0x10/0x10 [ 902.951737] ? save_trace+0x290/0x290 [ 902.956070] ? __might_fault+0x104/0x1b0 [ 902.960440] ? kvm_vcpu_release+0xa0/0xa0 [ 902.964596] do_vfs_ioctl+0x75a/0xfe0 [ 902.970474] ? selinux_file_mprotect+0x5c0/0x5c0 [ 902.976886] ? ioctl_preallocate+0x1a0/0x1a0 [ 902.981352] ? security_file_ioctl+0x76/0xb0 [ 902.986723] ? security_file_ioctl+0x83/0xb0 [ 902.991130] SyS_ioctl+0x7f/0xb0 [ 902.994480] ? do_vfs_ioctl+0xfe0/0xfe0 [ 902.998447] do_syscall_64+0x1d5/0x640 [ 903.002338] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 903.009504] RIP: 0033:0x45c889 [ 903.012699] RSP: 002b:00007f12a54e4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 903.021560] RAX: ffffffffffffffda RBX: 00007f12a54e56d4 RCX: 000000000045c889 [ 903.029039] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006 [ 903.037653] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 903.045108] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 903.052373] R13: 0000000000000390 R14: 00000000004c60a9 R15: 000000000076bf0c [ 903.077164] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 903.083056] page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 903.126219] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 903.145240] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 903.155119] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 903.165524] Node 0 active_anon:1944176kB inactive_anon:16080kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216544kB dirty:4kB writeback:0kB shmem:16756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1153024kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 903.183652] syz-executor.2 cpuset= [ 903.195043] 34855 total pagecache pages [ 903.206451] 0 pages in swap cache [ 903.211059] Swap cache stats: add 0, delete 0, find 0/0 [ 903.216535] Free swap = 0kB [ 903.220678] Total swap = 0kB [ 903.223808] 1965979 pages RAM [ 903.227021] Node 1 active_anon:1245192kB inactive_anon:15748kB active_file:57228kB inactive_file:41108kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34956kB dirty:10360kB writeback:28kB shmem:23088kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 903.258503] 0 pages HighMem/MovableOnly [ 903.262278] / mems_allowed=0-1 [ 903.262603] 339050 pages reserved [ 903.271040] 0 pages cma reserved [ 903.283524] CPU: 0 PID: 31276 Comm: syz-executor.2 Not tainted 4.14.176-syzkaller #0 [ 903.290342] Node 0 [ 903.291624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 903.291628] Call Trace: [ 903.291644] dump_stack+0x13e/0x194 [ 903.291658] warn_alloc.cold+0x96/0x1af [ 903.301350] DMA free:10340kB min:220kB low:272kB high:324kB active_anon:4164kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:124kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 903.307058] ? zone_watermark_ok_safe+0x280/0x280 [ 903.307077] ? wait_for_completion+0x390/0x390 [ 903.307091] __alloc_pages_slowpath+0x2114/0x26c0 [ 903.307113] ? warn_alloc+0xf0/0xf0 [ 903.307123] ? find_held_lock+0x2d/0x110 [ 903.307132] ? fs_reclaim_acquire+0x10/0x10 [ 903.307150] __alloc_pages_nodemask+0x5d3/0x700 [ 903.307163] ? rcu_read_lock_sched_held+0x10a/0x130 [ 903.315954] lowmem_reserve[]: [ 903.318379] ? __alloc_pages_nodemask+0x5e0/0x700 [ 903.318390] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 903.318408] alloc_pages_current+0xe7/0x1e0 [ 903.318421] kvm_mmu_create+0xd1/0x1c0 [ 903.318433] kvm_arch_vcpu_init+0x28b/0x8b0 [ 903.318440] ? alloc_pages_current+0xef/0x1e0 [ 903.318451] kvm_vcpu_init+0x26d/0x360 [ 903.318463] vmx_create_vcpu+0xf3/0x2900 [ 903.318479] ? __mutex_unlock_slowpath+0x75/0x780 [ 903.318490] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 903.318501] ? handle_rdmsr+0x6b0/0x6b0 [ 903.318515] kvm_vm_ioctl+0x49c/0x1430 [ 903.318528] ? __lock_acquire+0x5f7/0x4620 [ 903.318536] ? kvm_vcpu_release+0xa0/0xa0 [ 903.318548] ? trace_hardirqs_on+0x10/0x10 [ 903.364707] 0 [ 903.367670] ? trace_hardirqs_on+0x10/0x10 01:43:44 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)) mmap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = dup(0xffffffffffffffff) write$cgroup_type(r3, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) r4 = dup(0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0) syz_genetlink_get_family_id$nl80211(0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000001c0)=""/13, &(0x7f0000000280)=0xd) pipe(0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000040)={0x0, 0x2, 0x7, 0x0, 0x8, 0x0, 0x1, 0x5, 0x7, 0xe1, 0x5, 0x8e, 0x0, 0x5, 0xa672, 0xcb, 0xc0, 0xfd, 0x80, [], 0x4, 0x81}) 01:43:44 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000040)={{0x1, 0x0, @descriptor="6b2e34bb2e198526"}}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) write$UHID_DESTROY(r1, &(0x7f0000000000), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000020901080000000000000000000000000d000300686173683a6e65740000000005000400000000000900020073797a71000000000500010006000000050005000a000000"], 0x1}}, 0x4002801) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) [ 903.367682] ? save_trace+0x290/0x290 [ 903.367692] ? __might_fault+0x104/0x1b0 [ 903.367708] ? kvm_vcpu_release+0xa0/0xa0 [ 903.367725] do_vfs_ioctl+0x75a/0xfe0 [ 903.367737] ? selinux_file_mprotect+0x5c0/0x5c0 [ 903.367748] ? ioctl_preallocate+0x1a0/0x1a0 [ 903.367767] ? security_file_ioctl+0x76/0xb0 [ 903.374712] 2557 [ 903.376855] ? security_file_ioctl+0x83/0xb0 [ 903.376872] SyS_ioctl+0x7f/0xb0 [ 903.391137] 2557 [ 903.394934] ? do_vfs_ioctl+0xfe0/0xfe0 [ 903.394950] do_syscall_64+0x1d5/0x640 [ 903.394967] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 903.399821] 2557 [ 903.404083] RIP: 0033:0x45c889 [ 903.404089] RSP: 002b:00007f12a54c3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 903.404099] RAX: ffffffffffffffda RBX: 00007f12a54c46d4 RCX: 000000000045c889 [ 903.404105] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000008 [ 903.404110] RBP: 000000000076bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 903.404114] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 903.404123] R13: 0000000000000390 R14: 00000000004c60a9 R15: 000000000076bfac [ 903.421014] 2557 [ 903.580362] Node 0 DMA32 free:20812kB min:36272kB low:45340kB high:54408kB active_anon:1940012kB inactive_anon:16080kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2621268kB mlocked:0kB kernel_stack:12096kB pagetables:30812kB bounce:0kB free_pcp:140kB local_pcp:140kB free_cma:0kB [ 903.631873] lowmem_reserve[]: 0 0 0 0 0 [ 903.636049] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 01:43:44 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000000)='./bus/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYPTR64, @ANYRES16]) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}}, 0xfffffdef) ftruncate(r0, 0x0) [ 903.806086] lowmem_reserve[]: 0 0 0 0 0 [ 903.836574] Node 1 Normal free:1663040kB min:53612kB low:67012kB high:80412kB active_anon:1245092kB inactive_anon:15748kB active_file:57228kB inactive_file:31108kB unevictable:0kB writepending:164kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:9216kB pagetables:20960kB bounce:0kB free_pcp:672kB local_pcp:240kB free_cma:0kB [ 903.965094] warn_alloc_show_mem: 2 callbacks suppressed [ 903.965098] Mem-Info: [ 903.986634] active_anon:797349 inactive_anon:7958 isolated_anon:0 [ 903.986634] active_file:14308 inactive_file:7757 isolated_file:0 [ 903.986634] unevictable:0 dirty:52 writeback:0 unstable:0 [ 903.986634] slab_reclaimable:57181 slab_unreclaimable:202728 [ 903.986634] mapped:62890 shmem:9962 pagetables:12985 bounce:0 [ 903.986634] free:423682 free_pcp:260 free_cma:0 [ 904.030791] lowmem_reserve[]: 0 0 0 0 0 [ 904.054934] Node 0 DMA: 1*4kB (M) 8*8kB (UM) 6*16kB (UM) 2*32kB (UM) 0*64kB 1*128kB (M) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (M) = 10340kB 01:43:45 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x57) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000100)={0xa, {0x7, 0x1, 0x3f}}, 0xa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x84, r4, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x4}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xa70000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xec}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x52e}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x200488c5}, 0x4000) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x8401, 0x0) write$binfmt_elf32(r0, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}}, 0xfffffdef) ftruncate(r0, 0x0) fcntl$setstatus(r0, 0x4, 0x40000) [ 904.096817] Node 0 active_anon:1944176kB inactive_anon:16080kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216544kB dirty:4kB writeback:0kB shmem:16756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1153024kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes 01:43:45 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000200)={0x79}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_DEBUGREGS(r4, 0x4080aea2, &(0x7f0000000000)={[0x4, 0x2, 0x1000], 0x0, 0xf71b1703c9dcd77a, 0x1fc}) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ocfs2_control\x00', 0x40000, 0x0) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000003740)='NLBL_UNLBL\x00') r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, r7, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6a5}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4048841) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x30, r6, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r6, 0x2, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netdevsim0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) [ 904.158804] Node 0 DMA32: 299*4kB (UM) 157*8kB (UME) 37*16kB (UM) 514*32kB (UME) 1*64kB (U) 10*128kB (ME) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20836kB [ 904.199676] Node 1 active_anon:1245220kB inactive_anon:15752kB active_file:57228kB inactive_file:31024kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:204kB writeback:0kB shmem:23092kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 904.276427] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 904.280439] [ 904.288838] ===================================================== [ 904.295086] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 904.301824] 4.14.176-syzkaller #0 Not tainted [ 904.306294] ----------------------------------------------------- [ 904.312502] syz-executor.5/31323 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 904.319976] (&(&info->lock)->rlock){+.+.}, at: [] shmem_uncharge+0x24/0x250 [ 904.328729] [ 904.328729] and this task is already holding: [ 904.334745] (&(&mapping->tree_lock)->rlock){-.-.}, at: [] split_huge_page_to_list+0x548/0x1f40 [ 904.345139] which would create a new lock dependency: [ 904.350317] (&(&mapping->tree_lock)->rlock){-.-.} -> (&(&info->lock)->rlock){+.+.} [ 904.358112] [ 904.358112] but this new dependency connects a HARDIRQ-irq-safe lock: [ 904.366338] (&(&mapping->tree_lock)->rlock){-.-.} [ 904.366344] [ 904.366344] ... which became HARDIRQ-irq-safe at: [ 904.377852] lock_acquire+0x170/0x3f0 [ 904.381733] _raw_spin_lock_irqsave+0x8c/0xbf [ 904.386298] test_clear_page_writeback+0x199/0xc20 [ 904.391349] end_page_writeback+0xe4/0x210 [ 904.395728] ext4_finish_bio+0x483/0x710 [ 904.399862] ext4_end_bio+0x14b/0x5a0 [ 904.403740] bio_endio+0x315/0x670 [ 904.407359] blk_update_request+0x27a/0x9d0 [ 904.411804] scsi_end_request+0x7d/0x9b0 [ 904.416112] scsi_io_completion+0xa63/0x1590 [ 904.420604] scsi_softirq_done+0x2c8/0x360 [ 904.424912] __blk_mq_complete_request+0x30b/0x6c0 [ 904.429929] blk_mq_complete_request+0x51/0x60 [ 904.434694] virtscsi_vq_done+0xa7/0x130 [ 904.438990] vring_interrupt+0x101/0x150 [ 904.443147] __handle_irq_event_percpu+0x125/0x7e0 [ 904.448217] handle_irq_event_percpu+0x66/0x120 [ 904.452954] handle_irq_event+0xa2/0x12d [ 904.457111] handle_edge_irq+0x215/0x810 [ 904.461395] handle_irq+0x35/0x50 [ 904.464919] do_IRQ+0x93/0x1d0 [ 904.468190] ret_from_intr+0x0/0x1e [ 904.471935] [ 904.471935] to a HARDIRQ-irq-unsafe lock: [ 904.477645] (&(&info->lock)->rlock){+.+.} [ 904.477653] [ 904.477653] ... which became HARDIRQ-irq-unsafe at: [ 904.488344] ... [ 904.488359] lock_acquire+0x170/0x3f0 [ 904.494125] _raw_spin_lock+0x2a/0x40 [ 904.498006] shmem_mfill_atomic_pte+0x11ba/0x1790 [ 904.502930] shmem_mfill_zeropage_pte+0x81/0xa0 [ 904.507744] mfill_zeropage+0x773/0xcd0 [ 904.511813] userfaultfd_ioctl+0x10da/0x2f80 [ 904.516315] do_vfs_ioctl+0x75a/0xfe0 [ 904.520199] SyS_ioctl+0x7f/0xb0 [ 904.523639] do_syscall_64+0x1d5/0x640 [ 904.527605] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 904.532858] [ 904.532858] other info that might help us debug this: [ 904.532858] [ 904.540987] Possible interrupt unsafe locking scenario: [ 904.540987] [ 904.547896] CPU0 CPU1 [ 904.552540] ---- ---- [ 904.557236] lock(&(&info->lock)->rlock); [ 904.561582] local_irq_disable(); [ 904.567666] lock(&(&mapping->tree_lock)->rlock); [ 904.575191] lock(&(&info->lock)->rlock); [ 904.582033] [ 904.585029] lock(&(&mapping->tree_lock)->rlock); [ 904.590127] [ 904.590127] *** DEADLOCK *** [ 904.590127] [ 904.596165] 5 locks held by syz-executor.5/31323: [ 904.600980] #0: (shrinker_rwsem){++++}, at: [] shrink_slab.part.0+0xb0/0xa50 [ 904.609892] #1: (&type->s_umount_key#34){++++}, at: [] trylock_super+0x1b/0xe0 [ 904.618970] #2: (&mapping->i_mmap_rwsem){++++}, at: [] split_huge_page_to_list+0x28d/0x1f40 [ 904.629176] #3: (&(&pgdat->lru_lock)->rlock){-.-.}, at: [] split_huge_page_to_list+0x529/0x1f40 [ 904.639738] #4: (&(&mapping->tree_lock)->rlock){-.-.}, at: [] split_huge_page_to_list+0x548/0x1f40 [ 904.650552] [ 904.650552] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 904.659569] -> (&(&mapping->tree_lock)->rlock){-.-.} ops: 1157811 { [ 904.665972] IN-HARDIRQ-W at: [ 904.669244] lock_acquire+0x170/0x3f0 [ 904.674674] _raw_spin_lock_irqsave+0x8c/0xbf [ 904.680799] test_clear_page_writeback+0x199/0xc20 [ 904.687353] end_page_writeback+0xe4/0x210 [ 904.693231] ext4_finish_bio+0x483/0x710 [ 904.698943] ext4_end_bio+0x14b/0x5a0 [ 904.705208] bio_endio+0x315/0x670 [ 904.710532] blk_update_request+0x27a/0x9d0 [ 904.716487] scsi_end_request+0x7d/0x9b0 [ 904.722177] scsi_io_completion+0xa63/0x1590 [ 904.728212] scsi_softirq_done+0x2c8/0x360 [ 904.734074] __blk_mq_complete_request+0x30b/0x6c0 [ 904.740649] blk_mq_complete_request+0x51/0x60 [ 904.746877] virtscsi_vq_done+0xa7/0x130 [ 904.752695] vring_interrupt+0x101/0x150 [ 904.758388] __handle_irq_event_percpu+0x125/0x7e0 [ 904.765033] handle_irq_event_percpu+0x66/0x120 [ 904.771358] handle_irq_event+0xa2/0x12d [ 904.777085] handle_edge_irq+0x215/0x810 [ 904.782879] handle_irq+0x35/0x50 [ 904.787969] do_IRQ+0x93/0x1d0 [ 904.792899] ret_from_intr+0x0/0x1e [ 904.798155] IN-SOFTIRQ-W at: [ 904.801447] lock_acquire+0x170/0x3f0 [ 904.806881] _raw_spin_lock_irqsave+0x8c/0xbf [ 904.813006] test_clear_page_writeback+0x199/0xc20 [ 904.819577] end_page_writeback+0xe4/0x210 [ 904.825441] end_buffer_async_write+0x367/0x6a0 [ 904.831752] end_bio_bh_io_sync+0xbf/0x100 [ 904.837627] bio_endio+0x315/0x670 [ 904.842794] blk_update_request+0x27a/0x9d0 [ 904.848758] scsi_end_request+0x7d/0x9b0 [ 904.854449] scsi_io_completion+0xa63/0x1590 [ 904.860491] scsi_softirq_done+0x2c8/0x360 [ 904.866354] __blk_mq_complete_request+0x30b/0x6c0 [ 904.872909] blk_mq_complete_request+0x51/0x60 [ 904.879136] virtscsi_vq_done+0xa7/0x130 [ 904.884831] vring_interrupt+0x101/0x150 [ 904.890533] __handle_irq_event_percpu+0x125/0x7e0 [ 904.897086] handle_irq_event_percpu+0x66/0x120 [ 904.903381] handle_irq_event+0xa2/0x12d [ 904.909068] handle_edge_irq+0x215/0x810 [ 904.914755] handle_irq+0x35/0x50 [ 904.919853] do_IRQ+0x93/0x1d0 [ 904.924690] ret_from_intr+0x0/0x1e [ 904.930063] kfree+0xf4/0x260 [ 904.934812] skb_free_head+0x83/0xa0 [ 904.940809] skb_release_data+0x528/0x7b0 [ 904.946616] skb_release_all+0x46/0x60 [ 904.952140] consume_skb+0xa7/0x330 [ 904.957427] __dev_kfree_skb_any+0x7a/0xa0 [ 904.963335] free_old_xmit_skbs.isra.0+0x178/0x2a0 [ 904.969916] start_xmit+0x148/0x1400 [ 904.975275] dev_hard_start_xmit+0x186/0x890 [ 904.981383] sch_direct_xmit+0x25f/0x510 [ 904.987085] __dev_queue_xmit+0x1b6e/0x25c0 [ 904.993048] ip_finish_output2+0xde8/0x14a0 [ 904.999009] ip_finish_output+0x556/0xc30 [ 905.004782] ip_output+0x1c2/0x520 [ 905.009962] ip_local_out+0x93/0x170 [ 905.016864] ip_queue_xmit+0x7b2/0x1b20 [ 905.022465] __tcp_transmit_skb+0x1654/0x2dd0 [ 905.028585] __tcp_send_ack.part.0+0x3ab/0x5a0 [ 905.034792] tcp_send_ack+0x6f/0x90 [ 905.040048] __tcp_ack_snd_check+0xf6/0x380 [ 905.046005] tcp_rcv_established+0x1122/0x15d0 [ 905.052222] tcp_v4_do_rcv+0x55d/0x7e0 [ 905.057759] tcp_v4_rcv+0x25ac/0x3250 [ 905.063210] ip_local_deliver_finish+0x245/0xaa0 [ 905.069593] ip_local_deliver+0x1a6/0x450 [ 905.075378] ip_rcv_finish+0x79b/0x1a10 [ 905.080990] ip_rcv+0x9d8/0xfec [ 905.085897] __netif_receive_skb_core+0x1e50/0x2c00 [ 905.092537] __netif_receive_skb+0x27/0x1a0 [ 905.098496] netif_receive_skb_internal+0xd7/0x580 [ 905.105067] napi_gro_receive+0x2ed/0x410 [ 905.110844] receive_buf+0x4e6/0x4480 [ 905.116284] virtnet_poll+0x4d3/0x9b3 [ 905.121719] net_rx_action+0x456/0xe90 [ 905.127349] __do_softirq+0x254/0x9bf [ 905.132783] irq_exit+0x15b/0x1a0 [ 905.137868] do_IRQ+0x112/0x1d0 [ 905.142806] ret_from_intr+0x0/0x1e [ 905.148059] native_safe_halt+0xe/0x10 [ 905.153593] default_idle+0x47/0x370 [ 905.158932] do_idle+0x250/0x3c0 [ 905.163924] cpu_startup_entry+0x14/0x20 [ 905.169636] start_kernel+0x659/0x676 [ 905.175063] secondary_startup_64+0xa5/0xb0 [ 905.181015] INITIAL USE at: [ 905.184206] lock_acquire+0x170/0x3f0 [ 905.189555] _raw_spin_lock_irq+0x5b/0x80 [ 905.195260] __add_to_page_cache_locked+0x286/0x870 [ 905.201825] add_to_page_cache_lru+0xe9/0x300 [ 905.207867] do_read_cache_page+0x6d5/0x12a0 [ 905.213829] read_dev_sector+0xbf/0x3d0 [ 905.219392] adfspart_check_ICS+0xf3/0xc10 [ 905.225168] check_partition+0x33f/0x62d [ 905.230768] rescan_partitions+0x1e5/0x850 [ 905.236541] __blkdev_get+0x926/0x10d0 [ 905.241967] blkdev_get+0x84/0x8a0 [ 905.247058] device_add_disk+0x897/0xd80 [ 905.252657] brd_init+0x214/0x3c9 [ 905.257648] do_one_initcall+0x88/0x202 [ 905.263164] kernel_init_freeable+0x465/0x526 [ 905.269210] kernel_init+0xd/0x15b [ 905.274300] ret_from_fork+0x24/0x30 [ 905.279548] } [ 905.281329] ... key at: [] __key.49022+0x0/0x40 [ 905.288051] ... acquired at: [ 905.291137] lock_acquire+0x170/0x3f0 [ 905.295087] _raw_spin_lock_irqsave+0x8c/0xbf [ 905.299753] shmem_uncharge+0x24/0x250 [ 905.303789] split_huge_page_to_list+0x1590/0x1f40 [ 905.308882] shmem_unused_huge_shrink+0x5ca/0x1180 [ 905.313963] shmem_unused_huge_scan+0x70/0xa0 [ 905.318619] super_cache_scan+0x333/0x460 [ 905.322926] shrink_slab.part.0+0x3bb/0xa50 [ 905.327475] shrink_node+0x848/0xb60 [ 905.331471] do_try_to_free_pages+0x357/0xe80 [ 905.336124] try_to_free_pages+0x233/0x6e0 [ 905.340515] __alloc_pages_slowpath+0x91d/0x26c0 [ 905.345468] __alloc_pages_nodemask+0x5d3/0x700 [ 905.350289] alloc_pages_current+0xe7/0x1e0 [ 905.354763] kvm_mmu_create+0xd1/0x1c0 [ 905.358801] kvm_arch_vcpu_init+0x28b/0x8b0 [ 905.363288] kvm_vcpu_init+0x26d/0x360 [ 905.367329] vmx_create_vcpu+0xf3/0x2900 [ 905.371541] kvm_vm_ioctl+0x49c/0x1430 [ 905.375580] do_vfs_ioctl+0x75a/0xfe0 [ 905.379530] SyS_ioctl+0x7f/0xb0 [ 905.383064] do_syscall_64+0x1d5/0x640 [ 905.387119] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 905.392453] [ 905.394064] [ 905.394064] the dependencies between the lock to be acquired [ 905.394068] and HARDIRQ-irq-unsafe lock: [ 905.405774] -> (&(&info->lock)->rlock){+.+.} ops: 96687 { [ 905.411300] HARDIRQ-ON-W at: [ 905.414568] lock_acquire+0x170/0x3f0 [ 905.420112] _raw_spin_lock+0x2a/0x40 [ 905.425551] shmem_mfill_atomic_pte+0x11ba/0x1790 [ 905.432021] shmem_mfill_zeropage_pte+0x81/0xa0 [ 905.438316] mfill_zeropage+0x773/0xcd0 [ 905.443940] userfaultfd_ioctl+0x10da/0x2f80 [ 905.450114] do_vfs_ioctl+0x75a/0xfe0 [ 905.455684] SyS_ioctl+0x7f/0xb0 [ 905.460706] do_syscall_64+0x1d5/0x640 [ 905.466224] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 905.473038] SOFTIRQ-ON-W at: [ 905.476299] lock_acquire+0x170/0x3f0 [ 905.481726] _raw_spin_lock+0x2a/0x40 [ 905.487165] shmem_mfill_atomic_pte+0x11ba/0x1790 [ 905.493633] shmem_mfill_zeropage_pte+0x81/0xa0 [ 905.499946] mfill_zeropage+0x773/0xcd0 [ 905.505574] userfaultfd_ioctl+0x10da/0x2f80 [ 905.511615] do_vfs_ioctl+0x75a/0xfe0 [ 905.517055] SyS_ioctl+0x7f/0xb0 [ 905.522054] do_syscall_64+0x1d5/0x640 [ 905.527569] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 905.534382] INITIAL USE at: [ 905.537557] lock_acquire+0x170/0x3f0 [ 905.542912] _raw_spin_lock_irq+0x5b/0x80 [ 905.548616] shmem_getpage_gfp+0x17c6/0x2790 [ 905.554573] shmem_write_begin+0xf4/0x190 [ 905.560376] generic_perform_write+0x1c9/0x420 [ 905.566557] __generic_file_write_iter+0x227/0x590 [ 905.573034] generic_file_write_iter+0x2fa/0x650 [ 905.579333] __vfs_write+0x44e/0x630 [ 905.584724] vfs_write+0x192/0x4e0 [ 905.589822] SyS_write+0xf2/0x210 [ 905.594833] do_syscall_64+0x1d5/0x640 [ 905.600414] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 905.607146] } [ 905.608932] ... key at: [] __key.49220+0x0/0x40 [ 905.615780] ... acquired at: [ 905.618866] lock_acquire+0x170/0x3f0 [ 905.622899] _raw_spin_lock_irqsave+0x8c/0xbf [ 905.627544] shmem_uncharge+0x24/0x250 [ 905.631581] split_huge_page_to_list+0x1590/0x1f40 [ 905.636661] shmem_unused_huge_shrink+0x5ca/0x1180 [ 905.641746] shmem_unused_huge_scan+0x70/0xa0 [ 905.646390] super_cache_scan+0x333/0x460 [ 905.650705] shrink_slab.part.0+0x3bb/0xa50 [ 905.655193] shrink_node+0x848/0xb60 [ 905.659057] do_try_to_free_pages+0x357/0xe80 [ 905.663701] try_to_free_pages+0x233/0x6e0 [ 905.668102] __alloc_pages_slowpath+0x91d/0x26c0 [ 905.673024] __alloc_pages_nodemask+0x5d3/0x700 [ 905.677843] alloc_pages_current+0xe7/0x1e0 [ 905.682313] kvm_mmu_create+0xd1/0x1c0 [ 905.686350] kvm_arch_vcpu_init+0x28b/0x8b0 [ 905.690837] kvm_vcpu_init+0x26d/0x360 [ 905.694874] vmx_create_vcpu+0xf3/0x2900 [ 905.699084] kvm_vm_ioctl+0x49c/0x1430 [ 905.703123] do_vfs_ioctl+0x75a/0xfe0 [ 905.707071] SyS_ioctl+0x7f/0xb0 [ 905.710585] do_syscall_64+0x1d5/0x640 [ 905.714621] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 905.719966] [ 905.721574] [ 905.721574] stack backtrace: [ 905.726064] CPU: 0 PID: 31323 Comm: syz-executor.5 Not tainted 4.14.176-syzkaller #0 [ 905.736891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 905.746233] Call Trace: [ 905.748808] dump_stack+0x13e/0x194 [ 905.752418] check_usage.cold+0x60e/0x97b [ 905.756665] ? unwind_next_frame+0xbc6/0x17a0 [ 905.761160] ? check_usage_forwards+0x300/0x300 [ 905.765828] ? unwind_next_frame+0xbc6/0x17a0 [ 905.770395] ? bpf_prog_kallsyms_find+0x36/0x260 [ 905.775204] ? __kernel_text_address+0x9/0x30 [ 905.779701] ? unwind_get_return_address+0x5a/0xa0 [ 905.784622] ? __lock_acquire+0x1d77/0x4620 [ 905.788927] __lock_acquire+0x1d77/0x4620 [ 905.793081] ? trace_hardirqs_on+0x10/0x10 [ 905.797294] ? delete_node+0x1ed/0x680 [ 905.801160] ? check_preemption_disabled+0x35/0x240 [ 905.806157] ? __mod_node_page_state+0x89/0xd0 [ 905.810720] lock_acquire+0x170/0x3f0 [ 905.814495] ? shmem_uncharge+0x24/0x250 [ 905.818549] _raw_spin_lock_irqsave+0x8c/0xbf [ 905.823050] ? shmem_uncharge+0x24/0x250 [ 905.827104] shmem_uncharge+0x24/0x250 [ 905.830970] split_huge_page_to_list+0x1590/0x1f40 [ 905.835880] ? can_split_huge_page+0x2b0/0x2b0 [ 905.840439] shmem_unused_huge_shrink+0x5ca/0x1180 [ 905.845359] ? shmem_write_end+0x6e0/0x6e0 [ 905.849624] ? prune_icache_sb+0xcf/0x120 [ 905.853775] shmem_unused_huge_scan+0x70/0xa0 [ 905.858318] super_cache_scan+0x333/0x460 [ 905.862453] shrink_slab.part.0+0x3bb/0xa50 [ 905.866775] ? current_may_throttle+0x210/0x210 [ 905.871423] ? mem_cgroup_iter+0x393/0x620 [ 905.875636] shrink_node+0x848/0xb60 [ 905.879329] ? shrink_node_memcg+0x12b0/0x12b0 [ 905.883887] ? ktime_get+0x1b4/0x2c0 [ 905.887580] do_try_to_free_pages+0x357/0xe80 [ 905.892060] ? shrink_node+0xb60/0xb60 [ 905.895940] try_to_free_pages+0x233/0x6e0 [ 905.900164] ? do_try_to_free_pages+0xe80/0xe80 [ 905.904811] __alloc_pages_slowpath+0x91d/0x26c0 [ 905.909558] ? bad_range+0xe7/0x3a0 [ 905.913177] ? warn_alloc+0xf0/0xf0 [ 905.916783] ? find_held_lock+0x2d/0x110 [ 905.920834] ? fs_reclaim_acquire+0x10/0x10 [ 905.925133] __alloc_pages_nodemask+0x5d3/0x700 [ 905.929782] ? rcu_read_lock_sched_held+0x10a/0x130 [ 905.934775] ? __alloc_pages_nodemask+0x5e0/0x700 [ 905.939646] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 905.944643] alloc_pages_current+0xe7/0x1e0 [ 905.948944] kvm_mmu_create+0xd1/0x1c0 [ 905.952823] kvm_arch_vcpu_init+0x28b/0x8b0 [ 905.957141] ? alloc_pages_current+0xef/0x1e0 [ 905.961621] kvm_vcpu_init+0x26d/0x360 [ 905.965493] vmx_create_vcpu+0xf3/0x2900 [ 905.969600] ? __mutex_unlock_slowpath+0x75/0x780 [ 905.974424] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 905.979438] ? handle_rdmsr+0x6b0/0x6b0 [ 905.983413] kvm_vm_ioctl+0x49c/0x1430 [ 905.987526] ? __lock_acquire+0x5f7/0x4620 [ 905.991795] ? kvm_vcpu_release+0xa0/0xa0 [ 905.995960] ? trace_hardirqs_on+0x10/0x10 [ 906.000239] ? trace_hardirqs_on+0x10/0x10 [ 906.004457] ? save_trace+0x290/0x290 [ 906.008237] ? __might_fault+0x104/0x1b0 [ 906.012429] ? kvm_vcpu_release+0xa0/0xa0 [ 906.016563] do_vfs_ioctl+0x75a/0xfe0 [ 906.020352] ? selinux_file_mprotect+0x5c0/0x5c0 [ 906.025115] ? ioctl_preallocate+0x1a0/0x1a0 [ 906.029504] ? security_file_ioctl+0x76/0xb0 [ 906.033890] ? security_file_ioctl+0x83/0xb0 [ 906.038276] SyS_ioctl+0x7f/0xb0 [ 906.041627] ? do_vfs_ioctl+0xfe0/0xfe0 [ 906.045589] do_syscall_64+0x1d5/0x640 [ 906.049457] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 906.054623] RIP: 0033:0x45c889 [ 906.057793] RSP: 002b:00007f73f5256c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 906.065477] RAX: ffffffffffffffda RBX: 00007f73f52576d4 RCX: 000000000045c889 [ 906.072723] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006 [ 906.079972] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 906.087227] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 906.094482] R13: 0000000000000390 R14: 00000000004c60a9 R15: 000000000076bf0c [ 906.140088] Node 1 Normal: 271*4kB (UM) 126*8kB (UM) 61*16kB (UME) 51*32kB (UM) 23*64kB (UM) 19*128kB (UM) 13*256kB (ME) 32*512kB (UM) 10*1024kB (UME) 3*2048kB (UME) 394*4096kB (M) = 1658524kB [ 906.168692] Node 0 DMA free:10340kB min:220kB low:272kB high:324kB active_anon:4164kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:124kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 906.206451] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 906.235183] ieee80211 phy1850: Selected rate control algorithm 'minstrel_ht' [ 906.247706] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 906.257362] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 906.272348] Node 0 DMA32 free:20712kB min:36272kB low:45340kB high:54408kB active_anon:1940012kB inactive_anon:16080kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2621268kB mlocked:0kB kernel_stack:12096kB pagetables:30812kB bounce:0kB free_pcp:336kB local_pcp:192kB free_cma:0kB [ 906.274974] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 906.329974] ieee80211 phy1850: hwaddr 02:00:00:07:3a:00 registered [ 906.368275] syz-executor.5: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 906.385800] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 906.408586] 32065 total pagecache pages [ 906.416914] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 906.417508] 0 pages in swap cache [ 906.422110] CPU: 0 PID: 31335 Comm: syz-executor.5 Not tainted 4.14.176-syzkaller #0 [ 906.433426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 906.437805] Swap cache stats: add 0, delete 0, find 0/0 [ 906.442777] Call Trace: [ 906.442794] dump_stack+0x13e/0x194 [ 906.442808] warn_alloc.cold+0x96/0x1af [ 906.458327] ? zone_watermark_ok_safe+0x280/0x280 [ 906.463188] ? wait_for_completion+0x390/0x390 [ 906.467917] __alloc_pages_slowpath+0x2114/0x26c0 [ 906.472776] ? warn_alloc+0xf0/0xf0 [ 906.472843] Free swap = 0kB [ 906.476405] __alloc_pages_nodemask+0x5d3/0x700 [ 906.476413] ? __alloc_pages_nodemask+0x381/0x700 [ 906.476422] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 906.493953] alloc_pages_current+0xe7/0x1e0 [ 906.496675] Total swap = 0kB [ 906.498281] kvm_mmu_create+0xd1/0x1c0 [ 906.498292] kvm_arch_vcpu_init+0x28b/0x8b0 [ 906.498301] ? alloc_pages_current+0xef/0x1e0 [ 906.498310] kvm_vcpu_init+0x26d/0x360 [ 906.498320] vmx_create_vcpu+0xf3/0x2900 [ 906.498332] ? __mutex_unlock_slowpath+0x75/0x780 [ 906.498341] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 906.498351] ? futex_wake+0x11b/0x3d0 [ 906.514333] 1965979 pages RAM [ 906.517936] ? handle_rdmsr+0x6b0/0x6b0 [ 906.517947] kvm_vm_ioctl+0x49c/0x1430 [ 906.517958] ? __fd_install+0x227/0x5c0 [ 906.517965] ? quarantine_put+0xf5/0x1a0 [ 906.517973] ? kvm_vcpu_release+0xa0/0xa0 [ 906.517983] ? trace_hardirqs_on+0x10/0x10 [ 906.517993] ? trace_hardirqs_on+0x10/0x10 [ 906.545518] 0 pages HighMem/MovableOnly [ 906.546589] ? trace_hardirqs_on+0x10/0x10 [ 906.546602] ? futex_exit_release+0x60/0x60 [ 906.570638] 339050 pages reserved [ 906.571182] ? kvm_put_kvm+0xa90/0xa90 [ 906.587026] ? lock_acquire+0x170/0x3f0 [ 906.591010] ? kvm_vcpu_release+0xa0/0xa0 [ 906.592842] 0 pages cma reserved [ 906.595159] do_vfs_ioctl+0x75a/0xfe0 [ 906.595173] ? selinux_file_mprotect+0x5c0/0x5c0 [ 906.607064] ? ioctl_preallocate+0x1a0/0x1a0 [ 906.611479] ? security_file_ioctl+0x76/0xb0 [ 906.615889] ? security_file_ioctl+0x83/0xb0 [ 906.620409] SyS_ioctl+0x7f/0xb0 [ 906.623779] ? do_vfs_ioctl+0xfe0/0xfe0 [ 906.627756] do_syscall_64+0x1d5/0x640 [ 906.631652] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 906.636850] RIP: 0033:0x45c889 [ 906.640036] RSP: 002b:00007f73f51f3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 906.640810] ieee80211 phy1851: Selected rate control algorithm 'minstrel_ht' [ 906.647765] RAX: ffffffffffffffda RBX: 00007f73f51f46d4 RCX: 000000000045c889 [ 906.647769] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006 [ 906.647773] RBP: 000000000076c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 906.647777] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff 01:43:47 executing program 1: vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0) [ 906.647782] R13: 0000000000000390 R14: 00000000004c60a9 R15: 000000000076c0ec [ 906.652957] lowmem_reserve[]: 0 0 0 0 0 [ 906.697463] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 906.725027] lowmem_reserve[]: 0 0 0 0 0 [ 906.729094] Node 1 Normal free:1655492kB min:53612kB low:67012kB high:80412kB active_anon:1245340kB inactive_anon:17804kB active_file:57228kB inactive_file:31132kB unevictable:0kB writepending:424kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:9536kB pagetables:21212kB bounce:0kB free_pcp:700kB local_pcp:200kB free_cma:0kB [ 906.760372] lowmem_reserve[]: 0 0 0 0 0 [ 906.761356] ieee80211 phy1851: hwaddr 02:00:00:07:3b:00 registered [ 906.766191] Node 0 DMA: 1*4kB (M) 8*8kB (UM) 6*16kB (UM) 2*32kB (UM) 0*64kB 1*128kB (M) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (M) = 10340kB [ 906.800578] Node 0 DMA32: 300*4kB (UME) 180*8kB (UME) 37*16kB (UM) 514*32kB (UME) 1*64kB (U) 9*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20896kB [ 906.815325] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB 01:43:48 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)) socketpair(0x9, 0x4, 0x3, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x1000006, 0x12, r2, 0x0) r3 = dup(0xffffffffffffffff) write$cgroup_type(r3, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0) syz_genetlink_get_family_id$nl80211(0x0) pipe(0x0) [ 906.826669] Node 1 Normal: 241*4kB (UME) 207*8kB (UM) 52*16kB (UME) 56*32kB (UM) 24*64kB (UM) 20*128kB (UME) 13*256kB (UM) 25*512kB (UM) 10*1024kB (UME) 3*2048kB (UME) 394*4096kB (M) = 1655676kB [ 906.844275] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 906.853373] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 906.862005] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 906.872921] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 906.881775] 32065 total pagecache pages [ 906.885882] 0 pages in swap cache [ 906.889590] Swap cache stats: add 0, delete 0, find 0/0 [ 906.894997] Free swap = 0kB [ 906.898098] Total swap = 0kB [ 906.901157] 1965979 pages RAM [ 906.904300] 0 pages HighMem/MovableOnly [ 906.908390] 339050 pages reserved [ 906.912006] 0 pages cma reserved [ 906.926168] Mem-Info: [ 906.928709] active_anon:797379 inactive_anon:8471 isolated_anon:0 01:43:48 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x57) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x57) getsockname$inet(r4, &(0x7f0000000280)={0x2, 0x0, @empty}, &(0x7f00000002c0)=0x10) sendmsg$SOCK_DESTROY(r4, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)={0x1468, 0x15, 0x10, 0x70bd28, 0x25dfdbfd, {0x18}, [@INET_DIAG_REQ_BYTECODE={0x8e, 0x1, "feb18c460e18450916adcaa35f9dd18fd3fd69ef1c25c26895a919ec44b183f748e3cc0d913588383ec89ac3c6ff4d27f89cb0c99e25bad16739999f026265490d7034147656791b17520f216c9962246070ac75b150cd9e5378d7f3edbc665dccf5844a8e35a05968d068ea7a0b6c097d8126f6c67a3afd8b52acc6c24d082c919b9dc57cdc827c44cb"}, @INET_DIAG_REQ_BYTECODE={0x56, 0x1, "cef4e51a5853792c459ebc9994ca44f48497b99359f5f29e7a334c53aac1de9dbc69f1ead25e460722df9492b0f1a08ab08af790d988d81cfd42aa234d71a22a4667fcf70dbab18fa1fce39e782f91b46cf4"}, @INET_DIAG_REQ_BYTECODE={0x100, 0x1, "b2cc7c4d978858d9d19ab4809bf1f20cf31e966abe20cf48ff0807f092b99ffbc0848d5c553f6d8b49ef7334323400328e20ed3b5b853c3b471aa01634409938dd0e9475c6c40383dd469fce447837fd64ea5464226c08637164fe0eaffc7068fd8952e8377b8e030dff1b605a127cb47ef8fd615be58b46c934def057fff70396ee3e618e4875d05512cd63f197314b1419d0784d82e2d9e08a420383fb68de35855dfc5650c537e18fadf95d2313d0b4f62db2d98d8f95a8ec83ecc94bbd9678510d6a3945d47d3f40b40c41b7545ea7034ad2477a331c09cf80a3ea9a571ef57135f6cbef7d359755f57d4d828c2f56e268e1842896e48988d594"}, @INET_DIAG_REQ_BYTECODE={0xc3, 0x1, "60959cc97bbaaadfb1ae1e5b631db3a2d6f58550ecbfff6bd4cd045fce7468c8799a36c49b26c8cb5a618a263b97da607f7a6209bd9f83e7378a0f679d3a9c9315389878a0dfe0d543d49ab4a20000f62a8edf1b903971e3109fc125c15805efe665402a5b0d15d40cc03aecf4b961b7cd2afa66058cb49a4529789f1b9262489c5cff2c755e433324fa161a678cadb0db82121140bdb321205e9879d07014afdd97779aa9da759153e1283ecccf17ce24605fbb99d2a815a4244fd63f2a22"}, @INET_DIAG_REQ_BYTECODE={0xb6, 0x1, "ef065561343c96e9110e4f45fb26a0a3a173c38b4342e110bc2f10edc4ddb384b09e30c6471e2598e270a137f844d41c0ed1341b7259cffed0fad2046ce50b7b64d86fa32de7545fc5c72258f55fe1bd005263730ba310fade51fff680b663eda829f156a62b4a66f053fc5a2a8bd74f4cb1bf5b33e9634238da8483cdec0533030780de4445c0f63f3780318d672a2c0dd4ee2e73de8ab055cd7c44c21637f462d42564ac91b431b5779b5aa4860f725a15"}, @INET_DIAG_REQ_BYTECODE={0xec, 0x1, "b53eef14236a67f14f7c27ce785e78d2aab34f84f7e23c67bd78e34a593aaf52459b4125a14616951d0453f064d6d077345a691400037ffd1b3f749f03dd99a6c95969b75cdbedbfa6d2c375fe36cb8bbd232025737ed7827b24e446b934349a80ff4db1d4449c70f9b440267ddb742d25d600883b47c08c643ae1334a428603cd67cd9e8e48090bfd9d7e2d78956ca0b3c62784ddfa74a124515c5b6d78a5ebd717d58c923b345efc400770b4c3f86fa2e19bd13dfbe980f778aa94404182685b6189f32619080de6a1a63da8b57592991b426608f583e9bd8bdc15ba77c4e95cfe9816ce57e3e4"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "41a863f8a372ca1202f7f4cda8f3680b5f29997df036906922353b256f7e4fc4b471c215bd6a772c27067537b3b2dddffbb36e3dc8881c70831b4892bcb8e40dddb0523cc6cf05bcd750070115f3b28998297d2440ce542a5e8d13ef4b34daefd25308812794b1c2e17a744017eded9e525ded06bf7d249ff335c5af49df5cd39bc04730dacfc3e6855a241ad49fbff6abe442d4b39700d5f19a01f68ec25c890f561b9c8c2efd4ae1dcb31242a27d4ed597c276dec1d019ac63a779b290980362b6f9275dd1b332ded5d1bfcc4ab296d3b49eb2cf60aff17f9a1f273ff2b265da65d8fd998137fb3516de1bbc189778b4458d6c1faf4b1471e8c22c2f0afd0ed68ab07e578d75af14e3363a6090405dc81ff962ee24282e00aa21e5234e1eb272507c96d81ac167b86ee6fa80a367b307ed4b47998b567c602a0ef616f7f79ed63aeaef6f56f0469d91ef36c02f966fbd337dcf8089e53db139242d65c18467bb4da0197ee555649db9a231b4eaadb3d78791f7954aff19b431f69c0e8f4b6670fc103d8ab75f6106b0aea9f9a21a0c26e15c89567c16da7ba25e770b3876906ee03fabe8b49b7fd30cd97695919ff62fd8af8553e909ea0988ae778840d848da92bae29c5240a89c28888cbf6bc4cc9ee2b646d831154fa3d88911e6492627c4f88b9e3a0aa76f7de4d5005a89343968a7cca69b27ca410633b45c4935ae0418670cb4f0fda9bfb595391e889c82a2f9aea1850ae9c9aa0e10243eab155439cc6a0194342c1f12aef722cc796490a11bceb2068aff34c9749f108d382959dc45a1088eada280da661eb6ea0bd06fbc87323982053eadd32a747e75d30dfdd717212c21414b9be834a506cc20cecde49055cb914f0f4e7799d8de12af04ae62259a9c4f610c7726202a68a94eec6f4619df3ad9c5a627e37c4e436a61deaff7bc781d23585b38ee2a83a4746abec10eb9eb05807a3cdef90de6fb25aa708172493859d71a05abeb657dc8c56476df2aa6c8987a60c1f134de62d7d16b1c3f608de61390169c179aa9c7f25db1a540d20b06cd3f363ae0980a7fda63c2b713448f844459d49971ab1dba45f6ffc684839bdbdeeb76c11755235d0eebaf21a0e459f3d6fe56be1ca780dfd0f1885eac27ee6a1cd1f4e41d9faccd1f62be2cc96a06f4cc4c87c2fa6ae052bacda5cfa20e22d20d283df9b6f1c2294ae5f408df454637b190107beec1b761afdf06146bc6f710841b456a799c93568a2a1b3f8140340deca3ac107607e580d25fb517b7b64f70e136dab888d8502e207ea1468a468004cfaa2fb5ecc5746c85039af74d6d2b3a489eac3e98ea274eb00936ef257d5c59048466cfa17bb2b017b00f582359fadb2fef21191e5f1c5b19d755afdc5027b7052231bf22f8e58c0bd17485286542ea6f690c2d76933d083ffe952736aeb24bb2b5f3d1bab3a4e4f570f562ad431c3f099842de847b33cb32cd37d80f5e1656be7a3db669b37dace9ce5774ed3fc70f3aae2f6c0dbf7f09f1b63baf857120790957dc9c539b8482ce79ecf2663212d39a67735103019d95af030254d3ba752e87fe25e6b96c86fb47d38277abd9f4e7bdbb79d925fcd2dc9f5af55a4e3730f9a5b847657c2793b622048eace19c0fe71376a2e0daeba6f60d0a890ff3fc5757ff8fd85b93eff607192b4e10031279ba87d4e8dd891639f3e1591197cf648f575b8ae94826cd8f2e1bd0d803d3b6d227eb5493b5463a5391c2c7b4beba49f3972a91fb993f3e89850568c3c4f5f62f6291cac959a39e4728f76daf247de5de5f0ec8c5451ba116e17ca9bc5735ef99b8cb2cf2d1cac79aa009a0e076d5f77b7616249deecae9f8fc9096441602b627afd01e3b2fea4715557e55eb97d57b25daa0514b4606b7867267a25c7b819177edb83f92bc345e1b5ee59031ff37f6b6562d6f01e5fd20bbe28baeca87d86e96541afdbf3c3cdcc995e7f7f4225c04cccae6147a9581a5dba2cd28b8a1813ca24dcb9a9c650429f5b218e0315816e790db339b399c4abb3e61c3b3da2b1d16ce65803d888e4c551841ec0d342d564a4a2a4a984fd79e4178e8d2e76d7c5ec7751372a0f462e4b9231a593710594408c4bfcb97650abc2cbb26f178de6b740abad4cd054a8471906daa03a6ae4e0a76fafe0cc080b51e170bcd2c9165fd91a91f27feba075e2f43f0c6ebb299e2d592499e3c31fc934d7d78b25019f804cfcfd2aa66383dbc4ee74511d4e64620662a6e2cd101de5d28cfd42126f2da13fd17669543ad7ec2d944c0c571fdc9922934dc2aa3ac114c6fd94311cedbf3de425335c0ef704e856131ebeeb0c286dae6eec454cf57b329efba89b3643f6ce261231407791580875401afcd5809d73e13a2b5aca5a736f00188abc42c04d3978a28bb2b43a7ed3c9ee750ed64c608ade693455563a52341fbd35160146e85df074a3207e6c37174d3701e1742c741bcb48fc11bcbba05718a786f461ee7e3f1f553f0d7356d7740f56322c9317a88d268cc62b964a560dd73689786d552b7b260843181d3f59d0acc570aec263d29356120007ab1e7032d2cbf710b97c3b66d99a8b934f3cfe643cea10f3b7904d7b34dc366fd3c61d27dfbd86c4a7a98aa3c16968cfff79b5a81fc6ff7cc8ed51658f8dc77745e09f39a63ef253c6f2e55ff81c3eca857967edc140a7a4cb1af51c8d5bdca4ce48d5e196f592e7c84f4d989910d9d94730b879e71050f07084fd6415e87fdb558c45c873fdb741770b58458cf8a906eeb37646b4f1de791545d030a8d417fe99b448dea5d59cadc9c2f4de01c7ce75f5323e1601ec46939570991e1e4d315181c6059f31aaf12ec40fb69c3f856dc8cb568200a9b802a8826503ff9d9862e23736e0ac1fb33c4e67d0ba6a5e83731e2f6ec34ad338ba9849409800dfcaaae7b1a22cc3c4c443fddd394ba87fcd734731ba64ae7e750d9ca43a71cfa765d6784cb58d9a3708ac700b357704bbd0898330286e5440d688270f128e6b5b3119599c078507899073c235ef4d2a8011803752e656722dd53b610ef09102a92ca6228d95329cb598cbcca66aab32197a86830852249ac00b46b0262ca1540b3ff396f965169af6d462635f9e363d459c41d4162d78636cbffa1e6153a47ae8cacb5341afd83d445922eb66c483c455ec3026e59e9caee1c49487b9f230a33cfe1d1b7b7064cd01aa777cd78c4ebf205f8da8e2d9de8aef4c97d6bf5173a7c66ae028133ec5921924744578cfae8ca2295b271cb60aba8a94c2029ac86b88c382e8c94871a2e2f8084ecbef319e987582eb2943f8b97a0ad6a5c82a515506f16bdf2ff2e2018d4605796f8b22799124e66359df24298ce069354f87a3c2ad81820c1fcd9626459aca4ee58c2a8db4739e493698f5d821dd0a3f46361882934c90292b55c329393e14f5f4dd4a676a9d24bff55f7c097f86c69c735cf3d5e01e5fea5a592579f44856dfee59a0d062cd740fe300af0d2651f6513b50b103b5cb0d0387b4b5671ea26f13c11146a39c97278540cca98d998debfdfe065be1112032910e6fbb80239474ac6cc7078ac9b406d7644c23ea5bed629af801d4f05497a03ae33538a25278969e1ed2179700a07f61ceeb89858a83f7ad899b58f04760ba27e4db6584b08027328bd58f967d509208ee0b7687b4df4eabd44c784fbcd5a6d46cef5987fb150bf569c7e0fd948c5f34aa7684e2bb4558bdfbd48f22073997c8aa80bfd049402ca79d10420e1130f4902b8e90d0f97e55629826142b6d7f1e85fad8b5c9acf621080c8f71c10260cfd75ad5ca71a7be3bb19a3f5f0a1ec073ad0caaed064078334697b8d3f891c097d31a72b789bacad07ddef0e80c3b93d6ddabea95b696b6d5c8871a9deb83c74b34567e1b2794f3ddc022c1a2595cc94d5a02e5ff46433249a8a458b19e0a9ba6b5a9509456503edb34c289785b9609a79dc0c952bee1205fc5fa86380235f0d9744110ad9c0f0272b4ff6276927fdb6bc2b37eb3c6c9d3a6d3045e1f1d563390d10d837804667514aefc7e0622d36b6dad745e7043995f56cb83608b37700c535fb746bdd47747bcd2b4bb4b98b3ff6c8757e94c170bdfb99e26bb730bc43084bee5509b7a6aee023f32558bdad1a419cde89d3173d901cd1141c9c4aca0e05a47d9e3923fc4739be9225dd478b27e4fefda4ce747c7ad27ab3ccca8f03ef533cd7c30d479f6a9ad72de4b7b718a13ccb790a0a90d147519c5fa098e9c8fd9ed0d6691c2c78390f61bfeafad313823e0769a29974465b9e9d2ad6d290cf6818932a98eff6edd19cecd05982e91ac5a75f10ececa88aea70ec98e6369eb190a198aae7fd68910d7718b26bb99edcd32f46138f677cc4e6e2643c646061329a750bc9f5cfc5d44a5d1a4e9504f304d88c49f40c903aba8eb118175f3f8cfe6da32c1f99848cc30fbfa4ecd5850efdf20374694efe9005d0dd5dba4cc424c3933613b72e16ec69af37d33298fbbca6c8e58799a4ad54c0a82108e04c1fbf92b63acf7c96f24e64327ada16dca19717257b4c727237b8d44d07905b1134b690501a2ea665f3f928d105b237fbbeeb029d6cdde4e3c011dba23513a9310599ca28ea3e8462181927b79d7b1fc1e24ec1b9e6fd7e61c5b6fbdb49902ab7060af91f7fb4b5c549b3ef2a16b8401fc7747dd6a2e85ed96953fd700505685e980b062442d8073c64875537f14ddca767fa58effd7b57534366d4fe6a00895c4a72db508774adf442e0cc01c3e4915689f62dc76f163928e933f8f9e5e75fd9afe49cbe43e6dffe52f53da841fe40aee4f9ed98e78039b5c4729ec80c1e4d5055a96d0b8948857328bf812dfc2d53e1b6ec217a50614aa36a828aa41d6819148ad01fe0d6f65fd024f4bb12f310cfc0af4cf549911215649b2ce45a9e32101e901998dd5b77c0de507e2c501a32db10cac0f6861990ac3a2664b7246be81eef2c7a2e0be85b33ed9a66bfbbc5293901eeb2b30cc5c9c8577a56aa4389b298bb0cad5cc65e639cb784c2fd359adcb607ff9131dd1d7c58833ac62ec2a4c9840aaeca64d11279ac6b2009be984733ea1f15b1ad42efbce311cc36cfa7d451ed74912ff7f6c0d3e4737fbca0e4602aea832f5df41a57f0164668893b6b9fedba64e7595e455b9aaf291fd60594e6b540e2c3c9a9431e54d3cba7dce0ad94dae4774d96898e319268361e558016e0be8a06ef317d9c519cd8ecf0eca664923891b443e9879785195719683fcce7be6bfd1d078ea9ab2acb03f00adf826d2a0a700f4dadb99975b1ab99f05e3ca3fe8b07962d8e0b9b52c4c5be6f564f0aadd47fa0358d542d99d0bec2269014eff89d801aabd343149381ffe1425a0fe1c4a57558c08169eddb425fbba6df88251d9f8f395224d2d812d1d6d36f590f04c5f6eeebbe8fe24c0cc4e24c7d63973375dcc543f5b168d0aff75c6d7dfcabf3abf064efb8e0d99781731ffc2af4ed6d23f312d0c352e9ddf43e35aa2a7b97ea748ae1f08e297d73ce0cb660fa58b45124e00d81d8652f002eba73187c1d470a9a4e13d9edc9eeec1c25913753fd14d1fb71824c71a586870a88e5ab9cf254ea166a1bd478ca820411ff901acdbdee6948238f1aaa70b0f6aebf42414d6039b1ce1e45ad01a34ded9209c955e64887c46b6bb955083a45a11aae66700b8e2748c24cdb5d3f9a9995e3d738ee7ef1834b3701b6358d5608a58ee4732944b035315711b20aeacab3190af25224d5fe6d02f2936624a4b6cafbfff1"}]}, 0x1468}, 0x1, 0x0, 0x0, 0x800}, 0x5) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="0300007d", @ANYRES16=r3, @ANYBLOB="0020200004"], 0x3}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="800000db", @ANYRES16=r3, @ANYBLOB="080026bd7000fbdbdf2508000000300005800800010065746800080001006574680014000280080002000100000008000200ff01000008000100657468003c000180380004001400010002004e21ac1414aa0000000000000000200002000a004e2200000004ff01000000000000000000000000000107000000"], 0x80}, 0x1, 0x0, 0x0, 0x4805}, 0x44) close(r1) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vcs\x00', 0x103000, 0x0) ioctl$KVM_GET_SREGS(r5, 0x8138ae83, &(0x7f0000001940)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:48 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x18400, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xfffffffffffffffe, 0x139501) ioctl$SNDRV_PCM_IOCTL_RESET(r2, 0x4141, 0x0) dup2(r1, r0) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, 0x0, 0x0) [ 906.928709] active_file:14308 inactive_file:7784 isolated_file:0 [ 906.928709] unevictable:0 dirty:95 writeback:0 unstable:0 [ 906.928709] slab_reclaimable:57223 slab_unreclaimable:203777 [ 906.928709] mapped:62944 shmem:9963 pagetables:13000 bounce:0 [ 906.928709] free:421884 free_pcp:358 free_cma:0 [ 906.971463] Node 0 active_anon:1944176kB inactive_anon:16080kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216572kB dirty:4kB writeback:0kB shmem:16756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1153024kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 907.006651] Node 1 active_anon:1245356kB inactive_anon:17804kB active_file:57228kB inactive_file:31152kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:35192kB dirty:456kB writeback:0kB shmem:23100kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 907.038662] Node 0 DMA free:10340kB min:220kB low:272kB high:324kB active_anon:4164kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:124kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 907.067970] lowmem_reserve[]: 0 2557 2557 2557 2557 01:43:48 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) r3 = getpid() r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x57) ioctl$IMGETCOUNT(r4, 0x80044943, &(0x7f00000001c0)) sched_setattr(r3, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) mq_notify(r2, &(0x7f00000002c0)={0x0, 0x20, 0x4}) preadv(r1, &(0x7f00000017c0), 0x3da, 0x57) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x400, 0x0) write$FUSE_LK(r6, &(0x7f0000000240)={0x28, 0x0, 0x1, {{0x1, 0x1, 0x2, r3}}}, 0xffffffffffffffbf) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000000c0)={0x5, 0x4, 0x4, 0x10, 0x1, {}, {0x2, 0x2, 0x40, 0x2c, 0x52, 0x9, "3925b48f"}, 0xaa, 0x1, @planes=&(0x7f0000000000)={0x7, 0x6, @mem_offset=0x29, 0x8}, 0xffffffff, 0x0, r5}) bind$rxrpc(r7, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, 0x0, 0x0) r8 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000280)=0x220, 0x4) [ 907.075582] Node 0 DMA32 free:20896kB min:36272kB low:45340kB high:54408kB active_anon:1940012kB inactive_anon:16080kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2621268kB mlocked:0kB kernel_stack:12096kB pagetables:30812kB bounce:0kB free_pcp:336kB local_pcp:192kB free_cma:0kB [ 907.106222] lowmem_reserve[]: 0 0 0 0 0 [ 907.110900] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 907.155596] lowmem_reserve[]: 0 0 0 0 0 [ 907.176701] Node 1 Normal free:1654220kB min:53612kB low:67012kB high:80412kB active_anon:1245600kB inactive_anon:17808kB active_file:57228kB inactive_file:31152kB unevictable:0kB writepending:504kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:9408kB pagetables:21236kB bounce:0kB free_pcp:808kB local_pcp:552kB free_cma:0kB [ 907.212126] lowmem_reserve[]: 0 0 0 0 0 01:43:48 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x57) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000000c0)=ANY=[@ANYRES32=r3, @ANYBLOB="f400000221"], &(0x7f0000000000)=0x3e2) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000000)=r3, 0x4) [ 907.224918] Node 0 DMA: 1*4kB (M) 8*8kB (UM) 6*16kB (UM) 2*32kB (UM) 0*64kB 1*128kB (M) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (M) = 10340kB [ 907.247500] Node 0 DMA32: 300*4kB (UME) 180*8kB (UME) 37*16kB (UM) 514*32kB (UME) 1*64kB (U) 9*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20896kB 01:43:48 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x57) bind$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x1000, @private2, 0x2}}, 0x24) connect$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, 0x0, 0x0) [ 907.274153] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 907.290106] Node 1 Normal: 190*4kB (UM) 232*8kB (UME) 77*16kB (UME) 51*32kB (UME) 22*64kB (M) 19*128kB (UM) 12*256kB (M) 23*512kB (UM) 10*1024kB (UME) 3*2048kB (UME) 394*4096kB (M) = 1654376kB [ 907.314143] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 01:43:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x57) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000180)=ANY=[@ANYBLOB="090000000000000002004e22ac14143200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000005268646e042e659d152ab316272d0a48fe7b18ff64538e2fcece4c546b27b5c3"], 0x74) syz_genetlink_get_family_id$net_dm(&(0x7f0000000040)='NET_DM\x00') r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, 0x0, 0x0) [ 907.328713] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 907.340142] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 907.354771] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 907.369985] 32063 total pagecache pages [ 907.375989] 0 pages in swap cache [ 907.381846] Swap cache stats: add 0, delete 0, find 0/0 [ 907.389432] Free swap = 0kB [ 907.392528] Total swap = 0kB [ 907.395600] 1965979 pages RAM [ 907.400514] 0 pages HighMem/MovableOnly [ 907.404564] 339050 pages reserved [ 907.411050] 0 pages cma reserved 01:43:48 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$vhci(r1, &(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0x1) r4 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) r5 = dup2(r4, r4) setsockopt$inet6_tcp_int(r5, 0x6, 0x22, &(0x7f0000000300)=0x1, 0x4) getsockopt$sock_int(r5, 0x1, 0x21, &(0x7f00000001c0), &(0x7f00000007c0)=0x4) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000380)=0x0) r7 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef3, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x1000, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x2, 0xffffffffffffffff, 0x0) fstat(r7, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000008c0)={r6, 0x0, r8}, 0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004340)=[{&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000002800)=[{&(0x7f0000000240)="9f99d177a533e97a7b613085b831ed7e23a41f2ef35cdcee5b100963f094224917cf3934293bdc7da6db80d82bd8792e9a72f432f9b5577af2ee2b3d0e3f86d7bd9334d830ed2c7510072700109e44380567b4904c60b9b943ad37ecf07487be793ced60bf0ab2be0b88c138744e61e232010f8f4be73296f2a2e81218b49fdf47ce7c5f7f9b5afd8eb17fa070cff828268e2ea5439f03ae389e970e7d6e", 0x9e}, {&(0x7f0000000300)="7cf53a1c814f32778eec2af11d8f1d7856f25a95a6c37a759f345fa16b7505b3300d32f66ddb4a41ecfa34a3c3cf10aa1eb4c15329bb0843ddf37fc536d552151a440d4e37971143cff47b69c0fd7e44946ba5cc6b13f5751b0da4add4825beb13cbe14cdf0e0d00a9bf079b1342694f097d9a247f040153943a5aba778b458f5b3af3f7081eaf0063afb02a6c8ac7e775e267d1007f702af8ebbed15de760dcb373ce9a20c602591fa04a686145577b4f6627070e6f29365e7adc652834af5f80354124a2d2c7a4da2e", 0xca}, {&(0x7f00000004c0)="116756fb3fee431c1802e9a18c56ac5cfc062fcefeb889f711221dfea1646a270c8c6ef4e124e044ae7e764cfca7868f4381829c3f85014f7eb94dd1bb3b6eb85f6301298a58ca06d9b2fba95f7c74828c0aa0f2f2d37897619c98d4edc5ebd75fad60fb277a15b2198aeaa92597f60ef513ddbf9db0e7672d46", 0x7a}, {&(0x7f0000000540)="4024a049f47c10020b4886486319cc008f483644c7ee23acfd65e23364ab062773641f03fab8530c1f80333c3d1c0787ed91be83e2901cca972036491081c803073cdbc3f81c01647d7e0ca9c16203d2edc27699606c8f54441305213430860b104c8cbfb861feda403083d2d8e93df218130f00e5f04dc60c5bf188eb8a66e3330e52a658547faf299d00902ed7ae3d1e20e2c329368f2f68291f99bfde6a79b72e268b97782301f76de0720311493bafa3f0fec920a3cd12120db9bf869e4d0d45cac848e8362c8be5bb08c16684bdabaff577d99fee8a4a637dc5e53bbce1d3cad565bf0bb0813dbbab2d543e80e706798bb6a77bdc5ba71570b0a83c6a499567ef361ca20c65e14feb1565e45b6356af3b571471714b1e8c98b9bff206f7f1add753bd1de17d41a4285da804df66c9ded924b72ac586038c5b7d7e2a163b2bb161cf2e0045dd1ec0dc3f8ced7448c93e112dd812600fb3b5161eec91567e3caebff5ddf5d73421af26fb97503e2ab9e5cfe7aacb2cdf271f3e90d382a9448e2c567950ee6de8eb8c5ff2db7fc5c19dab999735b48e72a631bcb09192875e688baaa9ab9e19f70069a890c3b7ca284b151687674bebf29c1834e2cb23b293a311e8487a1887cad4208237f01d007bb2357a7927c91e78512eb783ac9b94107d26c15ccdd4dfdccd667b80af87c7138e30c7db948e0a690a35ccce4b52dfe4512e8617259b5d013cebc4ef27f53812cf25aa70b9b8e1916730cea462369f97d10f0e9e583efcca1525664ab46852826b7439e2f4af10b4f6d906c4f67df2a451a13e8785b2513f9bb6a6e568274fae3239a675acee9ef5c485ed2202e1c7b56d6a8806aae9156b5839fd7a37b991e5c672f287e400a1d59904e38ba69d77b18fd9e8c99ffed84b605a5c7cacdb0997d64db0380a6cb9050821d67074a483cdfe796e91b437180cf1b3db7d1295657521df240b163af35d0a068bddc04ac3db75d7d4cee865252c221feb0dcc0916cba7b312cd38c8df9325c6a96dc15700338905dcd3cea778471551bee65b5ad9b3305fe9ea935d044705edff3a5e19017f42b4bb5e54b88f02d7eaa7cfe0958d8f87422d4f38c8696f1349a58375c54245579aedf359efe56d762338900ae6f44b47c786e73e47c8462d92ea4c85714a254c41daf9eea5314d70a2065a037764f81edd58e502620ef8550c664e21d271e4152170c317b8548045b09b52065e441d64a8c19c781c3433f8f0f2bd6c3db083929ec6afa5c57ee37ac2618c8f8604419068fe9ff46584dbd8bbd7daa6c3163448381cdf394f4ad7c5e460625de9ed4c0b10a747a41446cbc108d1c70f6914a124e1d40200ed6f140d3102222dfe757cc045be7f9a15454c4c61afbf8f754ea4f7fe2d62bca6b0ca2085b985ec87199ede229d11875c1a1f79d2025079e3b9413fdb099488ad5405b1ae7dc3f228424c95593b23aa40aa2b1a0bcd73f2922831a0708aa767bf923e8f958096a07640f57bd21415bc7868369b2ea6e52c9ff67271082453bc1d2395aca9129ad44c85d856141d6e87f90e3b833c7052ace35bb627a4f47d815f634ae41afb8d445ae4410ac092297cf94abbb11354fd89a6f5162d73461adb74e64a595f3aa726bebf1cf8cc81bb5fb57975bc80875809822b56e3cfef835246a520917fa14002f571486eefadc8cdd8440f5db3076344249e5ab694165131b9809e05bf820980a14edb141668b803a2c30818f0bca8c0a5b00455a80f5e7e7361a5a7a8dd5c9a980d24f1a73637cf75abb8ecf6f52d2a705417174db45149a0680cd3545015e6de58db2063e61fce7c0a5f0b3c8c3e0eb603b72369272489cf6dcd4a06189a7d085dd0e5b23ec26f4653b804390242eda1a9c9fb57a6e2bd35bf7d885a140140055327d25bf2b8b0c0652983ace471b4d5ccc78d1173712717fbe6262a0c51e73972e3f854f42d45eace7693899e705287a03cdbf7b3ec196166c0deeaa35fe47df13dddb35b8561a3ba13dd44acbf1870e40c5ed2c670609003e918c3da8acf6e7b4a333cb4f2e5603ffa2cf8cec31273da8769deb2c581225889bff8060dc28842030278308e6d66ed788ff87cef463124e17adbc60e7d82853dcb7a7c4c2fc4e7406d534703c3034e39617f83841fb0cd555c0d8670861a4d719d4d59531617bc6028be9558668f6c2a14a41c5f7efa807dbcf566e70d3d9018900d5eba3d8332c4fce2e9c239ce1cb92efac5a810cbad55ce1215fa692011733ebdbeefc9073f88ec99692d3ed75539508aab8ee5fa479202dbef7b6505c516d80070d79af6216120c9351db2d24215f1f49effe3106a125482fc5becd8285e0b141f3fe6937d1c0fef0d7064819702ee85cfcffedbef6345010717a2853966bcf0de800c9e493a207b414e696fcb86268915866e2a24a2ef28b9365248aa23152885121df7b4e447fc072fbecbdd099d14f68fb4b89e6f7749930c0254b046d8c99fa2ae064e1dadfc9625c3f7f741be52d286ce5a1acb0f5cd7994a6823e0b902bf857a91f93b440ad65448cb29aa24a4b19d78b57173f43e10c612e62e71e996ad9c00cdd6949425ad698ad146a9094cb61f60ed88886c0c4067359a74c3610c565f401def9ffd0549e47015d8fd6a33eae85f1e1e57d6a0ebb2cea7e3288ea0a0916c3dd568f6e9fbbef77064d153643e7e8d9ead45cb48edbeed1f9f8d1c0a8e1c0841e150c592456ca23f912d970d570de0905d7874b5d1caa624fe205c038710d55202c1be38b9b7d807aebc13a0619255d965d64c94ed68656455f2b132dafdc0e00e1cf6e355ff2021bf3eadb398d899be3490dcfbe82090258cbcf44073da0ca5f57b23d2cff5afbd678d8b8489b8139213acf0736cf6b5c7e1100598dda1f449a54e07c44fbdfa896350d887c6d1f85418631af7cf5876a154e9a32ab27325bbb974ec25cd7d2dff5fbd6a6685f4ce25ae516f5a342beb0f0f12238699e5e3472ef5dcb410036a84d4d542e59076100e724cad8375d0ffbe86764bc38701ff1c7f46156cf951423ad2f7cdaaff1f8cecba925d5cd008fc8888f5deb21f7b02c062aa27b50a268d09d8ce88e1b29ee7b597af62da8dae8cb3b3cfea55fd20141f194a12dde310a1fb5d4fab07916c0a1de5049caeb31ebd9d1e87bd8377fc89773a869f81b19f3ba87a47e65031be0d2af2629ff33f42d74980ca52cdf27f6c16da437fe96b4ca128277b42c31072b6fb093a7d2aea717ae924247e6a0596565ccc332731c1d566814d07991a1f4bcc18ec9476c0faa106a4ad79795e99e4c9ad39605f21268d2354abf1fd99ba662cc42a30be7f31d0d2dd463787090933fb1c435c4d0580f722e351cd64f60c6740fe133d52b34e5a6c8e648dd8016a0a07094ab75683d8be9b2869ab1afc60ffb7708f738525330c3771acbb8e7b4700ed63814eb80bc55bd94331914295d17f698a48ceb6671c3fc101cd3adbde41f3bbd75594b5acbffec365b11d03d53e5c3f3376f0eafd90b1b88524ebef4b98feaadf85dbed976dab8f226e71ecfc02059a36bc05ce8d409ebfdb359652746c3900ee7ab8f5e45fe182687617d8a9dbd210c98f4ef951b31270a048847ec9d4e5c4b8bcc87337e2c27929a637c5e0fc5a6fbc3319c8149a2739bc74ff3a7317df2bdb35e278ccc01bc3c5e35b2c113633a2fe3d165b4742b7b3b0119f327173c60c21404e028d74e18d3a6bd2bc10c21cc60ec933d0b9fc36bf03f35666429700b1e54d1a02a17148e4d0df3d149fd3635f206c64ae25db4e5ff0110cd6cd7086ba70e57b9953a3600b962f1622137015269bb4f0a9ec36b16ae9555518db7ab4c797802583c66b87c395d710206c5551022d2402182b7dbebc4adbfce08ad73d79be7a8c5ce44ed3eb8a7cf196ef6b25ea6572e338bea0693418174d230b7805c5fde1e3bad9b4cda898aabd77041353ef979edd928393ec953538606dd5caf0f22a13a12cdc62550dceeff38b1036de03aabd597626569f5f98b063bb3ddc85d2a943d39b79b4d5cfb4035a4f6b31250a1e3dd4d6b70e9764438f36291f91a24a7c42bdffc793e4e0da2b536342e329c2155cbd78ecffefcab25ee93cc2a719799342f064918e63b70c0b8c71858e64199d7ac3dafd4377ed9249589cae839d109980cb86d5b3ffa30be20fa590339c4be5a0a3fbca23763d52ceb71f2b476b3269f801f629e45994bcb6ba4b2443bbb3dad5d2d8d121d7162822b0128a765d5b4ce47a85f0e918e625f5f6f9418a8eae0932ffb28ff0864598460b6dddf058886cb32aeffd197aad66aa5ae2f48ae18f0ecc974ad71975cf76d3859cb9f8ce2b442b54895181565146523b36ab320a23691afe9ebd8e1ada32badf3f240ee0be8885aaf1e4d2e5c2ce099d60be4277bc8eaf1160db1873b0044a55cfbba5311485d633b836989000da5b67e004f2a26cd9cb3b0eb3d90485295faa1d3728a8e27edecff45aae781871e924c9391d16d5acac0a05ffb8c81f2b0b45008964ba3f4e80f2909a18063cd0ed766ad2e2259b4dafdb13c98c66afb4aa148019563fbe8b33a3316facb1b0a8258bc8e2480d79fb9dc8baf360a35d87131cfce325f5a100f4d8734a1905a8f666374fe6edd67dc8b193a0613f4909f832cbc369c845fe9385cb5356effc1d75ae681eddf316f33c5c5d1626af846302bbc2355da9527910334f5eb55fdd0aa686f3f1f20afafc4f46437f060f3ea12d4233c60de9abc99ef577e2ed907aa5572450ceaa49f945306cbd69914d06fdda1c2da8d8c308749d716aeb14a9c00c5ac2c25ae30f95c9b26269b64b222dc6383bc83daaf5e4cc7f7af7187108e7d2741deaba53152b529fd854f64afa0e11c9d4a562a6bfefc0187f4783b9d4887c22865bb131ae6fd97d2257a99f327d49cb061795fc752ca2dd0aafa2a7ad6d41db070d57644318551a49ac8f305f77630e92614d6ffbc1a0bbec0159495617b0681484a28b483e921bc4cfd5b7c10797f14f02e6d283fe70fd9338685461e255eb08d75cf605132a9f37809677cc2d4feb2cce9466482580ec3d5387fb7f43401abd07e679195c2c4ee20c207f8d76062d56997d684f6647e1cacc34691ff66496243c74509c97b4fb9ea806d373d612eb62912ebe02d265f95b5bbb830cfb6ca734ff2233ba53164035bb4204897837dfe05f7b52b13ad9f407ecbb38a27473187472746fb5184ee77e19b4a68ce2198d545c0fc934d4b4d84ac938c830bcdd1a663563a51d7c7d702adf239c2d858dc77856165663c2f4b0b0db8d41303358a433e61c879ee1056d1819627cab3296a1852544800c259733ea3d063ea978e84d335c9a6a86d16d4cc5f10112127543bcad140d0645878d130d556aeebdfdd78567b9d5c8f81e4b1fd8a701f5bb1196ff0088f1b236c39e5e4269f043287cd67477f4b0dc73c1211db4f847e79edccb5336b9eb0b6eba5d212656563a85356c6d64a57f6b3ecc2ef9756a2d73b328ef9662e7a53d959b2b39c7f1fef6cf904bc054816e21d5f60ec25772816a076ffd27696a5dcc853363498f9471a2e1941ebed2d151864dae8a203886f3cb7643a2b64c3a7f5d1a7eb7435e61064520313a3ddd220758c37a052095b35b86ce2d97fa480f0d27ad921aeedb16f4cc5d3ae04f8ad23926eb2c7557196726b06ff66b946d7091116c6b618065318a6a637ea7b38b40795aac5fc57088e088014dba41bdf395025a5946eaed9449abd59b8e98ca175f46bc751e05af6ab6", 0x1000}, {&(0x7f0000001540)="07c9de9cfdb64bf49afc56ce7b4eae62fdec9e0d57ec34cb8bdee70ad29a4fba8c8b68d6c563ac9d147c0e1f0e419dff4e44dfd8d845334a00d521f0fc0d17411c26bb6f4b780369aec9c232ddbf8f550814f76ebedeab50bf3a63ba5e68ca231e7c778ee8e7b64755e24c", 0x6b}, {&(0x7f00000015c0)="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", 0x1000}, {&(0x7f00000025c0)="a5c92376d4956ce754dc7dd06440730424df0ddd44b11ad3528199b5b5649401b9e18d12bccc6154c985dbcc1da8338ac7e97f98c1d21fd02eb867353ae79cdd96edc3d271a4f2e8c60aa2c26a8a0b78f5b327ef42b736c8ee821b5e8f16", 0x5e}, {&(0x7f0000002640)="cea579fedc527dd8e40ba2df6be4f924465889c2c81b977f1d9394cb467d375bb385f715f86e51385aadd2d86143cd6a89018e4ce997507d582d0e55e21b642a6c135ad7ad92122908fa2865b44f4e1a7f054d26bdc20a649a8ff6823fff4ff62f79873367a624002fe6b5476aeb7e9f1c536245f5e379e1364903f4fc05d013f70ca0adb0f57320143648b9a4bc10555accdff36546d27f744e866d2eb2f4c798e5674d7be64246a76317d91b710e7e84ed6ecea33bbe0f2d45806e4a07e712edef91e4f7d72ae5029a934edffed1d07fc2189d83", 0xd5}, {&(0x7f0000002740)="453d5b41a9948c5b37a241819bada938bcbe49de598852806b58e52b58606c9b77c4c03d7ff7c2401a324e4056239ce2f8a2681860cc779fb8e86af1ef91fec5ed0c7e32327ba3ec838b1c7fe0188251d6243f654486f76f42c3aac424eee567f7f3b2b620015cdc7bd75435dc394429fb8eb240d0e08381b9e5edfb9f027a953a4abb3f52c1e4ff12b7c86a5ee776325312f8e1cd0278f6788d7677b3e0988812f996fc08fcb55d618619c202a55088c2404baed03e47", 0xb7}], 0x9, &(0x7f0000002a40)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r0, r3, r0]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3, r0, r3, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x120, 0x40000}, {&(0x7f0000002b80)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000003200)=[{&(0x7f0000002c00)="c828188d8a3420bd5c9100561ac1edbe617c776becb6793543a0974f4099b02645490675cd0f19aea2d2c0a9720331d97aec38449fc98655f1d638cea692b22a56dbf7ce74b322ce20cbdf4444fe29beaecdf141e4d104c5d7f4ed0aa103b14d3cd05740f2dd56ad8c24e3daba90e3862b9028187368c04f3d95a35e1419706f20851c4d371ca78a7a763bc5d3a52034ebc8af81f345a4b7c105f03e7d118080e7b80b582639a8c5684f83c854e54ca6ad35fb9c64b34c13f3d93019e95c88fa5cc1bf8a03d9cffc808219f8d25416be4abc792aadb1e2804490557bb38d31873cf2d8fc2fbfe73d0c1bc336379278c47a", 0xf1}, {&(0x7f0000002d00)="a9aa9ad41024d7ba3e1633e78311048cdd07875519698232aafe5224f618c4122fded822d28198082fff97ecf9cdcd17bbd3f61f19a9e5cecedd2e44731b44a88ab14d8e778be1c8132fe64ea8328d1555ad74f0fac853d99c7583689b47625e6f0b6e6a3a3f22f1d8004d8d8b725187d0aec30ae6d0019fe00819babe8a7da14478da22269449026b49eac3be90d36f6a9fb55ee77917f773f56f632e3255ecc9175b234d7de114e531ab350f319a13e5e3b36a9700167d2e864169cc1ea69859fcf04f623665454d9458c4b7acd842feb34e69f5faa5a553e661ecd3c106e6", 0xe0}, {&(0x7f0000002e00)="405ddfb24a8bc3ff635e2cb13e5802e72feba49c9152cef353dc7d60de03af130f09ebe3a142ea68be0e1aa485cab460176aee6e278540f905cd54094b7fc243b37d42b6f9472023dd8ed3b158d688e3b6f5e18ece5b6a49f319bdfbabfd34964534f723133cfe1d03387e8095e341623a6bbec3632f859970ae66", 0x7b}, {&(0x7f0000002e80)="953c2c120192920142664c91b4d5ed928fc8cbfc3b953db2c6bfaf0a02dd3e3e49e406aa7d204238912e5f03c5004bb15e277cf5e73dbb069d22", 0x3a}, {&(0x7f0000002ec0)="d57238f1f5a6342048bd892620c63e2600c99fece57bef2cc226120ef05a0200727ee4eaa88b5f850ab781e0d37e39235f9976afaa7c7345111fd5301b8354dfc54caabf028cfe9859b9bfc3568272f00f3d0264a0f5b698a486f0acf8eb2b0eada584fdbaa935dce319a3d24eda0be8d68618ac747c5e8db337878f9115f309b7083917c754f09a0857830d3a55c68cdf0c254fbfc335973b894e5ede6e9908fd5f09b90927464b5c415b8df185e5f1b92a6ae472a260f72e5ba6b5c398e7825f2a407d16735e43790179636d1d81b2f39627c1eb569695343c9053675d6556c604cb6bb19a4c9443c53c49b2b87cd81998113469fe", 0xf6}, {&(0x7f0000002fc0)="ee2066d6a17b486d8afdffed9f07d6af51eaedeccb973d0c2a20ade1f06f88fae4330d8fbc0ea1846fd40e5620bb121e9a27609c7bcc5387422da8f48e5c6024ebbf9b9a9209b6c5a41250d1", 0x4c}, {&(0x7f0000003040)="487d69bff4d913284f30eb601dea061590cdaf2e2784b4c7dcd9545d88ee7398ac8ab89be1071cc5219388386751a94b5a129fe53b1bf9b2802f8308fbd6b3c3d201ccdf5348c1cc4cb5bc8780bd4f953f5b3ee5fa0d17cd729c23a18f1ca3e8e1c74c4dc13c9b4b475661f1e9f4cce2ddae104fe0ce0345d0bdd97ef37c8e449870450e74d1b28c082adfa0958061cd6afe4172693b728bfe72586a7568994c8e7b5cb431f63016af9d8dae22a77cda629f2f853dcb76778316cca8", 0xbc}, {&(0x7f0000003100)="d3a489ed3e6a0e20fbdd50cc6039585ecb39dfd7845d9b31505d47c05dd9f4f1011afb2799592170e38e17ff9cd9525b514fd061e60fa67ea991c68c12ae9f0c7ca35d7deefa9e570902760239cdc6b84e774e1b8c24a3d0e99a8821e106510a4ed31af3cff465aab4917cc53ad9771a35bebf99a8f5e4078f44057d31c3c6d7b303dbf37364753f584bf6de2d856e1cc5e3a832e762a8288618f774be137f56a84ffe1f94676cfd260a7400c39746b4476ed2734439ec4b49f0cb531b9b1ed1b0fc80815e2aecb6d9cce8694dfa5209417b2000d72367db69954141a6f4851b6a24ee0c7cc730c7519723c1172eaaffd5d5dcd93a", 0xf5}], 0x8, &(0x7f0000003400)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80, 0x4000}, {&(0x7f0000003480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003680)=[{&(0x7f0000003500)="dce909e2f3bc0c99942ece4067a833", 0xf}, {&(0x7f0000003540)="1d6bc07c6072d826ff00b5ce6ab7b334757751ebeb8cff9c9cb52cbd46206f34a187e3a0699a9c82ae3d3d93b4d05c4eef6f58b4357b32440d8791f70e32121681fad158156e6d5203f11c91bf5bd21420de3a740194533230fa381341b470e59b93f42473f2b2a6c8b62d4a5f2d170cdace46a6f5755f94530ffdf8deb40934a3d8d10a0f9f04342389713c939d6ea121bad37626e563602b0c6306272fffbb3929734778388457a7606422b7ba5585f7ed42795ee0f5daa9fd488b0cf31b679565cb0be836151970b176c12f571799ffa45928", 0xd4}, {&(0x7f0000003640)='g', 0x1}], 0x3, &(0x7f0000003c00)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x128, 0x4000000}, {&(0x7f0000003d40)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000003f80)=[{&(0x7f0000003dc0)="0863d80fae489aa9b84b83bcd1ad70f4cab86b33df5aaf070c9df74aa631e149ce42033c65ddc1e389cbf680e998b0d9ffd36fa0caf80c7005705f891fe3f49b34062874d9a7729c8c6f215679d145ad4a92a0ba3af0c743aba70d11ac80d2aa6dcb59dd81f7163a77b315c45b095917ae9a830ca51d4ff590985b813cd8570db444", 0x82}, {&(0x7f0000003e80)="1ff2b56ad547c15741ae8da83ed255456d74df2663e5f03bf8a77127f33fe38f400d866147a0a4f958d9076844477f97ae5617fe9571d7717cd37caaafcfe878d74e3bd14b7914ffb0379d77459203f42b2426bfc6688abdb93c1aaf452b9b90d9ef6fe4cc65e753efae8b5f726a85d66116b46b8eea903127c59570a9a10bee3c6553294c4f20cfc319c6bb4e1afb15141082735be9d464ecc9a563aae95d6effc838d967ad74bd94d8be4fd363c96aea5235308404ee1df9d35baae93d3cadee018f389baed37bc453392e0c0c63c892a28b6400bc8cf8fee41d5191d8f057e0149480e4090561fd65c8306342377096d29c409bee70089cdffe", 0xfb}], 0x2, &(0x7f0000004000)=[@rights={{0x28, 0x1, 0x1, [r1, 0xffffffffffffffff, r2, r3, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r8}}}], 0xd8, 0x40000}, {&(0x7f0000004100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004300)=[{&(0x7f0000004180)="4474bcb9914ccfcd6b05c02d708b976f413bc9b610f1f13bf595d2930633cbdd78a271f6254a482efc", 0x29}, {&(0x7f00000041c0)="d997792d165812f3c090a081935013dbb8bd17a46acc572cb81766d5ac974a24dfa71f3812bd04b6efa631de5b1bd0", 0x2f}, {&(0x7f0000004200)="655105a98d1a58e4daab73904588349e1ff7d9ad126fc8f27f514b97dcc73da6a396bab7a209798b1f", 0x29}, {&(0x7f0000004240)="cced34becf8309482900802dbecd367d35ee1ce49413f48ea5d9101bb63fb7b127dcef7f2e56461c856a2f5961da0e31772df9ef6424b9ba353b5d283703c1599caa1a35e94e41a67bcaf5781f164bf10ec59f88144d5eb2579ea6bc2796d02fa9a3386e1bad27e0849b0915156b6faf43ad09eaac4a2f88de8c47ef9fc0765135da9aa7717e5cd62604020fd10b1b34f30c", 0x92}], 0x4, 0x0, 0x0, 0x10}], 0x5, 0x4004010) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x40000000004ffdf, 0x0) [ 907.429566] ieee80211 phy1852: Selected rate control algorithm 'minstrel_ht' [ 907.449026] syz-executor.5: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 907.460682] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 907.468798] CPU: 0 PID: 31323 Comm: syz-executor.5 Not tainted 4.14.176-syzkaller #0 [ 907.476916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 907.486366] Call Trace: [ 907.488960] dump_stack+0x13e/0x194 [ 907.492595] warn_alloc.cold+0x96/0x1af [ 907.493430] ieee80211 phy1852: hwaddr 02:00:00:07:3c:00 registered [ 907.496571] ? zone_watermark_ok_safe+0x280/0x280 [ 907.496587] ? wait_for_completion+0x390/0x390 [ 907.496601] __alloc_pages_slowpath+0x2114/0x26c0 [ 907.517427] ? warn_alloc+0xf0/0xf0 [ 907.521066] ? find_held_lock+0x2d/0x110 [ 907.525283] ? fs_reclaim_acquire+0x10/0x10 [ 907.529638] __alloc_pages_nodemask+0x5d3/0x700 [ 907.534417] ? rcu_read_lock_sched_held+0x10a/0x130 [ 907.539469] ? __alloc_pages_nodemask+0x5e0/0x700 [ 907.544366] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 907.549422] alloc_pages_current+0xe7/0x1e0 [ 907.553757] kvm_mmu_create+0xd1/0x1c0 [ 907.557660] kvm_arch_vcpu_init+0x28b/0x8b0 [ 907.561990] ? alloc_pages_current+0xef/0x1e0 [ 907.566493] kvm_vcpu_init+0x26d/0x360 [ 907.570400] vmx_create_vcpu+0xf3/0x2900 [ 907.574472] ? __mutex_unlock_slowpath+0x75/0x780 [ 907.579314] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 907.584376] ? handle_rdmsr+0x6b0/0x6b0 [ 907.588337] kvm_vm_ioctl+0x49c/0x1430 [ 907.592211] ? __lock_acquire+0x5f7/0x4620 [ 907.596494] ? kvm_vcpu_release+0xa0/0xa0 [ 907.600652] ? trace_hardirqs_on+0x10/0x10 [ 907.604870] ? trace_hardirqs_on+0x10/0x10 [ 907.609095] ? save_trace+0x290/0x290 [ 907.612891] ? __might_fault+0x104/0x1b0 [ 907.616946] ? kvm_vcpu_release+0xa0/0xa0 [ 907.621083] do_vfs_ioctl+0x75a/0xfe0 [ 907.624873] ? selinux_file_mprotect+0x5c0/0x5c0 [ 907.629623] ? ioctl_preallocate+0x1a0/0x1a0 [ 907.634019] ? security_file_ioctl+0x76/0xb0 [ 907.638410] ? security_file_ioctl+0x83/0xb0 [ 907.642807] SyS_ioctl+0x7f/0xb0 [ 907.646168] ? do_vfs_ioctl+0xfe0/0xfe0 [ 907.650133] do_syscall_64+0x1d5/0x640 [ 907.654019] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 907.659190] RIP: 0033:0x45c889 [ 907.662363] RSP: 002b:00007f73f5256c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 907.670204] RAX: ffffffffffffffda RBX: 00007f73f52576d4 RCX: 000000000045c889 01:43:48 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='huge=always']) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}}, 0xfffffdef) ftruncate(r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r4, 0x4068aea3, &(0x7f0000000200)={0x79}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x418000, 0x0) ioctl$KVM_ENABLE_CAP(r5, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1, 0x0, 0x40000005, 0xffffffffffffffff]}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0xc004aea7, &(0x7f0000000000)=0x4) 01:43:48 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000000)={'netdevsim0\x00', {0x2, 0x4e23, @private=0xa010102}}) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000020601080000000000000000000000000d00030005000400000018000000000000797a3100000000054001002500000004f705130a0000002790f026281a591ba8eabe4c3c36427ada2594313ab5a8ff37000000000000000000"], 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:48 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x25000446}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8008}, 0x4004000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:48 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x57) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000000), 0x2) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, 0x0, 0x0) [ 907.677473] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006 [ 907.684730] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 907.691992] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 907.699251] R13: 0000000000000390 R14: 00000000004c60a9 R15: 000000000076bf0c [ 907.865266] ieee80211 phy1853: Selected rate control algorithm 'minstrel_ht' 01:43:49 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000080)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x1, @private0, 0x1}}, 0x14) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, 0x0, 0x0) 01:43:49 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x21, 0x0, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000000)) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=""/11) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:49 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap$usbmon(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x13, r3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000020601080000000000000000000000000d000300686173683a6e65740000000005000400000000000900020073797ab1000000000500010006000000050005000a000000"], 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) [ 907.912545] ieee80211 phy1853: hwaddr 02:00:00:07:3d:00 registered 01:43:49 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xa}, {&(0x7f0000000200)="e8d57a1fe447342f011d7eb4248ed3787f1e265e988211ab8818d56f0cb63640a5d7ebc7f9d7f28224fd358107b9e6caf27177f434a0138c2cb4e6c4087d1e039987fab197060b856b3aa087a1ffbf6638516365c93f6faf3ddffe81d7c1533f6cd66bcc604bdd6495526de474693b59d0f26fb3715908eec256912db0eceab97fbcbde20f41befb023a2e0a1b5ea1f0aa9606bfcb9c0ce329cd0fc4162fbef10949fce737382b2fb7daeb209c8998", 0xaf}, {&(0x7f00000002c0)="1d46432b3bf9f5ed0f79e6c05f0267ce19aa8103ff0a158df4f8bdcbd23bf60d7c210d3ee38db3f59470e5e5a1d82ae4b2f2a373c7eab978e2fa6203e5048165e31613a7cc17f0cf804ac3c61700b275dc29a35fd282012a54a194f7adcc54b2b006640ca8fb9178714ebbde1a92a6d526fa3582462fa973e4b1abe2c7a9aa9d53cc19661625daac74bb2d729ec584d8e69ee2dcd2e0bb67042494d609681a2d73dcb14aacf20ff161e70d8537700b9da92b21a0450c4f8afd4ac3d7db3ebe5e79e41642b6f64e5e7328f5ffb8ab93f31558f749e965636b60541551", 0xdc}], 0x3, 0x1) close(r1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000020601080000000000000000000000000d000300686173683a6e65740000000005000400000000000900020073797a31000000000510010006000000050005000a000000"], 0x48}}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000003c0)=ANY=[@ANYBLOB="98b80000000000000a004e210000000700000000000000000000ffff0a0101000600000000000000000000000000001dec874cd66724c100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000117e613b74e70bdf00000000000000000000000000000000000000000000000000000001000000030000000a004e2400000800fe88000000000000000000000000010100000000feffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2300fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000000000000000000000000000000000000000000000000000a004e2000000005fc020000000000000a4600000000000106000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a068aa1407fedbe2c183fc9d078d8c7200000000000000000000f8ff00"/527], 0x210) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:49 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}}, 0x24) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, 0x0, 0x0) 01:43:49 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000040)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = dup(0xffffffffffffffff) write$cgroup_type(r3, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=@can_newroute={0x18c, 0x18, 0x100, 0x70bd2c, 0x25dfdbff, {0x1d, 0x1, 0x2}, [@CGW_DST_IF={0x8}, @CGW_LIM_HOPS={0x5, 0xd, 0x1}, @CGW_MOD_SET={0x15, 0x4, {{{0x0, 0x1, 0x0, 0x1}, 0x2, 0x1, 0x0, 0x0, "355f8ec82dbbfada"}}}, @CGW_FILTER={0xc, 0xb, {{0x0, 0x0, 0x0, 0x1}, {0x3, 0x1, 0x1, 0x1}}}, @CGW_CS_CRC8={0x11e, 0x6, {0x27, 0x67, 0x65, 0xf3, 0x2, "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", 0x1, "8325cf3af7265fa6cf5de9d5a467c050180eba75"}}, @CGW_CS_XOR={0x8, 0x5, {0x0, 0x2, 0xfffffffffffffff8, 0x3f}}, @CGW_FILTER={0xc}, @CGW_DST_IF={0x8}, @CGW_MOD_UID={0x8}]}, 0x18c}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) dup(0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0) syz_genetlink_get_family_id$nl80211(0x0) pipe(0x0) 01:43:49 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000020601080000080000000000000000000d000900000073683a6e657400000084f8000400000000000900020073797a31000000000500010006000000050005000a000000"], 0x48}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x57) ioctl$sock_x25_SIOCDELRT(r4, 0x890c, &(0x7f0000000200)={@null=' \x00', 0x6, 'veth0_virt_wifi\x00'}) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) [ 908.044607] syz-executor.3: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 908.090610] syz-executor.3: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 908.092253] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 908.138115] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 908.143185] syz-executor.3: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 908.155270] CPU: 1 PID: 31462 Comm: syz-executor.3 Not tainted 4.14.176-syzkaller #0 [ 908.163176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 908.172529] Call Trace: [ 908.175123] dump_stack+0x13e/0x194 [ 908.178749] warn_alloc.cold+0x96/0x1af [ 908.182711] ? zone_watermark_ok_safe+0x280/0x280 [ 908.186337] syz-executor.3 cpuset= [ 908.187548] ? wait_for_completion+0x390/0x390 [ 908.187560] __alloc_pages_slowpath+0x2114/0x26c0 [ 908.187575] ? warn_alloc+0xf0/0xf0 [ 908.194719] / [ 908.195692] __alloc_pages_nodemask+0x5d3/0x700 [ 908.210489] ? __alloc_pages_nodemask+0x381/0x700 [ 908.213058] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 908.215420] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 908.215437] alloc_pages_current+0xe7/0x1e0 [ 908.233336] kvm_mmu_create+0xd1/0x1c0 [ 908.235285] mems_allowed=0-1 [ 908.237223] kvm_arch_vcpu_init+0x28b/0x8b0 [ 908.237234] ? alloc_pages_current+0xef/0x1e0 [ 908.237242] kvm_vcpu_init+0x26d/0x360 [ 908.237253] vmx_create_vcpu+0xf3/0x2900 [ 908.237267] ? __mutex_unlock_slowpath+0x75/0x780 [ 908.262072] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 908.267094] ? futex_wake+0x11b/0x3d0 [ 908.270996] ? handle_rdmsr+0x6b0/0x6b0 [ 908.274973] kvm_vm_ioctl+0x49c/0x1430 [ 908.278861] ? kvm_vcpu_release+0xa0/0xa0 [ 908.283018] ? trace_hardirqs_on+0x10/0x10 [ 908.287260] ? trace_hardirqs_on+0x10/0x10 [ 908.291496] ? trace_hardirqs_on+0x10/0x10 [ 908.295740] ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0 [ 908.302770] ? futex_exit_release+0x60/0x60 [ 908.307093] ? lock_acquire+0x170/0x3f0 [ 908.311093] ? kvm_vcpu_release+0xa0/0xa0 [ 908.315244] do_vfs_ioctl+0x75a/0xfe0 [ 908.319049] ? selinux_file_mprotect+0x5c0/0x5c0 [ 908.323810] ? ioctl_preallocate+0x1a0/0x1a0 [ 908.328224] ? security_file_ioctl+0x76/0xb0 [ 908.332644] ? security_file_ioctl+0x83/0xb0 [ 908.337047] SyS_ioctl+0x7f/0xb0 [ 908.340403] ? do_vfs_ioctl+0xfe0/0xfe0 [ 908.344361] do_syscall_64+0x1d5/0x640 [ 908.348249] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 908.353427] RIP: 0033:0x45c889 [ 908.356602] RSP: 002b:00007f083e4c7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 908.364297] RAX: ffffffffffffffda RBX: 00007f083e4c86d4 RCX: 000000000045c889 [ 908.371551] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000007 [ 908.378803] RBP: 000000000076bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 908.386072] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 908.393332] R13: 0000000000000390 R14: 00000000004c60a9 R15: 000000000076bfac [ 908.407053] CPU: 0 PID: 31489 Comm: syz-executor.3 Not tainted 4.14.176-syzkaller #0 [ 908.414967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 908.424316] Call Trace: [ 908.426897] dump_stack+0x13e/0x194 [ 908.430507] warn_alloc.cold+0x96/0x1af [ 908.434462] ? zone_watermark_ok_safe+0x280/0x280 [ 908.439294] ? wait_for_completion+0x390/0x390 [ 908.443861] __alloc_pages_slowpath+0x2114/0x26c0 [ 908.448693] ? warn_alloc+0xf0/0xf0 [ 908.452307] __alloc_pages_nodemask+0x5d3/0x700 [ 908.456957] ? __alloc_pages_nodemask+0x381/0x700 [ 908.461783] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 908.466786] alloc_pages_current+0xe7/0x1e0 [ 908.471091] kvm_mmu_create+0xd1/0x1c0 [ 908.474963] kvm_arch_vcpu_init+0x28b/0x8b0 [ 908.479269] ? alloc_pages_current+0xef/0x1e0 [ 908.483747] kvm_vcpu_init+0x26d/0x360 [ 908.487622] vmx_create_vcpu+0xf3/0x2900 [ 908.491688] ? __mutex_unlock_slowpath+0x75/0x780 [ 908.496514] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 908.501512] ? futex_wake+0x11b/0x3d0 [ 908.505382] ? handle_rdmsr+0x6b0/0x6b0 [ 908.509345] kvm_vm_ioctl+0x49c/0x1430 [ 908.513217] ? trace_hardirqs_on+0x10/0x10 [ 908.517433] ? kvm_vcpu_release+0xa0/0xa0 [ 908.521564] ? trace_hardirqs_on+0x10/0x10 [ 908.525783] ? trace_hardirqs_on+0x10/0x10 [ 908.530018] ? trace_hardirqs_on+0x10/0x10 [ 908.534241] ? futex_exit_release+0x60/0x60 [ 908.538554] ? lock_downgrade+0x6e0/0x6e0 [ 908.542709] ? lock_acquire+0x170/0x3f0 [ 908.546691] ? kvm_vcpu_release+0xa0/0xa0 [ 908.551088] do_vfs_ioctl+0x75a/0xfe0 [ 908.554873] ? selinux_file_mprotect+0x5c0/0x5c0 [ 908.559613] ? ioctl_preallocate+0x1a0/0x1a0 [ 908.564008] ? security_file_ioctl+0x76/0xb0 [ 908.568402] ? security_file_ioctl+0x83/0xb0 [ 908.572805] SyS_ioctl+0x7f/0xb0 [ 908.576165] ? do_vfs_ioctl+0xfe0/0xfe0 [ 908.580122] do_syscall_64+0x1d5/0x640 [ 908.584014] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 908.589189] RIP: 0033:0x45c889 [ 908.592373] RSP: 002b:00007f083e4a6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 908.600066] RAX: ffffffffffffffda RBX: 00007f083e4a76d4 RCX: 000000000045c889 [ 908.607331] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 908.614588] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 908.621855] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 908.629126] R13: 0000000000000390 R14: 00000000004c60a9 R15: 000000000076c04c [ 908.637751] syz-executor.3: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null) [ 908.646912] CPU: 0 PID: 31444 Comm: syz-executor.3 Not tainted 4.14.176-syzkaller #0 [ 908.656221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 908.665570] Call Trace: [ 908.668161] dump_stack+0x13e/0x194 [ 908.671796] warn_alloc.cold+0x96/0x1af [ 908.675779] ? zone_watermark_ok_safe+0x280/0x280 [ 908.676956] syz-executor.3 cpuset= [ 908.680630] ? wait_for_completion+0x390/0x390 [ 908.680642] __alloc_pages_slowpath+0x2114/0x26c0 [ 908.692180] / [ 908.693582] ? warn_alloc+0xf0/0xf0 [ 908.694675] mems_allowed=0-1 [ 908.695303] __alloc_pages_nodemask+0x5d3/0x700 [ 908.706670] ? __alloc_pages_nodemask+0x381/0x700 [ 908.711521] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 908.716547] alloc_pages_current+0xe7/0x1e0 [ 908.720875] kvm_mmu_create+0xd1/0x1c0 [ 908.724769] kvm_arch_vcpu_init+0x28b/0x8b0 [ 908.729103] ? alloc_pages_current+0xef/0x1e0 [ 908.733605] kvm_vcpu_init+0x26d/0x360 [ 908.737498] vmx_create_vcpu+0xf3/0x2900 [ 908.741565] ? __mutex_unlock_slowpath+0x75/0x780 [ 908.746438] ? drop_futex_key_refs.isra.0+0x17/0x80 [ 908.751457] ? futex_wake+0x11b/0x3d0 [ 908.755260] ? handle_rdmsr+0x6b0/0x6b0 [ 908.759239] kvm_vm_ioctl+0x49c/0x1430 [ 908.763130] ? __fd_install+0x227/0x5c0 [ 908.767104] ? quarantine_put+0xf5/0x1a0 [ 908.771167] ? kvm_vcpu_release+0xa0/0xa0 [ 908.775320] ? trace_hardirqs_on+0x10/0x10 [ 908.779557] ? trace_hardirqs_on+0x10/0x10 [ 908.783827] ? trace_hardirqs_on+0x10/0x10 [ 908.788068] ? futex_exit_release+0x60/0x60 [ 908.792387] ? kvm_put_kvm+0xa90/0xa90 [ 908.796264] ? lock_acquire+0x170/0x3f0 [ 908.800372] ? kvm_vcpu_release+0xa0/0xa0 [ 908.804509] do_vfs_ioctl+0x75a/0xfe0 [ 908.808301] ? selinux_file_mprotect+0x5c0/0x5c0 [ 908.813052] ? ioctl_preallocate+0x1a0/0x1a0 [ 908.817548] ? security_file_ioctl+0x76/0xb0 [ 908.821969] ? security_file_ioctl+0x83/0xb0 [ 908.826365] SyS_ioctl+0x7f/0xb0 [ 908.829719] ? do_vfs_ioctl+0xfe0/0xfe0 [ 908.833684] do_syscall_64+0x1d5/0x640 [ 908.837558] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 908.842729] RIP: 0033:0x45c889 [ 908.845914] RSP: 002b:00007f083e4e8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 908.853604] RAX: ffffffffffffffda RBX: 00007f083e4e96d4 RCX: 000000000045c889 [ 908.860855] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000007 [ 908.868107] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 908.875369] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 908.882641] R13: 0000000000000390 R14: 00000000004c60a9 R15: 000000000076bf0c [ 908.889917] CPU: 1 PID: 31491 Comm: syz-executor.3 Not tainted 4.14.176-syzkaller #0 [ 908.897811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 908.907162] Call Trace: [ 908.909749] dump_stack+0x13e/0x194 [ 908.913382] warn_alloc.cold+0x96/0x1af [ 908.917153] ieee80211 phy1854: Selected rate control algorithm 'minstrel_ht' [ 908.917353] ? zone_watermark_ok_safe+0x280/0x280 [ 908.929377] ? wait_for_completion+0x390/0x390 [ 908.933962] __alloc_pages_slowpath+0x2114/0x26c0 [ 908.935449] ieee80211 phy1854: hwaddr 02:00:00:07:3e:00 registered [ 908.938808] ? warn_alloc+0xf0/0xf0 [ 908.938822] __alloc_pages_nodemask+0x5d3/0x700 [ 908.938833] ? __alloc_pages_nodemask+0x381/0x700 [ 908.958317] ? __alloc_pages_slowpath+0x26c0/0x26c0 [ 908.963325] alloc_pages_current+0xe7/0x1e0 [ 908.967637] kvm_mmu_create+0xd1/0x1c0 [ 908.971511] kvm_arch_vcpu_init+0x28b/0x8b0 [ 908.975816] ? alloc_pages_current+0xef/0x1e0 [ 908.980299] kvm_vcpu_init+0x26d/0x360 [ 908.984300] vmx_create_vcpu+0xf3/0x2900 [ 908.988353] ? __mutex_unlock_slowpath+0x75/0x780 [ 908.993194] ? handle_rdmsr+0x6b0/0x6b0 [ 908.997167] kvm_vm_ioctl+0x49c/0x1430 [ 909.001042] ? trace_hardirqs_on+0x10/0x10 [ 909.005262] ? kvm_vcpu_release+0xa0/0xa0 [ 909.009392] ? trace_hardirqs_on+0x10/0x10 [ 909.013608] ? trace_hardirqs_on+0x10/0x10 [ 909.017823] ? trace_hardirqs_on+0x10/0x10 [ 909.022057] ? lock_acquire+0x170/0x3f0 [ 909.026023] ? lock_downgrade+0x6e0/0x6e0 [ 909.030155] ? lock_acquire+0x170/0x3f0 [ 909.034111] ? kvm_vcpu_release+0xa0/0xa0 [ 909.038242] do_vfs_ioctl+0x75a/0xfe0 [ 909.042028] ? selinux_file_mprotect+0x5c0/0x5c0 [ 909.046768] ? ioctl_preallocate+0x1a0/0x1a0 [ 909.051162] ? security_file_ioctl+0x76/0xb0 [ 909.055656] ? security_file_ioctl+0x83/0xb0 [ 909.060081] SyS_ioctl+0x7f/0xb0 [ 909.063523] ? do_vfs_ioctl+0xfe0/0xfe0 [ 909.067498] do_syscall_64+0x1d5/0x640 [ 909.071388] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 909.076563] RIP: 0033:0x45c889 [ 909.079735] RSP: 002b:00007f083e485c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 909.087424] RAX: ffffffffffffffda RBX: 00007f083e4866d4 RCX: 000000000045c889 [ 909.094674] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 909.101925] RBP: 000000000076c0e0 R08: 0000000000000000 R09: 0000000000000000 [ 909.109176] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 909.116437] R13: 0000000000000390 R14: 00000000004c60a9 R15: 000000000076c0ec [ 909.219903] ieee80211 phy1855: Selected rate control algorithm 'minstrel_ht' [ 909.228099] warn_alloc_show_mem: 1 callbacks suppressed [ 909.228102] Mem-Info: [ 909.242067] ieee80211 phy1855: hwaddr 02:00:00:07:3f:00 registered [ 909.251069] active_anon:797262 inactive_anon:7962 isolated_anon:0 [ 909.251069] active_file:14308 inactive_file:7805 isolated_file:0 [ 909.251069] unevictable:0 dirty:30 writeback:2 unstable:0 [ 909.251069] slab_reclaimable:57335 slab_unreclaimable:205107 [ 909.251069] mapped:62770 shmem:9970 pagetables:12982 bounce:0 [ 909.251069] free:420988 free_pcp:327 free_cma:0 [ 909.290946] Node 0 active_anon:1944176kB inactive_anon:16080kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216584kB dirty:4kB writeback:4kB shmem:16756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 1153024kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes 01:43:50 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000040)={0x9, 0x0, [], {0x0, @bt={0x8, 0x800, 0x1, 0x1, 0x8, 0x8, 0xcd, 0x3, 0x0, 0x1, 0x7cc5, 0x3, 0xff000, 0x0, 0x2, 0x8, {0x3, 0x9}, 0x81, 0x1}}}) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x5, @ipv4={[], [], @remote}, 0x980}}, 0x24) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r8, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x2) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{}, {{}, {0x1}}}}]}]}]}}]}, 0x58}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', r7}) [ 909.319708] Node 1 active_anon:1244672kB inactive_anon:15768kB active_file:57228kB inactive_file:31216kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34396kB dirty:116kB writeback:4kB shmem:23124kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 909.364308] Node 0 DMA free:10340kB min:220kB low:272kB high:324kB active_anon:4164kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:124kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 909.391660] lowmem_reserve[]: 0 2557 2557 2557 2557 [ 909.398246] Node 0 DMA32 free:20904kB min:36272kB low:45340kB high:54408kB active_anon:1940012kB inactive_anon:16080kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:8kB present:3129332kB managed:2621268kB mlocked:0kB kernel_stack:12096kB pagetables:30812kB bounce:0kB free_pcp:264kB local_pcp:152kB free_cma:0kB [ 909.427866] lowmem_reserve[]: 0 0 0 0 0 [ 909.431868] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:348kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 909.457409] lowmem_reserve[]: 0 0 0 0 0 [ 909.461526] Node 1 Normal free:1653516kB min:53612kB low:67012kB high:80412kB active_anon:1244636kB inactive_anon:15772kB active_file:57228kB inactive_file:31220kB unevictable:0kB writepending:296kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:8736kB pagetables:20660kB bounce:0kB free_pcp:852kB local_pcp:468kB free_cma:0kB [ 909.492012] lowmem_reserve[]: 0 0 0 0 0 [ 909.496006] Node 0 DMA: 1*4kB (M) 10*8kB (UM) 6*16kB (UM) 2*32kB (UM) 0*64kB 1*128kB (M) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 2*4096kB (M) = 10356kB [ 909.510441] Node 0 DMA32: 300*4kB (UME) 182*8kB (UME) 37*16kB (UM) 514*32kB (UME) 1*64kB (U) 9*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20912kB [ 909.525328] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 909.536210] Node 1 Normal: 524*4kB (UME) 266*8kB (UME) 92*16kB (UME) 62*32kB (UM) 24*64kB (UME) 16*128kB (M) 17*256kB (UME) 13*512kB (UME) 11*1024kB (UM) 3*2048kB (UME) 394*4096kB (M) = 1653504kB [ 909.553861] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 909.563083] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 909.571723] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 909.580623] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 909.589238] 32087 total pagecache pages [ 909.593204] 0 pages in swap cache [ 909.596640] Swap cache stats: add 0, delete 0, find 0/0 [ 909.602056] Free swap = 0kB [ 909.605072] Total swap = 0kB [ 909.608171] 1965979 pages RAM [ 909.611269] 0 pages HighMem/MovableOnly [ 909.615233] 339050 pages reserved 01:43:50 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0xb917cc7da2f0a902}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x54}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:50 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000020601080000000000000000000000000d0003000900020073797a310000000005000105000000000500051f0a00"/72], 0x48}}, 0x0) splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0) 01:43:50 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000200)) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = dup(0xffffffffffffffff) write$cgroup_type(r3, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0) syz_genetlink_get_family_id$nl80211(0x0) pipe(0x0) socket$packet(0x11, 0x2, 0x300) 01:43:50 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) syz_mount_image$cifs(&(0x7f0000000280)='cifs\x00', &(0x7f00000002c0)='./file0\x00', 0x80000000, 0x6, &(0x7f0000003540)=[{&(0x7f0000000300)="f4bc6294bd65e4c9e29cf06f93570659c733fad25c74a828613d8906067c4697260c32fc1856d0abb677c6a2fff312b1578f8834296dd52fe056d703fa5084959b7a6ab741772f1ea3cb1971f3df0748247aa72cdb08371b98a387c835b0a3c4f4ed98b4f716334f1d272718d7342a0c9e747618ff73b1f9e37de2d16a3f5ea08fb4c09b1b48228aead9e8a136968667eae4dc8efbcdd7155f2ed1200726c96c7bcb8c0067d70b", 0xa7, 0x5a602077}, {&(0x7f00000003c0), 0x0, 0x8}, {&(0x7f00000004c0)="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", 0x1000, 0x8}, {&(0x7f00000014c0)="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", 0x1000, 0x7}, {&(0x7f00000024c0)="6052a9cd8f9d94b90e65b46a93b29881085515768364396fc8e6cef105ad4d3f39cb7ff9c24a3355ad949740f5f7be8ba8d892d3450164fa042e84c53ef4e2139e3c4f8c61b429c911c156025bbf90c206f4760adf57", 0x56}, {&(0x7f0000002540)="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