@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x0, 0x0, 0xfffffff8}}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x45}]}, {0x0, [0x0, 0x0, 0x2e, 0x0, 0x0, 0x30]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x2000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:16:28 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x4a0840) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:16:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x56020000, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:16:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:16:28 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "ee4f792ad4257eb2691caf81db"}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "b3ea68c7"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x2404c090}, 0x8c0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="090000000000000000000700000008000300", @ANYRES32=r6, @ANYBLOB="0800051d000000001400060076657468315f746f5f7465616d0000000400cc0008000500040000001400040073"], 0x58}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x17}, @val={0x8}, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x48}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4060040) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 733.487415] Unknown ioctl 35299 16:16:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x56860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 733.556924] IPVS: ftp: loaded support on port[0] = 21 16:16:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x57860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:16:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:16:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x58860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:16:29 executing program 1: recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000001c0)=@sco={0x1f, @fixed}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/212, 0xd4}, {&(0x7f0000000800)=""/158, 0x9e}, {&(0x7f0000000280)=""/90, 0x5a}, {&(0x7f0000000080)=""/54, 0x36}], 0x5}, 0x6000) syz_mount_image$romfs(&(0x7f00000000c0)='romfs\x00', &(0x7f0000000100)='./file0\x00', 0x9, 0x2, &(0x7f0000000040)=[{&(0x7f0000000240)='-rom', 0x4}, {&(0x7f0000000300)="0000052a000000000000041a69968a5766696c6530000000000000000000000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273796c6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b01006c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c650000797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273790100616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a", 0x320, 0xe0}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="a2a471ef350d5295613783c321b275ad5e2c522a89ad882a4efc70864332b9fb2adaa421092533f53b088f102d2770ded971109b0ecc3d7771c3e6803352d2c63ba1faaaa848e6b0e4ed59accdad000020000000"]) semctl$GETNCNT(0xffffffffffffffff, 0x4, 0xe, &(0x7f0000000000)=""/50) [ 734.374335] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 734.395844] romfs: VFS: Can't find a romfs filesystem on dev loop1. 16:16:31 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:16:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:16:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x59860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:16:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x50, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x80}, 0x40101, 0x0, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a48000036000535d25a80648c63940d0324fc60100009020a000900053582c137153e370300018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 16:16:31 executing program 5: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$dsp(0xffffffffffffffff, &(0x7f0000000240)="7afeabf58c2750c744488b84484043ab7d9803214e9d3e2626237db9e493ceefc2af3a57a515a542cdc9850cd267c2b06c6d5df6e7c5a9f51bc33659b7021ba8a33aeecd19ca3b4e33a9d87add1f1dc89963473bfa77c056415422378aa63316a9da53854628340b639a49b8bf73cb88e9f51cc33dbc4940b21afb882f2b56ee9be968b4b6d8930ceb4fe7b979f8aebf06b389f5892397b29e97023045c3d62020bfdb8575564b98de2bfac0fbe97e1498fa257c198c3ed66ea56e92f05ad5a11749a6d80053674b2ccfbc2228ea715f74a39938c9e64aee", 0xd8) r2 = gettid() bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000440000004400000008000000000800000000000800000000000000000000000300000000000000000000000000000000000000000000000100"/84], 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 16:16:31 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x7ff) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) r4 = signalfd(r1, &(0x7f0000000080)={[0x80000001]}, 0x8) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 736.382432] netlink: 18406 bytes leftover after parsing attributes in process `syz-executor.1'. [ 736.461004] netlink: 18406 bytes leftover after parsing attributes in process `syz-executor.1'. 16:16:31 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0xa0000) getsockopt$inet6_udp_int(r3, 0x11, 0x66, &(0x7f0000000140), &(0x7f0000000180)=0x4) 16:16:31 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 736.511254] *** Guest State *** [ 736.522059] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 16:16:31 executing program 1: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a01020000000000000000000000000400048009000200020900010073797a3000000000080003400000000101613bf9225413e16f99dd745b6b9c58781dfdae8218122c413a614f44a4569794875d7e3ccfe197e4ec98754441c064c678cc0eba13f952349c1dfa4cd21f34b4029bf05be5739288f70b19a59dad687622e44297c2345dbac33d32d337568e9ca6d51d23a30a4d4c8febabe337664366f7"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000001) 16:16:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x5a860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 736.557886] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 736.596628] CR3 = 0x0000000000000000 [ 736.611851] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 736.639146] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 736.658407] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 736.676951] CS: sel=0x0000, attr=0x0009b, limit=0x0000ffff, base=0x0000000000000000 [ 736.696048] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 16:16:31 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 736.720043] SS: sel=0x0000, attr=0x00081, limit=0x0000ffff, base=0x0000000000000000 [ 736.733825] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 736.764555] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 736.783283] audit: type=1804 audit(1603210591.964:29): pid=30206 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir377029482/syzkaller.Z473b7/508/cgroup.controllers" dev="sda1" ino=16647 res=1 [ 736.824170] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 736.836251] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 736.853964] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 16:16:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x5b860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 736.868334] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 736.884801] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 736.904696] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 736.918435] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 16:16:32 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) setfsgid(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000080)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 736.952290] Interruptibility = 00000000 ActivityState = 00000000 [ 736.968652] *** Host State *** [ 736.977985] RIP = 0xffffffff811ca2ea RSP = 0xffff8880990b7878 [ 736.995522] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 737.009092] FSBase=00007f5e271d6700 GSBase=ffff8880ae200000 TRBase=fffffe0000034000 [ 737.027142] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 737.040314] CR0=0000000080050033 CR3=000000009617f000 CR4=00000000001426f0 [ 737.068612] Sysenter RSP=fffffe0000034000 CS:RIP=0010:ffffffff87c013e0 [ 737.081958] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 737.093683] *** Control State *** [ 737.097466] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ea [ 737.111228] EntryControls=0000d1ff ExitControls=002fefff [ 737.121817] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 737.151820] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 16:16:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:16:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x5c860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:16:32 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000000c0)={'macvlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800210000000000000000001c140000fe0000010000000008000100000001"], 0x1}}, 0x0) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x200000, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r10, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x24, r8, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r11}]}, 0x24}}, 0x0) ioctl$TUNSETIFINDEX(r6, 0x400454da, &(0x7f0000000080)=r9) socket$netlink(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0) [ 737.168309] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 737.181217] reason=80000021 qualification=0000000000000000 [ 737.188264] IDTVectoring: info=00000000 errcode=00000000 [ 737.194851] TSC Offset = 0xfffffe73f44ccc10 [ 737.199180] EPT pointer = 0x000000004d29c01e [ 737.203897] Virtual processor ID = 0x0001 16:16:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x5d860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:16:34 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) r3 = accept$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000140)=0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@empty, 0x7ff, 0x661b29a7234fa123, 0x2, 0xb, 0x200, 0x2}, &(0x7f0000000240)=0x20) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:16:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:16:34 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:16:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x5e860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:16:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:16:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:16:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x5f860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:16:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:16:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x60000000, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:16:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:16:35 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() getpgrp(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xcc, r2, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x500000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6a}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000) wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ioctl$sock_ax25_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, [@default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) 16:16:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:16:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x60860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:16:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:16:37 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:16:37 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180000000000000044000000440000000800000032f00000000000080000000000000000000000010000000000000000000000000000080300000000000000000000000000000000000000000000000100"/100], 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:16:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x60000000, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:16:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x61860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:16:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:16:37 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100180000000000000044000000440000000800080000000000000000000000010000000000000000000000000000000300000000000000000000000000000100000000000000000100000000000000000000000000000000c0da257232a5130241e667f5229d44ab09bbc44c3b5ddc7d8a5f16f1"], 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000140)=""/71, 0x47}], 0x1) 16:16:38 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:16:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x62860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:16:38 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) process_vm_writev(r0, &(0x7f0000001540)=[{&(0x7f0000000240)=""/232, 0x29}, {&(0x7f0000000100)=""/129, 0x81}, {&(0x7f0000000340)=""/146, 0x92}, {&(0x7f0000000080)=""/40, 0x28}, {&(0x7f0000000400)=""/145, 0x91}, {&(0x7f00000004c0)=""/4089, 0x1000}, {&(0x7f00000014c0)=""/100, 0x64}], 0x7, &(0x7f00000016c0)=[{&(0x7f00000015c0)=""/228, 0xffffffffffffffee}], 0x42, 0x0) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000004400000044000000080000000000000800000000000000000000000100000000000000000000000000000008000000000000000000000000000000000000000000000001000000000000000000000000ec000000"], 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000001780)={0x2, 0x0, @rand_addr=0x64010100, 0x2}, 0x10) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r3, 0x8008f511, &(0x7f0000001700)) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) vmsplice(r5, &(0x7f00000002c0), 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 16:16:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:16:38 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYRES64], 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/mice\x00', 0x208000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000003c0)={0x1, 0x0, &(0x7f00000001c0)=""/140, &(0x7f0000000280)=""/134, &(0x7f0000000340)=""/74, 0x10000}) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup2(r3, r3) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcsu\x00', 0x420180, 0x0) getsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f0000000480)=""/147, &(0x7f0000000540)=0x93) fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ptrace$cont(0x20, 0x0, 0x2, 0x5) 16:16:38 executing program 1: getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000140)={'icmp6\x00'}, &(0x7f0000000180)=0x1e) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x58248}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x100}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='schedstat\x00') write$P9_RFLUSH(r3, &(0x7f00000000c0)={0x7, 0x6d, 0x2}, 0x7) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x75160d00, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x5c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0xf0a8}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x5c}}, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xfff}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1ff}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x40608d0}, 0x4000080) 16:16:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x63860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 743.325986] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1543 sclass=netlink_route_socket pid=30796 comm=syz-executor.1 16:16:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x64860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:16:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:16:38 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180000000000000044000000440000000800000000000000000000080000000003000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000100"/100], 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000069c0)={r1, 0x1, 0x20, 0x800}) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000006a00)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006b00)=[{&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000080)}], 0x1, &(0x7f0000006a40)=[@cred={{0x1c, 0x1, 0x2, {r0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r2, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r6, r7, r3, r8]}}], 0xb0, 0x805}], 0x1, 0x80) 16:16:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 743.594582] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1543 sclass=netlink_route_socket pid=30748 comm=syz-executor.1 16:16:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x65580000, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:16:41 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x8, [@int, @array]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x48}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:16:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:16:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x65860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:16:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:16:41 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x58}]}, {0x0, [0x5f, 0x0, 0x0, 0x0, 0x0, 0x30]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) delete_module(&(0x7f0000000240)='trusted.overlay.nlink\x00', 0x200) r2 = dup(r1) lsetxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='trusted.overlay.nlink\x00', &(0x7f0000000180)={'U+', 0x1}, 0x16, 0x1) r3 = signalfd4(r2, &(0x7f0000000280)={[0x10001]}, 0x8, 0x800) ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f00000002c0)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:16:41 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x24c100, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$CHAR_RAW_SECDISCARD(r3, 0x127d, &(0x7f0000000100)=0xd0d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x98000, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000080)={0x4}) setsockopt$sock_int(r4, 0x1, 0x2a, &(0x7f0000000040), 0x4) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, &(0x7f0000000140)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000180)=0x28) recvmmsg(r4, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) sendto$inet6(r4, &(0x7f0000000000)="b4", 0x1, 0x0, 0x0, 0x0) 16:16:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x66860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:16:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:16:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x67860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 746.379767] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 16:16:41 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x4, 0x5}}, @int, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x0, 0x1}}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0xd5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x70}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)="a4918a8df7cf7d7a09105ad5f1d84c33a4f52be29a5aa122148c572d3b7de079c11369a8c37680f327950f305c6dac496924f6941090b05c26ba0a25d4be75c4ee20e5fcfb6090c56d9f8527943519be532a61ffb05a869932a9166a8e8d48a0502165fdbef644b128640563edc166172a27957779415124e5f9bf752956e5b5502be10bad38497250ed26652c0ade659d026fd371a48ddd6630a2a77344a25d0df6daab228aaa28cbe2edf3d23b8a2912bbd1445551b1eb3ed5106c8a28bd04f3587e204268425abdc37b36919855b9e7d4963f7eb6df1795a46a3067", 0xdd}, {&(0x7f0000001340)="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", 0x180}, {&(0x7f0000000340)="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", 0x1000}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000001500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000000200)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x800) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x355240, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r3, 0x40087705, &(0x7f0000000100)={0x200, 0x816}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:16:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:16:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x68000000, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:16:44 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x8, [@int, @array]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x48}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:16:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x68860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:16:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:16:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') pipe(&(0x7f00000001c0)) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x8) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x6) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95", 0x209) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) setresuid(0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x1c500) 16:16:44 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180000000000000044000000440000060000000001000000000000080000000000000000000000010000000000000000000000000000000300000000004000000000000000000000000000000000000100"/100], 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000240)={0x3, {{0x2, 0x4e20, @loopback}}}, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x33) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 16:16:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 16:16:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x69860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 749.218899] audit: type=1804 audit(1603210604.404:30): pid=31104 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir377029482/syzkaller.Z473b7/516/file1/file0" dev="sda1" ino=16693 res=1 16:16:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x4000000000000000, 0x2000, 0x8, 0xe, 0x1}) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f6e530e5428ee56}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x50}}, 0x0) [ 749.334030] audit: type=1804 audit(1603210604.434:31): pid=31149 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir377029482/syzkaller.Z473b7/516/file1/file0" dev="sda1" ino=16693 res=1 16:16:44 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x6, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x5b3}) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000), 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x20004810) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x50) inotify_init() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001d80)=[{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000180)="46bd4615beea00af8f11965d7a454c05e2c2e2a463017823e0e91cfb42d09613fec79a8e9c722a376b8a3b09fe75e8b5553c070da72448db2c124b45c28e7127a9627d7b75087eb5a95cc23fde322ad1145b7b7e580e1e1860e7f762af0383d75c7c2554710ff28db55aa5823f402861e3974b7ff114550438a1b49867a9dd461f198e453406566252055b16bad391d8bfc8db518ca340f432aad811c8852a256792d497db20515825f7dd287c323bb5867bb9ca", 0xb4}], 0x1, &(0x7f0000000280)=[@cred={{0x1c}}], 0x20, 0x4040804}, {&(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000500), 0x0, &(0x7f0000000980)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8, 0x8000}, {&(0x7f0000000ac0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000b40)}, {0x0}], 0x2, &(0x7f0000000c40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}, {0x0, 0x0, &(0x7f00000011c0)=[{0x0}, {&(0x7f0000000e80)="24261424e6754d357c22e1a223774a0ecb9aaeaaa2eb0113497abde0780f7b2c0bc7bc", 0x23}, {&(0x7f0000000f40)="44ed4e628671754dfc678636c03e549712a15c4c2e277843a36af26ae815c83a11e07656cfa7edf223d6a280c33ca76f0e4d7e2c404d45bf487aa586307c6d6d301a224b4fd4e8f4ef1f6ca6f2a523fbaf8b6317ad9400ef39ae91bf0ec33905b02cc65d65499946125a88411d5f7e8bbe31e3864fb26973d4eda64c9168adb0428aced51a7ba6feccc5fc7eff4800db0d59eacf046a3705", 0x98}, {&(0x7f0000001000)="34c851ac7707faa22b3f4bf35bfcbafc14da26fc2896004cfa8fb5f484a624cd7e224691a90015d4606208e99d7293ecec5c4dc1549ce3057cb12da4ef590050c2999843f7e72f60ec5d65459e1aec1e98858c44f0e93d41c3578d9d9870c498ba8148f91e6d9aef1a828e35e0ee9dd7dcb988db57b5d18efa0649acf322cfcd2cf2f1bb716e7c41b198aa950ac0073480569c3e03eddfa18eaaa00c5543974e592056b5781a7b0a", 0xa8}, {0x0}], 0x5, &(0x7f00000014c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x90, 0x4000}, {0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="7656430dade32fbede107901a9aacd32", 0x10}], 0x1, &(0x7f0000001800)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20, 0x40}], 0x5, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x3e) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x9, 0x2, 0x8, 0x5, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000080), &(0x7f0000000000)=@tcp}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f00000000c0)={r1, &(0x7f00000001c0), &(0x7f0000000040)=@tcp6}, 0x20) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) [ 749.473371] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 16:16:44 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRESOCT], 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x7fff, 0x6, 0x1}) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:16:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x6a860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:16:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 16:16:47 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x8, [@int, @array]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x48}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:16:47 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="0505000000000000616e500000000000ad000000d3d03f192a24f0630000001030c02273b02ecb51ae29d3942a86be9a5dfb8f3c5b5f43076de76fc4bb98ff53aa23b9ce9bfa3dc0847de80bbeca011471ddcb2962e2924ec5e24c1df4ec1bf5705baea2257fe424c71f0cabbb4b371d20905ec6b7e5759db6182711b7537c5e2a8621a24e0cbb322cb09bfdf62b68cc8a7041c7"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x48) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000080)=0x3) 16:16:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 16:16:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x6b860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:16:47 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x300200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="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"], 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000000140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000001800)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/254, 0xfe}, {&(0x7f0000001340)=""/205, 0xcd}, {&(0x7f0000001440)=""/221, 0xdd}, {&(0x7f0000001540)=""/120, 0x78}, {&(0x7f00000015c0)=""/194, 0xc2}, {&(0x7f0000001a00)=""/48, 0x30}, {&(0x7f00000016c0)=""/160, 0xa0}, {&(0x7f0000001780)=""/76, 0x4c}], 0x9, &(0x7f00000018c0)=""/209, 0xd1}, 0x10102) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xf, 0xffffffffffffffff, 0x0, &(0x7f0000001a40)="9f945ddb689f0bb338e11fab52fdc372ffd3a2775f2f0475f7489c38b4e8322c72c40c64760d451e4a393530d8c8964b5f47f9e4f5384bda5fc3f53a675274cfcc97f829f62fb23330a5db65b4f0f826c395ebba94e0fefed493efdc9e84628963b727d97379d0271c9cf75f422da3cb04c2651eddd3e426c629e6a63ea1f4e136441921bbdd3f407fcc3d79190ac152ea8ef54547e97340ce21a0c8b28bbd5fe7e5bd65d9485e4da42dfb48e1f8fa11809c21d5ad62e4eef7864eafcba3fbe8946345a8b9a547704f9dec2b58c9b9662d1536f235c954d9c3c6d997e2328047f979008ef9bf4b0d6415c8d795fa0ae4a3dab1bb9b09") r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_mreq(r5, 0x0, 0x24, &(0x7f00000001c0)={@multicast2, @initdev}, &(0x7f0000000200)=0x8) ptrace$cont(0x7, r0, 0x0, 0x0) 16:16:47 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x6, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x5b3}) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000), 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x20004810) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x50) inotify_init() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001d80)=[{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000180)="46bd4615beea00af8f11965d7a454c05e2c2e2a463017823e0e91cfb42d09613fec79a8e9c722a376b8a3b09fe75e8b5553c070da72448db2c124b45c28e7127a9627d7b75087eb5a95cc23fde322ad1145b7b7e580e1e1860e7f762af0383d75c7c2554710ff28db55aa5823f402861e3974b7ff114550438a1b49867a9dd461f198e453406566252055b16bad391d8bfc8db518ca340f432aad811c8852a256792d497db20515825f7dd287c323bb5867bb9ca", 0xb4}], 0x1, &(0x7f0000000280)=[@cred={{0x1c}}], 0x20, 0x4040804}, {&(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000500), 0x0, &(0x7f0000000980)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8, 0x8000}, {&(0x7f0000000ac0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000b40)}, {0x0}], 0x2, &(0x7f0000000c40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}, {0x0, 0x0, &(0x7f00000011c0)=[{0x0}, {&(0x7f0000000e80)="24261424e6754d357c22e1a223774a0ecb9aaeaaa2eb0113497abde0780f7b2c0bc7bc", 0x23}, {&(0x7f0000000f40)="44ed4e628671754dfc678636c03e549712a15c4c2e277843a36af26ae815c83a11e07656cfa7edf223d6a280c33ca76f0e4d7e2c404d45bf487aa586307c6d6d301a224b4fd4e8f4ef1f6ca6f2a523fbaf8b6317ad9400ef39ae91bf0ec33905b02cc65d65499946125a88411d5f7e8bbe31e3864fb26973d4eda64c9168adb0428aced51a7ba6feccc5fc7eff4800db0d59eacf046a3705", 0x98}, {&(0x7f0000001000)="34c851ac7707faa22b3f4bf35bfcbafc14da26fc2896004cfa8fb5f484a624cd7e224691a90015d4606208e99d7293ecec5c4dc1549ce3057cb12da4ef590050c2999843f7e72f60ec5d65459e1aec1e98858c44f0e93d41c3578d9d9870c498ba8148f91e6d9aef1a828e35e0ee9dd7dcb988db57b5d18efa0649acf322cfcd2cf2f1bb716e7c41b198aa950ac0073480569c3e03eddfa18eaaa00c5543974e592056b5781a7b0a", 0xa8}, {0x0}], 0x5, &(0x7f00000014c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x90, 0x4000}, {0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="7656430dade32fbede107901a9aacd32", 0x10}], 0x1, &(0x7f0000001800)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20, 0x40}], 0x5, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x3e) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x9, 0x2, 0x8, 0x5, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000080), &(0x7f0000000000)=@tcp}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f00000000c0)={r1, &(0x7f00000001c0), &(0x7f0000000040)=@tcp6}, 0x20) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) 16:16:47 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000008440000004400000008000000000000000000000800000000000000000000000100000000000000000000000000000003000000000000000000000000000000000000000000000001000000000000000000000000000000009f57c219a903fe6de8"], 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:16:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x6c000000, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:16:47 executing program 3 (fault-call:8 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 752.424058] FAULT_INJECTION: forcing a failure. [ 752.424058] name failslab, interval 1, probability 0, space 0, times 0 [ 752.436412] CPU: 1 PID: 31331 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 752.444325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 752.453707] Call Trace: [ 752.456334] dump_stack+0x22c/0x33e [ 752.459989] should_fail.cold+0xa/0x2f [ 752.463888] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 752.469025] __should_failslab+0x153/0x1b6 [ 752.473283] should_failslab+0x5/0xf [ 752.477001] kmem_cache_alloc+0x2b1/0x4a0 [ 752.481263] mmu_topup_memory_caches+0x8f/0x360 [ 752.485944] kvm_mmu_load+0x1e/0x1010 [ 752.489802] ? kvm_arch_vcpu_ioctl_run+0x4b7a/0x6c10 [ 752.494922] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 752.499885] ? mark_held_locks+0xf0/0xf0 [ 752.504005] ? kvm_vcpu_ioctl+0x175/0xe30 [ 752.508169] ? find_held_lock+0x2d/0x110 [ 752.512233] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 752.517080] ? get_task_pid+0x19d/0x320 [ 752.521069] ? lock_downgrade+0x750/0x750 [ 752.525242] ? check_preemption_disabled+0x41/0x2b0 [ 752.530268] ? kvm_vcpu_ioctl+0x493/0xe30 [ 752.534414] kvm_vcpu_ioctl+0x493/0xe30 [ 752.538390] ? kvm_get_dirty_log+0x590/0x590 [ 752.542816] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 752.547589] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 752.552181] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 752.557028] ? rcu_nmi_exit+0x102/0x220 [ 752.561016] ? retint_kernel+0x2d/0x2d [ 752.564908] ? kvm_get_dirty_log+0x590/0x590 [ 752.569331] ? kvm_get_dirty_log+0x590/0x590 [ 752.573747] do_vfs_ioctl+0xcdb/0x12e0 [ 752.577728] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 752.582942] ? ioctl_preallocate+0x200/0x200 [ 752.589099] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 752.594570] ? __fget+0x3ad/0x570 [ 752.598036] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 752.602285] ksys_ioctl+0x9b/0xc0 [ 752.605755] __x64_sys_ioctl+0x6f/0xb0 [ 752.609683] do_syscall_64+0xf9/0x670 [ 752.613503] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 752.618718] RIP: 0033:0x45de59 [ 752.621910] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 752.640825] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 752.648550] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 752.655831] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 752.663099] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 16:16:47 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000080)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:16:47 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() listen(0xffffffffffffffff, 0x80000000) wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r3 = open(&(0x7f0000000080)='./file0\x00', 0xe000, 0x100) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x38, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x400}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40) ptrace$cont(0x7, r0, 0x0, 0x0) [ 752.670379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 752.677650] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:16:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x6c860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:16:50 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x40}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:16:50 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x6, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x5b3}) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000), 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x20004810) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x50) inotify_init() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001d80)=[{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000180)="46bd4615beea00af8f11965d7a454c05e2c2e2a463017823e0e91cfb42d09613fec79a8e9c722a376b8a3b09fe75e8b5553c070da72448db2c124b45c28e7127a9627d7b75087eb5a95cc23fde322ad1145b7b7e580e1e1860e7f762af0383d75c7c2554710ff28db55aa5823f402861e3974b7ff114550438a1b49867a9dd461f198e453406566252055b16bad391d8bfc8db518ca340f432aad811c8852a256792d497db20515825f7dd287c323bb5867bb9ca", 0xb4}], 0x1, &(0x7f0000000280)=[@cred={{0x1c}}], 0x20, 0x4040804}, {&(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000500), 0x0, &(0x7f0000000980)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8, 0x8000}, {&(0x7f0000000ac0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000b40)}, {0x0}], 0x2, &(0x7f0000000c40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}, {0x0, 0x0, &(0x7f00000011c0)=[{0x0}, {&(0x7f0000000e80)="24261424e6754d357c22e1a223774a0ecb9aaeaaa2eb0113497abde0780f7b2c0bc7bc", 0x23}, {&(0x7f0000000f40)="44ed4e628671754dfc678636c03e549712a15c4c2e277843a36af26ae815c83a11e07656cfa7edf223d6a280c33ca76f0e4d7e2c404d45bf487aa586307c6d6d301a224b4fd4e8f4ef1f6ca6f2a523fbaf8b6317ad9400ef39ae91bf0ec33905b02cc65d65499946125a88411d5f7e8bbe31e3864fb26973d4eda64c9168adb0428aced51a7ba6feccc5fc7eff4800db0d59eacf046a3705", 0x98}, {&(0x7f0000001000)="34c851ac7707faa22b3f4bf35bfcbafc14da26fc2896004cfa8fb5f484a624cd7e224691a90015d4606208e99d7293ecec5c4dc1549ce3057cb12da4ef590050c2999843f7e72f60ec5d65459e1aec1e98858c44f0e93d41c3578d9d9870c498ba8148f91e6d9aef1a828e35e0ee9dd7dcb988db57b5d18efa0649acf322cfcd2cf2f1bb716e7c41b198aa950ac0073480569c3e03eddfa18eaaa00c5543974e592056b5781a7b0a", 0xa8}, {0x0}], 0x5, &(0x7f00000014c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x90, 0x4000}, {0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="7656430dade32fbede107901a9aacd32", 0x10}], 0x1, &(0x7f0000001800)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20, 0x40}], 0x5, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x3e) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x9, 0x2, 0x8, 0x5, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000080), &(0x7f0000000000)=@tcp}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f00000000c0)={r1, &(0x7f00000001c0), &(0x7f0000000040)=@tcp6}, 0x20) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) 16:16:50 executing program 3 (fault-call:8 fault-nth:1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:16:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x6d860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 755.187210] FAULT_INJECTION: forcing a failure. [ 755.187210] name failslab, interval 1, probability 0, space 0, times 0 16:16:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x6e860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 755.231407] CPU: 0 PID: 31430 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 755.239330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 755.248697] Call Trace: [ 755.251329] dump_stack+0x22c/0x33e [ 755.255845] should_fail.cold+0xa/0x2f [ 755.259749] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 755.264881] __should_failslab+0x153/0x1b6 [ 755.269154] should_failslab+0x5/0xf [ 755.272878] kmem_cache_alloc+0x2b1/0x4a0 [ 755.277045] mmu_topup_memory_caches+0x8f/0x360 [ 755.281733] kvm_mmu_load+0x1e/0x1010 [ 755.285551] ? kvm_arch_vcpu_ioctl_run+0x4b7a/0x6c10 [ 755.290675] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 755.295620] ? mark_held_locks+0xf0/0xf0 [ 755.299726] ? find_held_lock+0x2d/0x110 [ 755.303814] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 755.308657] ? get_task_pid+0x19d/0x320 [ 755.312639] ? lock_downgrade+0x750/0x750 [ 755.316799] ? check_preemption_disabled+0x41/0x2b0 [ 755.321840] ? kvm_vcpu_ioctl+0x493/0xe30 [ 755.325990] kvm_vcpu_ioctl+0x493/0xe30 [ 755.329970] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 755.334743] ? kvm_get_dirty_log+0x590/0x590 [ 755.339158] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 755.343744] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 755.348527] ? rcu_nmi_exit+0x102/0x220 [ 755.352505] ? retint_kernel+0x2d/0x2d [ 755.356406] ? do_vfs_ioctl+0xbd/0x12e0 [ 755.360391] ? write_comp_data+0x23/0x70 [ 755.364452] ? kvm_get_dirty_log+0x590/0x590 [ 755.368888] do_vfs_ioctl+0xcdb/0x12e0 [ 755.372788] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 755.378071] ? ioctl_preallocate+0x200/0x200 [ 755.382489] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 755.387967] ? __fget+0x3ad/0x570 [ 755.391460] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 755.395731] ksys_ioctl+0x9b/0xc0 [ 755.399192] __x64_sys_ioctl+0x6f/0xb0 [ 755.403087] do_syscall_64+0xf9/0x670 [ 755.406892] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 755.412083] RIP: 0033:0x45de59 [ 755.415301] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 755.434561] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 755.442308] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 755.449602] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 755.456880] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 755.464169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 755.471449] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:16:50 executing program 3 (fault-call:8 fault-nth:2): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:16:50 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f0000000000)={0x0, 0x7, 0x0}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 16:16:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x6f860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 755.656282] FAULT_INJECTION: forcing a failure. [ 755.656282] name failslab, interval 1, probability 0, space 0, times 0 [ 755.673671] CPU: 1 PID: 31513 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 755.681576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 755.691049] Call Trace: [ 755.693656] dump_stack+0x22c/0x33e [ 755.697313] should_fail.cold+0xa/0x2f [ 755.701241] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 755.706371] __should_failslab+0x153/0x1b6 [ 755.710627] should_failslab+0x5/0xf [ 755.714352] kmem_cache_alloc+0x2b1/0x4a0 [ 755.718514] mmu_topup_memory_caches+0x8f/0x360 [ 755.723210] kvm_mmu_load+0x1e/0x1010 [ 755.730436] ? kvm_arch_vcpu_ioctl_run+0x323d/0x6c10 [ 755.735571] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 755.740522] ? mark_held_locks+0xa6/0xf0 [ 755.744640] ? find_held_lock+0x2d/0x110 [ 755.748718] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 755.753572] ? get_task_pid+0x19d/0x320 [ 755.757565] ? lock_downgrade+0x750/0x750 [ 755.761733] ? check_preemption_disabled+0x41/0x2b0 [ 755.766765] ? kvm_vcpu_ioctl+0x493/0xe30 [ 755.770919] kvm_vcpu_ioctl+0x493/0xe30 [ 755.774908] ? kvm_get_dirty_log+0x590/0x590 [ 755.779336] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 755.784103] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 755.788697] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 755.793463] ? rcu_nmi_exit+0x102/0x220 [ 755.797446] ? retint_kernel+0x2d/0x2d [ 755.801354] ? do_vfs_ioctl+0xbd/0x12e0 [ 755.805348] ? kvm_get_dirty_log+0x590/0x590 [ 755.809776] do_vfs_ioctl+0xcdb/0x12e0 [ 755.813688] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 755.819075] ? ioctl_preallocate+0x200/0x200 [ 755.823510] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 755.829105] ? __fget+0x3ad/0x570 [ 755.832605] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 755.836879] ksys_ioctl+0x9b/0xc0 [ 755.840375] __x64_sys_ioctl+0x6f/0xb0 [ 755.844283] do_syscall_64+0xf9/0x670 [ 755.848120] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 755.853326] RIP: 0033:0x45de59 [ 755.856527] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 755.875460] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 755.883179] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 755.890464] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 755.897742] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 16:16:51 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb0100180000000000000044000000440000000800000000000000000000080000000000000000000000010000000000000061fb65217ee7a0b40300000000000008000000000000000000000000001b01000000000000000000000000000000008fcb4670b2d1a08b2f2d0def224b78cf516d48073a9c1d1c22ba2f5dee950d3cc2d3e192d867ea0aff1715703011201eb8098173f66edd5f81ffec5c275709622b91e8143d6bbc784ff66eabc8991428b30d4fed90bf6a26"], 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)={0x3, 0x1, 0x4, 0x8, 0x0, {}, {0x3, 0xb64868b0d6acb761, 0xd9, 0x1, 0x0, 0x5, "5e3b9ec8"}, 0x800, 0x1, @userptr=0x10000, 0xfa33, 0x0, r2}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000040)={0x1, 0x8002, 0x7ff, 0x4, 0x0}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000002c0)={r4, 0x9, 0x20}, &(0x7f0000000300)=0xc) vmsplice(r3, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000240)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 755.905013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 755.912289] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:16:51 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x151000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:16:51 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(0xffffffffffffffff, 0xac00, &(0x7f0000000000)={0x0, 0x7, 0x0}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 16:16:51 executing program 3 (fault-call:8 fault-nth:3): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 756.179705] FAULT_INJECTION: forcing a failure. [ 756.179705] name failslab, interval 1, probability 0, space 0, times 0 [ 756.208566] CPU: 0 PID: 31580 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 756.216496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 756.225883] Call Trace: [ 756.228496] dump_stack+0x22c/0x33e [ 756.232149] should_fail.cold+0xa/0x2f [ 756.236070] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 756.241195] __should_failslab+0x153/0x1b6 [ 756.245443] should_failslab+0x5/0xf [ 756.249164] kmem_cache_alloc+0x2b1/0x4a0 [ 756.253328] mmu_topup_memory_caches+0x8f/0x360 [ 756.258013] kvm_mmu_load+0x1e/0x1010 [ 756.261839] ? kvm_arch_vcpu_ioctl_run+0x3a22/0x6c10 [ 756.266958] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 756.271905] ? mark_held_locks+0xa6/0xf0 [ 756.275987] ? find_held_lock+0x2d/0x110 [ 756.280065] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 756.284911] ? get_task_pid+0x19d/0x320 [ 756.288894] ? lock_downgrade+0x750/0x750 [ 756.293055] ? check_preemption_disabled+0x41/0x2b0 [ 756.298103] ? kvm_vcpu_ioctl+0x493/0xe30 [ 756.302251] kvm_vcpu_ioctl+0x493/0xe30 [ 756.306234] ? kvm_get_dirty_log+0x590/0x590 [ 756.310650] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 756.315418] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 756.320013] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 756.324779] ? rcu_nmi_exit+0x102/0x220 [ 756.328769] ? retint_kernel+0x2d/0x2d [ 756.332687] ? kvm_get_dirty_log+0x590/0x590 [ 756.337109] ? kvm_get_dirty_log+0x590/0x590 [ 756.341543] do_vfs_ioctl+0xcdb/0x12e0 [ 756.345443] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 756.350643] ? ioctl_preallocate+0x200/0x200 [ 756.355060] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 756.360533] ? __fget+0x3ad/0x570 [ 756.363999] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 756.368256] ksys_ioctl+0x9b/0xc0 [ 756.371722] __x64_sys_ioctl+0x6f/0xb0 [ 756.375623] do_syscall_64+0xf9/0x670 [ 756.379461] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 756.384657] RIP: 0033:0x45de59 [ 756.387853] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 756.406779] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 756.414507] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 756.421782] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 756.429059] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 756.436320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 756.443605] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:16:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x70860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:16:53 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x40}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:16:53 executing program 1: syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r3 = socket(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x200, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x0, &(0x7f00000001c0), 0x0) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f00000000c0), 0x2) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}]}}}]}, 0x40}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000240)={[0x80000000]}, &(0x7f0000000280), 0x8) 16:16:53 executing program 3 (fault-call:8 fault-nth:4): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:16:53 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x40}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 758.300152] FAULT_INJECTION: forcing a failure. [ 758.300152] name failslab, interval 1, probability 0, space 0, times 0 [ 758.323752] CPU: 1 PID: 31599 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 758.331696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 758.341060] Call Trace: [ 758.343664] dump_stack+0x22c/0x33e 16:16:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x71860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 758.347310] should_fail.cold+0xa/0x2f [ 758.351218] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 758.356344] __should_failslab+0x153/0x1b6 [ 758.360593] should_failslab+0x5/0xf [ 758.364318] kmem_cache_alloc+0x2b1/0x4a0 [ 758.368481] mmu_topup_memory_caches+0x8f/0x360 [ 758.373150] kvm_mmu_load+0x1e/0x1010 [ 758.377001] ? kvm_cpu_has_injectable_intr+0x29c/0x3c0 [ 758.382316] ? __sanitizer_cov_trace_pc+0x37/0x50 [ 758.387189] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 758.392128] ? mark_held_locks+0xf0/0xf0 [ 758.396201] ? __mutex_lock+0x2c0/0x13f0 [ 758.400303] ? find_held_lock+0x2d/0x110 [ 758.404377] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 758.409227] ? get_task_pid+0x19d/0x320 [ 758.413215] ? lock_downgrade+0x750/0x750 [ 758.417375] ? check_preemption_disabled+0x41/0x2b0 [ 758.422413] ? kvm_vcpu_ioctl+0x493/0xe30 [ 758.426575] kvm_vcpu_ioctl+0x493/0xe30 [ 758.430563] ? kvm_get_dirty_log+0x590/0x590 [ 758.434989] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 758.439758] ? rcu_nmi_exit+0x102/0x220 [ 758.443747] ? retint_kernel+0x2d/0x2d 16:16:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x72860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 758.447675] ? kvm_get_dirty_log+0x590/0x590 [ 758.452190] ? kvm_vcpu_ioctl+0x1a/0xe30 [ 758.456258] ? kvm_get_dirty_log+0x590/0x590 [ 758.460678] do_vfs_ioctl+0xcdb/0x12e0 [ 758.464608] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 758.469844] ? ioctl_preallocate+0x200/0x200 [ 758.474271] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 758.479760] ? __fget+0x3ad/0x570 [ 758.483260] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 758.487528] ksys_ioctl+0x9b/0xc0 [ 758.490993] __x64_sys_ioctl+0x6f/0xb0 [ 758.494897] do_syscall_64+0xf9/0x670 [ 758.498715] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 758.503932] RIP: 0033:0x45de59 [ 758.507133] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 758.526042] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 758.533763] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 758.541048] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 16:16:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x73860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 758.548350] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 758.555742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 758.563027] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:16:54 executing program 3 (fault-call:8 fault-nth:5): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 758.894361] FAULT_INJECTION: forcing a failure. [ 758.894361] name failslab, interval 1, probability 0, space 0, times 0 [ 758.906585] CPU: 1 PID: 31756 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 758.914509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 758.923993] Call Trace: [ 758.926588] dump_stack+0x22c/0x33e [ 758.930264] should_fail.cold+0xa/0x2f [ 758.934224] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 758.939359] __should_failslab+0x153/0x1b6 [ 758.943622] should_failslab+0x5/0xf [ 758.947363] kmem_cache_alloc+0x2b1/0x4a0 [ 758.951520] mmu_topup_memory_caches+0x8f/0x360 [ 758.956192] kvm_mmu_load+0x1e/0x1010 [ 758.960000] ? kvm_arch_vcpu_ioctl_run+0x1ff1/0x6c10 [ 758.965107] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 758.970039] ? mark_held_locks+0xf0/0xf0 [ 758.974095] ? kvm_vcpu_ioctl+0x175/0xe30 [ 758.978247] ? find_held_lock+0x2d/0x110 [ 758.982315] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 758.987162] ? get_task_pid+0x19d/0x320 [ 758.991128] ? lock_downgrade+0x750/0x750 [ 758.995268] ? check_preemption_disabled+0x41/0x2b0 [ 759.000276] ? kvm_vcpu_ioctl+0x493/0xe30 [ 759.004413] kvm_vcpu_ioctl+0x493/0xe30 [ 759.008392] ? kvm_get_dirty_log+0x590/0x590 [ 759.015521] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 759.020353] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 759.025014] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 759.029824] ? rcu_nmi_exit+0x102/0x220 [ 759.033955] ? retint_kernel+0x2d/0x2d [ 759.037890] ? kvm_get_dirty_log+0x590/0x590 16:16:54 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000440000004400000008000000000000000000000800000000000000000000000100000000000000000000000000000003000000000000000096636a92ea3004b4000000000000000100"/100], 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:16:54 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x1) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) dup2(r7, r7) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/loop-control\x00', 0x4200, 0x0) sendmsg$netlink(r4, &(0x7f0000000c80)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b40)=[{&(0x7f0000000140)={0x18, 0x3b, 0x10, 0x70bd27, 0x25dfdbff, "", [@typed={0x8, 0x62, 0x0, 0x0, @u32=0x5}]}, 0x18}, {&(0x7f0000000240)={0x4a0, 0x24, 0x10, 0x70bd2c, 0x25dfdbfb, "", [@nested={0x1e6, 0x4, 0x0, 0x1, [@generic="f6423cc9a2deb4db83f307bed6a040b2bec564897fdb96d11d86206fd659fa34f01d2239488184b494527d13e42550dd761310130e7fd090dac49a3706b36b05e184782c5172af920a9eb0c98478c38e2be8c10eddf959cea971f70be4dadb0bc3b57ea8436d88860987fe42176d62278a69dd1dc6790d2148823e94cb3d2494c103418538058ed3dd5f83bb11b6f208fc7032a584b947d2836c9fb3b5ea4d35a809392e73ad2a9d5af52b8bc336b179600a3f3b8adc560491bcfe4131ad0b", @typed={0x4, 0x87}, @typed={0xa7, 0x21, 0x0, 0x0, @binary="bb683dcf0e12ad393d9b23f95eac635c9fa30049a2fef87e6cf5e6ec62c60f0a3d2e9bdc7c5d268d69297baadb78e7aa9d703ae44993f4d37c33e7565212596ad435c14ae3f7261f3cfe6b8a7b380efb085adc622d6c464fe591bc3850caf5901d4dbf216414fa42bb6b9158f93a049e0bae9ab93379af7a334a9bd83657e340415e76a7d0d1cffcb4e2b7c0643ec05af4c80758585624a718104e54097f07e2d471ac"}, @typed={0x8, 0x23, 0x0, 0x0, @ipv4=@multicast2}, @generic="e62f520a7bb58b955a1a4e12555c9de51f15eb937e1e540ab41b8aa73cd1d20d076506f8cf3bb070fe7fedcd9375ce36c88fd03b505ba894608505b36d1e902e0a3155114e0efb2c098c83c40ec1f2258548765e76cb7dfaa5b10e347bd363314735bfca60dd7f", @typed={0x8, 0x72, 0x0, 0x0, @fd=r5}]}, @nested={0xe8, 0x58, 0x0, 0x1, [@generic="3d111ab336fa1ba8f153bd0525820c4ca383f3e47b1d4844ed1bf715bfd049e9e7016cbe7fae6d8699b6a8256d818e275a2d0343b077b9f61fe81f9de2bc497a0af83e253a3d782abbeb44d5294fb3b94bebfe18ffb7598f96338533be4d9181c4e0caca21028c497347e16192d2099ed284f5b896fd1cbe8593a68104b281612aef7767d185f9486aa87f5ced651e9ff8cb1796cd1f2b1107d6f970777722b42613968c16adddd1bce3ae3b3dc43679857e2fe401d7f5c1326dee01ca69cadde3c4997eaa43", @generic="73db49539dce0a68103ed5c5b3fa", @typed={0xf, 0x23, 0x0, 0x0, @str='[+^^:S,{@$\x00'}]}, @generic="21f6ded35c0b03544de0159389c4d3e73ece0a124dbce42eef5fec30b3892ff67e2a", @generic="1d7cad4686a46c0722ad660405ab8f", @generic="9d31975c9e202cd5e08489129b48bd353125a869780a84d06dfd371f2c2c7c620d231f20c063e3af7fafd232f0bd3a86a07dcc3aa62c4e6fd39959d99d9ae29cfe2ef0d2b5dafb11", @generic="fe37dafdec8600359e122104fea9c39ef21a3424bc02e0392a8e3e9df0fa0dbcb9b031dbb5e30e1adb9de46f040278d5f3fc9046443e5c59efdc224a487854a5", @generic="50ce1f1d44e1b3721229544218ee91d5e9f7e9597b659b73abd20f0c88f83a373ac86c08b98d94bc7327fee0493e29ee7e079cac206034ccb98f50efa397b810fff49fcff71dfc311875b7773344edce891490d711efd685ae4a1b5d9d44d6904862953c24dabf94e4d065b6498a949a747c1ee180d2bab3c67fb488e294e8a44a58f93aa1d5bbde4964d4b9bee4a6fb2d8372423f5c9f72252cc2c0ba3d44ae39c8069017039bddac289c9ba6e7f1c007246da2e98bba559ad40889417f461f2809f72c3134822d94f231ff21dde1f32477f77e3e5bd84f992eba9407741b6ae8dd07eddf522945972d862e93ef77fec35d", @typed={0x8, 0x2d, 0x0, 0x0, @str='\'\xcf,\x00'}, @typed={0xc, 0x48, 0x0, 0x0, @u64=0x9}]}, 0x4a0}, {&(0x7f0000000700)={0x3ec, 0x38, 0x10, 0x70bd2d, 0x25dfdbfe, "", [@typed={0xfb, 0x42, 0x0, 0x0, @binary="8c1adc05620cc17ac2bedea46222daddd8636976c7405608832a537c988a9d947da015e7b48a7fd03f967a8073eae1c674e6fe0e40df2ebe21d4a487989db733cfeba07e558174e5e7fbe54aff7cbe149da91742bf26636b86cb989141b1ff81d15358d2e564460c6a90cbcd8a019367b8667c48b6240da2a6c652c1f60f3db46af4465593dc0200d90e35d0901667c63b8f88d054af027476bb12bc259e29559da0e8b7655c20062cf2b433a097cdf501270e9fb60cf416dc596184adb28463da46fe7f124b0f4452d122f7d0686c9813069507ed82eb550a0e0b3201f370fab22eaca7cdb737151e32efdda900b3f66929deff50d1ab"}, @nested={0x138, 0xb, 0x0, 0x1, [@typed={0xc, 0x6f, 0x0, 0x0, @u64=0xfffffffffffffffe}, @generic="543ace67b0af96b3f1f9fb1c451ce8d969aa4a9c19e451818186edf906b15a5f5c8fdcc88fb5b7adb34dce2d7392cbb3062d9e6b13cd7616a453e0f04cd44a0e11c5d58a939e5afe705ee395c61474d89c1ae3b9108560cac68f59e3422f5894ae616a07d4a25ed36329a4dc403cdd9bf57258ef51e65c6a8b5b95ebc70109595cb788bca21d75db6f6100dd6444af9d14d72e35a0b8b853229b97dcfc88298a88e2c7e72ff9e2da60d38619", @generic="623491b282405245b4d6f105c4d1b8d4ac2017ce94516916f97163c4443a183482741d552cebec25256b6879f18985f767e6f2aa25a60b4791debbe3487b0844e7fe32c95c8617b5edaae101d5ef58db9bccbde617ef5b5bafa74826a6f9909267b62246c88ea6330a65ea0890c9f8565534fda70d11f5db450b703b"]}, @typed={0x5, 0x8, 0x0, 0x0, @str='\x00'}, @nested={0x20, 0x68, 0x0, 0x1, [@typed={0x8, 0x8d, 0x0, 0x0, @u32=0x2681}, @typed={0x8, 0x54, 0x0, 0x0, @u32=0x800}, @typed={0x4, 0x91}, @typed={0x8, 0x46, 0x0, 0x0, @fd=r6}]}, @typed={0xc, 0x96, 0x0, 0x0, @u64}, @generic="c6c7e26ab7d5f3eef0aee1ec6f97f37292b4bafa7541183a0262e1ce8a05db5704443761826941e64c1a6595d7adfa260364e1807ebfadf24d158ec837f6ebd867e9118b4f7a080861a8eee2176e12e45f5947a31587e0e2f2e7321439feda8b2ae133ca39518528ff5402a4eadf1f8f090fc0c4c848ba4fbcaee7127ebdc03052fb8f9aa4051718b53897b08d6a523096eabaf68e3c74991a5d5c0a1694e5ce169a", @generic="4f98ac28a79d2b1a02b6a4e5b90652edff621778761e5b3546563a3363c5a8b12fd6660769f467be752bbc5e1b882b91844c3c35202557166741b7879a3ff53f8d67058335b6342238f8825acaed0028677f4c930ab52a944314ce450d61a00a92d3a1d02d94fb072dec54b34c27ad30462ed6311f07769bd102fb4634138d5e9fe5f57a3f3f7cc3fd5dcaa8eba1a2eddeff2dad4d24bef18e36b7c920dabdefe0c08a5791c42cdc0e25207920a164adea12e504e9d1796bf935f914583b2103e90dfa0d9b649449cab05dcb7c26e8a0"]}, 0x3ec}, {&(0x7f0000000180)={0x18, 0x26, 0x100, 0x70bd29, 0x25dfdbfd, "", [@generic="0c7f09a23b30"]}, 0x18}, {&(0x7f0000000b00)={0x38, 0x40, 0x20, 0x70bd28, 0x25dfdbfc, "", [@nested={0x28, 0x86, 0x0, 0x1, [@typed={0x14, 0x74, 0x0, 0x0, @ipv6=@empty}, @typed={0x8, 0x20, 0x0, 0x0, @uid}, @typed={0x8, 0x7a, 0x0, 0x0, @uid=0xffffffffffffffff}]}]}, 0x38}], 0x5, &(0x7f0000000c00)=[@rights={{0x1c, 0x1, 0x1, [r2, r2, r3]}}, @rights={{0x28, 0x1, 0x1, [r4, r7, r8, r1, r4, r4]}}], 0x48, 0x804}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000d40)={@empty, 0x3f}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:16:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x74000000, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 759.042322] do_vfs_ioctl+0xcdb/0x12e0 [ 759.046339] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 759.051567] ? ioctl_preallocate+0x200/0x200 [ 759.056003] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 759.061481] ? __fget+0x3ad/0x570 [ 759.064994] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 759.069259] ? rcu_nmi_exit+0x102/0x220 [ 759.073279] ksys_ioctl+0x9b/0xc0 [ 759.076769] __x64_sys_ioctl+0x6f/0xb0 [ 759.080798] do_syscall_64+0xf9/0x670 [ 759.084927] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 759.090141] RIP: 0033:0x45de59 [ 759.093546] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 759.113630] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 759.121752] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 759.129859] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 759.137158] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 759.144544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 759.154017] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:16:54 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsu\x00', 0x590e01, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000340)={0x4, 0xfffffffe, 0x11, 0x12, 0x8, 0x1, 0x2, 0xf0, 0xffffffffffffffff}) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000091bc00000000000000000000010800000000000000000000000100000000000000000000000800000003000000000000000000000000000000e0c347aec60c8102000000000022a4944b028156e5000000000000000000"], 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000080)=0xe8) fchown(r4, r5, 0x0) 16:16:54 executing program 3 (fault-call:8 fault-nth:6): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 759.364036] FAULT_INJECTION: forcing a failure. [ 759.364036] name failslab, interval 1, probability 0, space 0, times 0 [ 759.377719] CPU: 0 PID: 31816 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 759.385735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 759.397183] Call Trace: [ 759.399786] dump_stack+0x22c/0x33e [ 759.403439] should_fail.cold+0xa/0x2f [ 759.407362] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 759.412511] __should_failslab+0x153/0x1b6 [ 759.417451] should_failslab+0x5/0xf [ 759.421183] kmem_cache_alloc+0x2b1/0x4a0 [ 759.425352] mmu_topup_memory_caches+0x8f/0x360 [ 759.430043] kvm_mmu_load+0x1e/0x1010 [ 759.433861] ? kvm_cpu_has_injectable_intr+0x32c/0x3c0 [ 759.439151] ? __sanitizer_cov_trace_pc+0x44/0x50 [ 759.444038] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 759.449027] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 759.453889] ? lock_downgrade+0x750/0x750 [ 759.458061] ? check_preemption_disabled+0x41/0x2b0 [ 759.463964] ? kvm_vcpu_ioctl+0x493/0xe30 [ 759.468113] kvm_vcpu_ioctl+0x493/0xe30 [ 759.472147] ? finish_task_switch+0x209/0x8b0 [ 759.476826] ? kvm_get_dirty_log+0x590/0x590 [ 759.481964] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 759.486796] ? find_held_lock+0x2d/0x110 [ 759.490871] ? rcu_read_unlock_special+0x818/0x10b0 [ 759.495897] ? lock_downgrade+0x750/0x750 [ 759.500051] ? find_held_lock+0x2d/0x110 [ 759.504130] ? kvm_get_dirty_log+0x590/0x590 [ 759.508550] do_vfs_ioctl+0xcdb/0x12e0 [ 759.512449] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 759.517641] ? ioctl_preallocate+0x200/0x200 [ 759.522048] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 759.527510] ? retint_kernel+0x2d/0x2d [ 759.531463] ksys_ioctl+0x9b/0xc0 [ 759.534912] __x64_sys_ioctl+0x6f/0xb0 [ 759.538811] do_syscall_64+0xf9/0x670 [ 759.542616] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 759.547845] RIP: 0033:0x45de59 [ 759.556010] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 759.575774] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 759.583595] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 759.590872] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 759.598220] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 759.605608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 759.612894] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:16:56 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x40}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:16:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x74860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:16:56 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x40}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:16:56 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000004400000044000000080000000000000000000008000000000000000000000001000000000000000300"/79], 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:16:56 executing program 3 (fault-call:8 fault-nth:7): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:16:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x75860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 761.458052] FAULT_INJECTION: forcing a failure. [ 761.458052] name failslab, interval 1, probability 0, space 0, times 0 [ 761.479009] CPU: 0 PID: 31878 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 761.486933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 761.496340] Call Trace: [ 761.498946] dump_stack+0x22c/0x33e [ 761.502584] should_fail.cold+0xa/0x2f 16:16:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x76860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 761.506503] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 761.511626] __should_failslab+0x153/0x1b6 [ 761.515873] should_failslab+0x5/0xf [ 761.519589] kmem_cache_alloc+0x2b1/0x4a0 [ 761.523739] mmu_topup_memory_caches+0x8f/0x360 [ 761.528415] kvm_mmu_load+0x1e/0x1010 [ 761.532210] ? kvm_arch_vcpu_ioctl_run+0x323d/0x6c10 [ 761.537314] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 761.542257] ? mark_held_locks+0xf0/0xf0 [ 761.546343] ? kvm_vcpu_ioctl+0x175/0xe30 [ 761.550532] ? trace_hardirqs_on_thunk+0x1a/0x1c 16:16:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x77860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 761.555306] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 761.560164] ? rcu_nmi_exit+0x102/0x220 [ 761.564151] ? retint_kernel+0x2d/0x2d [ 761.568060] ? kvm_vcpu_ioctl+0x493/0xe30 [ 761.572216] kvm_vcpu_ioctl+0x493/0xe30 [ 761.576199] ? kvm_get_dirty_log+0x590/0x590 [ 761.580633] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 761.585437] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 761.590035] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 761.594814] ? rcu_nmi_exit+0x102/0x220 [ 761.598824] ? retint_kernel+0x2d/0x2d [ 761.602725] ? kvm_get_dirty_log+0x590/0x590 [ 761.607151] do_vfs_ioctl+0xcdb/0x12e0 [ 761.611171] ? selinux_file_ioctl+0x360/0x5e0 [ 761.615681] ? ioctl_preallocate+0x200/0x200 [ 761.620116] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 761.625584] ? __fget+0x3ad/0x570 [ 761.629082] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 761.633355] ksys_ioctl+0x9b/0xc0 [ 761.636822] __x64_sys_ioctl+0x6f/0xb0 [ 761.640722] do_syscall_64+0xf9/0x670 [ 761.644535] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 761.649760] RIP: 0033:0x45de59 16:16:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x78860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 761.652967] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 761.671878] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 761.679606] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 761.686889] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 761.694179] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 761.701516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 761.708806] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:16:57 executing program 3 (fault-call:8 fault-nth:8): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 761.906892] FAULT_INJECTION: forcing a failure. [ 761.906892] name failslab, interval 1, probability 0, space 0, times 0 [ 761.918962] CPU: 1 PID: 32032 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 761.926862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 761.936222] Call Trace: [ 761.938822] dump_stack+0x22c/0x33e [ 761.942449] should_fail.cold+0xa/0x2f [ 761.946344] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 761.951458] __should_failslab+0x153/0x1b6 [ 761.955690] should_failslab+0x5/0xf [ 761.959426] kmem_cache_alloc+0x2b1/0x4a0 [ 761.963576] mmu_topup_memory_caches+0x8f/0x360 [ 761.968243] kvm_mmu_load+0x1e/0x1010 [ 761.972045] ? kvm_arch_vcpu_ioctl_run+0x1e9b/0x6c10 [ 761.977163] ? kvm_arch_vcpu_ioctl_run+0x1ed6/0x6c10 [ 761.982283] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 761.987228] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 761.991803] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 761.996567] ? find_held_lock+0x2d/0x110 [ 762.000649] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 762.005483] ? get_task_pid+0x19d/0x320 [ 762.009455] ? lock_downgrade+0x750/0x750 [ 762.013607] ? check_preemption_disabled+0x41/0x2b0 [ 762.018630] ? kvm_vcpu_ioctl+0x493/0xe30 [ 762.022775] kvm_vcpu_ioctl+0x493/0xe30 [ 762.026748] ? kvm_get_dirty_log+0x590/0x590 [ 762.031152] ? mark_held_locks+0xf0/0xf0 [ 762.035306] ? proc_fail_nth_write+0x95/0x1d0 [ 762.039824] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 762.044797] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 762.049567] ? find_held_lock+0x2d/0x110 [ 762.053647] ? kvm_get_dirty_log+0x590/0x590 [ 762.058051] do_vfs_ioctl+0xcdb/0x12e0 [ 762.061927] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 762.066669] ? ioctl_preallocate+0x200/0x200 [ 762.071063] ? retint_kernel+0x2d/0x2d [ 762.074954] ? selinux_file_ioctl+0x154/0x5e0 [ 762.079475] ? selinux_file_ioctl+0x196/0x5e0 [ 762.083989] ksys_ioctl+0x9b/0xc0 [ 762.087631] __x64_sys_ioctl+0x6f/0xb0 [ 762.091527] do_syscall_64+0xf9/0x670 [ 762.095332] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 762.100519] RIP: 0033:0x45de59 [ 762.103705] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 762.122613] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 762.130335] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 762.137604] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 762.144866] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 762.152137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 762.159430] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:16:57 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e4, &(0x7f0000000140)='5]') bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x47}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x20}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:16:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x79860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:16:59 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x8, [@array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x48}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:16:59 executing program 3 (fault-call:8 fault-nth:9): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 764.311401] FAULT_INJECTION: forcing a failure. [ 764.311401] name failslab, interval 1, probability 0, space 0, times 0 [ 764.324387] CPU: 1 PID: 32084 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 764.332292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 764.341646] Call Trace: [ 764.344249] dump_stack+0x22c/0x33e [ 764.347886] should_fail.cold+0xa/0x2f [ 764.351807] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 764.356930] __should_failslab+0x153/0x1b6 [ 764.361179] should_failslab+0x5/0xf [ 764.364884] kmem_cache_alloc+0x2b1/0x4a0 [ 764.369046] ? rcu_nmi_exit+0x102/0x220 [ 764.373039] mmu_topup_memory_caches+0x8f/0x360 [ 764.377729] kvm_mmu_load+0x1e/0x1010 [ 764.381535] ? kvm_cpu_has_injectable_intr+0xc/0x3c0 [ 764.386646] ? kvm_cpu_has_injectable_intr+0x297/0x3c0 [ 764.392184] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 764.397139] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 764.402007] ? lock_downgrade+0x750/0x750 [ 764.406165] ? check_preemption_disabled+0x41/0x2b0 [ 764.411175] ? kvm_vcpu_ioctl+0x493/0xe30 [ 764.415328] kvm_vcpu_ioctl+0x493/0xe30 [ 764.419307] ? kvm_get_dirty_log+0x590/0x590 [ 764.423799] ? mark_held_locks+0xf0/0xf0 [ 764.427850] ? mark_held_locks+0xa6/0xf0 [ 764.431920] ? proc_fail_nth_write+0x95/0x1d0 [ 764.436422] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 764.441201] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 764.445973] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 764.450714] ? find_held_lock+0x2d/0x110 [ 764.454791] ? kvm_get_dirty_log+0x590/0x590 [ 764.459722] do_vfs_ioctl+0xcdb/0x12e0 [ 764.463610] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 764.468802] ? ioctl_preallocate+0x200/0x200 [ 764.473209] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 764.480236] ? retint_kernel+0x2d/0x2d [ 764.484141] ksys_ioctl+0x9b/0xc0 [ 764.487583] __x64_sys_ioctl+0x6f/0xb0 [ 764.491466] do_syscall_64+0xf9/0x670 [ 764.495269] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 764.500457] RIP: 0033:0x45de59 [ 764.503634] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 764.522535] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 764.530240] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 764.537502] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 764.544768] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 764.552162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 764.559423] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:16:59 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x40}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:16:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x7a000000, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:16:59 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f0000000300)}}, 0x18) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000240)={0x1b, "494570294038f409b298264ffd9e609c8fe566a210551d6d79f1deb873d001e0b30779a0b77fa78c3f6c698e3baaf62ed0dc3fab934fe3ae269a621ed45bf57534df628f28762d98c0fa11a401911044b083734ea7464b8742c2e155b4a5199ebea54120f276da6347d87217f82526ac20f74520bef88c6b42b44df32b1576a2"}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 16:16:59 executing program 3 (fault-call:8 fault-nth:10): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:16:59 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000440000004400000008000000000000000000000800000000000000000000000100000000000061000000009193b594b3eed56ee88d3f16150000000003000000000000000000000000000000000000000000000001000000b4974b248af1caf281227561c898fb1e8ff65dc7692946c9ffd6709fc76c062591b5239b37a6c7b6f50783aeb3f12403d0aa6901b97722d661d56d7eb347a569236f07b983723ec09dcba8fe8b54e58190cd9fdc6b7a02f736568a8d27a92b785ceb466fcb"], 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:16:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x7a860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 764.827461] FAULT_INJECTION: forcing a failure. [ 764.827461] name failslab, interval 1, probability 0, space 0, times 0 [ 764.860632] CPU: 0 PID: 32106 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 764.868554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 764.877912] Call Trace: [ 764.880540] dump_stack+0x22c/0x33e [ 764.884186] should_fail.cold+0xa/0x2f [ 764.888400] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 764.893534] __should_failslab+0x153/0x1b6 [ 764.897782] should_failslab+0x5/0xf [ 764.901523] kmem_cache_alloc+0x2b1/0x4a0 [ 764.905687] mmu_topup_memory_caches+0x8f/0x360 [ 764.910385] kvm_mmu_load+0x1e/0x1010 [ 764.914226] ? kvm_arch_vcpu_ioctl_run+0x4b7a/0x6c10 [ 764.919372] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 16:17:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x7b860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 764.924329] ? mark_held_locks+0xf0/0xf0 [ 764.928411] ? mark_held_locks+0xa6/0xf0 [ 764.932498] ? find_held_lock+0x2d/0x110 [ 764.936579] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 764.941432] ? get_task_pid+0x19d/0x320 [ 764.945449] ? lock_downgrade+0x750/0x750 [ 764.949613] ? check_preemption_disabled+0x41/0x2b0 [ 764.954647] ? kvm_vcpu_ioctl+0x493/0xe30 [ 764.958801] kvm_vcpu_ioctl+0x493/0xe30 [ 764.962872] ? kvm_get_dirty_log+0x590/0x590 [ 764.967303] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 764.972084] ? mark_held_locks+0xf0/0xf0 16:17:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x7c860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 764.976172] ? retint_kernel+0x2d/0x2d [ 764.980165] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 764.984936] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 764.989533] ? find_held_lock+0x2d/0x110 [ 764.993606] ? kvm_get_dirty_log+0x590/0x590 [ 764.998029] do_vfs_ioctl+0xcdb/0x12e0 [ 765.002042] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 765.007680] ? ioctl_preallocate+0x200/0x200 [ 765.012126] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 765.017600] ? __fget+0x3ad/0x570 [ 765.021070] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 765.025332] ? rcu_nmi_exit+0x102/0x220 [ 765.029421] ksys_ioctl+0x9b/0xc0 [ 765.032886] __x64_sys_ioctl+0x6f/0xb0 [ 765.036789] do_syscall_64+0xf9/0x670 [ 765.040659] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 765.045857] RIP: 0033:0x45de59 [ 765.049057] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 765.067967] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 765.075781] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 765.083070] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 765.090351] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 765.097667] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 765.105038] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:17:00 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r0 = memfd_create(&(0x7f0000000200)='\x00\x83\xc5\xcb\xc7\x108\xa4\x03\x9c0T3\xc5\x97\x95\xb5\x8fM\xddU\x10\xaaod\x96\xeeM\xbe\x0e\xe4\xcc\xc4\xcf,\x9f7\xcc(Z\x13`\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00c\r\x14\xd8g\x02S -\xfd\xb5a\xedf|\xc4\xf9\xd2J\xadi\xcc[\\P\xa6F\x8c^\xc7i)d\x9f\xfckW\x86\xe4Qg1\xbdD\x1c\x13O\\\x7fS/\xc9d!\x19\"\x16\xfdC\tz\xf1\xf3q\xfd\'.\xb4\x14\x14m_&\x88\x8cfI\x18&\xea5\xa0\x00\xd2\xcd\xf0\xd5\x03\x9f\x18\x8d6\xc9,\xc9Y\xb8\xc9\xdd\xadp3\xbe\x93C\xa3b\x18\xe7\xcdx\x86aA\x9e\x83\aKc\xba\x05\x19\xb1\x9cJ\xce2\x9fW\xd3', 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000080)=ANY=[], 0x560) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r0, 0x0) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f0000000000)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @local}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0xffc1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="ac1457d5", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0xe, &(0x7f000059aff8)={r4}, &(0x7f00000001c0)=0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) 16:17:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x7d860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:17:02 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x8, [@array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x48}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:02 executing program 3 (fault-call:8 fault-nth:11): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 767.347259] FAULT_INJECTION: forcing a failure. [ 767.347259] name failslab, interval 1, probability 0, space 0, times 0 [ 767.360193] CPU: 1 PID: 32310 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 767.368090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 767.377454] Call Trace: [ 767.380058] dump_stack+0x22c/0x33e [ 767.383704] should_fail.cold+0xa/0x2f [ 767.387581] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 767.392691] __should_failslab+0x153/0x1b6 [ 767.396938] should_failslab+0x5/0xf [ 767.400673] kmem_cache_alloc+0x2b1/0x4a0 [ 767.404809] ? mmu_topup_memory_caches+0xa0/0x360 [ 767.409657] mmu_topup_memory_caches+0x8f/0x360 [ 767.414350] kvm_mmu_load+0x1e/0x1010 [ 767.418169] ? kvm_arch_vcpu_ioctl_run+0x1da3/0x6c10 [ 767.423317] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 767.428268] ? mark_held_locks+0xf0/0xf0 [ 767.432352] ? kvm_vcpu_ioctl+0x175/0xe30 [ 767.436513] ? find_held_lock+0x2d/0x110 [ 767.440586] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 767.445423] ? get_task_pid+0x19d/0x320 [ 767.449426] ? lock_downgrade+0x750/0x750 [ 767.453574] ? check_preemption_disabled+0x41/0x2b0 [ 767.458589] ? kvm_vcpu_ioctl+0x493/0xe30 [ 767.462724] kvm_vcpu_ioctl+0x493/0xe30 [ 767.466700] ? kvm_get_dirty_log+0x590/0x590 [ 767.471115] ? mark_held_locks+0xf0/0xf0 [ 767.475172] ? proc_fail_nth_write+0x95/0x1d0 [ 767.479675] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 767.484614] ? lock_acquire+0x170/0x3f0 [ 767.488604] ? __fdget_pos+0xe3/0x100 [ 767.492418] ? find_held_lock+0x2d/0x110 [ 767.496650] ? kvm_get_dirty_log+0x590/0x590 [ 767.501067] do_vfs_ioctl+0xcdb/0x12e0 [ 767.504948] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 767.510123] ? ioctl_preallocate+0x200/0x200 [ 767.514545] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 767.520009] ? __fget+0x3ad/0x570 [ 767.523448] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 767.527687] ksys_ioctl+0x9b/0xc0 [ 767.531127] __x64_sys_ioctl+0x6f/0xb0 [ 767.535035] do_syscall_64+0xf9/0x670 [ 767.538834] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 767.544015] RIP: 0033:0x45de59 [ 767.547208] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 767.566125] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 767.573850] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 767.581120] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 767.588392] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 767.595657] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 767.602933] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:17:02 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x40}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x7e860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:17:02 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x101000, 0x0) ioctl$SNDCTL_TMR_START(r2, 0x5402) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x58, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xf7}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008000}, 0x20044000) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:02 executing program 3 (fault-call:8 fault-nth:12): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:17:03 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000440000004400000008000000000000000000000800000000000000000000000100000000000000000000000000000003000000000000000000000000000000000000000000000001000000000000001000000000000000002117144e097046da2705fb9553fd6501c65044c5dd1e88244b69e7e8c3a9eefdfdf27246e3c2151ab1eb273d018b938ea83b9640cca4fec74fded08263cd06b48acc055cb52bb9ce4ec3e67cadd997fc05"], 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$cont(0x7, r0, 0x0, 0x0) [ 767.854093] FAULT_INJECTION: forcing a failure. [ 767.854093] name failslab, interval 1, probability 0, space 0, times 0 [ 767.871171] CPU: 1 PID: 32332 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 767.879087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 767.888639] Call Trace: [ 767.891244] dump_stack+0x22c/0x33e [ 767.894888] should_fail.cold+0xa/0x2f [ 767.898801] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 767.903930] __should_failslab+0x153/0x1b6 [ 767.908178] should_failslab+0x5/0xf [ 767.911901] kmem_cache_alloc+0x2b1/0x4a0 [ 767.916090] ? mmu_topup_memory_caches+0x5e/0x360 [ 767.920955] mmu_topup_memory_caches+0x8f/0x360 [ 767.925641] kvm_mmu_load+0x1e/0x1010 [ 767.929458] ? kvm_arch_vcpu_ioctl_run+0x3a22/0x6c10 [ 767.934933] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 767.939875] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 767.944677] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 767.949291] ? find_held_lock+0x2d/0x110 [ 767.953374] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 767.958225] ? get_task_pid+0x19d/0x320 [ 767.962248] ? lock_downgrade+0x750/0x750 [ 767.966412] ? check_preemption_disabled+0x41/0x2b0 [ 767.971455] ? kvm_vcpu_ioctl+0x493/0xe30 [ 767.975609] kvm_vcpu_ioctl+0x493/0xe30 [ 767.979595] ? kvm_get_dirty_log+0x590/0x590 [ 767.984018] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 767.988603] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 767.993357] ? rcu_nmi_exit+0x102/0x220 [ 767.997341] ? retint_kernel+0x2d/0x2d [ 768.001230] ? lock_release+0x429/0x8e0 [ 768.005198] ? kvm_get_dirty_log+0x590/0x590 [ 768.009608] do_vfs_ioctl+0xcdb/0x12e0 [ 768.013507] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 768.018707] ? ioctl_preallocate+0x200/0x200 [ 768.023128] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 768.028582] ? __fget+0x3ad/0x570 [ 768.032026] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 768.036272] ? rcu_nmi_exit+0x102/0x220 [ 768.040248] ksys_ioctl+0x9b/0xc0 [ 768.043701] __x64_sys_ioctl+0x6f/0xb0 [ 768.047586] do_syscall_64+0xf9/0x670 [ 768.051380] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 768.056554] RIP: 0033:0x45de59 [ 768.059730] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 768.079238] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 768.087199] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 768.094474] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 768.101881] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 768.109153] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 768.116430] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:17:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x7f860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:17:03 executing program 3 (fault-call:8 fault-nth:13): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:17:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x80860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 768.334369] FAULT_INJECTION: forcing a failure. [ 768.334369] name failslab, interval 1, probability 0, space 0, times 0 [ 768.351776] CPU: 1 PID: 32398 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 768.359697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 768.369093] Call Trace: [ 768.371682] dump_stack+0x22c/0x33e [ 768.375408] should_fail.cold+0xa/0x2f [ 768.379319] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 768.384480] __should_failslab+0x153/0x1b6 [ 768.388729] should_failslab+0x5/0xf [ 768.392453] kmem_cache_alloc+0x2b1/0x4a0 [ 768.396616] mmu_topup_memory_caches+0x8f/0x360 [ 768.401315] kvm_mmu_load+0x1e/0x1010 [ 768.405128] ? kvm_arch_vcpu_ioctl_run+0x19f0/0x6c10 [ 768.410256] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 768.415210] ? mark_held_locks+0xf0/0xf0 [ 768.419321] ? kvm_vcpu_ioctl+0x175/0xe30 [ 768.423591] ? find_held_lock+0x2d/0x110 [ 768.427673] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 768.432541] ? get_task_pid+0x19d/0x320 [ 768.436542] ? lock_downgrade+0x750/0x750 [ 768.440710] ? check_preemption_disabled+0x41/0x2b0 [ 768.445747] ? kvm_vcpu_ioctl+0x493/0xe30 [ 768.449908] kvm_vcpu_ioctl+0x493/0xe30 [ 768.453898] ? kvm_get_dirty_log+0x590/0x590 [ 768.458325] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 768.463118] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 768.467716] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 768.472488] ? rcu_nmi_exit+0x102/0x220 [ 768.476508] ? find_held_lock+0x2d/0x110 [ 768.480626] ? kvm_get_dirty_log+0x590/0x590 [ 768.485055] do_vfs_ioctl+0xcdb/0x12e0 [ 768.488970] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 768.494209] ? ioctl_preallocate+0x200/0x200 [ 768.498650] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 768.504136] ? __fget+0x3ad/0x570 [ 768.507622] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 768.511887] ksys_ioctl+0x9b/0xc0 [ 768.515365] __x64_sys_ioctl+0x6f/0xb0 [ 768.519262] do_syscall_64+0xf9/0x670 [ 768.523087] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 768.528283] RIP: 0033:0x45de59 16:17:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x81000000, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 768.531492] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 768.550575] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 768.558303] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 768.565585] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 768.572863] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 16:17:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x81860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 768.580144] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d [ 768.587512] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:17:05 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x8, [@array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x48}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:05 executing program 3 (fault-call:8 fault-nth:14): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 770.374805] FAULT_INJECTION: forcing a failure. [ 770.374805] name failslab, interval 1, probability 0, space 0, times 0 [ 770.387768] CPU: 1 PID: 32534 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 770.395983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 770.406443] Call Trace: [ 770.409060] dump_stack+0x22c/0x33e [ 770.412890] should_fail.cold+0xa/0x2f [ 770.416920] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 770.422295] __should_failslab+0x153/0x1b6 [ 770.426550] should_failslab+0x5/0xf [ 770.430274] kmem_cache_alloc+0x2b1/0x4a0 [ 770.434488] mmu_topup_memory_caches+0x8f/0x360 [ 770.439218] kvm_mmu_load+0x1e/0x1010 [ 770.443051] ? kvm_arch_vcpu_ioctl_run+0x1da3/0x6c10 [ 770.448181] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 770.453229] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 770.458003] ? find_held_lock+0x2d/0x110 [ 770.462060] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 770.466911] ? get_task_pid+0x19d/0x320 [ 770.470883] ? lock_downgrade+0x750/0x750 [ 770.475032] ? lock_is_held_type+0x269/0x340 [ 770.479445] ? check_preemption_disabled+0x41/0x2b0 [ 770.484472] ? kvm_vcpu_ioctl+0x493/0xe30 [ 770.488619] kvm_vcpu_ioctl+0x493/0xe30 [ 770.492616] ? kvm_get_dirty_log+0x590/0x590 [ 770.497028] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 770.501804] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 770.506426] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 770.511187] ? rcu_nmi_exit+0x102/0x220 [ 770.515165] ? retint_kernel+0x2d/0x2d [ 770.519054] ? do_vfs_ioctl+0xf74/0x12e0 [ 770.523110] ? kvm_get_dirty_log+0x590/0x590 [ 770.527539] do_vfs_ioctl+0xcdb/0x12e0 [ 770.531450] ? selinux_file_ioctl+0x1e0/0x5e0 [ 770.535949] ? ioctl_preallocate+0x200/0x200 [ 770.540358] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 770.545846] ? __fget+0x3ad/0x570 [ 770.549301] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 770.553556] ksys_ioctl+0x9b/0xc0 [ 770.557008] __x64_sys_ioctl+0x6f/0xb0 [ 770.560918] do_syscall_64+0xf9/0x670 [ 770.565006] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 770.570225] RIP: 0033:0x45de59 [ 770.573415] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 770.592514] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 770.600413] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 770.607693] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 770.614968] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 770.622270] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000e [ 770.629534] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:17:05 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x40}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x82860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:17:05 executing program 3 (fault-call:8 fault-nth:15): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:17:05 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRES64=r0], 0x0, 0x64}, 0x20) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522, r1}, &(0x7f0000000140)={0x9, 0x6, 0x3, 0xfffff801, 0x8000, 0x1000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="a4fa8ce1ab3f20154e695e06ef806782f73eed54557befe6a685d7c9dce19477b77c93975e336600f9d98819edba100b2c7226bc94a73e84cf74daf6f20b"], 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000) r4 = semget$private(0x0, 0x0, 0x0) semctl$GETPID(r4, 0x3, 0xb, &(0x7f0000000380)=""/159) [ 770.886643] FAULT_INJECTION: forcing a failure. [ 770.886643] name failslab, interval 1, probability 0, space 0, times 0 [ 770.908179] CPU: 1 PID: 32575 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 770.916183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 770.925546] Call Trace: [ 770.928147] dump_stack+0x22c/0x33e [ 770.931788] should_fail.cold+0xa/0x2f 16:17:06 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x8) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000080), &(0x7f0000000140)=0x4) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x83860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 770.935690] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 770.940819] __should_failslab+0x153/0x1b6 [ 770.945070] should_failslab+0x5/0xf [ 770.948793] kmem_cache_alloc+0x2b1/0x4a0 [ 770.952978] mmu_topup_memory_caches+0x8f/0x360 [ 770.957662] kvm_mmu_load+0x1e/0x1010 [ 770.961479] ? kvm_arch_vcpu_ioctl_run+0x1da3/0x6c10 [ 770.966626] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 770.971566] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 770.976339] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 770.980940] ? find_held_lock+0x2d/0x110 [ 770.985017] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 770.989878] ? get_task_pid+0x19d/0x320 [ 770.993869] ? lock_downgrade+0x750/0x750 [ 770.998126] ? check_preemption_disabled+0x41/0x2b0 [ 771.003160] ? kvm_vcpu_ioctl+0x493/0xe30 [ 771.007311] kvm_vcpu_ioctl+0x493/0xe30 [ 771.011297] ? kvm_get_dirty_log+0x590/0x590 [ 771.015722] ? mark_held_locks+0xf0/0xf0 [ 771.020063] ? mark_held_locks+0xa6/0xf0 [ 771.024133] ? proc_fail_nth_write+0x95/0x1d0 [ 771.028634] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 771.033399] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 771.037999] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 771.042765] ? find_held_lock+0x2d/0x110 [ 771.046836] ? kvm_get_dirty_log+0x590/0x590 [ 771.051256] do_vfs_ioctl+0xcdb/0x12e0 [ 771.055175] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 771.060375] ? ioctl_preallocate+0x200/0x200 [ 771.064793] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 771.069647] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 771.074418] ? rcu_nmi_exit+0x102/0x220 [ 771.078401] ? retint_kernel+0x2d/0x2d [ 771.082310] ? ksys_ioctl+0x58/0xc0 [ 771.085947] ksys_ioctl+0x9b/0xc0 [ 771.089430] __x64_sys_ioctl+0x6f/0xb0 [ 771.093327] do_syscall_64+0xf9/0x670 [ 771.097160] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 771.102401] RIP: 0033:0x45de59 [ 771.105613] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 771.124527] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 16:17:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x84860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 771.132245] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 771.139522] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 771.146800] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 771.154080] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000f [ 771.161369] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:17:06 executing program 3 (fault-call:8 fault-nth:16): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:17:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x85860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 771.364044] FAULT_INJECTION: forcing a failure. [ 771.364044] name failslab, interval 1, probability 0, space 0, times 0 [ 771.377362] CPU: 1 PID: 32676 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 771.385264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 771.394630] Call Trace: [ 771.397233] dump_stack+0x22c/0x33e [ 771.400873] should_fail.cold+0xa/0x2f [ 771.404843] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 771.409960] __should_failslab+0x153/0x1b6 [ 771.414335] should_failslab+0x5/0xf [ 771.418063] kmem_cache_alloc+0x2b1/0x4a0 [ 771.422232] mmu_topup_memory_caches+0x8f/0x360 [ 771.426919] kvm_mmu_load+0x1e/0x1010 [ 771.430734] ? kvm_arch_vcpu_ioctl_run+0x19f0/0x6c10 [ 771.435878] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 771.440814] ? mark_held_locks+0xf0/0xf0 [ 771.444880] ? kvm_vcpu_ioctl+0x175/0xe30 [ 771.449049] ? find_held_lock+0x2d/0x110 [ 771.453125] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 771.457972] ? get_task_pid+0x19d/0x320 [ 771.461964] ? lock_downgrade+0x750/0x750 [ 771.466124] ? check_preemption_disabled+0x41/0x2b0 [ 771.471163] ? kvm_vcpu_ioctl+0x493/0xe30 [ 771.475323] kvm_vcpu_ioctl+0x493/0xe30 [ 771.479316] ? kvm_get_dirty_log+0x590/0x590 [ 771.483750] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 771.488527] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 771.493123] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 771.497916] ? rcu_nmi_exit+0x102/0x220 [ 771.502011] ? retint_kernel+0x2d/0x2d [ 771.505909] ? kvm_get_dirty_log+0x590/0x590 [ 771.510501] do_vfs_ioctl+0xcdb/0x12e0 16:17:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x86860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 771.514415] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 771.519615] ? ioctl_preallocate+0x200/0x200 [ 771.524035] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 771.529499] ? __fget+0x3ad/0x570 [ 771.532970] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 771.537227] ksys_ioctl+0x9b/0xc0 [ 771.540691] __x64_sys_ioctl+0x6f/0xb0 [ 771.544589] do_syscall_64+0xf9/0x670 [ 771.548405] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 771.553612] RIP: 0033:0x45de59 [ 771.556815] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 771.576199] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 771.583947] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 771.591418] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 771.598874] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 771.606158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010 [ 771.613645] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:17:08 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x7, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x57}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x87860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:17:09 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x40}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:09 executing program 3 (fault-call:8 fault-nth:17): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:17:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x88000000, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:17:09 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SIOCRSSCAUSE(r4, 0x89e1, &(0x7f0000000080)=0x8) ptrace$setopts(0x4206, r0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000240)) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 773.938040] FAULT_INJECTION: forcing a failure. [ 773.938040] name failslab, interval 1, probability 0, space 0, times 0 [ 773.996385] CPU: 1 PID: 341 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 774.004247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 774.014678] Call Trace: [ 774.017290] dump_stack+0x22c/0x33e [ 774.021071] should_fail.cold+0xa/0x2f [ 774.024978] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 774.030378] __should_failslab+0x153/0x1b6 [ 774.034630] should_failslab+0x5/0xf [ 774.038368] kmem_cache_alloc+0x2b1/0x4a0 [ 774.042545] mmu_topup_memory_caches+0x8f/0x360 [ 774.047252] kvm_mmu_load+0x1e/0x1010 [ 774.051062] ? kvm_arch_vcpu_ioctl_run+0x4ec/0x6c10 [ 774.056180] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 774.061120] ? mark_held_locks+0xf0/0xf0 [ 774.065189] ? kvm_vcpu_ioctl+0x175/0xe30 [ 774.069367] ? find_held_lock+0x2d/0x110 [ 774.073719] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 774.078726] ? get_task_pid+0x19d/0x320 [ 774.082722] ? lock_downgrade+0x750/0x750 [ 774.086884] ? check_preemption_disabled+0x41/0x2b0 [ 774.091924] ? kvm_vcpu_ioctl+0x493/0xe30 [ 774.096076] kvm_vcpu_ioctl+0x493/0xe30 [ 774.100842] ? kvm_get_dirty_log+0x590/0x590 [ 774.105280] ? mark_held_locks+0xf0/0xf0 [ 774.109366] ? proc_fail_nth_write+0x95/0x1d0 [ 774.113877] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 774.118817] ? lock_acquire+0x170/0x3f0 [ 774.123063] ? __fdget_pos+0xe3/0x100 [ 774.126888] ? find_held_lock+0x2d/0x110 [ 774.130963] ? kvm_get_dirty_log+0x590/0x590 [ 774.135409] do_vfs_ioctl+0xcdb/0x12e0 [ 774.139846] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 774.145057] ? ioctl_preallocate+0x200/0x200 [ 774.149492] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 774.155481] ? __fget+0x3ad/0x570 [ 774.159039] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 774.163338] ksys_ioctl+0x9b/0xc0 [ 774.166827] __x64_sys_ioctl+0x6f/0xb0 [ 774.170746] do_syscall_64+0xf9/0x670 [ 774.174562] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 774.179775] RIP: 0033:0x45de59 [ 774.182983] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 774.202500] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 774.211179] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 774.218468] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 774.225773] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 774.233160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000011 [ 774.240477] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:17:09 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@int={0x7, 0x0, 0x0, 0x1, 0x0, 0x32, 0x0, 0x4b}, @struct={0x9, 0x0, 0x0, 0x4, 0x0, 0x80000004}, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:09 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x40}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:09 executing program 5: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb0100180000000000000044000000440000000800000000000000000000080000000000000000000000014aeb0b460237bd3acabb16faaec696e30000000000000000000000000000000300000000000000000000000000000c00000000000000000140738c30a46f5a7f19278ff9963f91daadb015d3076e0d498129b66d9df69317225a034bc232f07531eb9a7e16dad56ac804000000000000000000"], 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 16:17:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x88860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:17:09 executing program 3 (fault-call:8 fault-nth:18): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:17:09 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000080)) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 774.569103] FAULT_INJECTION: forcing a failure. [ 774.569103] name failslab, interval 1, probability 0, space 0, times 0 [ 774.604756] CPU: 1 PID: 406 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 774.612598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 774.621960] Call Trace: [ 774.624571] dump_stack+0x22c/0x33e [ 774.628219] should_fail.cold+0xa/0x2f [ 774.632122] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 774.637249] __should_failslab+0x153/0x1b6 [ 774.641499] should_failslab+0x5/0xf [ 774.645235] kmem_cache_alloc+0x2b1/0x4a0 [ 774.649432] mmu_topup_memory_caches+0x8f/0x360 [ 774.654120] kvm_mmu_load+0x1e/0x1010 [ 774.658031] ? kvm_arch_vcpu_ioctl_run+0x3a22/0x6c10 [ 774.663156] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 774.668107] ? mark_held_locks+0xa6/0xf0 [ 774.672189] ? find_held_lock+0x2d/0x110 [ 774.676277] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 774.681162] ? get_task_pid+0x19d/0x320 [ 774.685158] ? lock_downgrade+0x750/0x750 [ 774.689347] ? get_task_pid+0x1ac/0x320 [ 774.693351] ? kvm_vcpu_ioctl+0x493/0xe30 [ 774.697530] kvm_vcpu_ioctl+0x493/0xe30 [ 774.701606] ? kvm_get_dirty_log+0x590/0x590 [ 774.706029] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 774.710803] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 774.715406] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 774.720176] ? rcu_nmi_exit+0x102/0x220 [ 774.724166] ? retint_kernel+0x2d/0x2d [ 774.728095] ? do_vfs_ioctl+0xbd/0x12e0 [ 774.732178] ? kvm_get_dirty_log+0x590/0x590 [ 774.736601] do_vfs_ioctl+0xcdb/0x12e0 [ 774.740536] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 774.745747] ? ioctl_preallocate+0x200/0x200 [ 774.750275] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 774.755755] ? __fget+0x3ad/0x570 [ 774.759229] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 774.763492] ksys_ioctl+0x9b/0xc0 [ 774.766966] __x64_sys_ioctl+0x6f/0xb0 [ 774.770876] do_syscall_64+0xf9/0x670 [ 774.774717] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 774.780005] RIP: 0033:0x45de59 [ 774.783212] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 774.802421] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 774.810146] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 774.818252] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 774.825793] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 774.833197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000012 [ 774.840577] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:17:11 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x7, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x57}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x88a8ffff, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:17:11 executing program 3 (fault-call:8 fault-nth:19): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 776.468170] FAULT_INJECTION: forcing a failure. [ 776.468170] name failslab, interval 1, probability 0, space 0, times 0 [ 776.490328] CPU: 1 PID: 460 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 776.498082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 776.507447] Call Trace: [ 776.510052] dump_stack+0x22c/0x33e [ 776.513698] should_fail.cold+0xa/0x2f [ 776.517602] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 776.522742] __should_failslab+0x153/0x1b6 [ 776.526995] should_failslab+0x5/0xf [ 776.531162] kmem_cache_alloc+0x2b1/0x4a0 [ 776.535328] ? mmu_topup_memory_caches+0x5e/0x360 [ 776.540177] mmu_topup_memory_caches+0x8f/0x360 [ 776.544842] kvm_mmu_load+0x1e/0x1010 [ 776.548653] ? kvm_arch_vcpu_ioctl_run+0x3af9/0x6c10 [ 776.553447] ptrace attach of "/root/syz-executor.0"[502] was attempted by "/root/syz-executor.0"[503] [ 776.553759] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 16:17:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x89860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:17:11 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x7, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x57}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 776.568044] ? mark_held_locks+0xf0/0xf0 [ 776.572110] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 776.576867] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 776.581722] ? rcu_nmi_exit+0x102/0x220 [ 776.585712] ? retint_kernel+0x2d/0x2d [ 776.589623] ? kvm_vcpu_ioctl+0x493/0xe30 [ 776.593784] kvm_vcpu_ioctl+0x493/0xe30 [ 776.597774] ? kvm_get_dirty_log+0x590/0x590 [ 776.602197] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 776.606980] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 776.611690] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 776.616474] ? rcu_nmi_exit+0x102/0x220 [ 776.620469] ? retint_kernel+0x2d/0x2d [ 776.624374] ? kvm_get_dirty_log+0x590/0x590 [ 776.628796] ? kvm_get_dirty_log+0x590/0x590 [ 776.633217] do_vfs_ioctl+0xcdb/0x12e0 [ 776.637119] ? ioctl_preallocate+0x200/0x200 [ 776.641543] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 776.647013] ? __fget+0x3ad/0x570 [ 776.650920] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 776.655182] ksys_ioctl+0x9b/0xc0 [ 776.658734] __x64_sys_ioctl+0x6f/0xb0 [ 776.662661] do_syscall_64+0xf9/0x670 [ 776.666516] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 776.671716] RIP: 0033:0x45de59 [ 776.674919] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 776.693832] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 776.701555] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 776.708836] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 16:17:11 executing program 3 (fault-call:8 fault-nth:20): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:17:11 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x7, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x57}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 776.716115] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 776.723396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 776.726214] ptrace attach of "/root/syz-executor.0"[521] was attempted by "/root/syz-executor.0"[532] [ 776.730681] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c [ 776.871926] FAULT_INJECTION: forcing a failure. [ 776.871926] name failslab, interval 1, probability 0, space 0, times 0 [ 776.909601] CPU: 0 PID: 554 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 776.917351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 776.926715] Call Trace: [ 776.929322] dump_stack+0x22c/0x33e [ 776.932972] should_fail.cold+0xa/0x2f [ 776.936875] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 776.941997] __should_failslab+0x153/0x1b6 [ 776.946241] should_failslab+0x5/0xf [ 776.949962] kmem_cache_alloc+0x2b1/0x4a0 [ 776.954122] mmu_topup_memory_caches+0x8f/0x360 [ 776.958798] kvm_mmu_load+0x1e/0x1010 [ 776.962619] ? mark_held_locks+0xa6/0xf0 [ 776.966770] ? ktime_get_with_offset+0x29b/0x3f0 [ 776.971556] ? kvm_arch_vcpu_ioctl_run+0x3575/0x6c10 [ 776.976674] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 776.981611] ? mark_held_locks+0xf0/0xf0 [ 776.985862] ? find_held_lock+0x2d/0x110 [ 776.989936] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 776.994836] ? get_task_pid+0x19d/0x320 [ 776.998828] ? lock_downgrade+0x750/0x750 [ 777.002988] ? check_preemption_disabled+0x41/0x2b0 [ 777.008019] ? kvm_vcpu_ioctl+0x493/0xe30 [ 777.012221] kvm_vcpu_ioctl+0x493/0xe30 [ 777.016232] ? kvm_get_dirty_log+0x590/0x590 [ 777.020656] ? mark_held_locks+0xf0/0xf0 [ 777.026407] ? proc_fail_nth_write+0x95/0x1d0 [ 777.030913] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 777.035847] ? lock_acquire+0x170/0x3f0 [ 777.039834] ? __fdget_pos+0xe3/0x100 [ 777.043651] ? find_held_lock+0x2d/0x110 [ 777.047718] ? kvm_get_dirty_log+0x590/0x590 [ 777.052137] do_vfs_ioctl+0xcdb/0x12e0 [ 777.056035] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 777.061240] ? ioctl_preallocate+0x200/0x200 [ 777.065663] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 777.071126] ? __fget+0x3ad/0x570 [ 777.074614] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 777.078874] ksys_ioctl+0x9b/0xc0 [ 777.082339] __x64_sys_ioctl+0x6f/0xb0 [ 777.086255] do_syscall_64+0xf9/0x670 [ 777.090165] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 777.095372] RIP: 0033:0x45de59 [ 777.098575] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 777.117571] RSP: 002b:00007f5e271b4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 777.125666] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 777.132956] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 777.140239] RBP: 00007f5e271b4ca0 R08: 0000000000000000 R09: 0000000000000000 [ 777.147520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 777.154801] R13: 00007ffce6c3164f R14: 00007f5e271b59c0 R15: 000000000118bfd4 16:17:12 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x40}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:12 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() read$FUSE(0xffffffffffffffff, &(0x7f0000000240)={0x2020}, 0x2020) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) wait4(r1, 0x0, 0x1000000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x2, [@typedef, @int, @array, @int]}}, 0x0, 0x5e}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0xa3}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x8a860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:17:12 executing program 3 (fault-call:8 fault-nth:21): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:17:12 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef={0x2}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0xfc}, @array, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000001600)=[{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000080)="bb07f784337eadc2a50d41849081d6b84cac847875c2979d65594849b555713a", 0x20}, {&(0x7f0000000140)="471e383fcdcf3e98e8095c4758aa7e3de07dadc3d104fbda4cf1fbf6118d38c24e63635e2d52aeb79497bdddde1f7eadcb9a4351cc041f24c8ede746b89707726f9618a138ad766a3f5b7d930215f0cd", 0x50}, {&(0x7f0000000240)="c1e2194ee0b0666b456d4dd7c46fea71dc21b08ba97eae599133f4567c24ff3df1f670d4f0b888d0ea0e9cdd8d722fae26fb2c", 0x33}, {&(0x7f0000000280)="9448d958f81a98ac673aec868a5ea0c15ed26f83c0", 0x15}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="ff2ff5a760b839ee043f09da44766b0cab3301cd12ef9f5e453ca16be09de1fe28703bacafd9eb62b58da2e6a806a71f373fe270476c6d4dc567f367e2c54d48c76896d9f4f9311a368dedfc88aabe8c5128d67a8b16cc0ed2bae618e2fd6b2c21b398315c0415607703cad2b24bc07c9baec786eda6fb96ab1a0aad5fab37150ec2be57137f1d4aa0d02aad1413628f43d8b59870a46de74fa02e40245f2a9f8c45d2230555f3c757cd8416d9091261d23c2d05abc881f5c07acb7053d64fdaa9a4764aefd4ee464cbf1221de155deb2139c9c957ef958e11e643bccd", 0xdd}, {&(0x7f00000013c0)="693f2b0932245325115d2ae8d2c0779959a56df19ee410534f3b2bf630ae", 0x1e}, {&(0x7f0000001400)="d4197ae382e64885c80a835cecce8cbef74e47e273eb50b89fa042256faf5e4648c456c052614a223e9b12e62a70e0ce4e57fdee8914a19a15eb4e70a19a23ac2b068277726f097bbafe7954be5f81868c6f22e9c106c3fe4da7c3dde541d50930", 0x61}, {&(0x7f0000001480)="c32a57e46055d245fb185b238f799816b1e0217055a28dc80dd12b", 0x1b}], 0x9, &(0x7f0000001580), 0x0, 0x100008c0}, {0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x44004}], 0x2, 0x24000080) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:12 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x40}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x8b860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 777.684555] FAULT_INJECTION: forcing a failure. [ 777.684555] name failslab, interval 1, probability 0, space 0, times 0 [ 777.725554] CPU: 1 PID: 610 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 777.733300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 777.742663] Call Trace: [ 777.745265] dump_stack+0x22c/0x33e [ 777.748910] should_fail.cold+0xa/0x2f [ 777.752812] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 777.757935] __should_failslab+0x153/0x1b6 [ 777.762194] should_failslab+0x5/0xf [ 777.765918] kmem_cache_alloc+0x2b1/0x4a0 [ 777.770078] ? mmu_topup_memory_caches+0xa0/0x360 [ 777.774949] mmu_topup_memory_caches+0x8f/0x360 [ 777.779641] kvm_mmu_load+0x1e/0x1010 [ 777.783543] ? kvm_arch_vcpu_ioctl_run+0x1e9b/0x6c10 [ 777.788670] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 777.796047] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 777.800929] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 777.805535] ? find_held_lock+0x2d/0x110 [ 777.809647] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 777.814503] ? get_task_pid+0x19d/0x320 [ 777.818487] ? lock_downgrade+0x750/0x750 [ 777.822643] ? check_preemption_disabled+0x41/0x2b0 [ 777.827677] ? kvm_vcpu_ioctl+0x493/0xe30 [ 777.831832] kvm_vcpu_ioctl+0x493/0xe30 [ 777.836347] ? kvm_get_dirty_log+0x590/0x590 [ 777.840770] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 777.845362] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 777.850131] ? rcu_nmi_exit+0x102/0x220 [ 777.854096] ? retint_kernel+0x2d/0x2d [ 777.857974] ? __fget+0x386/0x570 [ 777.861418] ? find_held_lock+0x2d/0x110 [ 777.865467] ? kvm_get_dirty_log+0x590/0x590 [ 777.869891] do_vfs_ioctl+0xcdb/0x12e0 [ 777.873787] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 777.879020] ? ioctl_preallocate+0x200/0x200 [ 777.883665] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 777.889143] ? __fget+0x3ad/0x570 [ 777.892615] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 777.896995] ksys_ioctl+0x9b/0xc0 [ 777.900455] __x64_sys_ioctl+0x6f/0xb0 [ 777.904365] do_syscall_64+0xf9/0x670 [ 777.908168] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 777.913386] RIP: 0033:0x45de59 [ 777.916585] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 777.935508] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 777.943229] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 777.950490] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 777.957921] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 777.965198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 777.972482] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:17:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x8c860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:17:13 executing program 3 (fault-call:8 fault-nth:22): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:17:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x8d860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 778.191023] FAULT_INJECTION: forcing a failure. [ 778.191023] name failslab, interval 1, probability 0, space 0, times 0 [ 778.212104] CPU: 0 PID: 665 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 778.219849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 778.229222] Call Trace: [ 778.231823] dump_stack+0x22c/0x33e [ 778.235497] should_fail.cold+0xa/0x2f [ 778.239401] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 778.244547] __should_failslab+0x153/0x1b6 [ 778.248815] should_failslab+0x5/0xf [ 778.252713] kmem_cache_alloc+0x2b1/0x4a0 [ 778.258129] mmu_topup_memory_caches+0x8f/0x360 [ 778.263175] kvm_mmu_load+0x1e/0x1010 [ 778.267046] ? kvm_arch_vcpu_ioctl_run+0x1b14/0x6c10 [ 778.272222] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 778.277195] ? mark_held_locks+0xf0/0xf0 [ 778.281293] ? mark_held_locks+0xa6/0xf0 [ 778.285392] ? find_held_lock+0x2d/0x110 16:17:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x8e860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 778.289486] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 778.294346] ? get_task_pid+0x19d/0x320 [ 778.298361] ? lock_downgrade+0x750/0x750 [ 778.302545] ? check_preemption_disabled+0x41/0x2b0 [ 778.307815] ? kvm_vcpu_ioctl+0x493/0xe30 [ 778.312060] kvm_vcpu_ioctl+0x493/0xe30 [ 778.316077] ? kvm_get_dirty_log+0x590/0x590 [ 778.320563] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 778.325403] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 778.330134] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 778.334970] ? rcu_nmi_exit+0x102/0x220 [ 778.339320] ? retint_kernel+0x2d/0x2d [ 778.343272] ? kvm_get_dirty_log+0x590/0x590 [ 778.348635] do_vfs_ioctl+0xcdb/0x12e0 [ 778.353129] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 778.358471] ? ioctl_preallocate+0x200/0x200 [ 778.362903] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 778.368463] ? __fget+0x3ad/0x570 [ 778.371931] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 778.376189] ksys_ioctl+0x9b/0xc0 [ 778.379655] __x64_sys_ioctl+0x6f/0xb0 [ 778.383555] do_syscall_64+0xf9/0x670 [ 778.387383] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 778.392791] RIP: 0033:0x45de59 [ 778.395981] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 778.414888] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 778.422596] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 778.429872] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 778.437330] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 778.444594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 778.451957] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:17:15 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x7, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x57}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x8f860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:17:15 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) r3 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) kcmp(r3, r0, 0x4, r2, r5) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:15 executing program 3 (fault-call:8 fault-nth:23): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:17:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x90860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 780.560800] FAULT_INJECTION: forcing a failure. [ 780.560800] name failslab, interval 1, probability 0, space 0, times 0 [ 780.578614] CPU: 0 PID: 822 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 780.586346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 780.595737] Call Trace: [ 780.598362] dump_stack+0x22c/0x33e [ 780.602016] should_fail.cold+0xa/0x2f [ 780.605922] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 780.611059] __should_failslab+0x153/0x1b6 [ 780.615321] should_failslab+0x5/0xf [ 780.619047] kmem_cache_alloc+0x2b1/0x4a0 [ 780.623196] ? mmu_topup_memory_caches+0xa0/0x360 [ 780.628136] mmu_topup_memory_caches+0x8f/0x360 [ 780.632827] kvm_mmu_load+0x1e/0x1010 [ 780.636627] ? kvm_arch_vcpu_ioctl_run+0x3aed/0x6c10 [ 780.641756] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 780.646699] ? mark_held_locks+0xa6/0xf0 [ 780.650752] ? find_held_lock+0x2d/0x110 [ 780.654812] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 780.659664] ? get_task_pid+0x19d/0x320 [ 780.663632] ? lock_downgrade+0x750/0x750 [ 780.667766] ? rcu_is_watching+0x7c/0x100 [ 780.671909] ? kvm_vcpu_ioctl+0x493/0xe30 [ 780.676140] kvm_vcpu_ioctl+0x493/0xe30 [ 780.680159] ? kvm_get_dirty_log+0x590/0x590 [ 780.684561] ? mark_held_locks+0xf0/0xf0 [ 780.688665] ? proc_fail_nth_write+0x95/0x1d0 [ 780.693187] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 780.698629] ? mark_held_locks+0xa6/0xf0 [ 780.702693] ? find_held_lock+0x2d/0x110 [ 780.706749] ? kvm_get_dirty_log+0x590/0x590 [ 780.711155] do_vfs_ioctl+0xcdb/0x12e0 [ 780.715572] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 780.720891] ? ioctl_preallocate+0x200/0x200 [ 780.725308] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 780.731025] ? rcu_nmi_exit+0x102/0x220 [ 780.735515] ? retint_kernel+0x2d/0x2d [ 780.740610] ksys_ioctl+0x9b/0xc0 [ 780.744141] __x64_sys_ioctl+0x6f/0xb0 [ 780.748042] do_syscall_64+0xf9/0x670 [ 780.752287] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 780.757575] RIP: 0033:0x45de59 [ 780.760752] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 780.779649] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 780.787374] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 780.794681] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 780.801948] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 16:17:16 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000080), &(0x7f0000000140)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 780.809210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 780.816479] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:17:16 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x40}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x91860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:17:16 executing program 3 (fault-call:8 fault-nth:24): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:17:16 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x40}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 780.962785] Bluetooth: hci3: command 0x0406 tx timeout [ 780.962792] Bluetooth: hci4: command 0x0406 tx timeout 16:17:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x92860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 781.053808] FAULT_INJECTION: forcing a failure. [ 781.053808] name failslab, interval 1, probability 0, space 0, times 0 [ 781.099391] CPU: 0 PID: 880 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 781.107167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 781.116528] Call Trace: [ 781.119136] dump_stack+0x22c/0x33e [ 781.122789] should_fail.cold+0xa/0x2f [ 781.126691] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 781.131819] __should_failslab+0x153/0x1b6 [ 781.136089] should_failslab+0x5/0xf [ 781.139815] kmem_cache_alloc+0x2b1/0x4a0 [ 781.143984] mmu_topup_memory_caches+0x8f/0x360 [ 781.148662] kvm_mmu_load+0x1e/0x1010 [ 781.152474] ? kvm_arch_vcpu_ioctl_run+0x3147/0x6c10 [ 781.157595] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 781.162538] ? mark_held_locks+0xf0/0xf0 [ 781.166603] ? kvm_vcpu_ioctl+0x175/0xe30 [ 781.170771] ? find_held_lock+0x2d/0x110 [ 781.174839] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 781.179713] ? get_task_pid+0x19d/0x320 [ 781.183733] ? lock_downgrade+0x750/0x750 [ 781.187930] ? check_preemption_disabled+0x41/0x2b0 [ 781.192975] ? kvm_vcpu_ioctl+0x493/0xe30 [ 781.197130] kvm_vcpu_ioctl+0x493/0xe30 [ 781.201113] ? kvm_get_dirty_log+0x590/0x590 [ 781.205537] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 781.210301] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 781.214877] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 781.219624] ? rcu_nmi_exit+0x102/0x220 [ 781.223698] ? retint_kernel+0x2d/0x2d [ 781.227571] ? kvm_get_dirty_log+0x590/0x590 [ 781.231997] do_vfs_ioctl+0xcdb/0x12e0 [ 781.235894] ? selinux_file_ioctl+0x316/0x5e0 [ 781.240391] ? ioctl_preallocate+0x200/0x200 [ 781.244782] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 781.250242] ? __fget+0x3ad/0x570 [ 781.253697] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 781.257939] ? rcu_nmi_exit+0x102/0x220 [ 781.261905] ksys_ioctl+0x9b/0xc0 [ 781.265352] __x64_sys_ioctl+0x6f/0xb0 [ 781.269227] do_syscall_64+0xf9/0x670 [ 781.273017] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 781.278197] RIP: 0033:0x45de59 [ 781.281385] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 16:17:16 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x40}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 781.300289] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 781.307990] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 781.315265] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 781.322528] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 781.329787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000018 [ 781.337048] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:17:18 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x7, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x57}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x93860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:17:18 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:18 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x40}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:18 executing program 3 (fault-call:8 fault-nth:25): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 783.587900] FAULT_INJECTION: forcing a failure. [ 783.587900] name failslab, interval 1, probability 0, space 0, times 0 [ 783.611958] CPU: 1 PID: 1011 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 783.621122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 783.632263] Call Trace: [ 783.634885] dump_stack+0x22c/0x33e [ 783.639260] should_fail.cold+0xa/0x2f [ 783.643193] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 783.648700] __should_failslab+0x153/0x1b6 [ 783.653090] should_failslab+0x5/0xf [ 783.656961] kmem_cache_alloc+0x2b1/0x4a0 [ 783.661256] mmu_topup_memory_caches+0x8f/0x360 [ 783.665978] kvm_mmu_load+0x1e/0x1010 [ 783.669828] ? kvm_arch_vcpu_ioctl_run+0x3ac1/0x6c10 [ 783.675709] ? kvm_arch_vcpu_ioctl_run+0x3ad3/0x6c10 [ 783.681662] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 783.687453] ? rcu_nmi_exit+0x102/0x220 [ 783.692802] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 783.698600] ? lock_downgrade+0x750/0x750 [ 783.702988] ? check_preemption_disabled+0x41/0x2b0 [ 783.708479] ? kvm_vcpu_ioctl+0x493/0xe30 [ 783.713080] kvm_vcpu_ioctl+0x493/0xe30 [ 783.717111] ? _raw_spin_unlock_irq+0x24/0x90 [ 783.721718] ? kvm_get_dirty_log+0x590/0x590 [ 783.726138] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 783.730911] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 783.735505] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 783.740284] ? rcu_nmi_exit+0x102/0x220 [ 783.744349] ? retint_kernel+0x2d/0x2d [ 783.748249] ? kvm_get_dirty_log+0x590/0x590 [ 783.752760] ? kvm_get_dirty_log+0x590/0x590 [ 783.757184] do_vfs_ioctl+0xcdb/0x12e0 [ 783.761080] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 783.766268] ? ioctl_preallocate+0x200/0x200 [ 783.770677] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 783.776142] ? __fget+0x3ad/0x570 [ 783.781440] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 783.785808] ksys_ioctl+0x9b/0xc0 [ 783.789537] __x64_sys_ioctl+0x6f/0xb0 [ 783.793438] do_syscall_64+0xf9/0x670 [ 783.797262] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 783.802741] RIP: 0033:0x45de59 [ 783.805961] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 783.825142] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 783.833331] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 783.840642] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 783.847909] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 783.855453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000019 [ 783.862816] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:17:19 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r3 = shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r3, 0x0) 16:17:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x94860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:17:19 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x7, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x57}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:19 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@typedef={0xfffffffc}, @int, @func={0xb, 0x0, 0x0, 0xc, 0x5}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_rose_SIOCRSCLRRT(r4, 0x89e4) 16:17:19 executing program 3 (fault-call:8 fault-nth:26): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:17:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x95860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 784.155837] FAULT_INJECTION: forcing a failure. [ 784.155837] name failslab, interval 1, probability 0, space 0, times 0 [ 784.181901] CPU: 1 PID: 1039 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 784.189739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 784.199435] Call Trace: [ 784.202052] dump_stack+0x22c/0x33e [ 784.205714] should_fail.cold+0xa/0x2f [ 784.209714] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 784.216312] __should_failslab+0x153/0x1b6 [ 784.220606] should_failslab+0x5/0xf [ 784.224367] kmem_cache_alloc+0x2b1/0x4a0 [ 784.228546] mmu_topup_memory_caches+0x8f/0x360 [ 784.233247] kvm_mmu_load+0x1e/0x1010 [ 784.237265] ? kvm_arch_vcpu_ioctl_run+0x3c4e/0x6c10 [ 784.242603] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 784.247699] ? mark_held_locks+0xf0/0xf0 16:17:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x96860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 784.252893] ? mark_held_locks+0xa6/0xf0 [ 784.257533] ? find_held_lock+0x2d/0x110 [ 784.261676] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 784.268122] ? get_task_pid+0x19d/0x320 [ 784.275019] ? lock_downgrade+0x750/0x750 [ 784.279751] ? check_preemption_disabled+0x41/0x2b0 [ 784.285350] ? kvm_vcpu_ioctl+0x493/0xe30 [ 784.289530] kvm_vcpu_ioctl+0x493/0xe30 [ 784.294168] ? kvm_get_dirty_log+0x590/0x590 [ 784.298604] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 784.303215] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 784.308005] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 784.313246] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 784.318051] ? rcu_nmi_exit+0x102/0x220 [ 784.322415] ? retint_kernel+0x2d/0x2d [ 784.326426] ? kvm_get_dirty_log+0x590/0x590 [ 784.330874] do_vfs_ioctl+0xcdb/0x12e0 [ 784.334778] ? selinux_file_ioctl+0x32e/0x5e0 [ 784.339326] ? ioctl_preallocate+0x200/0x200 [ 784.343853] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 784.349762] ? __fget+0x3ad/0x570 16:17:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x97860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 784.353245] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 784.357504] ? retint_kernel+0x2d/0x2d [ 784.361441] ksys_ioctl+0x9b/0xc0 [ 784.364948] __x64_sys_ioctl+0x6f/0xb0 [ 784.368898] do_syscall_64+0xf9/0x670 [ 784.372740] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 784.378737] RIP: 0033:0x45de59 [ 784.382319] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 784.404880] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 784.412998] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 784.421155] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 784.429921] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 784.437308] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001a [ 784.444607] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:17:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x98860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:17:19 executing program 3 (fault-call:8 fault-nth:27): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 784.637482] FAULT_INJECTION: forcing a failure. [ 784.637482] name failslab, interval 1, probability 0, space 0, times 0 [ 784.651219] CPU: 1 PID: 1203 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 784.659132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 784.669396] Call Trace: [ 784.672697] dump_stack+0x22c/0x33e [ 784.677040] should_fail.cold+0xa/0x2f [ 784.680951] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 784.686121] __should_failslab+0x153/0x1b6 [ 784.690379] should_failslab+0x5/0xf [ 784.694159] kmem_cache_alloc+0x2b1/0x4a0 [ 784.698339] mmu_topup_memory_caches+0x8f/0x360 [ 784.703030] kvm_mmu_load+0x1e/0x1010 [ 784.706852] ? kvm_arch_vcpu_ioctl_run+0x3af9/0x6c10 [ 784.714782] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 784.721250] ? mark_held_locks+0xf0/0xf0 [ 784.725559] ? kvm_vcpu_ioctl+0x175/0xe30 [ 784.731590] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 784.736435] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 784.741273] ? rcu_nmi_exit+0x102/0x220 [ 784.745298] ? retint_kernel+0x2d/0x2d [ 784.749224] ? kvm_vcpu_ioctl+0x493/0xe30 [ 784.754884] kvm_vcpu_ioctl+0x493/0xe30 [ 784.760437] ? kvm_get_dirty_log+0x590/0x590 [ 784.764873] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 784.769809] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 784.775050] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 784.780013] ? rcu_nmi_exit+0x102/0x220 [ 784.784021] ? retint_kernel+0x2d/0x2d [ 784.787928] ? kvm_get_dirty_log+0x590/0x590 [ 784.792367] do_vfs_ioctl+0xcdb/0x12e0 [ 784.796273] ? selinux_file_ioctl+0x228/0x5e0 [ 784.801059] ? ioctl_preallocate+0x200/0x200 [ 784.805919] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 784.812170] ? __fget+0x3ad/0x570 [ 784.816176] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 784.820785] ? rcu_nmi_exit+0x102/0x220 [ 784.824784] ksys_ioctl+0x9b/0xc0 [ 784.828276] __x64_sys_ioctl+0x6f/0xb0 [ 784.832228] do_syscall_64+0xf9/0x670 [ 784.836142] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 784.841818] RIP: 0033:0x45de59 [ 784.845024] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 784.864255] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 784.871991] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 784.879675] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 784.886949] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 784.895344] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001b [ 784.907777] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:17:21 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x40}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x99860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:17:22 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000440000004400a5556de90d0d2db3cfd0d3f13195a90000080000000000000000000008000000000000000000aab175c20000000000000000000000000000000004000000000000000000000000000000000000000000010056a4ebc989bc04ea7a235865e2dfc8de6c4a68119704aaec0dfac2613730bc93400c9d58b014fdfb9576e58a448e7a5b98b2403f72b6010ad236"], 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PIO_UNIMAPCLR(r4, 0x4b68, &(0x7f0000000080)={0x1f, 0xfffc, 0xa3e}) 16:17:22 executing program 3 (fault-call:8 fault-nth:28): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:17:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x9a860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:17:22 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x7, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x57}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:22 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x4, 0xc}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x4000001) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x9b860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 787.178401] FAULT_INJECTION: forcing a failure. [ 787.178401] name failslab, interval 1, probability 0, space 0, times 0 [ 787.203590] CPU: 1 PID: 1304 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 787.211683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 787.221073] Call Trace: [ 787.223683] dump_stack+0x22c/0x33e 16:17:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x9c860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 787.227869] should_fail.cold+0xa/0x2f [ 787.232146] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 787.237742] __should_failslab+0x153/0x1b6 [ 787.243103] should_failslab+0x5/0xf [ 787.247012] kmem_cache_alloc+0x2b1/0x4a0 [ 787.252148] mmu_topup_memory_caches+0x8f/0x360 [ 787.258785] kvm_mmu_load+0x1e/0x1010 [ 787.263332] ? kvm_arch_vcpu_ioctl_run+0x4b7a/0x6c10 [ 787.269000] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 787.274155] ? mark_held_locks+0xf0/0xf0 [ 787.278295] ? kvm_vcpu_ioctl+0x175/0xe30 [ 787.282477] ? find_held_lock+0x2d/0x110 [ 787.286582] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 787.291448] ? get_task_pid+0x19d/0x320 [ 787.295450] ? lock_downgrade+0x750/0x750 [ 787.299640] ? check_preemption_disabled+0x41/0x2b0 [ 787.305120] ? kvm_vcpu_ioctl+0x493/0xe30 [ 787.310158] kvm_vcpu_ioctl+0x493/0xe30 [ 787.314152] ? kvm_get_dirty_log+0x590/0x590 [ 787.318690] ? mark_held_locks+0xf0/0xf0 [ 787.322814] ? proc_fail_nth_write+0x95/0x1d0 16:17:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x9d860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 787.327329] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 787.332828] ? __fdget_pos+0xe3/0x100 [ 787.337857] ? find_held_lock+0x2d/0x110 [ 787.343184] ? kvm_get_dirty_log+0x590/0x590 [ 787.348402] do_vfs_ioctl+0xcdb/0x12e0 [ 787.352454] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 787.357907] ? ioctl_preallocate+0x200/0x200 [ 787.362383] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 787.368172] ? __fget+0x3ad/0x570 [ 787.372258] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 787.376541] ksys_ioctl+0x9b/0xc0 [ 787.380020] __x64_sys_ioctl+0x6f/0xb0 [ 787.383940] do_syscall_64+0xf9/0x670 [ 787.387946] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 787.393324] RIP: 0033:0x45de59 [ 787.396530] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 787.418617] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 787.426517] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 787.433837] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 787.441397] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 787.448693] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001c [ 787.456175] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:17:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x9e860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:17:22 executing program 3 (fault-call:8 fault-nth:29): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 787.685190] FAULT_INJECTION: forcing a failure. [ 787.685190] name failslab, interval 1, probability 0, space 0, times 0 [ 787.697371] CPU: 0 PID: 1520 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 787.705165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 787.714608] Call Trace: [ 787.717188] dump_stack+0x22c/0x33e [ 787.720816] should_fail.cold+0xa/0x2f [ 787.724691] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 787.729789] __should_failslab+0x153/0x1b6 [ 787.734009] should_failslab+0x5/0xf [ 787.737721] kmem_cache_alloc+0x2b1/0x4a0 [ 787.741866] mmu_topup_memory_caches+0x8f/0x360 [ 787.746538] kvm_mmu_load+0x1e/0x1010 [ 787.750344] ? kvm_arch_vcpu_ioctl_run+0x1f8f/0x6c10 [ 787.755435] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 787.760365] ? mark_held_locks+0xf0/0xf0 [ 787.764417] ? kvm_vcpu_ioctl+0x175/0xe30 [ 787.768565] ? find_held_lock+0x2d/0x110 [ 787.772637] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 787.777479] ? get_task_pid+0x19d/0x320 [ 787.781457] ? lock_downgrade+0x750/0x750 [ 787.785591] ? check_preemption_disabled+0x41/0x2b0 [ 787.790594] ? kvm_vcpu_ioctl+0x493/0xe30 [ 787.794723] kvm_vcpu_ioctl+0x493/0xe30 [ 787.798680] ? kvm_get_dirty_log+0x590/0x590 [ 787.803073] ? mark_held_locks+0xa6/0xf0 [ 787.807134] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 787.811890] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 787.816470] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 787.821225] ? rcu_nmi_exit+0x102/0x220 [ 787.825205] ? find_held_lock+0x2d/0x110 [ 787.829271] ? kvm_get_dirty_log+0x590/0x590 [ 787.833692] do_vfs_ioctl+0xcdb/0x12e0 [ 787.837592] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 787.842802] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 787.847568] ? ioctl_preallocate+0x200/0x200 [ 787.851975] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 787.856558] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 787.861342] ? rcu_nmi_exit+0x102/0x220 [ 787.865311] ? retint_kernel+0x2d/0x2d [ 787.869211] ksys_ioctl+0x9b/0xc0 [ 787.872665] __x64_sys_ioctl+0x6f/0xb0 [ 787.876552] do_syscall_64+0xf9/0x670 [ 787.880353] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 787.885536] RIP: 0033:0x45de59 [ 787.888709] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 787.907616] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 787.915327] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 787.922601] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 787.929898] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 787.937343] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001d [ 787.944629] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:17:24 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x40}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x9effffff, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:17:25 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x18, r0, 0x80, 0x6) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:25 executing program 3 (fault-call:8 fault-nth:30): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:17:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x9f860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:17:25 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x7, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x57}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:25 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/timer\x00', 0x107000) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:25 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x7, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x57}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:25 executing program 5: ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f0000000080)) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 790.226288] FAULT_INJECTION: forcing a failure. [ 790.226288] name failslab, interval 1, probability 0, space 0, times 0 [ 790.257651] CPU: 1 PID: 1583 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 790.265489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 790.274847] Call Trace: [ 790.277430] dump_stack+0x22c/0x33e [ 790.281094] should_fail.cold+0xa/0x2f [ 790.285030] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 790.290144] __should_failslab+0x153/0x1b6 [ 790.294398] should_failslab+0x5/0xf [ 790.298220] kmem_cache_alloc+0x2b1/0x4a0 [ 790.302390] mmu_topup_memory_caches+0x8f/0x360 [ 790.307064] kvm_mmu_load+0x1e/0x1010 [ 790.311324] ? kvm_arch_vcpu_ioctl_run+0x1f81/0x6c10 [ 790.316535] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 790.321507] ? mark_held_locks+0xf0/0xf0 [ 790.325575] ? kvm_vcpu_ioctl+0x175/0xe30 [ 790.329746] ? find_held_lock+0x2d/0x110 [ 790.333824] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 790.338677] ? get_task_pid+0x19d/0x320 [ 790.342667] ? lock_downgrade+0x750/0x750 [ 790.346864] ? check_preemption_disabled+0x41/0x2b0 [ 790.351914] ? kvm_vcpu_ioctl+0x493/0xe30 [ 790.356069] kvm_vcpu_ioctl+0x493/0xe30 [ 790.360053] ? kvm_get_dirty_log+0x590/0x590 [ 790.364473] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 790.369243] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 790.373880] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 790.378651] ? rcu_nmi_exit+0x102/0x220 [ 790.382646] ? retint_kernel+0x2d/0x2d [ 790.386550] ? kvm_get_dirty_log+0x590/0x590 [ 790.390969] do_vfs_ioctl+0xcdb/0x12e0 [ 790.394868] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 790.400067] ? ioctl_preallocate+0x200/0x200 [ 790.404482] ? setattr_copy+0x13e/0x5c0 [ 790.408468] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 790.413930] ? __fget+0x3ad/0x570 [ 790.417399] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 790.421637] ? rcu_nmi_exit+0x102/0x220 16:17:25 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r1) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000001500)={r2}) ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x891b, &(0x7f0000001540)={'geneve1\x00', {0x2, 0x0, @empty}}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000001340)={0x0, 0x6}, &(0x7f0000001380)=0x8) sendmsg$inet_sctp(r3, &(0x7f00000014c0)={&(0x7f0000000080)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001300)=[{&(0x7f0000000140)="159ba3311684efc5dae5093fee2433e22fefda410f60c6fe0f097d5d2140c1f3da51640539eb26a91822a36a1e86c4771aa31172e2546d13bcdbac34e3d105c5b34198d3ade19533f6", 0x49}, {&(0x7f0000000240)="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", 0x8a2}, {&(0x7f0000001240)="b1faafdb7bd2ddddd1856fbaa39cbd336ada50e9d5c11a50a5d821be0a4d5339844711a3652d1fcc155bfcf9dad2ede8bfa8c02e0b9dadf7bed719f0", 0x3c}, {&(0x7f0000001280)="ffe7cabd818def0a75bbdf83e63ac4d5619635bf23add2a78ac5bbcc0fb9e1aae0af0c8b655eaf870efa84359c4ef51a9a03fe63bd0a62d643da5e6bc4cc79a8ba3c41ec242db5c9b436f46b8d8fc7640e268209b0c60e3e6c37989bbb35a2", 0x5f}], 0x4, &(0x7f0000001840)=ANY=[@ANYBLOB="18000000000000008400000000000000010001000300950d1800000000000000840000000500000010000000f5000000180000000000000084000000070000006401010200000000200000000000000084000000080000000000000000000000000000000000000120000000000000008400000002000000d40000000000008002000000", @ANYRES32=0x0, @ANYBLOB="b2b86c8d8d09989c18000000000000008400000006000000ffff000000000000300000000000000084000000010000001f000800020000000000000012df0000080000000600000001040000d036d6f6b2f643a655d0c2ca5480686743c1e737c35142bbd07c95ee224e28004fb3e1f5ab80bd7c215a9768af6a08a6ba5ccc9dc3ff2c0702b6ade4f35fe6c177949c674a7929a3f4065a03856e2a4b6ae729fbb6be577aec2a50c1ec8e9c", @ANYRES32=r5], 0xd0, 0x84}, 0x4040880) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f00000015c0)="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", 0x150}, {&(0x7f0000001740)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2a8badee4fa4c457ac37a3a3f1ce868250a180c8af565a0974bfeb7b6ccb85f07b372a36bdfb4450e8f92120c6a4b598ee3135e9096e10b98c220dbec1455e547df16c2e9c3cecb0daf08e47fb141301fc99ac5ca29b03dc1f1fe047326180a7e78dfcd2037dd9431c9915bde0e2cff91ee05d06bd90ffbc7e004ed8da82780613b123b10bc980b08b91db49ffc07c8fc32351ec7fa1e5e73865acb10fd26d1f58810f717be2df78fe26b5f97dcd", 0xe2}], 0x2, 0xa) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f00000013c0)={0x2, 0xe1, "35a031e0e992a0804e352321719abab244be85c53cf26bee537d848ebcb4d012937d54562515f996c7278727aee89db1906dc6a1b1caeda6bd4c1c5ee255b8210edcf021ee88d3ca1535e68510013d4fcf2ef3a61aa1422196603fd70a001bc668fb6b7276c16b4db7e674e19c0656317601a0761e4d7f3222c2bf278435d93351b5637966f031d4fb08aa015d0243c27c67f97ea81f40779205614f086283ec62c8c03ff0fe16098166419ed07846558dfc429ba0515d4ccfc3b6ff33a53291f4a9391d79b60089a1843feefc7cf6fe5dc76f4595c03256a9f17f60febca92c6a"}) [ 790.425644] ksys_ioctl+0x9b/0xc0 [ 790.429105] __x64_sys_ioctl+0x6f/0xb0 [ 790.433006] do_syscall_64+0xf9/0x670 [ 790.436856] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 790.442075] RIP: 0033:0x45de59 [ 790.445275] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 790.464199] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 16:17:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xa0860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 790.471910] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 790.479200] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 790.486462] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 790.493856] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001e [ 790.501251] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:17:25 executing program 3 (fault-call:8 fault-nth:31): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 790.668876] FAULT_INJECTION: forcing a failure. [ 790.668876] name failslab, interval 1, probability 0, space 0, times 0 [ 790.689280] CPU: 0 PID: 1686 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 790.697199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 790.706656] Call Trace: [ 790.709239] dump_stack+0x22c/0x33e [ 790.712886] should_fail.cold+0xa/0x2f [ 790.716764] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 790.721869] __should_failslab+0x153/0x1b6 [ 790.726108] should_failslab+0x5/0xf [ 790.729836] kmem_cache_alloc+0x2b1/0x4a0 [ 790.733985] ? mmu_topup_memory_caches+0xa0/0x360 [ 790.738835] mmu_topup_memory_caches+0x8f/0x360 [ 790.743503] kvm_mmu_load+0x1e/0x1010 [ 790.747294] ? kvm_arch_vcpu_ioctl_run+0x3adf/0x6c10 [ 790.752435] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 790.757389] ? rcu_nmi_exit+0x102/0x220 [ 790.761360] ? find_held_lock+0x2d/0x110 [ 790.765424] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 790.770248] ? get_task_pid+0x19d/0x320 [ 790.774231] ? lock_downgrade+0x750/0x750 [ 790.778372] ? check_preemption_disabled+0x41/0x2b0 [ 790.783397] ? kvm_vcpu_ioctl+0x493/0xe30 [ 790.787537] kvm_vcpu_ioctl+0x493/0xe30 [ 790.791496] ? kvm_get_dirty_log+0x590/0x590 [ 790.795891] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 790.800645] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 790.806178] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 790.811320] ? rcu_nmi_exit+0x102/0x220 [ 790.815297] ? retint_kernel+0x2d/0x2d [ 790.819170] ? kvm_get_dirty_log+0x590/0x590 [ 790.823578] do_vfs_ioctl+0xcdb/0x12e0 [ 790.827471] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 790.832668] ? ioctl_preallocate+0x200/0x200 [ 790.837077] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 790.843040] ? __fget+0x3ad/0x570 [ 790.846479] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 790.850701] ? rcu_nmi_exit+0x102/0x220 [ 790.854683] ksys_ioctl+0x9b/0xc0 [ 790.858139] __x64_sys_ioctl+0x6f/0xb0 [ 790.862011] do_syscall_64+0xf9/0x670 [ 790.865799] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 790.870971] RIP: 0033:0x45de59 [ 790.874151] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 790.894778] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 790.902488] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 790.909747] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 790.917022] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 790.924290] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001f [ 790.931563] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:17:27 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x40}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r1) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xa1860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:17:28 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000000080)={0x7fffffff, 0x1c, [0xae70, 0x0, 0x9, 0x2, 0x80000001, 0x1f, 0x2]}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:28 executing program 3 (fault-call:8 fault-nth:32): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:17:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xa2860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:17:28 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x7, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x57}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xa3860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 793.256885] FAULT_INJECTION: forcing a failure. [ 793.256885] name failslab, interval 1, probability 0, space 0, times 0 [ 793.298004] CPU: 1 PID: 1739 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 793.305840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 793.315228] Call Trace: [ 793.317829] dump_stack+0x22c/0x33e [ 793.321475] should_fail.cold+0xa/0x2f [ 793.325374] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 793.330500] __should_failslab+0x153/0x1b6 [ 793.334751] should_failslab+0x5/0xf [ 793.338478] kmem_cache_alloc+0x2b1/0x4a0 [ 793.342660] ? mmu_topup_memory_caches+0x82/0x360 [ 793.347526] mmu_topup_memory_caches+0x8f/0x360 [ 793.352427] kvm_mmu_load+0x1e/0x1010 [ 793.356249] ? kvm_arch_vcpu_ioctl_run+0x1b14/0x6c10 [ 793.359018] ptrace attach of "/root/syz-executor.0"[1789] was attempted by "/root/syz-executor.0"[1790] [ 793.361366] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 793.361385] ? mark_held_locks+0xf0/0xf0 [ 793.361402] ? mark_held_locks+0xa6/0xf0 [ 793.361426] ? find_held_lock+0x2d/0x110 [ 793.361449] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 793.393151] ? get_task_pid+0x19d/0x320 [ 793.397157] ? lock_downgrade+0x750/0x750 [ 793.401335] ? check_preemption_disabled+0x41/0x2b0 [ 793.406383] ? kvm_vcpu_ioctl+0x493/0xe30 [ 793.410547] kvm_vcpu_ioctl+0x493/0xe30 [ 793.414768] ? kvm_get_dirty_log+0x590/0x590 [ 793.419203] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 793.425197] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 793.429925] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 793.434820] ? rcu_nmi_exit+0x102/0x220 [ 793.438905] ? retint_kernel+0x2d/0x2d [ 793.442890] ? kvm_get_dirty_log+0x590/0x590 [ 793.447329] do_vfs_ioctl+0xcdb/0x12e0 [ 793.451240] ? selinux_file_ioctl+0x316/0x5e0 [ 793.455766] ? ioctl_preallocate+0x200/0x200 [ 793.460199] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 793.465678] ? __fget+0x3ad/0x570 [ 793.469155] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 793.473509] ? rcu_nmi_exit+0x102/0x220 [ 793.477511] ksys_ioctl+0x9b/0xc0 [ 793.481160] __x64_sys_ioctl+0x6f/0xb0 [ 793.485107] do_syscall_64+0xf9/0x670 [ 793.488933] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 793.494177] RIP: 0033:0x45de59 [ 793.497404] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 793.517010] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 793.524768] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 793.532055] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 793.539344] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 16:17:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xa4860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:17:28 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x34}, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xa5860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:17:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xa6860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 793.546629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000020 [ 793.555765] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:17:28 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x7, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x57}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:30 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x40}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r1) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xa7860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:17:31 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_open_procfs$namespace(r0, &(0x7f0000000080)='ns/uts\x00') r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:31 executing program 3 (fault-call:8 fault-nth:33): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:17:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xa8860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 796.208172] FAULT_INJECTION: forcing a failure. [ 796.208172] name failslab, interval 1, probability 0, space 0, times 0 [ 796.251583] CPU: 0 PID: 1985 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 796.259420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 796.268798] Call Trace: [ 796.271407] dump_stack+0x22c/0x33e [ 796.275051] should_fail.cold+0xa/0x2f [ 796.278953] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 796.284094] __should_failslab+0x153/0x1b6 [ 796.288343] should_failslab+0x5/0xf [ 796.292100] kmem_cache_alloc+0x2b1/0x4a0 [ 796.296258] ? mmu_topup_memory_caches+0xa0/0x360 [ 796.302070] mmu_topup_memory_caches+0x8f/0x360 [ 796.306753] kvm_mmu_load+0x1e/0x1010 [ 796.310591] ? kvm_arch_vcpu_ioctl_run+0x3c16/0x6c10 [ 796.316004] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 796.321035] ? mark_held_locks+0xa6/0xf0 [ 796.325200] ? find_held_lock+0x2d/0x110 [ 796.329250] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 796.334184] ? get_task_pid+0x19d/0x320 [ 796.338234] ? lock_downgrade+0x750/0x750 [ 796.342396] ? check_preemption_disabled+0x41/0x2b0 [ 796.348157] ? kvm_vcpu_ioctl+0x493/0xe30 [ 796.352293] kvm_vcpu_ioctl+0x493/0xe30 [ 796.357390] ? kvm_get_dirty_log+0x590/0x590 [ 796.362968] ? mark_held_locks+0xf0/0xf0 [ 796.367047] ? proc_fail_nth_write+0x95/0x1d0 [ 796.372654] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 796.378276] ? find_held_lock+0x2d/0x110 [ 796.383169] ? kvm_get_dirty_log+0x590/0x590 [ 796.387567] do_vfs_ioctl+0xcdb/0x12e0 [ 796.394402] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 796.399599] ? ioctl_preallocate+0x200/0x200 [ 796.404008] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 796.409471] ? retint_kernel+0x2d/0x2d [ 796.413354] ? selinux_file_ioctl+0x26/0x5e0 [ 796.417842] ksys_ioctl+0x9b/0xc0 [ 796.421285] __x64_sys_ioctl+0x6f/0xb0 [ 796.425168] do_syscall_64+0xf9/0x670 [ 796.429080] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 796.434590] RIP: 0033:0x45de59 [ 796.437777] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 796.458077] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 796.466183] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 796.473912] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 796.482158] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 796.489444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000021 16:17:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xa9860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 796.497444] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:17:31 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000240)={'broute\x00', 0x0, 0x4, 0x3f, [], 0x1, &(0x7f0000000080)=[{}], &(0x7f0000000140)=""/63}, &(0x7f0000000180)=0x78) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:31 executing program 3 (fault-call:8 fault-nth:34): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:17:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xaa860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:17:31 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x7, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x57}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 796.787391] FAULT_INJECTION: forcing a failure. [ 796.787391] name failslab, interval 1, probability 0, space 0, times 0 [ 796.801679] CPU: 1 PID: 2078 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 796.810736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 796.820933] Call Trace: [ 796.823626] dump_stack+0x22c/0x33e [ 796.827282] should_fail.cold+0xa/0x2f [ 796.831627] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 796.836936] __should_failslab+0x153/0x1b6 [ 796.841208] should_failslab+0x5/0xf [ 796.844937] kmem_cache_alloc+0x2b1/0x4a0 [ 796.849107] mmu_topup_memory_caches+0x8f/0x360 [ 796.854059] kvm_mmu_load+0x1e/0x1010 [ 796.858688] ? kvm_arch_vcpu_ioctl_run+0x192b/0x6c10 [ 796.864075] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 796.869198] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 796.874648] ? find_held_lock+0x2d/0x110 [ 796.880937] ? kvm_arch_vcpu_runnable+0x730/0x730 16:17:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xab860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 796.887799] ? get_task_pid+0x19d/0x320 [ 796.893962] ? lock_downgrade+0x750/0x750 [ 796.898442] ? check_preemption_disabled+0x41/0x2b0 [ 796.903511] ? kvm_vcpu_ioctl+0x493/0xe30 [ 796.907677] kvm_vcpu_ioctl+0x493/0xe30 [ 796.911672] ? kvm_get_dirty_log+0x590/0x590 [ 796.916119] ? mark_held_locks+0xf0/0xf0 [ 796.920415] ? proc_fail_nth_write+0x95/0x1d0 [ 796.925144] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 796.930189] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 796.935695] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 796.940390] ? find_held_lock+0x2d/0x110 [ 796.945197] ? kvm_get_dirty_log+0x590/0x590 [ 796.949900] do_vfs_ioctl+0xcdb/0x12e0 [ 796.954463] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 796.960236] ? ioctl_preallocate+0x200/0x200 [ 796.965713] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 796.971203] ? __fget+0x3ad/0x570 [ 796.974672] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 796.978933] ksys_ioctl+0x9b/0xc0 [ 796.982406] __x64_sys_ioctl+0x6f/0xb0 16:17:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xac860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 796.986405] do_syscall_64+0xf9/0x670 [ 796.990365] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 796.995558] RIP: 0033:0x45de59 [ 796.998759] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 797.017678] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 797.025397] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 797.032711] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 797.039991] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 797.047818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000022 [ 797.055099] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:17:33 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x40}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r1) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xad860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:17:34 executing program 3 (fault-call:8 fault-nth:35): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:17:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xae860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:17:34 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000140)=""/103) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) setregid(0x0, 0x0) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r3, &(0x7f00000006c0)=[{&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000400)=[{&(0x7f00000002c0)="1013e47d43f35a7d83ab8a9585af2f7ae750749b3a0d579088e9419d370cf2e75884140717b50e437b4503cd3ee40091535e5105f55d46ba712eb4d17c12cdad0240ef74c13ab4cd8e3dd1ddd0efb7d25b4a7616d4f9c5cad01b0c7a27581ee953057bdfd407a6c85e36a817a66626e495d9d99aa5231845c38bcbde51ca0620d978d7695ad912ea8813d825793a3184f1f45b819e4eb1f5b6d7b9c1e10bfe806157a0c61977c6319db8eff06b5ea794761f3b532109c1ddf6c6961a8676c793", 0xc0}, {&(0x7f0000000080)}, {&(0x7f0000000380)="9d82ff2bcc83cb3e8febd60255efc149af83fc5bd2d3cb301b407af6838379836c9f243f3119c700ad4b3fa3c2652d045ec4aad45731ca94caf2ac8660e82656733fdd417ab10ebc6b04e7d4423d25448bfc5360dc5f058f778fa627b01de59325ef0baf1f1f64ea53afa51755", 0x6d}], 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="34000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="368afd32200a3d3900009e028983370000000000", @ANYRES32=r0, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00'], 0xf0, 0x4044051}], 0x1, 0x24000000) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000440)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 799.336348] FAULT_INJECTION: forcing a failure. [ 799.336348] name failslab, interval 1, probability 0, space 0, times 0 [ 799.370055] CPU: 0 PID: 2236 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 799.377973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 799.387332] Call Trace: [ 799.389933] dump_stack+0x22c/0x33e [ 799.393579] should_fail.cold+0xa/0x2f [ 799.397481] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 799.402696] __should_failslab+0x153/0x1b6 [ 799.406964] should_failslab+0x5/0xf [ 799.410705] kmem_cache_alloc+0x2b1/0x4a0 [ 799.414869] mmu_topup_memory_caches+0x8f/0x360 [ 799.419531] kvm_mmu_load+0x1e/0x1010 [ 799.423348] ? kvm_arch_vcpu_ioctl_run+0x1da3/0x6c10 [ 799.428492] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 799.433508] ? mark_held_locks+0xa6/0xf0 [ 799.437568] ? find_held_lock+0x2d/0x110 [ 799.441646] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 799.446482] ? get_task_pid+0x19d/0x320 [ 799.450630] ? lock_downgrade+0x750/0x750 [ 799.454794] ? check_preemption_disabled+0x41/0x2b0 [ 799.460082] ? kvm_vcpu_ioctl+0x493/0xe30 [ 799.464233] kvm_vcpu_ioctl+0x493/0xe30 [ 799.468210] ? kvm_get_dirty_log+0x590/0x590 [ 799.472915] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 799.478034] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 799.482806] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 799.487607] ? rcu_nmi_exit+0x102/0x220 [ 799.492797] ? retint_kernel+0x2d/0x2d [ 799.496695] ? kvm_get_dirty_log+0x590/0x590 [ 799.501151] do_vfs_ioctl+0xcdb/0x12e0 [ 799.505041] ? selinux_file_ioctl+0x1e0/0x5e0 [ 799.509623] ? ioctl_preallocate+0x200/0x200 [ 799.514027] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 799.519486] ? __fget+0x3ad/0x570 [ 799.523022] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 799.527279] ? rcu_nmi_exit+0x102/0x220 [ 799.532795] ksys_ioctl+0x9b/0xc0 [ 799.536510] __x64_sys_ioctl+0x6f/0xb0 [ 799.540396] do_syscall_64+0xf9/0x670 [ 799.544208] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 799.549401] RIP: 0033:0x45de59 [ 799.552624] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 799.572057] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 799.579787] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 16:17:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xaf860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:17:34 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x10200, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="090000000000000000000700000008000300", @ANYRES32=r7, @ANYBLOB="0800051d000000001400060076657468315f746f5f7465616d0000000400cc0008000500040000001400040073"], 0x58}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x80, 0x0, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x8}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xe197}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x9}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8}, @NL80211_ATTR_SCAN_FREQUENCIES={0x2c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x7}, {0x8, 0x0, 0xfff}, {0x8, 0x0, 0x1}, {0x8, 0x0, 0x6}, {0x8, 0x0, 0x2}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x24040000}, 0x20000015) ptrace$cont(0x7, r0, 0x0, 0x0) [ 799.587091] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 799.594564] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 799.602117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000023 [ 799.609494] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:17:34 executing program 3 (fault-call:8 fault-nth:36): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:17:34 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x7, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x57}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xb0860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 799.825801] FAULT_INJECTION: forcing a failure. [ 799.825801] name failslab, interval 1, probability 0, space 0, times 0 [ 799.872236] CPU: 1 PID: 2292 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 799.880075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 799.889739] Call Trace: [ 799.892342] dump_stack+0x22c/0x33e [ 799.895990] should_fail.cold+0xa/0x2f [ 799.900078] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 799.905297] __should_failslab+0x153/0x1b6 [ 799.909653] should_failslab+0x5/0xf [ 799.913477] kmem_cache_alloc+0x2b1/0x4a0 [ 799.917644] mmu_topup_memory_caches+0x8f/0x360 [ 799.922361] kvm_mmu_load+0x1e/0x1010 [ 799.926197] ? kvm_cpu_has_injectable_intr+0xc/0x3c0 [ 799.931328] ? kvm_cpu_has_injectable_intr+0x297/0x3c0 [ 799.936638] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 799.941587] ? rcu_nmi_exit+0x102/0x220 [ 799.946201] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 799.951077] ? lock_downgrade+0x750/0x750 [ 799.955240] ? check_preemption_disabled+0x41/0x2b0 [ 799.960278] ? kvm_vcpu_ioctl+0x493/0xe30 [ 799.964440] kvm_vcpu_ioctl+0x493/0xe30 [ 799.968538] ? kvm_get_dirty_log+0x590/0x590 [ 799.973358] ? mark_held_locks+0xf0/0xf0 [ 799.977466] ? proc_fail_nth_write+0x95/0x1d0 [ 799.982080] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 799.987032] ? mark_held_locks+0xa6/0xf0 [ 799.991112] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 799.995889] ? find_held_lock+0x2d/0x110 [ 799.999973] ? kvm_get_dirty_log+0x590/0x590 [ 800.004410] do_vfs_ioctl+0xcdb/0x12e0 [ 800.008322] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 800.014769] ? ioctl_preallocate+0x200/0x200 [ 800.020152] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 800.025623] ? rcu_nmi_exit+0x102/0x220 [ 800.029620] ? retint_kernel+0x2d/0x2d [ 800.033537] ksys_ioctl+0x9b/0xc0 [ 800.036998] __x64_sys_ioctl+0x6f/0xb0 [ 800.042319] do_syscall_64+0xf9/0x670 [ 800.049427] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 800.054638] RIP: 0033:0x45de59 [ 800.058181] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 800.077392] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 800.085379] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 800.092678] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 800.099980] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 800.107260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024 [ 800.114540] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:17:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xb1860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:17:35 executing program 3 (fault-call:8 fault-nth:37): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 800.410436] FAULT_INJECTION: forcing a failure. [ 800.410436] name failslab, interval 1, probability 0, space 0, times 0 [ 800.422463] CPU: 1 PID: 2424 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 800.430285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 800.439652] Call Trace: [ 800.442252] dump_stack+0x22c/0x33e [ 800.445892] should_fail.cold+0xa/0x2f [ 800.449826] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 800.454953] __should_failslab+0x153/0x1b6 [ 800.459320] should_failslab+0x5/0xf [ 800.463047] kmem_cache_alloc+0x2b1/0x4a0 [ 800.467213] mmu_topup_memory_caches+0x8f/0x360 [ 800.471905] kvm_mmu_load+0x1e/0x1010 [ 800.475728] ? kvm_arch_vcpu_ioctl_run+0xebb/0x6c10 [ 800.480761] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 800.485702] ? mark_held_locks+0xf0/0xf0 [ 800.490050] ? kvm_vcpu_ioctl+0x175/0xe30 [ 800.494219] ? find_held_lock+0x2d/0x110 [ 800.498295] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 800.503149] ? get_task_pid+0x19d/0x320 [ 800.507141] ? lock_downgrade+0x750/0x750 [ 800.511311] ? check_preemption_disabled+0x41/0x2b0 [ 800.516347] ? kvm_vcpu_ioctl+0x493/0xe30 [ 800.520509] kvm_vcpu_ioctl+0x493/0xe30 [ 800.524498] ? kvm_get_dirty_log+0x590/0x590 [ 800.528928] ? mark_held_locks+0xf0/0xf0 [ 800.533000] ? proc_fail_nth_write+0x95/0x1d0 [ 800.537512] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 800.542462] ? find_held_lock+0x2d/0x110 [ 800.546533] ? kvm_get_dirty_log+0x590/0x590 [ 800.550960] do_vfs_ioctl+0xcdb/0x12e0 [ 800.554865] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 800.559465] ? ioctl_preallocate+0x200/0x200 [ 800.564062] ? rcu_nmi_exit+0x102/0x220 [ 800.568052] ? retint_kernel+0x2d/0x2d [ 800.571955] ? security_file_ioctl+0x83/0xb0 [ 800.576413] ? __sanitizer_cov_trace_pc+0x22/0x50 [ 800.581296] ksys_ioctl+0x9b/0xc0 [ 800.584783] __x64_sys_ioctl+0x6f/0xb0 [ 800.588690] do_syscall_64+0xf9/0x670 [ 800.592693] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 800.597896] RIP: 0033:0x45de59 [ 800.601092] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 800.620005] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 800.627728] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 800.635011] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 800.642322] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 800.649718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000025 [ 800.657026] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:17:36 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x40}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xb2860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:17:36 executing program 3 (fault-call:8 fault-nth:38): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:17:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xb3860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 801.834875] FAULT_INJECTION: forcing a failure. [ 801.834875] name failslab, interval 1, probability 0, space 0, times 0 [ 801.885215] CPU: 0 PID: 2436 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 801.893076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 801.902443] Call Trace: [ 801.905081] dump_stack+0x22c/0x33e [ 801.908721] should_fail.cold+0xa/0x2f [ 801.912621] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 801.917736] ? lock_is_held_type+0x269/0x340 [ 801.922166] __should_failslab+0x153/0x1b6 [ 801.926452] should_failslab+0x5/0xf [ 801.930182] kmem_cache_alloc+0x2b1/0x4a0 [ 801.934351] mmu_topup_memory_caches+0x8f/0x360 [ 801.939034] kvm_mmu_load+0x1e/0x1010 [ 801.942860] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 801.947982] ? mark_held_locks+0xf0/0xf0 [ 801.952046] ? kvm_vcpu_ioctl+0x175/0xe30 [ 801.956207] ? find_held_lock+0x2d/0x110 [ 801.960274] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 801.965122] ? get_task_pid+0x19d/0x320 [ 801.969108] ? lock_downgrade+0x750/0x750 [ 801.973270] ? check_preemption_disabled+0x41/0x2b0 [ 801.978304] ? kvm_vcpu_ioctl+0x493/0xe30 [ 801.982458] kvm_vcpu_ioctl+0x493/0xe30 [ 801.986446] ? kvm_get_dirty_log+0x590/0x590 [ 801.990881] ? mark_held_locks+0xf0/0xf0 [ 801.994961] ? proc_fail_nth_write+0x95/0x1d0 [ 801.999494] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 802.004454] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 802.009223] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 802.013818] ? find_held_lock+0x2d/0x110 [ 802.017894] ? kvm_get_dirty_log+0x590/0x590 [ 802.022320] do_vfs_ioctl+0xcdb/0x12e0 [ 802.026223] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 802.031430] ? ioctl_preallocate+0x200/0x200 [ 802.035851] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 802.041309] ? __fget+0x3ad/0x570 [ 802.044766] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 802.049022] ksys_ioctl+0x9b/0xc0 [ 802.052500] __x64_sys_ioctl+0x6f/0xb0 [ 802.056394] do_syscall_64+0xf9/0x670 [ 802.060200] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 802.065388] RIP: 0033:0x45de59 [ 802.068587] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 802.087538] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 802.095278] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 802.102581] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 802.109855] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 802.117136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000026 [ 802.124430] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:17:37 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x8, [@typedef, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4, 0x3}}, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x6c}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) r3 = syz_usbip_server_init(0x5) finit_module(r3, &(0x7f0000000080)='%[\')..{${\\\x00', 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) ptrace$setregset(0x4205, r4, 0x200, &(0x7f0000000140)={&(0x7f0000000240)="1c92b50a556c02f944018448b52626dae68556ff5e5e2e36fffa75141749a721a5a8a46d93cdd016987c0266c1139429186d16ea30fd7427e26e6518bd1445c4783cc49154fec4b4162e618b46dfb2b0aec766b7b1054a84ba04f95c06f7528f8cf99a95aaeb269d3b3dcac969f53ada568f9a38b287a976bf9faf62c67ca9fa3ec24672be3cb9ad072804d576ac2d632e6e122e9fb2f8b7bd6cee607536a55c29b818247ba74fab004a40e06abe21d1e144d4b6fe0599a62c883c04018260007f3e398ec117326ee85339b62315740d0c", 0xd1}) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xb4860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:17:37 executing program 3 (fault-call:8 fault-nth:39): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 802.447708] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 802.453554] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 802.528849] vhci_hcd: connection closed [ 802.530467] vhci_hcd: stop threads [ 802.541432] vhci_hcd: release socket [ 802.565416] vhci_hcd: disconnect device [ 802.571636] FAULT_INJECTION: forcing a failure. [ 802.571636] name failslab, interval 1, probability 0, space 0, times 0 [ 802.595814] CPU: 0 PID: 2525 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 802.603654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 802.613022] Call Trace: [ 802.615627] dump_stack+0x22c/0x33e [ 802.619265] should_fail.cold+0xa/0x2f [ 802.623159] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 802.628278] __should_failslab+0x153/0x1b6 [ 802.632521] should_failslab+0x5/0xf [ 802.636240] kmem_cache_alloc+0x2b1/0x4a0 [ 802.640427] mmu_topup_memory_caches+0x8f/0x360 [ 802.645109] kvm_mmu_load+0x1e/0x1010 [ 802.648930] ? kvm_arch_vcpu_ioctl_run+0x1f73/0x6c10 [ 802.654048] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 802.658989] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 802.663761] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 802.668365] ? find_held_lock+0x2d/0x110 [ 802.672441] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 802.677291] ? get_task_pid+0x19d/0x320 [ 802.681275] ? lock_downgrade+0x750/0x750 [ 802.685438] ? check_preemption_disabled+0x41/0x2b0 [ 802.690478] ? kvm_vcpu_ioctl+0x493/0xe30 [ 802.694651] kvm_vcpu_ioctl+0x493/0xe30 [ 802.698634] ? kvm_get_dirty_log+0x590/0x590 [ 802.703057] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 802.707854] ? mark_held_locks+0xf0/0xf0 [ 802.711951] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 802.716724] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 802.721413] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 802.726196] ? find_held_lock+0x2d/0x110 [ 802.730276] ? kvm_get_dirty_log+0x590/0x590 [ 802.734695] do_vfs_ioctl+0xcdb/0x12e0 [ 802.738595] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 802.743801] ? ioctl_preallocate+0x200/0x200 [ 802.748221] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 802.753684] ? retint_kernel+0x2d/0x2d [ 802.757604] ksys_ioctl+0x9b/0xc0 [ 802.761072] __x64_sys_ioctl+0x6f/0xb0 [ 802.764975] do_syscall_64+0xf9/0x670 [ 802.768817] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 802.774025] RIP: 0033:0x45de59 [ 802.777228] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 802.796226] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 802.803955] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 802.811242] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 802.819483] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 16:17:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xb5860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 802.826769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000027 [ 802.834055] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:17:38 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x7, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x57}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:38 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000004400000044010000080000000000000000000008000000000000000000000001000000000000000000000000000000030000000000000000ef00000000000000000000000000000100"/100], 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x90, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:newrole_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip_vti0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x90}, 0x1, 0x0, 0x0, 0x20040042}, 0x8) tkill(r0, 0x33) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) dup2(r3, r3) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000300)={0x0, 0x8, 0x4, 0x1}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) wait4(r4, 0x0, 0x1000000, 0x0) 16:17:38 executing program 3 (fault-call:8 fault-nth:40): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:17:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xb6860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 803.041954] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 803.047803] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 803.073576] vhci_hcd: connection closed [ 803.073672] vhci_hcd: stop threads [ 803.081443] vhci_hcd: release socket [ 803.090412] vhci_hcd: disconnect device [ 803.144784] FAULT_INJECTION: forcing a failure. [ 803.144784] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 803.164722] CPU: 0 PID: 2628 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 803.172553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 803.181918] Call Trace: [ 803.184526] dump_stack+0x22c/0x33e [ 803.188216] should_fail.cold+0xa/0x2f [ 803.192117] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 803.197357] __alloc_pages_nodemask+0x256/0x2a60 [ 803.202140] ? kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 803.207265] ? kvm_vcpu_ioctl+0x493/0xe30 [ 803.211522] ? do_vfs_ioctl+0xcdb/0x12e0 [ 803.215605] ? ksys_ioctl+0x9b/0xc0 [ 803.219245] ? __x64_sys_ioctl+0x6f/0xb0 [ 803.223312] ? do_syscall_64+0xf9/0x670 [ 803.227276] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 803.232651] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 803.237414] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 803.242004] ? rcu_nmi_exit+0x102/0x220 [ 803.246037] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 803.250916] ? retint_kernel+0x2d/0x2d [ 803.254793] ? should_fail+0x142/0x7d8 [ 803.258774] ? fs_reclaim_release+0xd0/0x110 [ 803.263188] alloc_pages_current+0x19d/0x2c0 [ 803.267588] __get_free_pages+0x8/0x40 [ 803.271475] mmu_topup_memory_caches+0x1d6/0x360 [ 803.276238] kvm_mmu_load+0x1e/0x1010 [ 803.280166] ? kvm_vcpu_reload_apic_access_page+0x1c4/0x370 [ 803.285868] ? __sanitizer_cov_trace_pc+0x2e/0x50 [ 803.290730] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 803.295656] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 803.300241] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 803.305000] ? find_held_lock+0x2d/0x110 [ 803.309048] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 803.313875] ? get_task_pid+0x19d/0x320 [ 803.317846] ? lock_downgrade+0x750/0x750 [ 803.321987] ? check_preemption_disabled+0x41/0x2b0 [ 803.326993] ? kvm_vcpu_ioctl+0x493/0xe30 [ 803.331125] kvm_vcpu_ioctl+0x493/0xe30 [ 803.335107] ? kvm_get_dirty_log+0x590/0x590 [ 803.339505] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 803.344249] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 803.348836] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 803.353581] ? rcu_nmi_exit+0x102/0x220 [ 803.357558] ? retint_kernel+0x2d/0x2d [ 803.361436] ? kvm_get_dirty_log+0x590/0x590 [ 803.365838] do_vfs_ioctl+0xcdb/0x12e0 [ 803.369739] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 803.374921] ? ioctl_preallocate+0x200/0x200 [ 803.379337] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 803.384787] ? __fget+0x3ad/0x570 [ 803.388230] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 803.392475] ksys_ioctl+0x9b/0xc0 [ 803.395933] __x64_sys_ioctl+0x6f/0xb0 [ 803.399825] do_syscall_64+0xf9/0x670 [ 803.403628] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 803.408804] RIP: 0033:0x45de59 [ 803.411995] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 803.430901] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 803.438604] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 803.445871] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 803.453133] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 803.460393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000028 [ 803.467660] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:17:39 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x40}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xb7860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:17:39 executing program 3 (fault-call:8 fault-nth:41): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:17:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xb8860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 804.834716] FAULT_INJECTION: forcing a failure. [ 804.834716] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 804.857707] CPU: 0 PID: 2679 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 804.865559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 804.874932] Call Trace: [ 804.877533] dump_stack+0x22c/0x33e [ 804.881178] should_fail.cold+0xa/0x2f [ 804.885102] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 804.890225] __alloc_pages_nodemask+0x256/0x2a60 [ 804.894995] ? kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 804.900122] ? kvm_vcpu_ioctl+0x493/0xe30 [ 804.904280] ? do_vfs_ioctl+0xcdb/0x12e0 [ 804.908341] ? ksys_ioctl+0x9b/0xc0 [ 804.911972] ? __x64_sys_ioctl+0x6f/0xb0 [ 804.916041] ? do_syscall_64+0xf9/0x670 [ 804.920013] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 804.925390] ? mark_held_locks+0xf0/0xf0 [ 804.929453] ? mark_held_locks+0xa6/0xf0 [ 804.933505] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 804.938346] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 804.942914] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 804.947676] ? rcu_nmi_exit+0x102/0x220 [ 804.951641] ? retint_kernel+0x2d/0x2d [ 804.955533] alloc_pages_current+0x19d/0x2c0 [ 804.959948] __get_free_pages+0x8/0x40 [ 804.963834] mmu_topup_memory_caches+0x1d6/0x360 [ 804.968595] kvm_mmu_load+0x1e/0x1010 [ 804.972391] ? kvm_arch_vcpu_ioctl_run+0x1b14/0x6c10 [ 804.978375] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 804.983324] ? mark_held_locks+0xa6/0xf0 [ 804.987397] ? find_held_lock+0x2d/0x110 [ 804.991477] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 804.996321] ? get_task_pid+0x19d/0x320 [ 805.000388] ? lock_downgrade+0x750/0x750 [ 805.004532] ? check_preemption_disabled+0x41/0x2b0 [ 805.009545] ? kvm_vcpu_ioctl+0x493/0xe30 [ 805.013681] kvm_vcpu_ioctl+0x493/0xe30 [ 805.017648] ? kvm_get_dirty_log+0x590/0x590 [ 805.022058] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 805.026820] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 805.031426] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 805.036186] ? rcu_nmi_exit+0x102/0x220 [ 805.040153] ? retint_kernel+0x2d/0x2d [ 805.044119] ? do_vfs_ioctl+0xc7c/0x12e0 [ 805.048164] ? kvm_get_dirty_log+0x590/0x590 [ 805.052561] do_vfs_ioctl+0xcdb/0x12e0 [ 805.056460] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 805.061652] ? ioctl_preallocate+0x200/0x200 [ 805.066052] ? setattr_copy+0x13e/0x5c0 [ 805.070103] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 805.075551] ? __fget+0x3ad/0x570 [ 805.079012] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 805.083272] ksys_ioctl+0x9b/0xc0 [ 805.086719] __x64_sys_ioctl+0x6f/0xb0 [ 805.090622] do_syscall_64+0xf9/0x670 [ 805.094442] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 805.099726] RIP: 0033:0x45de59 [ 805.102904] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 805.121807] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 805.129504] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 805.136776] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 805.144042] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 805.151742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000029 [ 805.159015] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:17:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xb9860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:17:40 executing program 3 (fault-call:8 fault-nth:42): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:17:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xba860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 805.599408] FAULT_INJECTION: forcing a failure. [ 805.599408] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 805.628670] CPU: 0 PID: 2761 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 805.636509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 805.645865] Call Trace: [ 805.648466] dump_stack+0x22c/0x33e [ 805.652111] should_fail.cold+0xa/0x2f [ 805.656012] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 805.661134] __alloc_pages_nodemask+0x256/0x2a60 [ 805.665905] ? kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 805.671016] ? kvm_vcpu_ioctl+0x493/0xe30 [ 805.675170] ? do_vfs_ioctl+0xcdb/0x12e0 [ 805.679236] ? ksys_ioctl+0x9b/0xc0 [ 805.682868] ? __x64_sys_ioctl+0x6f/0xb0 [ 805.686938] ? do_syscall_64+0xf9/0x670 [ 805.690921] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 805.696381] ? mark_held_locks+0xa6/0xf0 [ 805.700447] ? mark_held_locks+0xf0/0xf0 [ 805.704523] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 805.709300] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 805.714160] ? retint_kernel+0x2d/0x2d [ 805.718077] ? should_fail+0x142/0x7d8 [ 805.721971] ? fs_reclaim_release+0xd0/0x110 [ 805.726404] alloc_pages_current+0x19d/0x2c0 [ 805.730828] __get_free_pages+0x8/0x40 [ 805.734723] mmu_topup_memory_caches+0x1d6/0x360 [ 805.739524] kvm_mmu_load+0x1e/0x1010 [ 805.743341] ? kvm_arch_vcpu_ioctl_run+0x1da3/0x6c10 16:17:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xbb860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 805.748454] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 805.753397] ? mark_held_locks+0xa6/0xf0 [ 805.757562] ? find_held_lock+0x2d/0x110 [ 805.761634] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 805.766512] ? get_task_pid+0x19d/0x320 [ 805.770501] ? lock_downgrade+0x750/0x750 [ 805.774692] ? check_preemption_disabled+0x41/0x2b0 [ 805.779746] ? kvm_vcpu_ioctl+0x493/0xe30 [ 805.783896] kvm_vcpu_ioctl+0x493/0xe30 [ 805.787877] ? kvm_get_dirty_log+0x590/0x590 [ 805.792298] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 805.797306] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 805.802015] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 805.806810] ? rcu_nmi_exit+0x102/0x220 [ 805.810795] ? retint_kernel+0x2d/0x2d [ 805.814704] ? do_vfs_ioctl+0xbd/0x12e0 [ 805.818684] ? kvm_get_dirty_log+0x590/0x590 [ 805.823105] do_vfs_ioctl+0xcdb/0x12e0 [ 805.827003] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 805.832219] ? ioctl_preallocate+0x200/0x200 [ 805.836639] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 805.842099] ? __fget+0x3ad/0x570 [ 805.845573] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 805.849815] ? rcu_nmi_exit+0x102/0x220 [ 805.853811] ksys_ioctl+0x9b/0xc0 [ 805.857269] __x64_sys_ioctl+0x6f/0xb0 [ 805.861167] do_syscall_64+0xf9/0x670 [ 805.865000] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 805.870193] RIP: 0033:0x45de59 [ 805.873394] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 805.892329] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 805.900068] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 805.907371] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 805.914651] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 805.921927] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002a [ 805.929313] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:17:41 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x7, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x57}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:41 executing program 3 (fault-call:8 fault-nth:43): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:17:41 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x4c}}, 0x1) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000880) wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SNDCTL_MIDI_INFO(0xffffffffffffffff, 0xc074510c, &(0x7f0000000140)={"a598a2a27562ce353165dd6b612ee2323a7519f393849e71688a997ed858", 0xfd29, 0x635, 0x48000, [0x400, 0xbff3, 0x0, 0x4, 0x8, 0x10000, 0xff, 0x200, 0xd913, 0x7, 0xfffff9e9, 0x21c8, 0x800000, 0xfffffffd, 0x2, 0x0, 0x50000000, 0x8]}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xbc860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 806.205209] FAULT_INJECTION: forcing a failure. [ 806.205209] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 806.218476] CPU: 0 PID: 2882 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 806.226298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 806.235661] Call Trace: [ 806.238265] dump_stack+0x22c/0x33e [ 806.241937] should_fail.cold+0xa/0x2f [ 806.245847] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 806.250975] __alloc_pages_nodemask+0x256/0x2a60 [ 806.255750] ? kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 806.260870] ? kvm_vcpu_ioctl+0x493/0xe30 [ 806.265027] ? do_vfs_ioctl+0xcdb/0x12e0 [ 806.269104] ? ksys_ioctl+0x9b/0xc0 [ 806.272738] ? __x64_sys_ioctl+0x6f/0xb0 [ 806.276807] ? do_syscall_64+0xf9/0x670 [ 806.280793] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 806.286197] ? mark_held_locks+0xf0/0xf0 [ 806.290268] ? mark_held_locks+0xa6/0xf0 [ 806.294351] ? mark_held_locks+0xa6/0xf0 [ 806.298422] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 806.303279] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 806.307880] ? should_fail+0x142/0x7d8 [ 806.311798] ? fs_reclaim_release+0xd0/0x110 [ 806.316237] alloc_pages_current+0x19d/0x2c0 [ 806.320686] __get_free_pages+0x8/0x40 [ 806.324635] mmu_topup_memory_caches+0x1d6/0x360 [ 806.329418] kvm_mmu_load+0x1e/0x1010 [ 806.333234] ? kvm_arch_vcpu_ioctl_run+0x199d/0x6c10 [ 806.338354] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 806.343303] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 806.348117] ? find_held_lock+0x2d/0x110 [ 806.352228] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 806.357075] ? get_task_pid+0x19d/0x320 [ 806.361154] ? lock_downgrade+0x750/0x750 [ 806.365308] ? check_preemption_disabled+0x41/0x2b0 [ 806.370324] ? kvm_vcpu_ioctl+0x493/0xe30 [ 806.374475] kvm_vcpu_ioctl+0x493/0xe30 [ 806.379057] ? kvm_get_dirty_log+0x590/0x590 [ 806.383470] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 806.388242] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 806.393104] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 806.397858] ? rcu_nmi_exit+0x102/0x220 [ 806.401821] ? retint_kernel+0x2d/0x2d [ 806.405713] ? kvm_get_dirty_log+0x590/0x590 [ 806.410130] do_vfs_ioctl+0xcdb/0x12e0 [ 806.414752] ? selinux_file_ioctl+0x32e/0x5e0 [ 806.419265] ? ioctl_preallocate+0x200/0x200 [ 806.423716] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 806.429165] ? __fget+0x3ad/0x570 [ 806.432622] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 806.436907] ksys_ioctl+0x9b/0xc0 [ 806.440380] __x64_sys_ioctl+0x6f/0xb0 [ 806.444265] do_syscall_64+0xf9/0x670 [ 806.448068] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 806.453254] RIP: 0033:0x45de59 [ 806.456447] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 806.476320] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 806.484468] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 806.494950] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 806.502232] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 806.509601] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002b [ 806.516882] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:17:42 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x40}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:42 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x2) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0xd, &(0x7f0000000140)={r3}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={r3, @in={{0x2, 0x4e21, @multicast1}}, 0x401, 0xcf450424, 0x7, 0x8, 0x9}, &(0x7f0000000080)=0x98) wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01f41056bb00deaa4d7a6210492ca21fb90800000000000000000000160000000000010000000000010000000000000000000000000000000300000000000000000000000000000000000000000000000100"/111], 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0xfffffffffffff85, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:42 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0xdfde03654516561b, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000004400000044000000080000000000000000000008000000000000000000fcff000000000000000000000000000000000300000000040000000000000000000000000000000000000100"/100], 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f0000000180)={0xa, 0x4}, 0xc) r4 = dup(r1) ioprio_set$uid(0x3, 0x0, 0x4004) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ioctl$TUNSETVNETLE(r4, 0x400454dc, &(0x7f0000000080)) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ioctl$SOUND_MIXER_READ_VOLUME(r4, 0x80044d0b, &(0x7f0000000140)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xbd860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:17:42 executing program 3 (fault-call:8 fault-nth:44): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 807.833809] FAULT_INJECTION: forcing a failure. [ 807.833809] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 807.859343] CPU: 1 PID: 2934 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 807.867180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 807.876544] Call Trace: [ 807.879144] dump_stack+0x22c/0x33e 16:17:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xbe860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 807.882818] should_fail.cold+0xa/0x2f [ 807.886723] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 807.891858] __alloc_pages_nodemask+0x256/0x2a60 [ 807.896629] ? kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 807.901743] ? kvm_vcpu_ioctl+0x493/0xe30 [ 807.905934] ? do_vfs_ioctl+0xcdb/0x12e0 [ 807.910000] ? ksys_ioctl+0x9b/0xc0 [ 807.913634] ? __x64_sys_ioctl+0x6f/0xb0 [ 807.917709] ? do_syscall_64+0xf9/0x670 [ 807.921727] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 807.927118] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 807.931893] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 807.937705] ? mark_held_locks+0xa6/0xf0 [ 807.941784] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 807.946590] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 807.951367] ? rcu_nmi_exit+0x102/0x220 [ 807.955358] ? retint_kernel+0x2d/0x2d [ 807.959263] alloc_pages_current+0x19d/0x2c0 [ 807.963683] __get_free_pages+0x8/0x40 [ 807.967618] mmu_topup_memory_caches+0x1d6/0x360 [ 807.972399] kvm_mmu_load+0x1e/0x1010 [ 807.976215] ? kvm_arch_vcpu_ioctl_run+0x2c9a/0x6c10 16:17:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xbf860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 807.981341] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 807.986375] ? mark_held_locks+0xa6/0xf0 [ 807.990459] ? find_held_lock+0x2d/0x110 [ 807.994534] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 807.999411] ? get_task_pid+0x19d/0x320 [ 808.003462] ? lock_downgrade+0x750/0x750 [ 808.007626] ? check_preemption_disabled+0x41/0x2b0 [ 808.012688] ? kvm_vcpu_ioctl+0x493/0xe30 [ 808.016844] kvm_vcpu_ioctl+0x493/0xe30 [ 808.020830] ? kvm_get_dirty_log+0x590/0x590 [ 808.025284] ? mark_held_locks+0xf0/0xf0 [ 808.029384] ? proc_fail_nth_write+0x95/0x1d0 16:17:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xc0860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 808.033894] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 808.038906] ? find_held_lock+0x2d/0x110 [ 808.043984] ? kvm_get_dirty_log+0x590/0x590 [ 808.048414] do_vfs_ioctl+0xcdb/0x12e0 [ 808.052502] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 808.057711] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 808.062507] ? ioctl_preallocate+0x200/0x200 [ 808.066927] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 808.071524] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 808.076294] ? rcu_nmi_exit+0x102/0x220 [ 808.080287] ? retint_kernel+0x2d/0x2d [ 808.084221] ? ksys_ioctl+0x58/0xc0 [ 808.087867] ksys_ioctl+0x9b/0xc0 [ 808.091357] __x64_sys_ioctl+0x6f/0xb0 [ 808.095252] do_syscall_64+0xf9/0x670 [ 808.099073] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 808.104271] RIP: 0033:0x45de59 [ 808.107491] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 808.126428] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 808.134144] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 808.141589] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 808.148869] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 808.156134] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002c [ 808.163396] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:17:44 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x7, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x57}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xc1860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:17:44 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @typedef={0x4, 0x0, 0x0, 0x8, 0x1}, @ptr={0x6, 0x0, 0x0, 0x2, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x55}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0xfffffffffffffe68) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:44 executing program 3 (fault-call:8 fault-nth:45): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 809.170680] FAULT_INJECTION: forcing a failure. [ 809.170680] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 809.183598] CPU: 1 PID: 3147 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 809.191410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 809.200771] Call Trace: [ 809.203397] dump_stack+0x22c/0x33e [ 809.207164] should_fail.cold+0xa/0x2f [ 809.211059] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 809.216160] __alloc_pages_nodemask+0x256/0x2a60 [ 809.220920] ? kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 809.226027] ? kvm_vcpu_ioctl+0x493/0xe30 [ 809.230187] ? do_vfs_ioctl+0xcdb/0x12e0 [ 809.234235] ? ksys_ioctl+0x9b/0xc0 [ 809.237863] ? __x64_sys_ioctl+0x6f/0xb0 [ 809.241913] ? do_syscall_64+0xf9/0x670 [ 809.245911] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 809.251286] ? mark_held_locks+0xa6/0xf0 [ 809.255357] ? mark_held_locks+0xf0/0xf0 [ 809.259434] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 809.264182] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 809.269018] ? rcu_nmi_exit+0x102/0x220 [ 809.272994] ? retint_kernel+0x2d/0x2d [ 809.276893] alloc_pages_current+0x19d/0x2c0 [ 809.281318] __get_free_pages+0x8/0x40 [ 809.285212] mmu_topup_memory_caches+0x1d6/0x360 [ 809.289980] kvm_mmu_load+0x1e/0x1010 [ 809.293779] ? kvm_arch_vcpu_ioctl_run+0x1e9b/0x6c10 [ 809.298890] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 809.304212] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 809.308971] ? find_held_lock+0x2d/0x110 [ 809.313043] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 809.317887] ? get_task_pid+0x19d/0x320 [ 809.321997] ? lock_downgrade+0x750/0x750 [ 809.326163] ? check_preemption_disabled+0x41/0x2b0 [ 809.331207] ? kvm_vcpu_ioctl+0x493/0xe30 [ 809.335379] kvm_vcpu_ioctl+0x493/0xe30 [ 809.339357] ? kvm_get_dirty_log+0x590/0x590 [ 809.343757] ? mark_held_locks+0xf0/0xf0 [ 809.347805] ? proc_fail_nth_write+0x95/0x1d0 [ 809.352304] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 809.357237] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 809.362003] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 809.366609] ? find_held_lock+0x2d/0x110 [ 809.370688] ? kvm_get_dirty_log+0x590/0x590 [ 809.375087] do_vfs_ioctl+0xcdb/0x12e0 [ 809.378978] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 809.384159] ? ioctl_preallocate+0x200/0x200 [ 809.388576] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 809.394034] ? __fget+0x3ad/0x570 [ 809.397496] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 809.401720] ? rcu_nmi_exit+0x102/0x220 [ 809.405705] ksys_ioctl+0x9b/0xc0 [ 809.409154] __x64_sys_ioctl+0x6f/0xb0 [ 809.413055] do_syscall_64+0xf9/0x670 [ 809.416862] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 809.422420] RIP: 0033:0x45de59 [ 809.425611] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 809.444502] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 809.452216] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 809.459498] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 809.466782] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 809.474050] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002d [ 809.482016] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:17:45 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x40}, 0x20) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xc2860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:17:45 executing program 3 (fault-call:8 fault-nth:46): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:17:45 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f00000002c0)) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180000000000000044000000440000000800000000000000000000080000f9000000000000000001000000000000000000000000000000030000000000000000000000000000000000000000000000010000000000000000000000000000000051701621cbf2b866c21279b52ee9e85ee7993f771d70cd5e5eb1c980ddef85bab70dae1dc50c84f20d88fd754823a205196d08"], 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000500)="623fa07849c040278af0a22f5477bc60f91d652933aaf65b9688e4579e2b1353bb6ea2fc761ab6e26441f8680943e87d2b245dfd780d019fdc1abd87d331c3e614434d4ec1eb2cc706242a99f68ecfa78d51daf3c9cd112c4a54e383f4610944126489c33b2a1da0f6a3f5edf9fe25e68ea4dc6aad8fba65cff2e9733af69a582562edc9d1ef4b008453ca55312b1b4b1cef", 0x92}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc145b8d1efb1ffe03284f6d33265be9c6041a0a927d589e02f37ed517ed4cb007c893f20e96beeb2aa4", 0x45}, {&(0x7f0000000440)="60b74fe73dddba1127958d4739b66cb90c7968becd3c8daaae8caf21dca3dd122f057ad9eb8925e111704f4f6cb41bde52a6b9263ccfce7575ec26fdd1dc7b4e02969f91a7c8476fe9b3ad92f89bc0a6fd8ee91fec860fe52238dd8be0e8a9950ffe", 0x62}], 0x3, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r3}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0xffffffe0, @empty, 0x20}]}, &(0x7f0000000280)=0x10) tkill(r1, 0x33) ptrace$setregs(0xd, 0xffffffffffffffff, 0x9, &(0x7f0000000600)="65782c97c0b3767ac2c7b70f63b486f12ef28f9ea5d4a0e27ead03f31527348f8465091d2cc8a3d59b84f5687759933850bab39d3cebecba185d79220f9644f5112c7d9eb14c47b6adad4616f7095b73dd7d1b3fc9f6534a45a971aeb6ab135a19d1f73128b5cfd13b5fcdada8357bd0efc82a54b1c3612fd4247cda0cb8097c57d9a6ca6dc70ec1939f1cf1600083da3b1364af1857028f020ae6f262c00f5ea188431d949fa4df06db2d334c5de910d5b22be8afd59dcd0c0f7b2b9aa5771c0e58") setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000140), 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000300)={0x9be, 0x20c, 0x4f, 0x4}, &(0x7f0000000340)=0x10) ptrace$cont(0x7, r1, 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000080)={'syz_tun\x00', {0x2, 0x0, @local}}) [ 810.917564] FAULT_INJECTION: forcing a failure. [ 810.917564] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 810.943169] CPU: 1 PID: 3205 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 810.950999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 810.960365] Call Trace: [ 810.962973] dump_stack+0x22c/0x33e 16:17:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xc3860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 810.966615] should_fail.cold+0xa/0x2f [ 810.970564] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 810.975692] __alloc_pages_nodemask+0x256/0x2a60 [ 810.980467] ? finish_task_switch+0x29c/0x8b0 [ 810.984981] ? mark_held_locks+0xa6/0xf0 [ 810.989152] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 810.994007] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 810.998686] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 811.003455] ? rcu_nmi_exit+0x102/0x220 [ 811.007454] ? retint_kernel+0x2d/0x2d [ 811.011358] ? alloc_pages_current+0x42/0x2c0 [ 811.015863] alloc_pages_current+0x19d/0x2c0 [ 811.020510] __get_free_pages+0x8/0x40 [ 811.024422] mmu_topup_memory_caches+0x1d6/0x360 [ 811.029197] kvm_mmu_load+0x1e/0x1010 [ 811.033016] ? kvm_arch_vcpu_ioctl_run+0x3147/0x6c10 [ 811.038141] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 811.043087] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 811.047860] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 811.052475] ? find_held_lock+0x2d/0x110 [ 811.056580] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 811.061442] ? get_task_pid+0x19d/0x320 [ 811.065446] ? lock_downgrade+0x750/0x750 [ 811.069610] ? check_preemption_disabled+0x41/0x2b0 [ 811.074659] ? kvm_vcpu_ioctl+0x493/0xe30 [ 811.078818] kvm_vcpu_ioctl+0x493/0xe30 [ 811.082811] ? kvm_get_dirty_log+0x590/0x590 [ 811.087239] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 811.092015] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 811.096612] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 811.101384] ? rcu_nmi_exit+0x102/0x220 [ 811.105393] ? retint_kernel+0x2d/0x2d [ 811.109313] ? kvm_get_dirty_log+0x590/0x590 [ 811.113741] do_vfs_ioctl+0xcdb/0x12e0 16:17:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xc4860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 811.117681] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 811.122888] ? ioctl_preallocate+0x200/0x200 [ 811.127315] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 811.132804] ? __fget+0x3ad/0x570 [ 811.136300] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 811.141172] ? rcu_nmi_exit+0x102/0x220 [ 811.145175] ksys_ioctl+0x9b/0xc0 [ 811.148652] __x64_sys_ioctl+0x6f/0xb0 [ 811.153431] do_syscall_64+0xf9/0x670 [ 811.157272] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 811.162506] RIP: 0033:0x45de59 [ 811.165715] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 811.184625] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 811.192342] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 811.199621] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 811.206991] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 16:17:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xc5860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 811.214270] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002e [ 811.221665] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:17:46 executing program 3 (fault-call:8 fault-nth:47): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 811.405595] FAULT_INJECTION: forcing a failure. [ 811.405595] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 811.419536] CPU: 1 PID: 3375 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 811.427375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 811.436736] Call Trace: [ 811.439324] dump_stack+0x22c/0x33e [ 811.442991] should_fail.cold+0xa/0x2f [ 811.446889] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 811.451991] __alloc_pages_nodemask+0x256/0x2a60 [ 811.456739] ? kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 811.461841] ? kvm_vcpu_ioctl+0x493/0xe30 [ 811.466004] ? do_vfs_ioctl+0xcdb/0x12e0 [ 811.470074] ? ksys_ioctl+0x9b/0xc0 [ 811.473707] ? __x64_sys_ioctl+0x6f/0xb0 [ 811.477772] ? do_syscall_64+0xf9/0x670 [ 811.481796] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 811.487172] ? mark_held_locks+0xf0/0xf0 [ 811.491223] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 811.495797] ? rcu_nmi_exit+0x102/0x220 [ 811.501002] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 811.505859] ? retint_kernel+0x2d/0x2d [ 811.509749] ? should_fail+0x142/0x7d8 [ 811.513633] ? fs_reclaim_release+0xd0/0x110 [ 811.518046] alloc_pages_current+0x19d/0x2c0 [ 811.522461] __get_free_pages+0x8/0x40 [ 811.526347] mmu_topup_memory_caches+0x1d6/0x360 [ 811.531108] kvm_mmu_load+0x1e/0x1010 [ 811.534917] ? kvm_arch_vcpu_ioctl_run+0x323d/0x6c10 [ 811.540028] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 811.545058] ? mark_held_locks+0xf0/0xf0 [ 811.549123] ? mark_held_locks+0xa6/0xf0 [ 811.553188] ? find_held_lock+0x2d/0x110 [ 811.557250] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 811.562102] ? get_task_pid+0x19d/0x320 [ 811.566080] ? lock_downgrade+0x750/0x750 [ 811.570231] ? check_preemption_disabled+0x41/0x2b0 [ 811.575242] ? kvm_vcpu_ioctl+0x493/0xe30 [ 811.579375] kvm_vcpu_ioctl+0x493/0xe30 [ 811.583349] ? kvm_get_dirty_log+0x590/0x590 [ 811.587780] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 811.592542] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 811.597130] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 811.601876] ? retint_kernel+0x2d/0x2d [ 811.605809] ? kvm_get_dirty_log+0x590/0x590 [ 811.610255] do_vfs_ioctl+0xcdb/0x12e0 [ 811.614169] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 811.619370] ? ioctl_preallocate+0x200/0x200 [ 811.623776] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 811.629221] ? __fget+0x3ad/0x570 [ 811.632673] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 811.636902] ? rcu_nmi_exit+0x102/0x220 [ 811.640869] ksys_ioctl+0x9b/0xc0 [ 811.644335] __x64_sys_ioctl+0x6f/0xb0 [ 811.648232] do_syscall_64+0xf9/0x670 [ 811.652042] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 811.657218] RIP: 0033:0x45de59 [ 811.660404] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 811.679319] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 811.687023] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 811.694305] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 811.701578] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 811.708851] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002f [ 811.716119] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:17:47 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x7, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x57}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xc6860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:17:47 executing program 3 (fault-call:8 fault-nth:48): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:17:47 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000004400000044000000000000000000000000000008000000000000000000000001000000000000000000000000000000030000000000000000000000000000000000000000000000010000000000000000feaf30807e7e62d8d7661859b52c5f2335ae38bc39f93d83a1311310800d6ffdb6917ea533f6cd9f7520070724ed993ad96f64cde3c707175cfcb495f63dd06dd1625d45a4c1b5dbed9bd648c4b9b44246ea8ab9c30d75e188c8a513c552f12500acb9f5ad48"], 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xf, 0x0, 0x0, &(0x7f0000000480)="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") ptrace$cont(0x7, r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x1a, 0x7, 0x2, 0x3, 0x0, r2, 0x80, [], 0x0, r2, 0x4, 0x1, 0x4}, 0x40) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e24, @remote}], 0x10) getpeername(r1, &(0x7f0000000140)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000000240)=0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0) [ 812.226157] FAULT_INJECTION: forcing a failure. [ 812.226157] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 812.260992] CPU: 0 PID: 3394 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 812.268829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 812.278192] Call Trace: [ 812.280801] dump_stack+0x22c/0x33e [ 812.284443] should_fail.cold+0xa/0x2f [ 812.288345] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 812.293484] __alloc_pages_nodemask+0x256/0x2a60 [ 812.298251] ? kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 812.303364] ? kvm_vcpu_ioctl+0x493/0xe30 [ 812.307512] ? do_vfs_ioctl+0xcdb/0x12e0 [ 812.311566] ? ksys_ioctl+0x9b/0xc0 [ 812.315186] ? __x64_sys_ioctl+0x6f/0xb0 [ 812.319352] ? do_syscall_64+0xf9/0x670 [ 812.323370] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 812.330739] ? mark_held_locks+0xf0/0xf0 [ 812.334809] ? mark_held_locks+0xa6/0xf0 [ 812.338898] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 812.343843] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 812.348437] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 812.353218] ? rcu_nmi_exit+0x102/0x220 [ 812.357190] ? retint_kernel+0x2d/0x2d [ 812.361087] ? alloc_pages_current+0x42/0x2c0 [ 812.365572] alloc_pages_current+0x19d/0x2c0 [ 812.370063] __get_free_pages+0x8/0x40 [ 812.373948] mmu_topup_memory_caches+0x1d6/0x360 [ 812.378706] kvm_mmu_load+0x1e/0x1010 [ 812.382514] ? kvm_arch_vcpu_ioctl_run+0x1f64/0x6c10 [ 812.387644] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 812.392733] ? mark_held_locks+0xa6/0xf0 [ 812.396798] ? find_held_lock+0x2d/0x110 [ 812.400846] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 812.405675] ? get_task_pid+0x19d/0x320 [ 812.409655] ? lock_downgrade+0x750/0x750 [ 812.413817] ? check_preemption_disabled+0x41/0x2b0 [ 812.418830] ? kvm_vcpu_ioctl+0x493/0xe30 [ 812.422969] kvm_vcpu_ioctl+0x493/0xe30 [ 812.426945] ? kvm_get_dirty_log+0x590/0x590 [ 812.431343] ? get_pid_task+0x135/0x1c0 [ 812.435318] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 812.440106] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 812.444706] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 812.449459] ? rcu_nmi_exit+0x102/0x220 [ 812.453457] ? retint_kernel+0x2d/0x2d [ 812.457361] ? kvm_get_dirty_log+0x590/0x590 [ 812.461755] do_vfs_ioctl+0xcdb/0x12e0 [ 812.465632] ? selinux_file_ioctl+0x263/0x5e0 [ 812.470114] ? ioctl_preallocate+0x200/0x200 [ 812.474517] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 812.479968] ? __fget+0x3ad/0x570 [ 812.483428] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 812.487710] ksys_ioctl+0x9b/0xc0 [ 812.491156] __x64_sys_ioctl+0x6f/0xb0 [ 812.495047] do_syscall_64+0xf9/0x670 [ 812.498848] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 812.504046] RIP: 0033:0x45de59 [ 812.507251] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 812.526142] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 812.533849] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 812.541119] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 812.549161] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 812.556430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000030 [ 812.563731] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:17:49 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x40}, 0x20) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:49 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int={0xc}, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xc7860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:17:49 executing program 3 (fault-call:8 fault-nth:49): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:17:49 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000440000004400000008000000000000000000000800000000000000000000000100000000000000000000000000000003000000000000000000000000000000000000000000000001000000000000000000000014000000001eb833d485410b19f75a470aaec131235cba43608cef6928702bf9f6e747077ff7c02bdc5c8dad3db6be71fcce0206c96187789a0fd1e2358721feeac2bfb67c585196ae06ed716d6b05300f00a1e6507250ab46725339974a816f439c089ed1e5aa63a89406870bd37afd0ac45e0bf53fd7dacfdf52536eb669ab0a2af83b7b195d8afce41f0a"], 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000140)="acb480069b6d5cf42b26d1167e78ab456b53f209110820c0ad6e687de7157812615a9064440623648e05841fa2014d8ec368ee24258f0638124ad646b8c274eef76c9e3c349544afd9b5ae57ecee7420173747b586d3") syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x4, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x0, 0xb, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x9, 0x1, '.[\x03\xb0\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x51) 16:17:49 executing program 4: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000045ff671edafd8fa4ad2fff0000000008400000005f00005f005f00a9fa5bb2576c4123b3672f81cf6889c57d65550f271846d02f896895a6d9e5"], 0x0, 0x20}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ioctl$CHAR_RAW_FLSBUF(r3, 0x1261, &(0x7f0000000200)=0x8) tkill(r1, 0x33) syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x0, 0x2) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 16:17:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xc8860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:17:49 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x24, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x401}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1c20}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x4002) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 814.011223] ptrace attach of "/root/syz-executor.4"[3499] was attempted by "/root/syz-executor.4"[3500] [ 814.018162] FAULT_INJECTION: forcing a failure. [ 814.018162] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 814.035649] CPU: 1 PID: 3453 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 814.043599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 814.053046] Call Trace: [ 814.055654] dump_stack+0x22c/0x33e [ 814.059332] should_fail.cold+0xa/0x2f [ 814.063239] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 814.068374] __alloc_pages_nodemask+0x256/0x2a60 [ 814.073156] ? kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 814.078275] ? kvm_vcpu_ioctl+0x493/0xe30 [ 814.082454] ? do_vfs_ioctl+0xcdb/0x12e0 [ 814.086577] ? ksys_ioctl+0x9b/0xc0 [ 814.090311] ? __x64_sys_ioctl+0x6f/0xb0 [ 814.094409] ? do_syscall_64+0xf9/0x670 [ 814.098411] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 814.103973] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 814.108765] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 814.113473] ? mark_held_locks+0xa6/0xf0 [ 814.117578] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 814.122442] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 814.127335] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 814.132465] ? rcu_nmi_exit+0x102/0x220 [ 814.136512] ? retint_kernel+0x2d/0x2d [ 814.140432] ? alloc_pages_current+0x35/0x2c0 [ 814.144954] alloc_pages_current+0x19d/0x2c0 [ 814.149413] __get_free_pages+0x8/0x40 [ 814.154816] mmu_topup_memory_caches+0x1d6/0x360 [ 814.159600] kvm_mmu_load+0x1e/0x1010 [ 814.163430] ? kvm_cpu_has_injectable_intr+0xc/0x3c0 [ 814.168909] ? __sanitizer_cov_trace_pc+0x2e/0x50 [ 814.173877] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 814.178862] ? mark_held_locks+0xa6/0xf0 [ 814.183039] ? find_held_lock+0x2d/0x110 [ 814.187115] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 814.191978] ? get_task_pid+0x19d/0x320 [ 814.195976] ? lock_downgrade+0x750/0x750 [ 814.200138] ? check_preemption_disabled+0x41/0x2b0 [ 814.205176] ? kvm_vcpu_ioctl+0x493/0xe30 [ 814.209692] kvm_vcpu_ioctl+0x493/0xe30 [ 814.213679] ? kvm_get_dirty_log+0x590/0x590 [ 814.223098] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 814.227911] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 814.232497] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 814.237261] ? rcu_nmi_exit+0x102/0x220 [ 814.241256] ? retint_kernel+0x2d/0x2d [ 814.245136] ? kvm_get_dirty_log+0x590/0x590 [ 814.249545] ? kvm_get_dirty_log+0x590/0x590 [ 814.254345] do_vfs_ioctl+0xcdb/0x12e0 [ 814.258552] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 814.263769] ? ioctl_preallocate+0x200/0x200 [ 814.268178] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 814.273635] ? __fget+0x3ad/0x570 [ 814.277086] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 814.281320] ksys_ioctl+0x9b/0xc0 [ 814.284788] __x64_sys_ioctl+0x6f/0xb0 [ 814.288671] do_syscall_64+0xf9/0x670 [ 814.292475] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 814.297654] RIP: 0033:0x45de59 [ 814.300838] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 814.319749] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 814.327461] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 814.334756] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 814.342050] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 814.349402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000031 [ 814.356840] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:17:50 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xc9860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:17:50 executing program 3 (fault-call:8 fault-nth:50): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 815.235152] FAULT_INJECTION: forcing a failure. [ 815.235152] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 815.249502] CPU: 1 PID: 3551 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 815.257323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 815.266688] Call Trace: [ 815.269311] dump_stack+0x22c/0x33e [ 815.272956] should_fail.cold+0xa/0x2f [ 815.276860] ? fault_create_debugfs_attr+0x1e0/0x1e0 16:17:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xc9871d54, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 815.281991] __alloc_pages_nodemask+0x256/0x2a60 [ 815.286795] ? kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 815.291918] ? kvm_vcpu_ioctl+0x493/0xe30 [ 815.296076] ? do_vfs_ioctl+0xcdb/0x12e0 [ 815.300162] ? ksys_ioctl+0x9b/0xc0 [ 815.303803] ? __x64_sys_ioctl+0x6f/0xb0 [ 815.307882] ? do_syscall_64+0xf9/0x670 [ 815.311871] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 815.317256] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 815.322033] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 815.326812] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 815.331459] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 815.336320] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 815.341091] ? rcu_nmi_exit+0x102/0x220 [ 815.345087] ? policy_node+0xeb/0x140 [ 815.348898] ? audit_add_tree_rule.cold+0x2f/0x2f [ 815.353754] alloc_pages_current+0x19d/0x2c0 [ 815.358166] ? rcu_nmi_exit+0x102/0x220 [ 815.362147] __get_free_pages+0x8/0x40 [ 815.366057] mmu_topup_memory_caches+0x1d6/0x360 [ 815.370848] kvm_mmu_load+0x1e/0x1010 [ 815.374672] ? kvm_cpu_has_injectable_intr+0xc/0x3c0 [ 815.379783] ? kvm_cpu_has_injectable_intr+0x297/0x3c0 [ 815.385054] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 815.389984] ? mark_held_locks+0xf0/0xf0 [ 815.394054] ? find_held_lock+0x2d/0x110 [ 815.398110] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 815.402950] ? get_task_pid+0x19d/0x320 [ 815.406924] ? lock_downgrade+0x750/0x750 [ 815.411073] ? check_preemption_disabled+0x41/0x2b0 [ 815.416076] ? kvm_vcpu_ioctl+0x493/0xe30 [ 815.420218] kvm_vcpu_ioctl+0x493/0xe30 [ 815.424180] ? kvm_get_dirty_log+0x590/0x590 [ 815.428579] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 815.433325] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 815.437914] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 815.442673] ? rcu_nmi_exit+0x102/0x220 [ 815.447353] ? retint_kernel+0x2d/0x2d [ 815.451255] ? kvm_get_dirty_log+0x590/0x590 [ 815.455683] ? kvm_get_dirty_log+0x590/0x590 [ 815.460083] do_vfs_ioctl+0xcdb/0x12e0 [ 815.464237] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 815.469444] ? ioctl_preallocate+0x200/0x200 [ 815.473967] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 815.479508] ? rcu_nmi_exit+0x102/0x220 [ 815.483490] ? retint_kernel+0x2d/0x2d [ 815.487392] ksys_ioctl+0x9b/0xc0 [ 815.490843] __x64_sys_ioctl+0x6f/0xb0 [ 815.494733] do_syscall_64+0xf9/0x670 [ 815.498553] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 815.503759] RIP: 0033:0x45de59 [ 815.506956] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 815.525948] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 815.533660] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 815.540932] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 815.548201] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 815.555460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000032 [ 815.562720] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:17:52 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x40}, 0x20) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xca860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:17:52 executing program 3 (fault-call:8 fault-nth:51): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:17:52 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) read$alg(0xffffffffffffffff, &(0x7f0000000240)=""/165, 0xa5) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018e1ffffff0000004400000044000000080000000000000000000008000000000000000000000001000000005600000000000000000000030000000000000000010000000000000000001e00000000010000000000000000000000000000000052b3d684eb77c99784644f62e5b5ef655cf23977f7acadb7e3d03ff5279fedf9a645a8d3e875d4b727d931e934e8291888295bfb14824f07b15463c7bc9841e71f9b15bced2d541fa784ec201b832abf31838adb968d96a7a3d2"], 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000380)={&(0x7f0000000180), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x4, 0x8, @udp='udp:syz2\x00'}}}}, 0x34}, 0x1, 0x0, 0x0, 0x40c0}, 0x80) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000080)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000140)=0x28) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xc, 0x13, r1, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xcb860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 817.019895] FAULT_INJECTION: forcing a failure. [ 817.019895] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 817.038057] CPU: 1 PID: 3646 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 817.045877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 817.055360] Call Trace: [ 817.057965] dump_stack+0x22c/0x33e [ 817.061612] should_fail.cold+0xa/0x2f 16:17:52 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x24000, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000240)={0xe9, 0x2, 0x4, 0x8, 0x101, {}, {0x1, 0xc, 0x4f, 0x1f, 0x5, 0x9, "1a5f1a31"}, 0x7ff, 0x1, @fd, 0x9, 0x0, r2}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000004400000044000000080000000000000000000008000000000000000000000001000000000000000000000000000000ec00000000000000000000000180000000000000000000000102000000000000060000000000000000da59e61d9811125f65c00d305515f02877402e9ff02189a49da3d346862619beb0d40eb144b6"], 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 817.066030] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 817.071157] __alloc_pages_nodemask+0x256/0x2a60 [ 817.075922] ? kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 817.081053] ? kvm_vcpu_ioctl+0x493/0xe30 [ 817.085249] ? do_vfs_ioctl+0xcdb/0x12e0 [ 817.089407] ? ksys_ioctl+0x9b/0xc0 [ 817.093050] ? __x64_sys_ioctl+0x6f/0xb0 [ 817.097125] ? do_syscall_64+0xf9/0x670 [ 817.101113] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 817.106523] ? mark_held_locks+0xa6/0xf0 [ 817.110596] ? mark_held_locks+0xf0/0xf0 [ 817.114671] ? mark_held_locks+0xa6/0xf0 [ 817.118749] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 817.123609] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 817.128220] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 817.132987] ? rcu_nmi_exit+0x102/0x220 [ 817.136978] ? retint_kernel+0x2d/0x2d [ 817.140892] alloc_pages_current+0x19d/0x2c0 [ 817.145338] __get_free_pages+0x8/0x40 [ 817.149298] mmu_topup_memory_caches+0x1d6/0x360 [ 817.154123] kvm_mmu_load+0x1e/0x1010 [ 817.157952] ? kvm_arch_vcpu_ioctl_run+0x1e69/0x6c10 [ 817.163081] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 16:17:52 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x40, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x52}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1c1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x11e0}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x300008d0}, 0x44000) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 817.168032] ? mark_held_locks+0xa6/0xf0 [ 817.172118] ? find_held_lock+0x2d/0x110 [ 817.176205] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 817.181066] ? get_task_pid+0x19d/0x320 [ 817.185063] ? lock_downgrade+0x750/0x750 [ 817.189229] ? check_preemption_disabled+0x41/0x2b0 [ 817.194287] ? kvm_vcpu_ioctl+0x493/0xe30 [ 817.198481] kvm_vcpu_ioctl+0x493/0xe30 [ 817.202479] ? kvm_get_dirty_log+0x590/0x590 [ 817.206917] ? mark_held_locks+0xf0/0xf0 [ 817.211011] ? proc_fail_nth_write+0x95/0x1d0 [ 817.215533] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 817.220583] ? find_held_lock+0x2d/0x110 [ 817.224662] ? kvm_get_dirty_log+0x590/0x590 [ 817.229112] do_vfs_ioctl+0xcdb/0x12e0 [ 817.233021] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 817.238234] ? ioctl_preallocate+0x200/0x200 [ 817.243183] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 817.248651] ? rcu_note_context_switch+0x350/0x18f0 [ 817.253718] ? retint_kernel+0x2d/0x2d [ 817.257655] ksys_ioctl+0x9b/0xc0 [ 817.261130] __x64_sys_ioctl+0x6f/0xb0 [ 817.265123] do_syscall_64+0xf9/0x670 16:17:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xcc860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 817.268976] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 817.274181] RIP: 0033:0x45de59 [ 817.277391] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 817.296564] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 817.304286] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 817.311680] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 817.318965] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 817.326253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000033 [ 817.333529] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:17:53 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xcd860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:17:53 executing program 3 (fault-call:8 fault-nth:52): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 818.227774] FAULT_INJECTION: forcing a failure. [ 818.227774] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 818.250528] CPU: 0 PID: 3756 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 818.259086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 818.268448] Call Trace: [ 818.271050] dump_stack+0x22c/0x33e [ 818.274698] should_fail.cold+0xa/0x2f [ 818.278602] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 818.283736] __alloc_pages_nodemask+0x256/0x2a60 [ 818.288506] ? kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 818.293643] ? kvm_vcpu_ioctl+0x493/0xe30 [ 818.297802] ? do_vfs_ioctl+0xcdb/0x12e0 [ 818.301877] ? ksys_ioctl+0x9b/0xc0 [ 818.305515] ? __x64_sys_ioctl+0x6f/0xb0 [ 818.309612] ? do_syscall_64+0xf9/0x670 [ 818.313604] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 818.318994] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 818.323792] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 818.328393] ? mark_held_locks+0xa6/0xf0 [ 818.332485] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 818.337323] ? mark_held_locks+0xa6/0xf0 [ 818.341388] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 818.346153] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 818.350905] ? rcu_nmi_exit+0x102/0x220 [ 818.354881] ? retint_kernel+0x2d/0x2d [ 818.358787] alloc_pages_current+0x19d/0x2c0 [ 818.363195] __get_free_pages+0x8/0x40 [ 818.367077] mmu_topup_memory_caches+0x1d6/0x360 [ 818.371825] kvm_mmu_load+0x1e/0x1010 [ 818.375613] ? kvm_arch_vcpu_ioctl_run+0x1b14/0x6c10 [ 818.380704] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 818.385635] ? mark_held_locks+0xa6/0xf0 [ 818.389696] ? find_held_lock+0x2d/0x110 [ 818.393758] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 818.398593] ? get_task_pid+0x19d/0x320 [ 818.402553] ? lock_downgrade+0x750/0x750 [ 818.406698] ? check_preemption_disabled+0x41/0x2b0 [ 818.411729] ? kvm_vcpu_ioctl+0x493/0xe30 [ 818.415887] kvm_vcpu_ioctl+0x493/0xe30 [ 818.419855] ? kvm_get_dirty_log+0x590/0x590 [ 818.424262] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 818.429016] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 818.433604] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 818.438362] ? rcu_nmi_exit+0x102/0x220 [ 818.442328] ? retint_kernel+0x2d/0x2d [ 818.446214] ? kvm_get_dirty_log+0x590/0x590 [ 818.450619] do_vfs_ioctl+0xcdb/0x12e0 [ 818.454510] ? selinux_file_ioctl+0x228/0x5e0 [ 818.459013] ? ioctl_preallocate+0x200/0x200 [ 818.463421] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 818.468892] ? __fget+0x3ad/0x570 [ 818.472333] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 818.476561] ksys_ioctl+0x9b/0xc0 [ 818.480088] __x64_sys_ioctl+0x6f/0xb0 [ 818.483975] do_syscall_64+0xf9/0x670 [ 818.487994] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 818.493262] RIP: 0033:0x45de59 [ 818.496448] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 818.515346] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 16:17:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xce860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 818.523070] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 818.530343] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 818.537606] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 818.544882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000034 [ 818.552154] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:17:55 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:55 executing program 3 (fault-call:8 fault-nth:53): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:17:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xcf860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:17:55 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 820.005542] FAULT_INJECTION: forcing a failure. [ 820.005542] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 820.049743] CPU: 0 PID: 3842 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 820.057600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 820.066969] Call Trace: [ 820.069602] dump_stack+0x22c/0x33e [ 820.073273] should_fail.cold+0xa/0x2f [ 820.077185] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 820.082344] __alloc_pages_nodemask+0x256/0x2a60 [ 820.087121] ? kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 820.092234] ? kvm_vcpu_ioctl+0x493/0xe30 [ 820.096382] ? do_vfs_ioctl+0xcdb/0x12e0 [ 820.100438] ? mark_held_locks+0xa6/0xf0 [ 820.104502] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 820.109284] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 820.114044] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 820.118896] ? mark_held_locks+0xa6/0xf0 [ 820.122963] ? retint_kernel+0x2d/0x2d [ 820.126856] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 820.131626] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 820.136401] ? rcu_nmi_exit+0x102/0x220 [ 820.140405] ? retint_kernel+0x2d/0x2d [ 820.144374] alloc_pages_current+0x19d/0x2c0 16:17:55 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int={0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}]}, {0x0, [0x0, 0x2e, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 820.148827] __get_free_pages+0x8/0x40 [ 820.152729] mmu_topup_memory_caches+0x1d6/0x360 [ 820.157509] kvm_mmu_load+0x1e/0x1010 [ 820.161338] ? kvm_arch_vcpu_ioctl_run+0x3af9/0x6c10 [ 820.166469] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 820.171427] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 820.176202] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 820.180981] ? find_held_lock+0x2d/0x110 [ 820.185060] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 820.189916] ? get_task_pid+0x19d/0x320 [ 820.193909] ? lock_downgrade+0x750/0x750 [ 820.198069] ? check_preemption_disabled+0x41/0x2b0 [ 820.203102] ? kvm_vcpu_ioctl+0x493/0xe30 [ 820.207254] kvm_vcpu_ioctl+0x493/0xe30 [ 820.211246] ? kvm_get_dirty_log+0x590/0x590 [ 820.215833] ? mark_held_locks+0xf0/0xf0 [ 820.219885] ? proc_fail_nth_write+0x95/0x1d0 [ 820.224389] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 820.229153] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 820.233727] ? find_held_lock+0x2d/0x110 [ 820.237790] ? kvm_get_dirty_log+0x590/0x590 [ 820.242203] do_vfs_ioctl+0xcdb/0x12e0 [ 820.246095] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 820.251308] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 820.256072] ? ioctl_preallocate+0x200/0x200 [ 820.260482] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 820.265088] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 820.269844] ? rcu_nmi_exit+0x102/0x220 [ 820.273806] ? retint_kernel+0x2d/0x2d [ 820.277687] ksys_ioctl+0x9b/0xc0 [ 820.281152] __x64_sys_ioctl+0x6f/0xb0 [ 820.285223] do_syscall_64+0xf9/0x670 [ 820.289040] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 820.294233] RIP: 0033:0x45de59 [ 820.297428] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 820.316419] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 820.324634] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 820.332283] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 820.339645] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 16:17:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xd0860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 820.346912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000035 [ 820.354541] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:17:55 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) process_vm_readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/211, 0xd3}, {&(0x7f0000000140)=""/102, 0x66}], 0x3, &(0x7f0000001600)=[{&(0x7f0000001340)=""/250, 0xfa}, {&(0x7f0000001440)=""/130, 0x82}, {&(0x7f0000001500)=""/13, 0xd}, {&(0x7f0000001540)=""/39, 0x27}, {&(0x7f0000001580)=""/15, 0xf}, {&(0x7f00000015c0)=""/44, 0x2c}], 0x6, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:55 executing program 3 (fault-call:8 fault-nth:54): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 820.591789] FAULT_INJECTION: forcing a failure. [ 820.591789] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 820.608438] CPU: 1 PID: 3936 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 820.616244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 820.625867] Call Trace: [ 820.628471] dump_stack+0x22c/0x33e [ 820.632130] should_fail.cold+0xa/0x2f [ 820.636198] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 820.641649] __alloc_pages_nodemask+0x256/0x2a60 [ 820.646498] ? kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 820.651870] ? kvm_vcpu_ioctl+0x493/0xe30 [ 820.656014] ? do_vfs_ioctl+0xcdb/0x12e0 [ 820.660085] ? ksys_ioctl+0x9b/0xc0 [ 820.663715] ? __x64_sys_ioctl+0x6f/0xb0 [ 820.667784] ? do_syscall_64+0xf9/0x670 [ 820.671855] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 820.677237] ? mark_held_locks+0xf0/0xf0 [ 820.681544] ? mark_held_locks+0xa6/0xf0 [ 820.685604] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 820.690360] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 820.695218] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 820.699863] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 820.704649] ? rcu_nmi_exit+0x102/0x220 [ 820.708622] ? retint_kernel+0x2d/0x2d [ 820.712525] ? alloc_pages_current+0x35/0x2c0 [ 820.717029] ? alloc_pages_current+0x42/0x2c0 [ 820.721582] alloc_pages_current+0x19d/0x2c0 [ 820.726194] __get_free_pages+0x8/0x40 [ 820.731418] mmu_topup_memory_caches+0x1d6/0x360 [ 820.736225] kvm_mmu_load+0x1e/0x1010 [ 820.740225] ? kvm_cpu_has_injectable_intr+0x323/0x3c0 [ 820.745522] ? __sanitizer_cov_trace_pc+0x22/0x50 [ 820.750420] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 820.755372] ? mark_held_locks+0xa6/0xf0 [ 820.759467] ? find_held_lock+0x2d/0x110 [ 820.763657] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 820.769156] ? get_task_pid+0x19d/0x320 [ 820.773445] ? lock_downgrade+0x750/0x750 [ 820.778222] ? check_preemption_disabled+0x41/0x2b0 [ 820.786065] ? kvm_vcpu_ioctl+0x493/0xe30 [ 820.792594] kvm_vcpu_ioctl+0x493/0xe30 [ 820.799008] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 820.804024] ? kvm_get_dirty_log+0x590/0x590 [ 820.808973] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 820.814951] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 820.819724] ? rcu_nmi_exit+0x102/0x220 [ 820.823880] ? retint_kernel+0x2d/0x2d [ 820.827796] ? __sanitizer_cov_trace_switch+0x10/0x80 [ 820.832995] ? kvm_get_dirty_log+0x590/0x590 [ 820.837426] do_vfs_ioctl+0xcdb/0x12e0 [ 820.841324] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 820.847998] ? ioctl_preallocate+0x200/0x200 [ 820.852422] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 820.857873] ? __fget+0x3ad/0x570 [ 820.861324] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 820.866259] ksys_ioctl+0x9b/0xc0 [ 820.869862] __x64_sys_ioctl+0x6f/0xb0 [ 820.873826] do_syscall_64+0xf9/0x670 [ 820.877972] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 820.885143] RIP: 0033:0x45de59 [ 820.888344] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 820.909496] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 820.917201] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 820.924695] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 820.932176] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 820.940680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000036 [ 820.949008] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:17:56 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xd1860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:17:56 executing program 3 (fault-call:8 fault-nth:55): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:17:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xd2860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 821.328387] FAULT_INJECTION: forcing a failure. [ 821.328387] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 821.355175] CPU: 1 PID: 3971 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 821.363006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 821.372412] Call Trace: [ 821.375027] dump_stack+0x22c/0x33e [ 821.378675] should_fail.cold+0xa/0x2f [ 821.382588] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 821.387729] __alloc_pages_nodemask+0x256/0x2a60 [ 821.392503] ? kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 821.397654] ? kvm_vcpu_ioctl+0x493/0xe30 [ 821.401820] ? do_vfs_ioctl+0xcdb/0x12e0 [ 821.405893] ? ksys_ioctl+0x9b/0xc0 [ 821.409703] ? __x64_sys_ioctl+0x6f/0xb0 [ 821.413783] ? do_syscall_64+0xf9/0x670 [ 821.417766] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 821.423425] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 821.428203] ? mark_held_locks+0xf0/0xf0 [ 821.432283] ? mark_held_locks+0xa6/0xf0 [ 821.436359] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 821.441135] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 821.445999] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 821.450618] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 821.455402] ? retint_kernel+0x2d/0x2d [ 821.459323] alloc_pages_current+0x19d/0x2c0 [ 821.463743] __get_free_pages+0x8/0x40 [ 821.467658] mmu_topup_memory_caches+0x1d6/0x360 [ 821.472441] kvm_mmu_load+0x1e/0x1010 [ 821.477819] ? kvm_arch_vcpu_ioctl_run+0x1d89/0x6c10 [ 821.482970] ? kvm_arch_vcpu_ioctl_run+0x1d97/0x6c10 [ 821.488100] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 821.493040] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 821.497820] ? find_held_lock+0x2d/0x110 [ 821.501893] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 821.506769] ? get_task_pid+0x19d/0x320 [ 821.510780] ? lock_downgrade+0x750/0x750 [ 821.514963] ? check_preemption_disabled+0x41/0x2b0 [ 821.519994] ? kvm_vcpu_ioctl+0x493/0xe30 [ 821.524144] kvm_vcpu_ioctl+0x493/0xe30 [ 821.528127] ? kvm_get_dirty_log+0x590/0x590 [ 821.532545] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 821.537313] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 821.541912] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 821.546677] ? rcu_nmi_exit+0x102/0x220 [ 821.550673] ? retint_kernel+0x2d/0x2d [ 821.554701] ? do_vfs_ioctl+0xbd/0x12e0 [ 821.558692] ? kvm_get_dirty_log+0x590/0x590 [ 821.563121] do_vfs_ioctl+0xcdb/0x12e0 [ 821.567072] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 821.572282] ? ioctl_preallocate+0x200/0x200 16:17:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xd3860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:17:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xd4860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:17:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xd5860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 821.576710] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 821.582294] ? __fget+0x3ad/0x570 [ 821.585765] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 821.590313] ksys_ioctl+0x9b/0xc0 [ 821.593784] __x64_sys_ioctl+0x6f/0xb0 [ 821.597685] do_syscall_64+0xf9/0x670 [ 821.602211] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 821.607429] RIP: 0033:0x45de59 [ 821.610641] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 821.630105] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 821.637819] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 821.645099] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 821.652370] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 821.659980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000037 [ 821.667244] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:17:58 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:58 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RWSTAT(r4, &(0x7f0000000140)={0x7, 0x7f, 0x2}, 0x7) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) syz_extract_tcp_res(&(0x7f0000000080), 0x0, 0x9) 16:17:58 executing program 3 (fault-call:8 fault-nth:56): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 823.299635] FAULT_INJECTION: forcing a failure. [ 823.299635] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 823.311903] CPU: 0 PID: 4145 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 823.319729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 823.329076] Call Trace: [ 823.331691] dump_stack+0x22c/0x33e [ 823.336323] should_fail.cold+0xa/0x2f [ 823.340220] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 823.345326] __alloc_pages_nodemask+0x256/0x2a60 [ 823.350111] ? kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 823.356273] ? kvm_vcpu_ioctl+0x493/0xe30 [ 823.360621] ? do_vfs_ioctl+0xcdb/0x12e0 [ 823.364684] ? ksys_ioctl+0x9b/0xc0 [ 823.368568] ? __x64_sys_ioctl+0x6f/0xb0 [ 823.372619] ? do_syscall_64+0xf9/0x670 [ 823.376602] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 823.381975] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 823.386856] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 823.391461] ? mark_held_locks+0xa6/0xf0 [ 823.395535] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 823.400496] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 823.405489] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 823.410251] ? rcu_nmi_exit+0x102/0x220 [ 823.414234] ? retint_kernel+0x2d/0x2d [ 823.418126] ? alloc_pages_current+0x9f/0x2c0 [ 823.422638] alloc_pages_current+0x19d/0x2c0 [ 823.427051] __get_free_pages+0x8/0x40 [ 823.430931] mmu_topup_memory_caches+0x1d6/0x360 [ 823.435733] kvm_mmu_load+0x1e/0x1010 [ 823.439834] ? kvm_arch_vcpu_ioctl_run+0x1ff1/0x6c10 [ 823.445312] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 823.450260] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 823.455042] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 823.459675] ? find_held_lock+0x2d/0x110 [ 823.463784] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 823.468860] ? get_task_pid+0x19d/0x320 [ 823.472858] ? lock_downgrade+0x750/0x750 [ 823.477060] ? check_preemption_disabled+0x41/0x2b0 [ 823.482108] ? kvm_vcpu_ioctl+0x493/0xe30 [ 823.486277] kvm_vcpu_ioctl+0x493/0xe30 [ 823.490269] ? kvm_get_dirty_log+0x590/0x590 [ 823.494699] ? trace_hardirqs_on_thunk+0x1a/0x1c 16:17:58 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}, {&(0x7f0000000240)="6ee37d57050000000065fc695679ea5fca805d2a2a5fc3291f820253c1365dc632012304a41f8a6c76c86fcd9f93226285f4ea129fed9000"/79, 0x4f}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xd6860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 823.499480] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 823.504081] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 823.509484] ? rcu_nmi_exit+0x102/0x220 [ 823.513473] ? retint_kernel+0x2d/0x2d [ 823.517368] ? do_vfs_ioctl+0xf74/0x12e0 [ 823.521429] ? kvm_get_dirty_log+0x590/0x590 [ 823.525877] do_vfs_ioctl+0xcdb/0x12e0 [ 823.529764] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 823.534956] ? ioctl_preallocate+0x200/0x200 [ 823.539368] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 823.544830] ? __fget+0x3ad/0x570 [ 823.548302] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 823.552545] ? rcu_nmi_exit+0x102/0x220 [ 823.556539] ksys_ioctl+0x9b/0xc0 [ 823.560017] __x64_sys_ioctl+0x6f/0xb0 [ 823.563921] do_syscall_64+0xf9/0x670 [ 823.567747] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 823.572946] RIP: 0033:0x45de59 [ 823.576149] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 823.595176] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 823.603021] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 823.610310] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 823.618119] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 823.625401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000038 [ 823.632676] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:17:59 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:17:59 executing program 3 (fault-call:8 fault-nth:57): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:17:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xd7860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 824.366480] FAULT_INJECTION: forcing a failure. [ 824.366480] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 824.380403] CPU: 1 PID: 4208 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 824.388216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 824.397581] Call Trace: [ 824.400182] dump_stack+0x22c/0x33e [ 824.403857] should_fail.cold+0xa/0x2f [ 824.407772] ? fault_create_debugfs_attr+0x1e0/0x1e0 16:17:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xd8860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 824.412910] __alloc_pages_nodemask+0x256/0x2a60 [ 824.417701] ? kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 824.422844] ? kvm_vcpu_ioctl+0x493/0xe30 [ 824.427102] ? do_vfs_ioctl+0xcdb/0x12e0 [ 824.431623] ? ksys_ioctl+0x9b/0xc0 [ 824.435270] ? __x64_sys_ioctl+0x6f/0xb0 [ 824.439376] ? do_syscall_64+0xf9/0x670 [ 824.443366] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 824.448751] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 824.453528] ? retint_kernel+0x2d/0x2d [ 824.457462] ? gfp_pfmemalloc_allowed+0x150/0x150 16:17:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xd9860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 824.462504] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 824.467395] ? retint_kernel+0x2d/0x2d [ 824.471321] ? policy_node+0xa7/0x140 [ 824.475144] ? policy_node+0xb5/0x140 [ 824.478962] alloc_pages_current+0x19d/0x2c0 [ 824.483389] __get_free_pages+0x8/0x40 [ 824.488543] mmu_topup_memory_caches+0x1d6/0x360 [ 824.493351] kvm_mmu_load+0x1e/0x1010 [ 824.497257] ? kvm_arch_vcpu_ioctl_run+0x1f8f/0x6c10 [ 824.502385] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 824.507369] ? mark_held_locks+0xa6/0xf0 [ 824.512069] ? calibrate_delay.cold+0x1d3/0x227 [ 824.516771] ? find_held_lock+0x2d/0x110 [ 824.520855] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 824.525716] ? get_task_pid+0x19d/0x320 [ 824.529723] ? lock_downgrade+0x750/0x750 [ 824.533937] ? check_preemption_disabled+0x41/0x2b0 [ 824.539070] ? kvm_vcpu_ioctl+0x493/0xe30 [ 824.543233] kvm_vcpu_ioctl+0x493/0xe30 [ 824.547410] ? kvm_get_dirty_log+0x590/0x590 [ 824.551835] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 824.556472] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 824.561254] ? rcu_nmi_exit+0x102/0x220 16:17:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xda860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 824.565268] ? retint_kernel+0x2d/0x2d [ 824.569185] ? lock_release+0x429/0x8e0 [ 824.573385] ? kvm_get_dirty_log+0x590/0x590 [ 824.577839] do_vfs_ioctl+0xcdb/0x12e0 [ 824.581756] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 824.586975] ? ioctl_preallocate+0x200/0x200 [ 824.591756] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 824.597233] ? __fget+0x3ad/0x570 [ 824.600816] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 824.605108] ksys_ioctl+0x9b/0xc0 [ 824.608587] __x64_sys_ioctl+0x6f/0xb0 [ 824.612517] do_syscall_64+0xf9/0x670 16:17:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xdb860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 824.616386] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 824.621616] RIP: 0033:0x45de59 [ 824.624821] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 824.643825] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 824.651577] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 824.658880] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 824.666166] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 824.673448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000039 [ 824.680735] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:18:01 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x40}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:01 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) epoll_create(0x7) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000080)={0x7, 0x2, 0x4}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000004427ff1c84190200000000000000a03677ed5be8220002000000000100000000000000000000000000000003000000000000000000000000000000000000000000000001000000000000000400"/100], 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) r3 = semget$private(0x0, 0x8, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)) semop(r3, &(0x7f0000000100), 0x2d) semtimedop(r3, &(0x7f0000000040), 0x1b9, 0x0) semctl$IPC_RMID(r3, 0x0, 0x1000000000000000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) semget$private(0x0, 0x2, 0x60c) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) 16:18:01 executing program 3 (fault-call:8 fault-nth:58): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 826.304422] FAULT_INJECTION: forcing a failure. [ 826.304422] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 826.327367] CPU: 0 PID: 4402 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 826.335207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 826.345047] Call Trace: [ 826.347738] dump_stack+0x22c/0x33e [ 826.351772] should_fail.cold+0xa/0x2f [ 826.355775] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 826.361876] __alloc_pages_nodemask+0x256/0x2a60 [ 826.366775] ? finish_task_switch+0x29c/0x8b0 [ 826.371587] ? mark_held_locks+0xa6/0xf0 [ 826.375773] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 826.380639] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 826.385764] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 826.390524] ? rcu_nmi_exit+0x102/0x220 [ 826.394511] ? retint_kernel+0x2d/0x2d [ 826.398420] ? alloc_pages_current+0x9f/0x2c0 [ 826.403119] alloc_pages_current+0x19d/0x2c0 [ 826.407706] __get_free_pages+0x8/0x40 [ 826.411688] mmu_topup_memory_caches+0x1d6/0x360 [ 826.416642] kvm_mmu_load+0x1e/0x1010 [ 826.421211] ? kvm_arch_vcpu_ioctl_run+0x1f8f/0x6c10 [ 826.426961] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 826.431907] ? mark_held_locks+0xf0/0xf0 [ 826.435976] ? kvm_vcpu_ioctl+0x175/0xe30 [ 826.440223] ? find_held_lock+0x2d/0x110 [ 826.444314] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 826.449499] ? get_task_pid+0x19d/0x320 [ 826.454556] ? lock_downgrade+0x750/0x750 [ 826.458739] ? check_preemption_disabled+0x41/0x2b0 [ 826.463936] ? kvm_vcpu_ioctl+0x493/0xe30 [ 826.468126] kvm_vcpu_ioctl+0x493/0xe30 [ 826.472206] ? kvm_get_dirty_log+0x590/0x590 [ 826.476652] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 826.481433] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 826.486581] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 826.491601] ? rcu_nmi_exit+0x102/0x220 [ 826.495617] ? retint_kernel+0x2d/0x2d [ 826.499537] ? kvm_get_dirty_log+0x590/0x590 [ 826.503961] do_vfs_ioctl+0xcdb/0x12e0 [ 826.507877] ? selinux_file_ioctl+0x32e/0x5e0 [ 826.512402] ? ioctl_preallocate+0x200/0x200 [ 826.516824] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 826.523613] ? __fget+0x3ad/0x570 [ 826.527087] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 826.531345] ksys_ioctl+0x9b/0xc0 [ 826.534829] __x64_sys_ioctl+0x6f/0xb0 [ 826.538735] do_syscall_64+0xf9/0x670 [ 826.542608] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 826.547924] RIP: 0033:0x45de59 [ 826.551198] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 826.570714] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 826.578693] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 826.587056] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 826.595185] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 826.602571] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000003a [ 826.610026] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:18:01 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x67}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x30, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)) ptrace$setopts(0x4200, r0, 0x2, 0xc) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000080)=0x0) wait4(r3, 0x0, 0x20000000, &(0x7f0000000240)) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x4) write$eventfd(r4, &(0x7f0000000300)=0x2, 0x8) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xdc860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:18:02 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:02 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x40}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:02 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ubifs(&(0x7f0000000080)='ubifs\x00', &(0x7f0000000140)='./file0\x00', 0x4, 0x3, &(0x7f0000000440)=[{&(0x7f0000000180)="59cf381d96c96b4ef4ba6d34a84f01b912f12cb2d80e17e869f804e6bf3e93c4d3d6bf1fc5e7a291f606489da5", 0x2d, 0x6}, {&(0x7f0000000240)="01a881114c036de630b4b87a073efa9ece8106b216a9d59ae080eec97751023e7ec0df906c7eeb788a7474807ee2567a268d87eb4a193060a8442fff219b16814b8b1440e9e9e6aed32f9e42a770c3177bc22eed287bc9afda0ee52c165943ddb4cc5ab4ef8e3b548ae36d392547593ea02f862c1fb3209af3da2e20e45ba7d2167276c0db65cc7e0dd4f2dfe231f56b9dbb1ffc64e651209823600fc74ac7d72e7f2f4c3b23859924ae641ede6a2bfe8f28554b6312bbc38ceb1466a203bbce3cc3ee4f81f2e31f9ed963a6ffd7c62df795d1", 0xd3, 0x422d}, {&(0x7f0000000340)="ddfe9c06f87b95a459448c7c08c7014351f12300cdaf1672317f63844ba6c6fba797fadbde3eccd4d1687a59abc79d99abe7a7c52228ed89d7808f116957095acbc5e63bbd3572f5716e7ba2c8b8b8d8e1e41f4801a8ce69ac853cd4ae3d285c462639612b1d121d34cabb7b7c55dbf6295f2ce4f2558107264783539c5761c6a5692a727373cefb443619636def622b3b90780b788e50fbe38e6ae90e49dabe1db8555b41e7dd3eec66bd1bee3b5d8ca2a1afc20a986b7f2f75eae1d5e0c3c59fd141bd58d8", 0xc6, 0x9}], 0x400, &(0x7f00000004c0)={[{@chk_data_crc='chk_data_crc'}, {@bulk_read='bulk_read'}, {@compr_none='compr=none'}, {@chk_data_crc='chk_data_crc'}, {@chk_data_crc='chk_data_crc'}, {@auth_hash_name={'auth_hash_name', 0x3d, 'ghash'}}, {@auth_key={'auth_key', 0x3d, '\\}+&'}}, {@auth_hash_name={'auth_hash_name', 0x3d, 'ghash'}}, {@compr_zstd='compr=zstd'}, {@compr_zstd='compr=zstd'}], [{@context={'context', 0x3d, 'staff_u'}}, {@dont_measure='dont_measure'}]}) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:02 executing program 3 (fault-call:8 fault-nth:59): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:18:02 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f00000018c0)='syz0\x00', &(0x7f0000001900)) wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000800000000000000000e3b7e63f8e7b12e0000000000000e0100000000000000010000000000000902000000000000000000000100000000000000000000000000610000"], 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f0000000800)={0x6, &(0x7f00000007c0)=[0x7, 0xfffffffd, 0x8, 0x1, 0xfff, 0x7f]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ioctl$VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f00000001c0)={0x2, @raw_data="921230e557e8755ba19cf80c0e19639d21282053fbe1f5a6066e3891458845cb5c5f5a4a55a68bb236f045eb17182d54d161859638de83848c2377de5f8664888e937992e262da99a3e43f682db88fd47c7ff752c64cd1efed7b89d97383b2f8a9207b9af0d18474232d5b1b0a7a32095d8909675ca1c49c6487107916eb349140705fa5e81cb46a000cd41027196247b1ccd2b58a3f7a5c51b08bdb131bb4941ed96b55e233fe691a7a009b204d7ca30c2e5c647ec772f72ce61a063c18eef8b77badd052b74927"}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f00000002c0)={{0x8, 0x6, 0x10000, 0x20400000, 'syz0\x00', 0x1}, 0x0, [0x8, 0x6, 0x7fffffff, 0x1, 0x8, 0xc5, 0x7, 0x0, 0x95, 0x400, 0x47b, 0x0, 0x4, 0x9, 0x0, 0x7, 0xd8da, 0x9, 0x1, 0x345c805c, 0x3, 0x4, 0x7, 0x1ff, 0x5, 0x8, 0x312, 0x5, 0x120000000000000, 0x0, 0x9, 0x4, 0x2, 0xdcf, 0xffffffff, 0x4, 0x2, 0x8000, 0x0, 0x1, 0x80000001, 0x9, 0x3, 0x1, 0xff, 0x80000000, 0x4, 0x3, 0x31e0, 0xffffffffffff37b8, 0x5, 0x400, 0x3, 0x5, 0x1, 0x400, 0x3, 0x6, 0x5, 0x81, 0xbbf, 0x6, 0x7ff, 0x5, 0x1, 0x7fff, 0x8001, 0x3, 0x7, 0xfffffffffffffffd, 0x2, 0x6, 0x8, 0x7, 0x6, 0x80, 0x6, 0x101, 0x5, 0x8, 0x4, 0x8, 0xfffffffffffffd26, 0x9, 0x3, 0x2c00, 0x8, 0xe000, 0x7fffffff, 0x4, 0x7, 0x20, 0xffffffff, 0x9113, 0x7, 0x100000000, 0x1390, 0x4, 0x400, 0x1, 0x7, 0x2, 0x7ff, 0x4, 0x0, 0x3, 0x80000001, 0x5, 0xfff, 0x100, 0x4, 0x71, 0x80, 0x0, 0x10001, 0xffffffffffff0001, 0x8, 0x9, 0x80b, 0x101, 0x5, 0x743, 0x80, 0x0, 0x200, 0x3, 0x0, 0x6]}) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0xffffffffffffffff, &(0x7f0000000080)="03814dd5031bf67d75873d5e7af40c") ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xdd860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:18:02 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x40}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 827.404782] FAULT_INJECTION: forcing a failure. [ 827.404782] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 827.411619] UBIFS error (pid: 4506): cannot open "/dev/loop4", error -22 [ 827.424830] CPU: 1 PID: 4485 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 827.439626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 827.448997] Call Trace: [ 827.451605] dump_stack+0x22c/0x33e 16:18:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xde860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 827.455254] should_fail.cold+0xa/0x2f [ 827.459196] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 827.464362] __alloc_pages_nodemask+0x256/0x2a60 [ 827.469482] ? kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 827.474621] ? kvm_vcpu_ioctl+0x493/0xe30 [ 827.478792] ? do_vfs_ioctl+0xcdb/0x12e0 [ 827.483012] ? ksys_ioctl+0x9b/0xc0 [ 827.486701] ? __x64_sys_ioctl+0x6f/0xb0 [ 827.490892] ? do_syscall_64+0xf9/0x670 [ 827.494888] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 827.500453] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 827.505066] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 827.509857] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 827.514726] ? mark_held_locks+0xa6/0xf0 [ 827.518842] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 827.523634] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 827.529221] ? rcu_nmi_exit+0x102/0x220 [ 827.533220] ? retint_kernel+0x2d/0x2d [ 827.537157] alloc_pages_current+0x19d/0x2c0 [ 827.541619] __get_free_pages+0x8/0x40 [ 827.545529] mmu_topup_memory_caches+0x1d6/0x360 [ 827.550312] kvm_mmu_load+0x1e/0x1010 [ 827.554137] ? kvm_arch_vcpu_ioctl_run+0x1da3/0x6c10 [ 827.559266] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 827.564223] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 827.569044] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 827.573768] ? find_held_lock+0x2d/0x110 [ 827.577902] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 827.582768] ? get_task_pid+0x19d/0x320 [ 827.586775] ? lock_downgrade+0x750/0x750 [ 827.590962] ? check_preemption_disabled+0x41/0x2b0 [ 827.596008] ? kvm_vcpu_ioctl+0x493/0xe30 [ 827.600990] kvm_vcpu_ioctl+0x493/0xe30 [ 827.606135] ? kvm_get_dirty_log+0x590/0x590 [ 827.610858] ? mark_held_locks+0xf0/0xf0 [ 827.615570] ? proc_fail_nth_write+0x95/0x1d0 [ 827.620676] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 827.625728] ? find_held_lock+0x2d/0x110 [ 827.629821] ? kvm_get_dirty_log+0x590/0x590 [ 827.634259] do_vfs_ioctl+0xcdb/0x12e0 [ 827.638170] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 827.643422] ? ioctl_preallocate+0x200/0x200 [ 827.647867] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 16:18:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xdf860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 827.653607] ? retint_kernel+0x2d/0x2d [ 827.657626] ksys_ioctl+0x9b/0xc0 [ 827.661106] __x64_sys_ioctl+0x6f/0xb0 [ 827.665017] do_syscall_64+0xf9/0x670 [ 827.669044] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 827.675357] RIP: 0033:0x45de59 [ 827.678606] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 827.699444] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 827.707176] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 827.714593] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 827.721901] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 827.729214] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000003b [ 827.736791] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:18:03 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x40}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x33) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 16:18:03 executing program 3 (fault-call:8 fault-nth:60): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:18:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xe0860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 827.785195] UBIFS error (pid: 4506): cannot open "/dev/loop4", error -22 [ 827.974611] FAULT_INJECTION: forcing a failure. [ 827.974611] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 827.996385] CPU: 0 PID: 4611 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 828.004216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 828.013666] Call Trace: [ 828.016272] dump_stack+0x22c/0x33e [ 828.019924] should_fail.cold+0xa/0x2f [ 828.024123] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 828.029271] __alloc_pages_nodemask+0x256/0x2a60 [ 828.034399] ? kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 828.039522] ? kvm_vcpu_ioctl+0x493/0xe30 [ 828.043689] ? do_vfs_ioctl+0xcdb/0x12e0 [ 828.047801] ? ksys_ioctl+0x9b/0xc0 [ 828.051453] ? __x64_sys_ioctl+0x6f/0xb0 [ 828.055548] ? do_syscall_64+0xf9/0x670 [ 828.059554] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 828.064970] ? mark_held_locks+0xa6/0xf0 [ 828.069048] ? mark_held_locks+0xf0/0xf0 [ 828.073128] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 828.078081] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 828.083023] ? mark_held_locks+0xa6/0xf0 [ 828.088063] ? retint_kernel+0x2d/0x2d [ 828.091975] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 828.096764] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 828.101544] ? rcu_nmi_exit+0x102/0x220 [ 828.105654] ? retint_kernel+0x2d/0x2d [ 828.109588] alloc_pages_current+0x19d/0x2c0 [ 828.114040] __get_free_pages+0x8/0x40 [ 828.118018] mmu_topup_memory_caches+0x1d6/0x360 [ 828.122928] kvm_mmu_load+0x1e/0x1010 [ 828.126763] ? kvm_arch_vcpu_ioctl_run+0x3c4e/0x6c10 [ 828.131895] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 828.136853] ? mark_held_locks+0xf0/0xf0 [ 828.141120] ? find_held_lock+0x2d/0x110 [ 828.145221] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 828.150070] ? get_task_pid+0x19d/0x320 [ 828.154063] ? lock_downgrade+0x750/0x750 [ 828.158234] ? check_preemption_disabled+0x41/0x2b0 [ 828.163280] ? kvm_vcpu_ioctl+0x493/0xe30 [ 828.167530] kvm_vcpu_ioctl+0x493/0xe30 [ 828.171533] ? kvm_get_dirty_log+0x590/0x590 [ 828.176154] ? mark_held_locks+0xf0/0xf0 [ 828.180426] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 828.185215] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 828.190191] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 828.195075] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 828.199681] ? find_held_lock+0x2d/0x110 [ 828.203780] ? kvm_get_dirty_log+0x590/0x590 [ 828.208565] do_vfs_ioctl+0xcdb/0x12e0 [ 828.213201] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 828.218405] ? ioctl_preallocate+0x200/0x200 [ 828.222835] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 828.228316] ? __fget+0x3ad/0x570 [ 828.232075] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 828.236320] ksys_ioctl+0x9b/0xc0 [ 828.239771] __x64_sys_ioctl+0x6f/0xb0 [ 828.243677] do_syscall_64+0xf9/0x670 [ 828.247604] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 828.252830] RIP: 0033:0x45de59 [ 828.256031] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 828.275127] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 828.282962] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 828.290234] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 828.297966] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 828.305290] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000003c [ 828.312655] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:18:05 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:05 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x40}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x33) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 16:18:05 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYRES64], 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}, {&(0x7f00000001c0)="87f21bc4a6729cf3cb3eb0ae1a83deb8e4b71d3f80c492f01d546ca3", 0x1c}], 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090000000000000000000700000008000300", @ANYRES32=r5, @ANYBLOB="0800051d000000001400060076657468315f746f5f7465616d0000000400cc0008000500040000001400040073"], 0x58}}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="1efbae2bb45fa63c1633a5a5548f6431907b9b795d50a388905030dcae2178eb654445c70863039c88599ccef7fc8d512b51d7d02fa124fd5f79bc4a041a7c63b0cf2369f4f83908f7e9ec3d6c178041e7f13a7b8efb84eec91a0177e00d6b4f19dc9bfd9d267ad71425a6a76220b8384ec139133b6cfae39058e00f00ea0e984537b8f543ed0fcdbfb4c79fdd4d99251821edce23b76a72a9275fe7e4f68e47cec7ac2579d131767c97b3", @ANYRES64, @ANYBLOB="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"], 0x1dc}, 0x1, 0x0, 0x0, 0x24008010}, 0x40040) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x32) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000140)=@gcm_128={{0x304}, "6c031df0311fd5c2", '\x00', "ca07c837", "02c9eb800e3c3e00"}, 0x28) 16:18:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xe1860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:18:05 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180000000000000044000000440000000800000000000000000000080000000000000000000000010000000000000000000000000000000300000000000000000000000000588a00000000000000000100"/100], 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$SNDCTL_SEQ_NRSYNTHS(r2, 0x8004510a, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) 16:18:05 executing program 3 (fault-call:8 fault-nth:61): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:18:05 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x40}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x33) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 16:18:05 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000006a0000006a00000008000000080000000300000f020000000200000005e3ffff070000000500000001000080850600000300000009000000010000005ee900000000000000010000000000000000000000000000000300000000020000000000000000000000000000000b28aa683af0352b56d03f000000010000000000000000000000005f5f0000000051a03fdbb4ed1bd67ca83a4a"], 0x0, 0x8c}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:05 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x40}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 830.491056] FAULT_INJECTION: forcing a failure. [ 830.491056] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 830.516609] CPU: 1 PID: 4666 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 830.524438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 830.533804] Call Trace: [ 830.536403] dump_stack+0x22c/0x33e [ 830.540045] should_fail.cold+0xa/0x2f [ 830.543941] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 830.549068] __alloc_pages_nodemask+0x256/0x2a60 [ 830.553871] ? kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 830.558982] ? kvm_vcpu_ioctl+0x493/0xe30 [ 830.563138] ? do_vfs_ioctl+0xcdb/0x12e0 [ 830.567211] ? ksys_ioctl+0x9b/0xc0 [ 830.570850] ? __x64_sys_ioctl+0x6f/0xb0 [ 830.574946] ? do_syscall_64+0xf9/0x670 [ 830.578930] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 830.584333] ? mark_held_locks+0xa6/0xf0 [ 830.588426] ? mark_held_locks+0xa6/0xf0 [ 830.592505] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 830.597455] ? mark_held_locks+0xa6/0xf0 [ 830.601556] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 830.606328] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 830.611192] ? rcu_nmi_exit+0x102/0x220 [ 830.615184] ? retint_kernel+0x2d/0x2d [ 830.619094] alloc_pages_current+0x19d/0x2c0 [ 830.623530] __get_free_pages+0x8/0x40 [ 830.627428] mmu_topup_memory_caches+0x1d6/0x360 [ 830.632369] kvm_mmu_load+0x1e/0x1010 [ 830.636187] ? kvm_arch_vcpu_ioctl_run+0x3d50/0x6c10 [ 830.641310] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 830.646270] ? mark_held_locks+0xa6/0xf0 [ 830.650357] ? find_held_lock+0x2d/0x110 [ 830.654430] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 830.659285] ? get_task_pid+0x19d/0x320 [ 830.663303] ? lock_downgrade+0x750/0x750 [ 830.667474] ? get_task_pid+0x1ac/0x320 [ 830.671556] ? kvm_vcpu_ioctl+0x493/0xe30 [ 830.675894] kvm_vcpu_ioctl+0x493/0xe30 [ 830.679914] ? kvm_get_dirty_log+0x590/0x590 [ 830.684356] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 830.689135] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 830.693738] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 830.698514] ? rcu_nmi_exit+0x102/0x220 [ 830.702538] ? find_held_lock+0x2d/0x110 [ 830.706632] ? kvm_get_dirty_log+0x590/0x590 [ 830.711099] do_vfs_ioctl+0xcdb/0x12e0 [ 830.715012] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 830.720223] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 830.725000] ? ioctl_preallocate+0x200/0x200 [ 830.729431] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 830.734065] ? trace_hardirqs_on_thunk+0x1a/0x1c 16:18:05 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000300)={0xa20000, 0x4fd, 0x6, r1, 0x0, &(0x7f00000002c0)={0x990965, 0xfffffffa, [], @p_u32=&(0x7f0000000280)=0x6}}) wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:05 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x40}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 830.738852] ? rcu_nmi_exit+0x102/0x220 [ 830.742896] ? retint_kernel+0x2d/0x2d [ 830.746846] ksys_ioctl+0x9b/0xc0 [ 830.750373] __x64_sys_ioctl+0x6f/0xb0 [ 830.754285] do_syscall_64+0xf9/0x670 [ 830.758116] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 830.763334] RIP: 0033:0x45de59 [ 830.766549] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 16:18:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xe2860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 830.785645] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 830.793385] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 830.800700] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 830.807982] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 830.815393] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000003d [ 830.822981] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:18:08 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:08 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x40}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:08 executing program 3 (fault-call:8 fault-nth:62): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:18:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xe3860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:18:08 executing program 1: clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x40}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 833.497913] FAULT_INJECTION: forcing a failure. [ 833.497913] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 833.518216] CPU: 1 PID: 4786 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 833.526141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 833.535516] Call Trace: [ 833.538117] dump_stack+0x22c/0x33e [ 833.541786] should_fail.cold+0xa/0x2f 16:18:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xe4860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 833.545813] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 833.550964] __alloc_pages_nodemask+0x256/0x2a60 [ 833.555749] ? kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 833.560966] ? kvm_vcpu_ioctl+0x493/0xe30 [ 833.565127] ? do_vfs_ioctl+0xcdb/0x12e0 [ 833.569222] ? ksys_ioctl+0x9b/0xc0 [ 833.572971] ? __x64_sys_ioctl+0x6f/0xb0 [ 833.577042] ? do_syscall_64+0xf9/0x670 [ 833.581069] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 833.587850] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 833.592470] ? mark_held_locks+0xf0/0xf0 [ 833.596551] ? mark_held_locks+0xa6/0xf0 [ 833.600625] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 833.605488] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 833.610087] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 833.614995] ? rcu_nmi_exit+0x102/0x220 [ 833.618998] ? retint_kernel+0x2d/0x2d [ 833.625880] alloc_pages_current+0x19d/0x2c0 [ 833.630367] __get_free_pages+0x8/0x40 [ 833.634708] mmu_topup_memory_caches+0x1d6/0x360 [ 833.639483] kvm_mmu_load+0x1e/0x1010 [ 833.643367] ? kvm_arch_vcpu_ioctl_run+0x3d70/0x6c10 16:18:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xe4ffffff, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 833.648493] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 833.653440] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 833.658285] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 833.663084] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 833.667688] ? find_held_lock+0x2d/0x110 [ 833.671766] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 833.676731] ? get_task_pid+0x19d/0x320 [ 833.680724] ? lock_downgrade+0x750/0x750 [ 833.684904] ? check_preemption_disabled+0xb/0x2b0 [ 833.689871] ? check_preemption_disabled+0x41/0x2b0 [ 833.694910] ? kvm_vcpu_ioctl+0x493/0xe30 [ 833.699093] kvm_vcpu_ioctl+0x493/0xe30 [ 833.703083] ? kvm_get_dirty_log+0x590/0x590 [ 833.707518] ? _raw_spin_unlock_irq+0x24/0x90 [ 833.712037] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 833.716820] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 833.721416] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 833.726199] ? rcu_nmi_exit+0x102/0x220 [ 833.730212] ? retint_kernel+0x2d/0x2d [ 833.734126] ? kvm_get_dirty_log+0x590/0x590 [ 833.738553] do_vfs_ioctl+0xcdb/0x12e0 [ 833.742458] ? selinux_file_ioctl+0x360/0x5e0 [ 833.746977] ? ioctl_preallocate+0x200/0x200 [ 833.751424] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 833.756917] ? retint_kernel+0x2d/0x2d [ 833.760942] ksys_ioctl+0x9b/0xc0 [ 833.764420] __x64_sys_ioctl+0x6f/0xb0 [ 833.768330] do_syscall_64+0xf9/0x670 [ 833.772158] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 833.777401] RIP: 0033:0x45de59 [ 833.780609] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 833.799719] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 833.807631] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 833.815028] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 833.822439] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 833.829724] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000003e [ 833.837201] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:18:09 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000004400000044000000080000000000000000000008000000000000000000000001000000000000000000000000000000030000000000000000000000000000000000000000000000010000000000000000000000000000000096179b09bef99470b94668"], 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:09 executing program 1: clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x40}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:09 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r4, 0xc0845658, &(0x7f0000000240)={0x0, @reserved}) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r2, 0x800443d3, &(0x7f0000000080)={@any, 0x5, 0x8, 0x6}) 16:18:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xe5860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:18:09 executing program 1: clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x40}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 833.913607] ptrace attach of "/root/syz-executor.1"[4907] was attempted by "/root/syz-executor.1"[4909] [ 834.065014] ptrace attach of "/root/syz-executor.1"[4957] was attempted by "/root/syz-executor.1"[4959] 16:18:11 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:11 executing program 3 (fault-call:8 fault-nth:63): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:18:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xe6860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:18:11 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x40}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 836.553213] FAULT_INJECTION: forcing a failure. [ 836.553213] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 836.571038] CPU: 0 PID: 4992 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 836.579397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 836.589063] Call Trace: [ 836.591685] dump_stack+0x22c/0x33e [ 836.595355] should_fail.cold+0xa/0x2f [ 836.599361] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 836.604501] __alloc_pages_nodemask+0x256/0x2a60 [ 836.609286] ? __schedule+0x8ed/0x22e0 [ 836.613196] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 836.618138] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 836.622814] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 836.627685] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 836.632477] ? rcu_nmi_exit+0x102/0x220 [ 836.636464] ? policy_node+0x52/0x140 [ 836.640258] ? policy_node+0xa7/0x140 [ 836.644072] ? __sanitizer_cov_trace_pc+0x4/0x50 [ 836.648852] alloc_pages_current+0x19d/0x2c0 [ 836.653301] __get_free_pages+0x8/0x40 [ 836.657214] mmu_topup_memory_caches+0x1d6/0x360 [ 836.662068] kvm_mmu_load+0x1e/0x1010 [ 836.665894] ? kvm_arch_vcpu_ioctl_run+0x2d4e/0x6c10 [ 836.672726] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 836.679078] ? mark_held_locks+0xf0/0xf0 [ 836.684173] ? kvm_vcpu_ioctl+0x175/0xe30 [ 836.688538] ? find_held_lock+0x2d/0x110 [ 836.693121] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 836.698595] ? get_task_pid+0x19d/0x320 [ 836.705303] ? lock_downgrade+0x750/0x750 [ 836.709443] ? check_preemption_disabled+0x41/0x2b0 [ 836.714502] ? kvm_vcpu_ioctl+0x493/0xe30 [ 836.718643] kvm_vcpu_ioctl+0x493/0xe30 [ 836.722626] ? kvm_get_dirty_log+0x590/0x590 [ 836.727047] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 836.731641] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 836.736398] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 836.743188] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 836.747976] ? rcu_nmi_exit+0x102/0x220 [ 836.751944] ? retint_kernel+0x2d/0x2d [ 836.755836] ? kvm_get_dirty_log+0x590/0x590 [ 836.760273] do_vfs_ioctl+0xcdb/0x12e0 [ 836.764168] ? selinux_file_ioctl+0x32e/0x5e0 [ 836.770800] ? ioctl_preallocate+0x200/0x200 [ 836.775301] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 836.780934] ? __fget+0x3ad/0x570 [ 836.784408] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 836.788638] ksys_ioctl+0x9b/0xc0 [ 836.792184] __x64_sys_ioctl+0x6f/0xb0 [ 836.796085] do_syscall_64+0xf9/0x670 [ 836.799899] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 836.805114] RIP: 0033:0x45de59 [ 836.808291] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 836.827282] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 836.835013] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 836.842546] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 16:18:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xe7860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:18:12 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x40}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 836.849809] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 836.857120] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000003f [ 836.864392] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:18:12 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mq_notify(r4, &(0x7f0000000080)={0x0, 0x32, 0x4, @tid=r0}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:12 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000004400000044000000080000000000000000000008000000000000000000000001007b46495b000000000000000000000300000000000000000000000000000000000000000000000100000000000000000000000000000000fcb0966860cdf2cdc8a12cdf5127961411d992dc207e0da7afaab05f0194a8f21ba1f82bd9ab4c5e162688938c9e5e43108563f5373d1d3305b261cd83e0e17a0600c24b9457b03b07a4d2e483cbeb25e90941c022ecc8729708bd21e82afc8ce0ae3465d67a9c5e9a7646a3504ce1ddf913b5cbcbfddc10589cce32118d"], 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:12 executing program 3 (fault-call:8 fault-nth:64): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:18:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xe8860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:18:12 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x40}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xe9860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 837.176351] FAULT_INJECTION: forcing a failure. [ 837.176351] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 837.217168] CPU: 1 PID: 5064 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 837.225009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 837.234381] Call Trace: [ 837.236994] dump_stack+0x22c/0x33e [ 837.240680] should_fail.cold+0xa/0x2f [ 837.244687] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 837.249830] __alloc_pages_nodemask+0x256/0x2a60 [ 837.254649] ? kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 837.259786] ? kvm_vcpu_ioctl+0x493/0xe30 [ 837.263957] ? do_vfs_ioctl+0xcdb/0x12e0 [ 837.268034] ? ksys_ioctl+0x9b/0xc0 [ 837.271678] ? __x64_sys_ioctl+0x6f/0xb0 [ 837.275756] ? do_syscall_64+0xf9/0x670 [ 837.279783] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 837.285175] ? mark_held_locks+0xa6/0xf0 [ 837.289254] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 837.294128] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 837.298733] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 837.303511] ? rcu_nmi_exit+0x102/0x220 [ 837.307504] ? retint_kernel+0x2d/0x2d [ 837.311418] ? alloc_pages_current+0x42/0x2c0 [ 837.315941] alloc_pages_current+0x19d/0x2c0 [ 837.320378] __get_free_pages+0x8/0x40 [ 837.324282] mmu_topup_memory_caches+0x1d6/0x360 [ 837.329595] kvm_mmu_load+0x1e/0x1010 [ 837.333438] ? kvm_arch_vcpu_ioctl_run+0x323d/0x6c10 [ 837.338563] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 837.343508] ? mark_held_locks+0xf0/0xf0 [ 837.347578] ? kvm_vcpu_ioctl+0x175/0xe30 [ 837.351739] ? __mutex_lock+0x109/0x13f0 [ 837.355827] ? find_held_lock+0x2d/0x110 [ 837.359900] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 837.364841] ? get_task_pid+0x19d/0x320 [ 837.368829] ? lock_downgrade+0x750/0x750 [ 837.372991] ? check_preemption_disabled+0x41/0x2b0 [ 837.378050] ? kvm_vcpu_ioctl+0x493/0xe30 [ 837.382205] kvm_vcpu_ioctl+0x493/0xe30 [ 837.386189] ? kvm_get_dirty_log+0x590/0x590 [ 837.390625] ? rcu_nmi_exit+0x102/0x220 [ 837.394608] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 837.401047] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 837.405652] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 837.410399] ? rcu_nmi_exit+0x102/0x220 [ 837.414379] ? retint_kernel+0x2d/0x2d [ 837.418250] ? kvm_get_dirty_log+0x590/0x590 [ 837.422854] do_vfs_ioctl+0xcdb/0x12e0 [ 837.426761] ? __sanitizer_cov_trace_pc+0x37/0x50 [ 837.431681] ? ioctl_preallocate+0x200/0x200 [ 837.436190] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 837.441668] ? __fget+0x3ad/0x570 [ 837.445145] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 837.449400] ? rcu_nmi_exit+0x102/0x220 [ 837.453421] ksys_ioctl+0x9b/0xc0 [ 837.456894] __x64_sys_ioctl+0x6f/0xb0 [ 837.460799] do_syscall_64+0xf9/0x670 [ 837.464627] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 837.469835] RIP: 0033:0x45de59 [ 837.473050] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 837.491995] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 837.499724] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 837.507202] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 837.514589] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 837.521877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000040 [ 837.529170] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:18:14 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xea860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:18:14 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x40}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:14 executing program 3 (fault-call:8 fault-nth:65): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:18:14 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x40}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 839.564048] FAULT_INJECTION: forcing a failure. [ 839.564048] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 839.611541] CPU: 1 PID: 5162 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 839.619391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 839.628781] Call Trace: [ 839.631388] dump_stack+0x22c/0x33e [ 839.635030] should_fail.cold+0xa/0x2f [ 839.638938] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 839.644073] __alloc_pages_nodemask+0x256/0x2a60 [ 839.648854] ? kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 839.653992] ? kvm_vcpu_ioctl+0x493/0xe30 [ 839.658155] ? do_vfs_ioctl+0xcdb/0x12e0 [ 839.662233] ? ksys_ioctl+0x9b/0xc0 [ 839.665972] ? __x64_sys_ioctl+0x6f/0xb0 [ 839.670174] ? do_syscall_64+0xf9/0x670 [ 839.675305] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 839.680734] ? mark_held_locks+0xa6/0xf0 [ 839.684857] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 839.689754] ? mark_held_locks+0xa6/0xf0 [ 839.693839] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 839.698741] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 839.703521] ? rcu_nmi_exit+0x102/0x220 [ 839.707685] ? retint_kernel+0x2d/0x2d 16:18:14 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x40}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 839.712113] alloc_pages_current+0x19d/0x2c0 [ 839.716547] __get_free_pages+0x8/0x40 [ 839.720463] mmu_topup_memory_caches+0x1d6/0x360 [ 839.726374] kvm_mmu_load+0x1e/0x1010 [ 839.730550] ? kvm_arch_vcpu_ioctl_run+0x192b/0x6c10 [ 839.735765] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 839.741704] ? mark_held_locks+0xf0/0xf0 [ 839.747016] ? kvm_vcpu_ioctl+0x175/0xe30 [ 839.751300] ? find_held_lock+0x2d/0x110 [ 839.755466] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 839.760350] ? get_task_pid+0x19d/0x320 [ 839.764346] ? lock_downgrade+0x750/0x750 [ 839.768889] ? check_preemption_disabled+0x41/0x2b0 [ 839.774189] ? kvm_vcpu_ioctl+0x493/0xe30 [ 839.778351] kvm_vcpu_ioctl+0x493/0xe30 [ 839.782809] ? kvm_get_dirty_log+0x590/0x590 [ 839.787269] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 839.791869] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 839.797253] ? rcu_nmi_exit+0x102/0x220 [ 839.801420] ? retint_kernel+0x2d/0x2d [ 839.805781] ? lock_release+0x429/0x8e0 [ 839.809800] ? kvm_get_dirty_log+0x590/0x590 [ 839.814225] do_vfs_ioctl+0xcdb/0x12e0 [ 839.819179] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 839.825086] ? ioctl_preallocate+0x200/0x200 [ 839.830891] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 839.838395] ? __fget+0x3ad/0x570 [ 839.842412] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 839.847713] ? rcu_nmi_exit+0x102/0x220 [ 839.851835] ksys_ioctl+0x9b/0xc0 [ 839.855850] __x64_sys_ioctl+0x6f/0xb0 [ 839.859894] do_syscall_64+0xf9/0x670 [ 839.864077] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 839.869373] RIP: 0033:0x45de59 [ 839.872763] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 839.892341] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 839.900050] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 839.908184] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 839.916336] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 839.927644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000041 [ 839.940009] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:18:15 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:15 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x0, 0x4}}, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x200200, 0x0) ioctl$FBIOGET_FSCREENINFO(r3, 0x4602, &(0x7f0000000140)) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) rt_sigqueueinfo(r4, 0x37, &(0x7f0000000240)={0x3a, 0x693d, 0x7}) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:15 executing program 3 (fault-call:8 fault-nth:66): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:18:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xeb860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:18:15 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:15 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000140)={0x0, 0x0, {0x4, 0x8001, 0x7, 0x9, 0xa, 0x8, 0x2, 0x7}}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 840.219926] FAULT_INJECTION: forcing a failure. [ 840.219926] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 840.238785] CPU: 0 PID: 5232 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 840.247868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 840.259327] Call Trace: [ 840.261943] dump_stack+0x22c/0x33e [ 840.265981] should_fail.cold+0xa/0x2f [ 840.269892] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 840.275601] __alloc_pages_nodemask+0x256/0x2a60 [ 840.280469] ? mark_held_locks+0xa6/0xf0 [ 840.284553] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 840.290038] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 840.295627] ? mark_held_locks+0xa6/0xf0 [ 840.299804] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 840.304790] ptrace attach of "/root/syz-executor.5"[5276] was attempted by "/root/syz-executor.5"[5277] [ 840.305306] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 840.305334] ? rcu_nmi_exit+0x102/0x220 [ 840.325446] ? retint_kernel+0x2d/0x2d [ 840.329452] alloc_pages_current+0x19d/0x2c0 [ 840.334707] __get_free_pages+0x8/0x40 [ 840.339416] mmu_topup_memory_caches+0x1d6/0x360 [ 840.344358] kvm_mmu_load+0x1e/0x1010 [ 840.349792] ? kvm_arch_vcpu_ioctl_run+0x19f0/0x6c10 [ 840.356208] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 840.362091] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 840.367831] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 840.372983] ? find_held_lock+0x2d/0x110 [ 840.377401] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 840.382415] ? get_task_pid+0x19d/0x320 [ 840.387439] ? lock_downgrade+0x750/0x750 [ 840.393412] ? lock_is_held_type+0x269/0x340 [ 840.397842] ? check_preemption_disabled+0x41/0x2b0 [ 840.402865] ? kvm_vcpu_ioctl+0x493/0xe30 [ 840.407022] kvm_vcpu_ioctl+0x493/0xe30 [ 840.411103] ? kvm_get_dirty_log+0x590/0x590 [ 840.415881] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 840.420647] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 840.426133] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 840.430897] ? rcu_nmi_exit+0x102/0x220 [ 840.435769] ? retint_kernel+0x2d/0x2d [ 840.440312] ? kvm_get_dirty_log+0x590/0x590 [ 840.446209] do_vfs_ioctl+0xcdb/0x12e0 [ 840.451800] ? selinux_file_ioctl+0x316/0x5e0 [ 840.456482] ? ioctl_preallocate+0x200/0x200 [ 840.460895] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 840.466348] ? __fget+0x3ad/0x570 [ 840.469905] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 840.474326] ? rcu_nmi_exit+0x102/0x220 [ 840.478411] ksys_ioctl+0x9b/0xc0 [ 840.481988] __x64_sys_ioctl+0x6f/0xb0 [ 840.486103] do_syscall_64+0xf9/0x670 [ 840.490026] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 840.495386] RIP: 0033:0x45de59 [ 840.499528] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 840.523128] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 840.532338] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 840.541396] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 840.549452] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 840.558991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000042 [ 840.569508] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:18:17 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xec860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:18:17 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800001f000000004400000044000000080000000000000067ffffffffffffff00000000000000010000000000000000000000000000000300000000000000000000000000f4ffffff0000000000000100000000060000020000000000000000"], 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RLCREATE(r4, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x80, 0x4, 0x6}, 0x7}}, 0x18) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000240)="c6d60000fb742bdb126bcada3b748a5fc6b2aca839cd70b853e38ea40d5a35fcffffff904655a35c4e7c970bff7351a3374f970ed5eaf696bf0bcd43a9aa00f4a557433365ea139ee5ac9dda03c9b5953b9e1a269c60d0fce2bedec85788b3a327f7e99f393738b3b6a21a4c557a727575490be98e491451016cd651a52c9b323e0b4c6eb6b4518950922a759a6bcba993dfbd3f8bdc2a16608ac73acc30296d05f37a793c75760166784c4668c96690e18888200a6d3cd780e817fe18d8a61c3e85f6ce4102249abdd92c46db6026465039c3c7b804ba97902be3dce53add821ddf0d55e558de11da") ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:17 executing program 3 (fault-call:8 fault-nth:67): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:18:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xed860100, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 842.661981] FAULT_INJECTION: forcing a failure. [ 842.661981] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 842.685296] CPU: 1 PID: 5303 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 842.693214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 842.703381] Call Trace: [ 842.706256] dump_stack+0x22c/0x33e 16:18:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xf0ffffff, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 842.710041] should_fail.cold+0xa/0x2f [ 842.715679] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 842.722896] __alloc_pages_nodemask+0x256/0x2a60 [ 842.728201] ? kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 842.733323] ? kvm_vcpu_ioctl+0x493/0xe30 [ 842.737492] ? do_vfs_ioctl+0xcdb/0x12e0 [ 842.741657] ? ksys_ioctl+0x9b/0xc0 [ 842.745315] ? __x64_sys_ioctl+0x6f/0xb0 [ 842.749875] ? do_syscall_64+0xf9/0x670 [ 842.753898] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 842.759278] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 842.763895] ? mark_held_locks+0xa6/0xf0 [ 842.767978] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 842.775050] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 842.779788] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 842.784747] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 842.789549] ? rcu_nmi_exit+0x102/0x220 [ 842.793575] ? __alloc_pages_nodemask+0x2b7/0x2a60 [ 842.798539] alloc_pages_current+0x19d/0x2c0 [ 842.804441] ? mpol_new_bind+0x90/0x90 [ 842.808377] __get_free_pages+0x8/0x40 [ 842.812999] mmu_topup_memory_caches+0x1d6/0x360 [ 842.821089] kvm_mmu_load+0x1e/0x1010 [ 842.827453] ? kvm_arch_vcpu_ioctl_run+0x323d/0x6c10 [ 842.834112] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 842.839058] ? mark_held_locks+0xf0/0xf0 [ 842.843143] ? kvm_vcpu_ioctl+0x175/0xe30 [ 842.847484] ? find_held_lock+0x2d/0x110 [ 842.851579] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 842.857476] ? get_task_pid+0x19d/0x320 [ 842.861705] ? lock_downgrade+0x750/0x750 [ 842.866885] ? check_preemption_disabled+0x41/0x2b0 [ 842.873042] ? kvm_vcpu_ioctl+0x493/0xe30 [ 842.877489] kvm_vcpu_ioctl+0x493/0xe30 [ 842.882963] ? kvm_get_dirty_log+0x590/0x590 [ 842.887481] ? mark_held_locks+0xf0/0xf0 [ 842.894840] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 842.901137] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 842.907034] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 842.912125] ? find_held_lock+0x2d/0x110 [ 842.916194] ? kvm_get_dirty_log+0x590/0x590 [ 842.920630] do_vfs_ioctl+0xcdb/0x12e0 [ 842.925745] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 842.932921] ? ioctl_preallocate+0x200/0x200 [ 842.937555] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 842.943023] ? __fget+0x3ad/0x570 [ 842.946478] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 842.950885] ksys_ioctl+0x9b/0xc0 [ 842.954432] __x64_sys_ioctl+0x6f/0xb0 [ 842.958931] do_syscall_64+0xf9/0x670 [ 842.962743] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 842.969147] RIP: 0033:0x45de59 [ 842.972869] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 842.995947] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 843.003662] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 843.010954] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 843.018486] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 843.028291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000043 [ 843.036445] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:18:18 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180000000000000044000000440000000800000000000000000000080000000000000000000000010000000000000000000000000000000000000000000000000000000000000100"/91], 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xfeffffff, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:18:18 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:18 executing program 3 (fault-call:8 fault-nth:68): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:18:18 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0xb0881, 0x0) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000000140)=[0xbe, 0x1ff]) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xff7f0000, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 843.306297] FAULT_INJECTION: forcing a failure. [ 843.306297] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 843.347844] CPU: 0 PID: 5433 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 843.355719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 843.365353] Call Trace: [ 843.367976] dump_stack+0x22c/0x33e [ 843.374007] should_fail.cold+0xa/0x2f [ 843.378016] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 843.383233] __alloc_pages_nodemask+0x256/0x2a60 [ 843.388027] ? finish_task_switch+0x29c/0x8b0 [ 843.392557] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 843.397503] ? mark_held_locks+0xa6/0xf0 [ 843.403859] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 843.408645] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 843.413419] ? rcu_nmi_exit+0x102/0x220 [ 843.422278] ? retint_kernel+0x2d/0x2d [ 843.426315] alloc_pages_current+0x19d/0x2c0 [ 843.430775] ? alloc_pages_current+0x2/0x2c0 [ 843.435206] __get_free_pages+0x8/0x40 [ 843.439195] mmu_topup_memory_caches+0x1d6/0x360 [ 843.444073] kvm_mmu_load+0x1e/0x1010 [ 843.448029] ? kvm_arch_vcpu_ioctl_run+0x1ff1/0x6c10 [ 843.453247] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 843.458996] ? mark_held_locks+0xa6/0xf0 [ 843.463187] ? find_held_lock+0x2d/0x110 [ 843.467297] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 843.472291] ? get_task_pid+0x19d/0x320 [ 843.476315] ? lock_downgrade+0x750/0x750 [ 843.481096] ? check_preemption_disabled+0x41/0x2b0 [ 843.487183] ? kvm_vcpu_ioctl+0x493/0xe30 [ 843.491999] kvm_vcpu_ioctl+0x493/0xe30 [ 843.496094] ? kvm_get_dirty_log+0x590/0x590 [ 843.500786] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 843.505563] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 843.510164] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 843.514992] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 843.519584] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 843.525155] ? rcu_nmi_exit+0x102/0x220 [ 843.529143] ? retint_kernel+0x2d/0x2d [ 843.536524] ? kvm_get_dirty_log+0x590/0x590 [ 843.541765] do_vfs_ioctl+0xcdb/0x12e0 [ 843.545683] ? selinux_file_ioctl+0x263/0x5e0 [ 843.550809] ? ioctl_preallocate+0x200/0x200 [ 843.555232] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 843.560694] ? __fget+0x3ad/0x570 [ 843.564157] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 843.568441] ? rcu_nmi_exit+0x102/0x220 [ 843.572423] ksys_ioctl+0x9b/0xc0 [ 843.575981] __x64_sys_ioctl+0x6f/0xb0 [ 843.579873] do_syscall_64+0xf9/0x670 [ 843.583676] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 843.588880] RIP: 0033:0x45de59 [ 843.592071] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 843.611071] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 843.618785] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 843.626051] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 843.633332] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 843.640590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000044 [ 843.647882] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:18:20 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xffffa888, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:18:20 executing program 3 (fault-call:8 fault-nth:69): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:18:20 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a60d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r1) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000080)={0x200, 0x4c, {r0}, {0xee01}, 0x0, 0x7ff}) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r3, 0xc1105518, &(0x7f0000000240)={{0x6, 0x6, 0x1f, 0x7, 'syz0\x00', 0x7fb}, 0x3, 0x3, 0x7, r4, 0x1, 0x8, 'syz1\x00', &(0x7f0000000140)=['*)\x00'], 0x3, [], [0x2, 0x83a, 0x1e, 0x4]}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ioctl$FITHAW(r2, 0xc0045878) ptrace$cont(0x7, r0, 0x0, 0x0) [ 845.687642] FAULT_INJECTION: forcing a failure. [ 845.687642] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 845.702763] CPU: 1 PID: 5513 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 845.710619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 845.719982] Call Trace: [ 845.722579] dump_stack+0x22c/0x33e [ 845.726218] should_fail.cold+0xa/0x2f [ 845.730116] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 845.735243] __alloc_pages_nodemask+0x256/0x2a60 [ 845.740015] ? kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 845.745115] ? kvm_vcpu_ioctl+0x493/0xe30 [ 845.749302] ? do_vfs_ioctl+0xcdb/0x12e0 [ 845.753390] ? ksys_ioctl+0x9b/0xc0 [ 845.757009] ? __x64_sys_ioctl+0x6f/0xb0 [ 845.762471] ? do_syscall_64+0xf9/0x670 [ 845.766446] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 845.771834] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 845.776586] ? mark_held_locks+0xf0/0xf0 [ 845.780643] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 845.785490] ? mark_held_locks+0xa6/0xf0 [ 845.789538] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 845.794899] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 845.799642] ? rcu_nmi_exit+0x102/0x220 [ 845.803602] ? retint_kernel+0x2d/0x2d [ 845.807482] alloc_pages_current+0x19d/0x2c0 [ 845.811881] __get_free_pages+0x8/0x40 [ 845.815753] mmu_topup_memory_caches+0x1d6/0x360 [ 845.820518] kvm_mmu_load+0x1e/0x1010 [ 845.824321] ? kvm_cpu_has_injectable_intr+0x29c/0x3c0 [ 845.829698] ? __sanitizer_cov_trace_pc+0x44/0x50 [ 845.834804] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 845.839762] ? mark_held_locks+0xa6/0xf0 [ 845.843831] ? find_held_lock+0x2d/0x110 [ 845.847892] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 845.852765] ? get_task_pid+0x19d/0x320 [ 845.856729] ? lock_downgrade+0x750/0x750 [ 845.860865] ? get_task_pid+0x227/0x320 [ 845.864826] ? kvm_vcpu_ioctl+0x493/0xe30 [ 845.868958] kvm_vcpu_ioctl+0x493/0xe30 [ 845.872926] ? kvm_get_dirty_log+0x590/0x590 [ 845.877344] ? finish_task_switch+0x56c/0x8b0 [ 845.881831] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 845.886576] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 845.891154] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 845.895907] ? rcu_nmi_exit+0x102/0x220 [ 845.899886] ? retint_kernel+0x2d/0x2d [ 845.903767] ? kvm_get_dirty_log+0x590/0x590 [ 845.908356] do_vfs_ioctl+0xcdb/0x12e0 [ 845.912265] ? selinux_file_ioctl+0x32e/0x5e0 [ 845.916750] ? ioctl_preallocate+0x200/0x200 [ 845.921167] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 845.926613] ? __fget+0x3ad/0x570 [ 845.930061] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 845.934329] ksys_ioctl+0x9b/0xc0 [ 845.937814] __x64_sys_ioctl+0x6f/0xb0 [ 845.941695] do_syscall_64+0xf9/0x670 [ 845.945487] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 845.950667] RIP: 0033:0x45de59 [ 845.953861] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 845.972765] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 845.980559] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 16:18:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xfffff000, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 845.987845] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 845.995118] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 846.002384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000045 [ 846.009650] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:18:21 executing program 3 (fault-call:8 fault-nth:70): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:18:21 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xffffff7f, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:18:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 846.332144] FAULT_INJECTION: forcing a failure. [ 846.332144] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 846.358032] CPU: 1 PID: 5602 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 846.365859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 846.375222] Call Trace: [ 846.377843] dump_stack+0x22c/0x33e 16:18:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xffffffe4, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 846.381487] should_fail.cold+0xa/0x2f [ 846.385385] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 846.390521] __alloc_pages_nodemask+0x256/0x2a60 [ 846.395302] ? kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 846.400418] ? kvm_vcpu_ioctl+0x493/0xe30 [ 846.404597] ? do_vfs_ioctl+0xcdb/0x12e0 [ 846.408690] ? ksys_ioctl+0x9b/0xc0 [ 846.412329] ? __x64_sys_ioctl+0x6f/0xb0 [ 846.416396] ? do_syscall_64+0xf9/0x670 [ 846.420383] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 846.425764] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 846.430398] ? mark_held_locks+0xa6/0xf0 [ 846.434589] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 846.439368] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 846.444236] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 846.448854] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 846.453810] ? rcu_nmi_exit+0x102/0x220 [ 846.457803] ? retint_kernel+0x2d/0x2d [ 846.461720] alloc_pages_current+0x19d/0x2c0 [ 846.466172] __get_free_pages+0x8/0x40 [ 846.470168] mmu_topup_memory_caches+0x1d6/0x360 [ 846.475039] kvm_mmu_load+0x1e/0x1010 [ 846.478863] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 846.483807] ? mark_held_locks+0xf0/0xf0 [ 846.487883] ? mark_held_locks+0xa6/0xf0 [ 846.491982] ? find_held_lock+0x2d/0x110 [ 846.496059] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 846.504560] ? get_task_pid+0x19d/0x320 [ 846.508561] ? lock_downgrade+0x750/0x750 [ 846.512725] ? check_preemption_disabled+0x41/0x2b0 [ 846.517759] ? kvm_vcpu_ioctl+0x493/0xe30 [ 846.521904] kvm_vcpu_ioctl+0x493/0xe30 [ 846.525878] ? kvm_get_dirty_log+0x590/0x590 [ 846.530272] ? mark_held_locks+0xa6/0xf0 [ 846.534319] ? mark_held_locks+0xf0/0xf0 [ 846.538401] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 846.542969] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 846.547737] ? rcu_nmi_exit+0x102/0x220 [ 846.551717] ? find_held_lock+0x2d/0x110 [ 846.555771] ? kvm_get_dirty_log+0x590/0x590 [ 846.560182] do_vfs_ioctl+0xcdb/0x12e0 [ 846.564063] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 846.570471] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 846.575252] ? ioctl_preallocate+0x200/0x200 [ 846.579654] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 846.584234] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 846.591263] ? rcu_nmi_exit+0x102/0x220 [ 846.595250] ? retint_kernel+0x2d/0x2d [ 846.599144] ksys_ioctl+0x9b/0xc0 [ 846.602618] __x64_sys_ioctl+0x6f/0xb0 [ 846.606512] do_syscall_64+0xf9/0x670 [ 846.610750] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 846.615950] RIP: 0033:0x45de59 16:18:21 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x0, 0x0, 0x10000000}}, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xfffffff0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 846.619141] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 846.638049] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 846.646721] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 846.653997] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 846.661279] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 846.668540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000046 [ 846.675800] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:18:23 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:23 executing program 3 (fault-call:8 fault-nth:71): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:18:23 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000080000044ffff000000000008000000000000000000000800000000000000000000000100000000000000000000000000000003000000000000000000000000000000000000000000000001b003eb68addf986b89f613b10600"/109], 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_ADDFB(r4, 0xc01c64ae, &(0x7f0000000080)={0x101, 0x8, 0x46ed73e6, 0xffff, 0x81, 0x3, 0x400}) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xfffffffe, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:18:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xffffffff, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 848.731538] FAULT_INJECTION: forcing a failure. [ 848.731538] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 848.766601] CPU: 1 PID: 5768 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 848.774440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 848.783800] Call Trace: [ 848.786407] dump_stack+0x22c/0x33e [ 848.790050] should_fail.cold+0xa/0x2f [ 848.793952] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 848.799082] __alloc_pages_nodemask+0x256/0x2a60 [ 848.803865] ? finish_task_switch+0x29c/0x8b0 [ 848.808393] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 848.813253] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 848.818039] ? retint_kernel+0x2d/0x2d [ 848.821952] ? policy_node+0x14/0x140 [ 848.825768] ? policy_node+0x30/0x140 16:18:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x9, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 848.829612] alloc_pages_current+0x19d/0x2c0 [ 848.834041] __get_free_pages+0x8/0x40 [ 848.837944] mmu_topup_memory_caches+0x1d6/0x360 [ 848.842853] kvm_mmu_load+0x1e/0x1010 [ 848.846671] ? kvm_arch_vcpu_ioctl_run+0x1ed6/0x6c10 [ 848.851803] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 848.856747] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 848.861337] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 848.866132] ? find_held_lock+0x2d/0x110 [ 848.870198] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 848.875074] ? get_task_pid+0x19d/0x320 [ 848.880197] ? lock_downgrade+0x750/0x750 [ 848.884365] ? check_preemption_disabled+0x41/0x2b0 [ 848.889422] ? kvm_vcpu_ioctl+0x493/0xe30 [ 848.893663] kvm_vcpu_ioctl+0x493/0xe30 [ 848.897643] ? pid_task+0x64/0x170 [ 848.901191] ? kvm_get_dirty_log+0x590/0x590 [ 848.905612] ? mark_held_locks+0xf0/0xf0 [ 848.909679] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 848.914439] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 848.919204] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 848.923971] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 848.928909] ? find_held_lock+0x2d/0x110 [ 848.933012] ? kvm_get_dirty_log+0x590/0x590 [ 848.937421] do_vfs_ioctl+0xcdb/0x12e0 [ 848.941299] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 848.946483] ? ioctl_preallocate+0x200/0x200 [ 848.950880] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 848.956351] ? __fget+0x3ad/0x570 [ 848.959789] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 848.964017] ? rcu_nmi_exit+0x102/0x220 [ 848.967991] ksys_ioctl+0x9b/0xc0 [ 848.971455] __x64_sys_ioctl+0x6f/0xb0 [ 848.975341] do_syscall_64+0xf9/0x670 [ 848.979130] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 848.984305] RIP: 0033:0x45de59 [ 848.987490] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 849.006437] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 849.014152] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 849.021525] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 849.028788] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 849.036060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000047 [ 849.043341] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:18:24 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0xf, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:18:24 executing program 3 (fault-call:8 fault-nth:72): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 849.303444] FAULT_INJECTION: forcing a failure. [ 849.303444] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 849.317333] CPU: 0 PID: 5859 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 849.325149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 849.334511] Call Trace: [ 849.337114] dump_stack+0x22c/0x33e [ 849.340886] should_fail.cold+0xa/0x2f [ 849.344825] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 849.349954] __alloc_pages_nodemask+0x256/0x2a60 [ 849.354728] ? kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 849.359874] ? kvm_vcpu_ioctl+0x493/0xe30 [ 849.364031] ? do_vfs_ioctl+0xcdb/0x12e0 [ 849.368095] ? ksys_ioctl+0x9b/0xc0 [ 849.372158] ? __x64_sys_ioctl+0x6f/0xb0 [ 849.376222] ? do_syscall_64+0xf9/0x670 [ 849.380396] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 849.385788] ? mark_held_locks+0xf0/0xf0 [ 849.389879] ? mark_held_locks+0xa6/0xf0 [ 849.393961] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 849.398757] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 849.403715] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 849.408421] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 849.410630] ptrace attach of "/root/syz-executor.1"[5867] was attempted by "/root/syz-executor.1"[5868] [ 849.413325] ? rcu_nmi_exit+0x102/0x220 [ 849.413344] ? retint_kernel+0x2d/0x2d [ 849.413367] ? alloc_pages_current+0x16/0x2c0 [ 849.413383] alloc_pages_current+0x19d/0x2c0 [ 849.413401] __get_free_pages+0x8/0x40 [ 849.413416] mmu_topup_memory_caches+0x1d6/0x360 [ 849.413434] kvm_mmu_load+0x1e/0x1010 [ 849.413454] ? kvm_arch_vcpu_ioctl_run+0x3147/0x6c10 [ 849.413472] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 849.413489] ? mark_held_locks+0xa6/0xf0 [ 849.413519] ? find_held_lock+0x2d/0x110 [ 849.471362] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 849.476228] ? get_task_pid+0x19d/0x320 [ 849.480221] ? lock_downgrade+0x750/0x750 [ 849.484422] ? check_preemption_disabled+0x41/0x2b0 [ 849.489457] ? kvm_vcpu_ioctl+0x493/0xe30 [ 849.493784] kvm_vcpu_ioctl+0x493/0xe30 [ 849.497770] ? kvm_get_dirty_log+0x590/0x590 [ 849.502186] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 849.506957] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 849.511554] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 849.516332] ? rcu_nmi_exit+0x102/0x220 [ 849.520316] ? retint_kernel+0x2d/0x2d [ 849.524219] ? kvm_get_dirty_log+0x590/0x590 [ 849.528654] ? kvm_get_dirty_log+0x590/0x590 [ 849.533081] do_vfs_ioctl+0xcdb/0x12e0 [ 849.536984] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 849.542190] ? ioctl_preallocate+0x200/0x200 [ 849.546703] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 16:18:24 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 849.552180] ? __fget+0x3ad/0x570 [ 849.555651] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 849.559903] ? __sanitizer_cov_trace_pc+0x40/0x50 [ 849.564787] ksys_ioctl+0x9b/0xc0 [ 849.568256] __x64_sys_ioctl+0x6f/0xb0 [ 849.572155] do_syscall_64+0xf9/0x670 [ 849.575967] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 849.581166] RIP: 0033:0x45de59 [ 849.584365] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 849.603440] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 849.611140] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 849.618400] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 849.625663] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 849.632943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000048 [ 849.640321] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:18:24 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) dup2(r2, r2) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000080)={0xb0b, {0x8, 0x8000000000000000, 0x5, 0x3, 0x6}}) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350298e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c004c893f20e96beeb0800000000000000f1ce8682500fcecd80", 0x45}], 0x2, 0xa) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x10, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:18:26 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:26 executing program 3 (fault-call:8 fault-nth:73): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:18:26 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000240)=""/246) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x30, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:26 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) fcntl$getown(r1, 0x9) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000080)=0x0) ptrace$cont(0x7, r5, 0x6, 0xffff) 16:18:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0xc0, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:18:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0xec0, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:18:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x33fe0, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 851.764705] FAULT_INJECTION: forcing a failure. [ 851.764705] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 851.801152] CPU: 1 PID: 5895 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 851.809082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 851.818446] Call Trace: [ 851.822004] dump_stack+0x22c/0x33e [ 851.825655] should_fail.cold+0xa/0x2f [ 851.829562] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 851.834698] __alloc_pages_nodemask+0x256/0x2a60 [ 851.839474] ? kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 851.844598] ? kvm_vcpu_ioctl+0x493/0xe30 [ 851.848766] ? do_vfs_ioctl+0xcdb/0x12e0 [ 851.852839] ? ksys_ioctl+0x9b/0xc0 [ 851.856481] ? __x64_sys_ioctl+0x6f/0xb0 [ 851.860994] ? do_syscall_64+0xf9/0x670 [ 851.865022] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 851.870415] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 851.875197] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 851.880168] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 851.885550] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 851.890333] ? rcu_nmi_exit+0x102/0x220 [ 851.894350] ? policy_node+0x52/0x140 [ 851.898176] ? policy_node+0xa7/0x140 [ 851.902002] ? __sanitizer_cov_trace_pc+0x14/0x50 [ 851.906871] alloc_pages_current+0x19d/0x2c0 [ 851.911307] __get_free_pages+0x8/0x40 16:18:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x200005bc, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:18:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x7ffff000, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 851.915251] mmu_topup_memory_caches+0x1d6/0x360 [ 851.920036] kvm_mmu_load+0x1e/0x1010 [ 851.923871] ? kvm_arch_vcpu_ioctl_run+0x2020/0x6c10 [ 851.929002] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 851.933963] ? mark_held_locks+0xa6/0xf0 [ 851.938053] ? calibrate_delay.cold+0x1d3/0x227 [ 851.942739] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 851.947607] ? kvm_arch_vcpu_ioctl_run+0x2c/0x6c10 [ 851.952570] ? kvm_vcpu_ioctl+0x493/0xe30 [ 851.956708] kvm_vcpu_ioctl+0x493/0xe30 [ 851.960687] ? kvm_get_dirty_log+0x590/0x590 [ 851.965228] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 851.969828] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 851.974573] ? rcu_nmi_exit+0x102/0x220 [ 851.978580] ? retint_kernel+0x2d/0x2d [ 851.982467] ? __fget+0x386/0x570 [ 851.985918] ? find_held_lock+0x2d/0x110 [ 851.989971] ? kvm_get_dirty_log+0x590/0x590 [ 851.994394] do_vfs_ioctl+0xcdb/0x12e0 [ 851.998281] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 852.003472] ? ioctl_preallocate+0x200/0x200 [ 852.007878] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 852.013329] ? __fget+0x3ad/0x570 [ 852.016803] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 852.021053] ? rcu_nmi_exit+0x102/0x220 [ 852.025038] ksys_ioctl+0x9b/0xc0 [ 852.028483] __x64_sys_ioctl+0x6f/0xb0 [ 852.032394] do_syscall_64+0xf9/0x670 [ 852.036207] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 852.041402] RIP: 0033:0x45de59 [ 852.044613] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 852.063508] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 852.071218] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 852.078597] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 852.085875] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 852.093136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000049 [ 852.100399] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:18:27 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x2, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:18:27 executing program 3 (fault-call:8 fault-nth:74): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 852.517649] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=5928 comm=syz-executor.2 [ 852.590361] FAULT_INJECTION: forcing a failure. [ 852.590361] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 852.604484] CPU: 1 PID: 5929 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 852.612485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 852.621845] Call Trace: [ 852.624449] dump_stack+0x22c/0x33e [ 852.628081] should_fail.cold+0xa/0x2f [ 852.631959] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 852.637059] __alloc_pages_nodemask+0x256/0x2a60 [ 852.641819] ? finish_task_switch+0x29c/0x8b0 [ 852.646325] ? mark_held_locks+0xa6/0xf0 [ 852.650405] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 852.655258] ? mark_held_locks+0xa6/0xf0 [ 852.659317] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 852.664093] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 852.668886] ? rcu_nmi_exit+0x102/0x220 [ 852.672872] ? retint_kernel+0x2d/0x2d [ 852.676761] alloc_pages_current+0x19d/0x2c0 [ 852.681178] __get_free_pages+0x8/0x40 [ 852.685080] mmu_topup_memory_caches+0x1d6/0x360 [ 852.689835] kvm_mmu_load+0x1e/0x1010 [ 852.693642] ? kvm_arch_vcpu_ioctl_run+0x3af9/0x6c10 [ 852.698738] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 852.703675] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 852.708424] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 852.712996] ? find_held_lock+0x2d/0x110 [ 852.717046] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 852.721881] ? get_task_pid+0x19d/0x320 [ 852.726102] ? lock_downgrade+0x750/0x750 [ 852.730237] ? check_preemption_disabled+0x41/0x2b0 [ 852.735245] ? kvm_vcpu_ioctl+0x493/0xe30 [ 852.739395] kvm_vcpu_ioctl+0x493/0xe30 [ 852.743375] ? kvm_get_dirty_log+0x590/0x590 [ 852.747788] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 852.752546] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 852.757115] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 852.761865] ? rcu_nmi_exit+0x102/0x220 [ 852.765827] ? retint_kernel+0x2d/0x2d [ 852.769699] ? kvm_get_dirty_log+0x590/0x590 [ 852.774104] do_vfs_ioctl+0xcdb/0x12e0 [ 852.777999] ? selinux_file_ioctl+0x32e/0x5e0 [ 852.782498] ? ioctl_preallocate+0x200/0x200 [ 852.786896] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 852.792377] ? __fget+0x3ad/0x570 [ 852.795835] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 852.800058] ? rcu_nmi_exit+0x102/0x220 [ 852.804026] ksys_ioctl+0x9b/0xc0 [ 852.808616] __x64_sys_ioctl+0x6f/0xb0 [ 852.812502] do_syscall_64+0xf9/0x670 [ 852.816311] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 852.821507] RIP: 0033:0x45de59 [ 852.824698] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 852.843588] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 852.851297] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 852.858576] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 852.865847] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 852.873109] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000004a [ 852.880370] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:18:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x3, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:18:29 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:29 executing program 3 (fault-call:8 fault-nth:75): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:18:29 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000440000004400000008000000000000000000000800000000000000000000000100000000000000000000000000000003000000000000000000000000000000000000000000000001000000000000000000758f90b6000000"], 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:29 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0xd9e701e3ed718a0, 0x8, [@typedef, @int, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1}}, @int]}, {0x0, [0x0, 0x0, 0x2e, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:29 executing program 5: delete_module(&(0x7f0000000080)='7^/@&!-#*@&*-^#^!]%\x00', 0xa00) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000030000004400000008000000000000010000000800fd000000000000000000000003000000000000000000000100000000000000ba858e0859737e10000000000000000000080000000000"], 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000300)={&(0x7f0000000140), 0x10, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0600000000000000ffffff7f00000000", @ANYRES64=r3, @ANYRES64=r4/1000+60000, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="010000600100ccd30694a5c93e42870abf016fec73a0fde0c4c9b7301a0202a24cb4658b6795efae69f85e7a1bbc07615dfb4aea86a8e1d54ec1807900"/72], 0x80}, 0x1, 0x0, 0x0, 0x40014}, 0x1) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000240)={0x1, 0x2}, 0x2) [ 854.735754] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=5948 comm=syz-executor.2 16:18:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x4, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 854.839777] FAULT_INJECTION: forcing a failure. [ 854.839777] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 854.863687] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=5971 comm=syz-executor.2 [ 854.873346] CPU: 1 PID: 5950 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 16:18:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x5, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 854.883482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 854.893976] Call Trace: [ 854.896578] dump_stack+0x22c/0x33e [ 854.900247] should_fail.cold+0xa/0x2f [ 854.904154] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 854.909319] __alloc_pages_nodemask+0x256/0x2a60 [ 854.914097] ? kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 854.919220] ? kvm_vcpu_ioctl+0x493/0xe30 [ 854.923381] ? do_vfs_ioctl+0xcdb/0x12e0 [ 854.927480] ? ksys_ioctl+0x9b/0xc0 [ 854.931119] ? __x64_sys_ioctl+0x6f/0xb0 [ 854.935195] ? do_syscall_64+0xf9/0x670 [ 854.939186] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 854.944576] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 854.947564] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=5978 comm=syz-executor.2 [ 854.949352] ? mark_held_locks+0xa6/0xf0 [ 854.949373] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 854.949388] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 854.949409] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 854.979596] ? rcu_nmi_exit+0x102/0x220 [ 854.983615] ? retint_kernel+0x2d/0x2d 16:18:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x6, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 854.987526] alloc_pages_current+0x19d/0x2c0 [ 854.991946] __get_free_pages+0x8/0x40 [ 854.995870] mmu_topup_memory_caches+0x1d6/0x360 [ 855.000644] kvm_mmu_load+0x1e/0x1010 [ 855.004499] ? kvm_arch_vcpu_ioctl_run+0x2020/0x6c10 [ 855.009623] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 855.014571] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 855.019345] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 855.023958] ? find_held_lock+0x2d/0x110 [ 855.024790] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=5980 comm=syz-executor.2 [ 855.028035] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 855.028050] ? get_task_pid+0x19d/0x320 [ 855.028070] ? lock_downgrade+0x750/0x750 [ 855.028082] ? lock_is_held_type+0x269/0x340 [ 855.028101] ? check_preemption_disabled+0x41/0x2b0 [ 855.062424] ? kvm_vcpu_ioctl+0x493/0xe30 [ 855.066585] kvm_vcpu_ioctl+0x493/0xe30 [ 855.070573] ? kvm_get_dirty_log+0x590/0x590 [ 855.075006] ? mark_held_locks+0xf0/0xf0 [ 855.079087] ? proc_fail_nth_write+0x95/0x1d0 [ 855.083597] ? proc_tgid_io_accounting+0x7f0/0x7f0 [ 855.088538] ? mark_held_locks+0xa6/0xf0 [ 855.092613] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 855.097390] ? find_held_lock+0x2d/0x110 [ 855.101470] ? kvm_get_dirty_log+0x590/0x590 [ 855.105886] do_vfs_ioctl+0xcdb/0x12e0 [ 855.109777] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 855.114955] ? ioctl_preallocate+0x200/0x200 [ 855.119350] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 855.124791] ? retint_kernel+0x2d/0x2d [ 855.128674] ksys_ioctl+0x9b/0xc0 [ 855.132113] __x64_sys_ioctl+0x6f/0xb0 [ 855.135989] do_syscall_64+0xf9/0x670 [ 855.139782] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 855.144979] RIP: 0033:0x45de59 [ 855.148157] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 855.167066] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 855.174881] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 855.182140] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 855.189398] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 855.196668] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000004b [ 855.203924] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:18:30 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x8, [@int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x7, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:18:30 executing program 3 (fault-call:8 fault-nth:76): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 855.551404] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=5988 comm=syz-executor.2 16:18:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x8, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 855.650396] FAULT_INJECTION: forcing a failure. [ 855.650396] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 855.657268] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=5999 comm=syz-executor.2 [ 855.664537] CPU: 0 PID: 5989 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 855.683657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 855.693023] Call Trace: [ 855.695622] dump_stack+0x22c/0x33e [ 855.699264] should_fail.cold+0xa/0x2f [ 855.703160] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 855.708280] __alloc_pages_nodemask+0x256/0x2a60 [ 855.713049] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 855.717812] ? rcu_nmi_exit+0x102/0x220 [ 855.721838] ? mark_held_locks+0xa6/0xf0 [ 855.725899] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 855.730742] ? mark_held_locks+0xa6/0xf0 [ 855.734803] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 855.739581] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 855.744337] ? rcu_nmi_exit+0x102/0x220 [ 855.748304] ? retint_kernel+0x2d/0x2d [ 855.752196] alloc_pages_current+0x19d/0x2c0 [ 855.756613] __get_free_pages+0x8/0x40 [ 855.760500] mmu_topup_memory_caches+0x1d6/0x360 [ 855.765251] kvm_mmu_load+0x1e/0x1010 [ 855.769039] ? kvm_arch_vcpu_ioctl_run+0x1f64/0x6c10 [ 855.774177] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 855.779121] ? mark_held_locks+0xf0/0xf0 [ 855.783169] ? kvm_vcpu_ioctl+0x175/0xe30 [ 855.787328] ? find_held_lock+0x2d/0x110 [ 855.791386] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 855.796226] ? get_task_pid+0x19d/0x320 [ 855.800220] ? lock_downgrade+0x750/0x750 [ 855.804374] ? check_preemption_disabled+0x41/0x2b0 [ 855.809401] ? kvm_vcpu_ioctl+0x493/0xe30 [ 855.813543] kvm_vcpu_ioctl+0x493/0xe30 [ 855.817524] ? kvm_get_dirty_log+0x590/0x590 [ 855.821942] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 855.826686] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 855.831304] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 855.836072] ? rcu_nmi_exit+0x102/0x220 [ 855.840057] ? retint_kernel+0x2d/0x2d [ 855.843957] ? kvm_get_dirty_log+0x590/0x590 [ 855.848382] do_vfs_ioctl+0xcdb/0x12e0 [ 855.852268] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 855.857459] ? ioctl_preallocate+0x200/0x200 [ 855.861921] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 855.867376] ? __fget+0x3ad/0x570 [ 855.870856] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 855.875095] ? rcu_nmi_exit+0x102/0x220 [ 855.879094] ksys_ioctl+0x9b/0xc0 [ 855.882540] __x64_sys_ioctl+0x6f/0xb0 [ 855.886434] do_syscall_64+0xf9/0x670 [ 855.890238] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 855.895445] RIP: 0033:0x45de59 [ 855.898640] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 855.917550] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 855.925273] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 855.932549] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 855.939891] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 855.947170] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000004c [ 855.954435] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:18:32 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x9, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:18:32 executing program 3 (fault-call:8 fault-nth:77): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:18:32 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r0}, 0x8) ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, &(0x7f0000000180)=0x6) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="110d000000000000000009000000080003007b8132cef89a73c9e60593870bb1db7e92f05a717d096b7b7484d05eff558034f5dd29df6c29e0f89da24a61a9664a422d", @ANYRES32=0x0, @ANYBLOB="08000600", @ANYRES32=r6, @ANYBLOB], 0x24}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f00000002c0)={0x3d8, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8}, {0x190, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0xffffff81}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x2c, 0x4, [{0x0, 0x7, 0xaf, 0x200}, {0x7, 0x0, 0x1, 0x7}, {0x200, 0x5, 0x1f, 0x2dd}, {0x5, 0x9, 0x2, 0x30}, {0xef8a, 0x99, 0x7f, 0x101}]}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0xfffff7d5}}, {0x8}}}]}}, {{0x8}, {0x224, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0xfffffffffffffe85, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x729}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xff}}}]}}]}, 0x3d8}, 0x1, 0x0, 0x0, 0xa800}, 0x10) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 16:18:33 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ffc000/0x3000)=nil, 0x1000, 0x8, 0x4010, r2, 0x83000000) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 857.819987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9 sclass=netlink_route_socket pid=6010 comm=syz-executor.2 16:18:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0xa, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 857.917591] FAULT_INJECTION: forcing a failure. [ 857.917591] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 857.944823] CPU: 1 PID: 6011 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 857.952664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 857.962031] Call Trace: [ 857.964642] dump_stack+0x22c/0x33e [ 857.968280] should_fail.cold+0xa/0x2f [ 857.972214] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 857.977338] __alloc_pages_nodemask+0x256/0x2a60 [ 857.982111] ? kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 857.985401] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10 sclass=netlink_route_socket pid=6032 comm=syz-executor.2 [ 857.987361] ? kvm_vcpu_ioctl+0x493/0xe30 [ 857.987376] ? do_vfs_ioctl+0xcdb/0x12e0 [ 857.987389] ? ksys_ioctl+0x9b/0xc0 [ 857.987401] ? __x64_sys_ioctl+0x6f/0xb0 16:18:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0xb, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 857.987416] ? do_syscall_64+0xf9/0x670 [ 857.987437] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 858.025004] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 858.029878] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 858.035274] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 858.039443] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=6034 comm=syz-executor.2 [ 858.040670] ? mark_held_locks+0xa6/0xf0 [ 858.040689] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 858.040709] ? trace_hardirqs_on_thunk+0x1a/0x1c 16:18:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0xc, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 858.040728] ? rcu_nmi_exit+0x102/0x220 [ 858.070760] ? retint_kernel+0x2d/0x2d [ 858.074688] alloc_pages_current+0x19d/0x2c0 [ 858.079205] __get_free_pages+0x8/0x40 [ 858.083116] mmu_topup_memory_caches+0x1d6/0x360 [ 858.087891] kvm_mmu_load+0x1e/0x1010 [ 858.091341] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=6036 comm=syz-executor.2 [ 858.091708] ? kvm_arch_vcpu_ioctl_run+0x3d50/0x6c10 [ 858.108910] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 858.113955] ? mark_held_locks+0xa6/0xf0 [ 858.118042] ? find_held_lock+0x2d/0x110 [ 858.122164] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 858.127016] ? get_task_pid+0x19d/0x320 [ 858.131015] ? lock_downgrade+0x750/0x750 [ 858.135183] ? check_preemption_disabled+0x41/0x2b0 [ 858.140228] ? kvm_vcpu_ioctl+0x493/0xe30 [ 858.144391] kvm_vcpu_ioctl+0x493/0xe30 [ 858.148382] ? kvm_get_dirty_log+0x590/0x590 [ 858.152795] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 858.157677] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 858.162270] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 858.167026] ? rcu_nmi_exit+0x102/0x220 [ 858.170996] ? retint_kernel+0x2d/0x2d [ 858.174894] ? do_vfs_ioctl+0x91/0x12e0 [ 858.178861] ? kvm_get_dirty_log+0x590/0x590 [ 858.183282] do_vfs_ioctl+0xcdb/0x12e0 [ 858.187167] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 858.192368] ? ioctl_preallocate+0x200/0x200 [ 858.196782] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 858.202232] ? __fget+0x3ad/0x570 [ 858.205843] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 858.210312] ? rcu_nmi_exit+0x102/0x220 [ 858.214304] ksys_ioctl+0x9b/0xc0 [ 858.217755] __x64_sys_ioctl+0x6f/0xb0 [ 858.221755] do_syscall_64+0xf9/0x670 [ 858.225562] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 858.230768] RIP: 0033:0x45de59 [ 858.234053] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 858.253045] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 858.260745] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 858.268019] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 858.275296] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 858.282587] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000004d [ 858.289845] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:18:33 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x8, [@int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0xd, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:18:33 executing program 3 (fault-call:8 fault-nth:78): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 858.612019] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13 sclass=netlink_route_socket pid=6045 comm=syz-executor.2 16:18:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0xe, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 858.688342] FAULT_INJECTION: forcing a failure. [ 858.688342] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 858.709027] CPU: 1 PID: 6044 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 858.716854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 858.726240] Call Trace: [ 858.728840] dump_stack+0x22c/0x33e [ 858.732521] should_fail.cold+0xa/0x2f [ 858.737036] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 858.738832] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14 sclass=netlink_route_socket pid=6054 comm=syz-executor.2 [ 858.742187] __alloc_pages_nodemask+0x256/0x2a60 [ 858.742207] ? kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 858.742220] ? kvm_vcpu_ioctl+0x493/0xe30 [ 858.742233] ? do_vfs_ioctl+0xcdb/0x12e0 [ 858.742244] ? ksys_ioctl+0x9b/0xc0 [ 858.742261] ? __x64_sys_ioctl+0x6f/0xb0 [ 858.780109] ? do_syscall_64+0xf9/0x670 [ 858.784101] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 858.789499] ? mark_held_locks+0xa6/0xf0 [ 858.793578] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 858.798433] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 858.803071] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 858.807862] ? rcu_nmi_exit+0x102/0x220 [ 858.811845] ? retint_kernel+0x2d/0x2d [ 858.815740] ? alloc_pages_current+0x95/0x2c0 [ 858.820235] ? alloc_pages_current+0x9f/0x2c0 [ 858.824909] alloc_pages_current+0x19d/0x2c0 [ 858.829333] __get_free_pages+0x8/0x40 [ 858.833226] mmu_topup_memory_caches+0x1d6/0x360 [ 858.837998] kvm_mmu_load+0x1e/0x1010 [ 858.841828] ? kvm_arch_vcpu_ioctl_run+0x1f8f/0x6c10 [ 858.846941] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 858.851878] ? mark_held_locks+0xf0/0xf0 [ 858.855937] ? kvm_vcpu_ioctl+0x175/0xe30 [ 858.860103] ? __mutex_lock+0x109/0x13f0 [ 858.864176] ? find_held_lock+0x2d/0x110 [ 858.868247] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 858.873705] ? get_task_pid+0x19d/0x320 [ 858.877694] ? lock_downgrade+0x750/0x750 [ 858.881876] ? check_preemption_disabled+0x41/0x2b0 [ 858.886903] ? kvm_vcpu_ioctl+0x493/0xe30 [ 858.891053] kvm_vcpu_ioctl+0x493/0xe30 [ 858.895072] ? kvm_get_dirty_log+0x590/0x590 [ 858.899507] ? mark_held_locks+0xf0/0xf0 [ 858.903592] ? proc_fail_nth_write+0x95/0x1d0 [ 858.908105] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 858.912869] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 858.917481] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 858.922267] ? find_held_lock+0x2d/0x110 [ 858.926339] ? kvm_get_dirty_log+0x590/0x590 [ 858.931630] do_vfs_ioctl+0xcdb/0x12e0 [ 858.935536] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 858.940749] ? ioctl_preallocate+0x200/0x200 [ 858.945171] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 858.950635] ? retint_kernel+0x2d/0x2d [ 858.954561] ksys_ioctl+0x9b/0xc0 [ 858.958038] __x64_sys_ioctl+0x6f/0xb0 [ 858.961940] do_syscall_64+0xf9/0x670 [ 858.965743] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 858.970925] RIP: 0033:0x45de59 [ 858.974512] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 858.993426] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 859.001164] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 859.008435] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 859.015712] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 859.023027] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000004e [ 859.032082] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:18:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0xf, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:18:36 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:36 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r1, 0x2, &(0x7f0000000240)="1e1f1644582807d968f050763771d37ad2252f5593fc6a593bdab6e3d995723b941a852a65446422a57783628e79fef98cdd15424da4b8512df92e838dbf1a4181aab9cbf23cb434b57acd17726acebc37158253d1555c51dedbb711191815f1c2c94732aaaa20ceacdd729cab052bc3188e079aa199266ddfd52c52721f960a1c566d3cdb7379a47fed62a05ab1e78e37989871859bde25485d880dc50a6ad68f") wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) capget(&(0x7f0000000080)={0x20080522, r0}, &(0x7f0000000140)={0x0, 0x2, 0x20, 0x6, 0x60, 0xffff1641}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:36 executing program 3 (fault-call:8 fault-nth:79): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:18:36 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x4a, 0x2082) ioctl$SG_GET_SCSI_ID(r3, 0x2276, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 860.870309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=6066 comm=syz-executor.2 16:18:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x11, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 860.939530] FAULT_INJECTION: forcing a failure. [ 860.939530] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 860.977030] CPU: 1 PID: 6064 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 860.984896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 860.994261] Call Trace: [ 860.996874] dump_stack+0x22c/0x33e [ 861.000526] should_fail.cold+0xa/0x2f [ 861.004441] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 861.009573] __alloc_pages_nodemask+0x256/0x2a60 [ 861.014355] ? finish_task_switch+0x29c/0x8b0 [ 861.018909] ? mark_held_locks+0xa6/0xf0 [ 861.023012] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 861.027890] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 861.032508] ? rcu_nmi_exit+0x102/0x220 [ 861.036508] ? retint_kernel+0x2d/0x2d [ 861.040426] alloc_pages_current+0x19d/0x2c0 [ 861.044857] __get_free_pages+0x8/0x40 [ 861.048953] mmu_topup_memory_caches+0x1d6/0x360 [ 861.053967] kvm_mmu_load+0x1e/0x1010 [ 861.058009] ? kvm_arch_vcpu_ioctl_run+0x3d50/0x6c10 [ 861.063260] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 861.068307] ? mark_held_locks+0xa6/0xf0 [ 861.072486] ? calibrate_delay.cold+0x1d3/0x227 [ 861.077201] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 861.082108] ? kvm_arch_vcpu_ioctl_run+0x2d/0x6c10 16:18:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x12, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 861.087073] ? kvm_vcpu_ioctl+0x493/0xe30 [ 861.091253] kvm_vcpu_ioctl+0x493/0xe30 [ 861.095257] ? kvm_get_dirty_log+0x590/0x590 [ 861.099816] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 861.104746] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 861.109755] ? rcu_nmi_exit+0x102/0x220 [ 861.113902] ? retint_kernel+0x2d/0x2d [ 861.118368] ? lock_release+0x429/0x8e0 [ 861.123556] ? kvm_get_dirty_log+0x590/0x590 [ 861.128074] do_vfs_ioctl+0xcdb/0x12e0 [ 861.132110] ? __sanitizer_cov_trace_switch+0x4b/0x80 16:18:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x14, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 861.137553] ? ioctl_preallocate+0x200/0x200 [ 861.141998] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 861.147487] ? __fget+0x3ad/0x570 [ 861.151442] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 861.155943] ksys_ioctl+0x9b/0xc0 [ 861.159531] __x64_sys_ioctl+0x6f/0xb0 [ 861.163585] do_syscall_64+0xf9/0x670 [ 861.167740] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 861.172955] RIP: 0033:0x45de59 [ 861.176154] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 861.196412] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 861.204140] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 861.212165] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 861.219663] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 861.226946] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000004f [ 861.234411] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:18:36 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x8, [@int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x15, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:18:36 executing program 5: sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x50}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}, 0x28}}, 0x40000851) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000280)={0x2a, 0x6, 0x0, {0x3, 0x7, 0x1, 0x0, '/'}}, 0x2a) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f0000000340)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0xc2a070843b8bf498, 0x0, 0x5}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48094}, 0x24004885) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:36 executing program 3 (fault-call:8 fault-nth:80): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:18:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x17, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 861.728280] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=6114 comm=syz-executor.2 [ 861.741671] FAULT_INJECTION: forcing a failure. [ 861.741671] name failslab, interval 1, probability 0, space 0, times 0 [ 861.753862] CPU: 0 PID: 6100 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 861.761684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 861.771086] Call Trace: [ 861.773774] dump_stack+0x22c/0x33e [ 861.777545] should_fail.cold+0xa/0x2f [ 861.781475] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 861.787041] __should_failslab+0x153/0x1b6 [ 861.791301] should_failslab+0x5/0xf [ 861.795025] kmem_cache_alloc+0x2b1/0x4a0 [ 861.799179] ? alloc_pages_current+0x1a5/0x2c0 [ 861.804006] mmu_topup_memory_caches+0x271/0x360 [ 861.808780] kvm_mmu_load+0x1e/0x1010 [ 861.812580] ? kvm_arch_vcpu_ioctl_run+0x538/0x6c10 [ 861.817606] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 861.822533] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 861.827285] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 861.831867] ? find_held_lock+0x2d/0x110 [ 861.835938] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 861.840783] ? get_task_pid+0x19d/0x320 [ 861.844770] ? lock_downgrade+0x750/0x750 [ 861.848923] ? check_preemption_disabled+0x41/0x2b0 [ 861.853947] ? kvm_vcpu_ioctl+0x493/0xe30 [ 861.858113] kvm_vcpu_ioctl+0x493/0xe30 [ 861.862097] ? kvm_get_dirty_log+0x590/0x590 [ 861.866514] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 861.871283] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 861.875864] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 861.880615] ? rcu_nmi_exit+0x102/0x220 [ 861.884585] ? retint_kernel+0x2d/0x2d [ 861.888530] ? do_vfs_ioctl+0xbd/0x12e0 [ 861.892538] ? kvm_get_dirty_log+0x590/0x590 [ 861.898077] do_vfs_ioctl+0xcdb/0x12e0 [ 861.902101] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 861.907309] ? ioctl_preallocate+0x200/0x200 [ 861.911834] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 861.917293] ? __fget+0x3ad/0x570 [ 861.921080] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 861.925566] ksys_ioctl+0x9b/0xc0 [ 861.929045] __x64_sys_ioctl+0x6f/0xb0 [ 861.932955] do_syscall_64+0xf9/0x670 [ 861.936787] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 861.941993] RIP: 0033:0x45de59 [ 861.945220] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 861.964550] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 861.972256] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 16:18:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x1a, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 861.979625] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 861.986889] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 861.994159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000050 [ 862.001429] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:18:39 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:39 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000440000004400000008000000000000000000000800000000000000000000000100001dad8138730c4f1900000000000300000000000000000000000000000000000000000000000100000000000000000000000000000000d857ce5c6ee41de84414b1a0c4c2c3507c1c92227304a598bf75fce74ff14794d6fdce826a4f60064414598ed9faa7e853d329d558013cabcf898bb1"], 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x1d, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:18:39 executing program 3 (fault-call:8 fault-nth:81): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:18:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x2f, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 863.959205] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=6135 comm=syz-executor.2 [ 863.977485] FAULT_INJECTION: forcing a failure. [ 863.977485] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 863.989349] CPU: 0 PID: 6128 Comm: syz-executor.3 Not tainted 4.19.152-syzkaller #0 [ 863.997154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 864.006519] Call Trace: [ 864.009124] dump_stack+0x22c/0x33e [ 864.015028] should_fail.cold+0xa/0x2f [ 864.018929] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 864.023700] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 864.028826] __alloc_pages_nodemask+0x256/0x2a60 [ 864.033610] ? should_fail+0x142/0x7d8 [ 864.037534] ? __alloc_pages_nodemask+0x1c02/0x2a60 [ 864.042570] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 864.047423] ? ksys_ioctl+0x9b/0xc0 [ 864.051055] ? __x64_sys_ioctl+0x6f/0xb0 [ 864.055217] ? do_syscall_64+0xf9/0x670 [ 864.059201] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 864.064579] ? mark_held_locks+0xa6/0xf0 [ 864.068660] ? mark_held_locks+0xa6/0xf0 [ 864.072733] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 864.077592] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 864.082196] cache_grow_begin+0xa1/0x9b0 [ 864.086298] cache_alloc_refill+0x2aa/0x410 [ 864.090636] kmem_cache_alloc+0x3b4/0x4a0 [ 864.094802] mmu_topup_memory_caches+0x271/0x360 [ 864.099567] kvm_mmu_load+0x1e/0x1010 [ 864.103374] ? kvm_arch_vcpu_ioctl_run+0x3d50/0x6c10 [ 864.108508] kvm_arch_vcpu_ioctl_run+0x4b82/0x6c10 [ 864.113452] ? mark_held_locks+0xf0/0xf0 [ 864.117555] ? kvm_vcpu_ioctl+0x175/0xe30 [ 864.121727] ? find_held_lock+0x2d/0x110 [ 864.125808] ? kvm_arch_vcpu_runnable+0x730/0x730 [ 864.130652] ? get_task_pid+0x19d/0x320 [ 864.134679] ? lock_downgrade+0x750/0x750 [ 864.138831] ? check_preemption_disabled+0x41/0x2b0 [ 864.143852] ? kvm_vcpu_ioctl+0x493/0xe30 [ 864.147998] kvm_vcpu_ioctl+0x493/0xe30 [ 864.151984] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 864.156734] ? kvm_get_dirty_log+0x590/0x590 [ 864.161140] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 864.165736] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 864.170498] ? rcu_nmi_exit+0x102/0x220 [ 864.174488] ? retint_kernel+0x2d/0x2d [ 864.178408] ? do_vfs_ioctl+0xbd/0x12e0 [ 864.182378] ? __sanitizer_cov_trace_switch+0x35/0x80 [ 864.187584] ? kvm_get_dirty_log+0x590/0x590 [ 864.191996] do_vfs_ioctl+0xcdb/0x12e0 [ 864.196105] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 864.201334] ? ioctl_preallocate+0x200/0x200 [ 864.205740] ? setattr_copy+0x13e/0x5c0 [ 864.209756] ? selinux_parse_skb.constprop.0+0x1f0/0x1f0 [ 864.215256] ? __fget+0x3ad/0x570 [ 864.218743] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 864.223029] ksys_ioctl+0x9b/0xc0 [ 864.226512] __x64_sys_ioctl+0x6f/0xb0 [ 864.230398] do_syscall_64+0xf9/0x670 [ 864.235586] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 864.240849] RIP: 0033:0x45de59 [ 864.244258] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 864.263183] RSP: 002b:00007f5e271d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 864.270916] RAX: ffffffffffffffda RBX: 0000000000011d40 RCX: 000000000045de59 [ 864.278201] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 864.285483] RBP: 00007f5e271d5ca0 R08: 0000000000000000 R09: 0000000000000000 [ 864.292784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000051 [ 864.300706] R13: 00007ffce6c3164f R14: 00007f5e271d69c0 R15: 000000000118bf2c 16:18:39 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000440000004400000008000000000000000000000800000000000000f93a7d8bbf736374979cdd6000000008010000f3f5adc70000000000000000000300001d00000000000000000000000000000000000000000100000000"], 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup(r1) r2 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x100, 0x189043) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x6) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x20a080, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x7704, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000180)={'team0\x00'}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x67, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:18:39 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x8, [@int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:39 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6deb0100180000000000000044000000440000000800000000000000000000080000000000000000000000010000000000400000000000000000000300000000000000000000000000000000000000000000000100"/100], 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 864.737054] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=103 sclass=netlink_route_socket pid=6154 comm=syz-executor.2 16:18:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x7c5, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:18:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x7c6, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 864.848588] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1989 sclass=netlink_route_socket pid=6169 comm=syz-executor.2 [ 864.960721] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1990 sclass=netlink_route_socket pid=6174 comm=syz-executor.2 16:18:42 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x402, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:18:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x2, 0x0) 16:18:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:18:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x4b47, 0x0) 16:18:42 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180000000000000044000000440000000800000000000000000000080000000000000000000000010000000000000000000000000000000300000000000000000000000000000000000100000000000100"/100], 0x0, 0x64}, 0x20) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000080)=0x4c10, 0x4) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000280)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000340)={{r2}, {@void, @actul_num={@val=0x2b, 0x3, 0x74}}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$netlink(r4, 0x10e, 0xe, &(0x7f0000000140)=""/119, &(0x7f0000000240)=0x77) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x1, 0x0) 16:18:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:18:42 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x8, [@int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:42 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x8, [@typedef, @int, @array, @typedef={0x5, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x60}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x4b49, 0x0) 16:18:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x408, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:18:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x409, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:18:45 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x541b, 0x0) 16:18:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x40a, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:18:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:18:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x5421, 0x0) 16:18:45 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000004400000044000000080000000000000000000008c368e49498f8700000000000000000000000010000000000000000000000000000000300000000000000000000000000000000000000000000000100"/107], 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x410, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:18:45 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x8, [@int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x30}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x5450, 0x0) 16:18:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x414, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:18:45 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9f6b01021800000000fbffffeb000800006041f5028634c9fdf5000000080000005048ff1bb6f2856323f63c5d066800a79323b4f1b0897d68a07476a13d2d71d2cffaa8dfbdcb40e285183c5bb3180a8f65cf"], 0x0, 0x20}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0xe0, 0x6, 0x1f, 0x0, 0x6, 0x2, 0x3e, 0x9, 0x3a3, 0x40, 0xc8, 0xb7, 0x8001, 0x38, 0x2, 0x1, 0x0, 0x60b}, [{0x2, 0x7fff, 0x1a0a, 0x80000001, 0x4, 0x4b2, 0x800, 0x2}, {0x60000000, 0x9, 0x78a, 0x9, 0x5, 0x6, 0x121, 0x7}], "a46f1383379f8191f80c127f22e9bb343aa293", [[], []]}, 0x2c3) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x24, r3, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f00000004c0)={'syztnl1\x00', r6, 0x29, 0x31, 0x0, 0x20, 0x1, @remote, @local, 0x20, 0x40, 0x3, 0x8}}) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x438, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:18:48 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x5451, 0x0) 16:18:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:18:48 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x5452, 0x0) 16:18:48 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef={0x0, 0x0, 0x0, 0x8, 0x2}, @int={0xd}, @array, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x45}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$X25_QBITINCL(r4, 0x106, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x5460, 0x0) 16:18:49 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x7, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x3f}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:18:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x40049409, 0x0) 16:18:49 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, &(0x7f0000000240)={0x3, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}}, {{0x2, 0x4e20, @private=0xa010102}}}, 0x108) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:49 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x7, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x3f}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x4004ae8b, 0x0) 16:18:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x2, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:18:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:18:51 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {0x0}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x4004ae99, 0x0) 16:18:51 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000002ba69763af6624a5954bab9b0b4400b7a0fef3000008000000000000000000000800000000000000000600000000000000000000000000000000000003000000000000009800000000000100"/100], 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x4, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:18:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x40086602, 0x0) 16:18:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x5, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:18:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x40087602, 0x0) 16:18:52 executing program 5: clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8) ptrace$cont(0x7, r0, 0x0, 0x0) [ 876.920295] ptrace attach of "/root/syz-executor.5"[6852] was attempted by "/root/syz-executor.5"[6853] 16:18:52 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x7, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x3f}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x4020940d, 0x0) 16:18:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x6, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:18:52 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000140)="119356f76023492fdf5612c5651c40d65c18548314878501f994b650391a3975d00e7b8abc9131670aad8cc9e34b9698a270c75eb7247cf16e4c7e07f830e491a4546c30ae81f18c2d1216508e666eb68ec02e6d55b0d1ee4b69d554a42f2268ac0c96e24825b8ec6d", 0x69) wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x72, 0x8, 0x40, 0x6, 0x10000, 0x2, 0x3, 0x0, 0x20f, 0x40, 0x305, 0x3, 0xfffa, 0x38, 0x2, 0xfff, 0x6, 0x3ff}, [{0x3, 0x8, 0x80000001, 0xffffffff, 0xfff, 0x5c, 0x0, 0x33}, {0x7, 0x10000, 0x7, 0x4, 0x9, 0x40, 0x100, 0x4}], "89647c57cca075797ceaaf0d31f5fc99d1ed92efa237a2ba9d1ec141b039b872801fe974719e6377b99bab9557c636f9d36a443aa555046625106288fc3d52d7806b32d450c66f9abd9c58d5f7c4d0ab3a44c67c1cf9c1a97051cb3a54c51d263a58ae607d9e6e0f629b9b88075885d3746b5dbe80e0441c96ebfba6894088ff73a6445741232e64d49770796c24bb06f450803dd94319e658cd4eff6ed4dbf61313c269c7a9dd14334cf6c76b055c6bb39f06a9f944aa8a913d9cf1b20cfe9c22f9cbae82cacaae3936826a25d747c5fc0691943840e7eeb31c3320f8d1ad98f680185694862ebe443525c4d9f052", [[], [], [], [], [], [], []]}, 0x89f) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) ioctl$SCSI_IOCTL_SYNC(r2, 0x4) 16:18:54 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {0x0}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:54 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:54 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:54 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x7, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x3f}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x4048ae9b, 0x0) 16:18:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x7, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:18:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x8, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:18:54 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x7, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x3f}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x4090ae82, 0x0) 16:18:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x9, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:18:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x4138ae84, 0x0) 16:18:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0xa, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:18:57 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {0x0}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x41a0ae8d, 0x0) 16:18:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x4090ae82, 0x0) 16:18:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0xc, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:18:57 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000440000004400000008000000000000000000000800000000000000000000000100000000000000000000000000000003000000000000000000000000000000000000000000000001000000000000000000000000000000002177f915e13477be84baa17c0538c56005e2b80a2d5d23ccf39b423bb16177104fd3c84c9dea1d2d59f7b4731afc67cacb425139e41591d5ec08f034cee57dc0d4d7d5cea505405a68cb752e87c9868a8dbbe864dcc58c7bdd5ed4a0ceca1c750893802d2c5cc5b681f65ceaeb93f794abfc5a"], 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x8004ae98, 0x0) 16:18:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x80086601, 0x0) 16:18:57 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x7, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x3f}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:18:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0xe, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:18:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x40087602, 0x0) 16:18:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x80087601, 0x0) 16:18:58 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x7, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x3f}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:00 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x5452, 0x0) 16:19:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x10, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x8090ae81, 0x0) 16:19:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x5450, 0x0) 16:19:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x8138ae83, 0x0) 16:19:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x37, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:00 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$packet_buf(r4, 0x107, 0x1, &(0x7f0000000240)=""/212, &(0x7f0000000080)=0xd4) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) ptrace$cont(0x7, r5, 0x0, 0x0) 16:19:00 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x48, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x81a0ae8c, 0x0) 16:19:01 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:03 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:03 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x7, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x3f}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xc0045878, 0x0) 16:19:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x4c, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:03 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x60, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xc0045878, 0x0) 16:19:03 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 16:19:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x68, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xc0189436, 0x0) 16:19:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xc018ae85, 0x0) 16:19:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x6c, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:06 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xc020660b, 0x0) 16:19:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x74, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:06 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:06 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x7, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x3f}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:06 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:06 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x7, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x3f}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2) 16:19:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x7a, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:06 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) flistxattr(r2, &(0x7f0000000140)=""/98, 0x62) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:06 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3) 16:19:09 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe", 0x23}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:09 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x7, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x57}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:09 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000140)={0x4000, &(0x7f0000000080), 0x4, 0xffffffffffffffff, 0x9}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$notify(r2, 0x402, 0xc) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x88, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4) 16:19:09 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x7, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x57}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:09 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x7, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x3f}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0xf0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x5) 16:19:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x256, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x6) 16:19:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x300, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:12 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe", 0x23}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x7) 16:19:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x500, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:12 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) wait4(r1, 0x0, 0x8, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180100000000000044000000440000000800000000000000000000080000000000000000000000010000e7fffeffff00e7ff000000000003000000000000000000000000000000000000000000330001000000000000000000000000000000002e96ff8be2f9881ba59df18b124cdf20c991599bc4b1061f41358c1dd4721608dae0a8d95123e7fba29f9dd0e89f91046affa9e6004b1e31520fc6e3af18e7795d89e32422998149a193741f431043eeb6162a771b0cceb596236d3c900f3836c7b20af4cb50b734b2111d9ea295ddf7746805e194ca409275e4ea840600a77af321bc37a7"], 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x8, &(0x7f0000000080)="b0179326c704d639ce84f47bc9b1c923c95a55ff") ptrace$cont(0x7, r0, 0x3, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x0, 0x6ed, @remote, 0xfffff7ed, 0x4}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_GET_SUPPORTED_CPUID(r5, 0xc008ae05, &(0x7f0000000300)=""/203) sendmsg$AUDIT_SET(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x3e9, 0x300, 0x70bd26, 0x25dfdbfe, {0x5, 0x0, 0x0, r1, 0x7, 0x32, 0xff, 0x68e, 0x0, 0x7}, ["", "", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40) 16:19:12 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe", 0x23}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:12 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x7, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x57}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:12 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x7, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x3f}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x8) 16:19:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x600, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x9) 16:19:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x700, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xa) 16:19:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x900, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xb) 16:19:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0xa00, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:15 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) bind$l2tp(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, 0x4}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r2) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000080), &(0x7f0000000140)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f0000000400)={0x7, 'bridge_slave_0\x00', {0x1}, 0x5}) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ocfs2_control\x00', 0x2, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="00012dbd7000ffdbdf25060000000c00990001000000455b93570669aa5c83293b4ee56000000005005300000000001c00e7004acaec550a1b5d9b98ee40343b8d0e5f8874eb4b23975df90a00e800ffffffffffff00000a00e80008021100000000000a00180003030303030300000a001800030303030303000005005300010000000a0018000303030303030000"], 0x88}, 0x1, 0x0, 0x0, 0x4000040}, 0x60044048) tkill(r0, 0x33) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000180)=0x100, 0x4) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0xc00, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:15 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast1}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) sendmsg$key(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x2, 0xb, 0x7, 0x6, 0x2a, 0x0, 0x70bd2b, 0x25dfdbfc, [@sadb_x_filter={0x5, 0x1a, @in6=@private2={0xfc, 0x2, [], 0x1}, @in6=@local, 0x2b, 0x14, 0x10}, @sadb_x_filter={0x5, 0x1a, @in6=@loopback, @in6=@empty, 0x22, 0x14, 0x4}, @sadb_ident={0x2, 0xb, 0x3, 0x0, 0x7}, @sadb_lifetime={0x4, 0x4, 0xffffff2e, 0xffffffffffffffff, 0x3, 0x20}, @sadb_x_policy={0x8, 0x12, 0x2, 0x1, 0x0, 0x6e6bb6, 0x2, {0x6, 0x2b, 0x1, 0x0, 0x0, 0x2, 0x0, @in=@multicast2, @in=@rand_addr=0x64010100}}, @sadb_lifetime={0x4, 0x2, 0x4, 0x3, 0x8000, 0x3}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, @in6={0xa, 0x4e22, 0x7, @mcast2, 0xa4}}, @sadb_sa={0x2, 0x1, 0x4d5, 0x70, 0x7, 0x9c, 0x0, 0x80000000}, @sadb_ident={0x2, 0xa, 0x0, 0x0, 0x4}]}, 0x150}}, 0x4040800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500)='nl80211\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090000000000000000000700000008000300", @ANYRES32=r4, @ANYBLOB="0800051d000000001400060076657468315f746f5f7465616d0000000400cc0008000500040000001400040073"], 0x58}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000027bf700014dcdf2555001200080001002a00420008000000", @ANYRES32=0x0, @ANYBLOB="0c0099000400000068000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@broadcast, @empty=[0x4], @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "1f00", 0x8, 0x11, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r5, &(0x7f0000000040)="fa6cbb614e5e1de5a33520e2bb05e2b18eb6daee7637f4bbee50a4b170", 0x1d, 0x20048008, &(0x7f0000000080)={0xa, 0xce22, 0x9, @private0={0xfc, 0x0, [], 0xfd}}, 0x1c) 16:19:15 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x7, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x3f}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:15 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb", 0x34}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc) 16:19:16 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb", 0x34}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0xe00, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xd) 16:19:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x1f00, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xe) 16:19:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x2000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:18 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x34, 0x53b440) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x81) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000004400000044000000080000000000000000000008000000000000000000000001000000000000000000000000000000030000000000000000000000000000000000000000000000010000000f00"/100], 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 16:19:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xf) 16:19:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x3700, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:19 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x7, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x3f}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:19 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x9) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f00000002c0)={0x6, 0x2, 0x1, 0x80000000, 0x5, 0x5}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0xe4ffffff, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x64, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @remote}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2={0xff, 0x5}}, @IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x64}}, 0x0) r4 = dup3(r0, r1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000300), &(0x7f0000000340)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PPPIOCSACTIVE(r6, 0x40107446, &(0x7f0000000140)={0x5, &(0x7f0000000080)=[{0x78b, 0x25, 0xeb, 0x5}, {0x800, 0xb3, 0x1, 0xfffffffd}, {0xffff, 0x81, 0x0, 0x6}, {0x6, 0x80, 0x40, 0x7}, {0xe4f1, 0x80, 0x9, 0x5}]}) 16:19:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x10) 16:19:19 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb", 0x34}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x3f00, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x11) 16:19:19 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000400)={0x3, @null, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000040)=[0x80], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$MEDIA_REQUEST_IOC_QUEUE(r1, 0x7c80, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000600)={0x0, &(0x7f0000000400)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2000c7fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_mount_image$hfsplus(&(0x7f0000000300)='hfsplus\x00', &(0x7f0000000340)='./file1\x00', 0x3, 0x8, &(0x7f0000000cc0)=[{&(0x7f0000000900)="67c7c5cd21f78c31e2aa4aa34dc1d3be30ad044e8239c3e063f7ce5189bda1b8882ce28875071390b38b35fadd753f6d4c16d829f6b11d1abb57db8c16ac028c3de22cdd9f94c73d578d058d0f64662b75f706437bacdd2789e7d6b2ff1f8da05ad085405628ab8d77460c507adabdf0034ed099b60c2d3ab26bd8bbe7a06834900c99d527f53131ab2cd2165a813c39e8cb7cacf073f21f68a119567551c4c54dc8212baebd4c506bdf868a073e9182aa7d78bbc0f6142ae7b6e813b6d7f9fea996b3eb3a461398df788e3237252c447d6af1f62b00fdf9ee957a1e11fb2c119112ae7e20", 0xe5, 0x7f}, {&(0x7f0000000380)="0297245788952e390e33f90d91c104d569a69ac585f07a576f4789922010ab78bf4d6558af74aa762eedbb3fbe9c2460b66aca7971fc99c347a0c2f0b11ceadc613ceafdb8ac312698442a9e68c499ba3d9f43972f053c30ef31b3d98d44dd8f518f2fa1df", 0x65, 0x1}, {&(0x7f0000000ec0)="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", 0x1000, 0x7f}, {&(0x7f0000000a00)="6e94bce8c257428762e379d3234d018cc76611c3a763cd3c48cb52f925cedfce306dede89074fd8c82871e90a4883976e7586144c17baf77a27696f6999fe986366df7e5846f530588e748c61f040fd3e6939eb8cb8075faed9f2f8e5e42814373c6f9766e224db244f57ef3362a87c4ed65be0c0b78283c8f75d2cfcbaa3316de7123dfd404f9e45cb2f2a5ad1ba0b661413734d8d35dc7c83acc10ed8415adfc1d3506f5b4df8d7fa9975151499133352bf50b8224b6d2b7173f1b102fee5868fb8523741ff2d28e288adcee1bb0bd16a81d70", 0xd4, 0x6}, {&(0x7f0000001ec0)="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", 0x1000, 0x3}, {&(0x7f0000000780)="815bbba1dfeb67eb310f4210e7c1b8cf365a0269dcea2b0f28cdac3e5bec073796aee80f0ff5661bc70a3b927a97928eeea7acf9f165f178322aa7438fbaf2d52dd864f383dffcadc62414499e0db186e7977d31a240a941a9ffda1f88ba0f77ec5b28cc386e2c28d58cd2fb8fe76f017307789ca18b54befd89ae32fbe49beeadb3d826d914701423bf64a43fa26b4ac6af733fe8a63a1c3a5b47ffe8f94dbf10c8dee0a2b57dceff70b2f8f7871b89a75f19", 0xb3}, {&(0x7f0000000b00)="95773a79f95ae68399edf2a8b1cb3c7012b0b69a4ada9d2e1cb6697886775a074df8c4f42d6fc6e22d845b6e39313ab7a83ab4dea337429b13f20ff27bbc49f13ef84acf533602b3da314031bfb7d3be8aaf8309913dbb0edb6789498789d02b4adbe11b3d47b4a70e8dc52f40c500dc7d55eaddb3e032cfa803fb2e72a7baccc5463fc322a39cd74114c5f02bfafae51fe46bd62b1909b8615f4478f9be1f8724a50c48a1efe31e54de5a1fdd173e1ef405ef46b4b30f6f439c37d12b38f1246d3ed631e1c1b4cab4ce9b2bf53f2089145587118ac0693e919ce2557323ae024b845302070d2078d5f37a3cb1c605cfcaf2", 0xf2, 0x401}, {&(0x7f0000000c00)="b12bd96dd717b97c7a2dac4f392eeb44f2c922e46cb4a4872296a9027c00adfb40f2925e5567f7bdada920474877fc11462a4976d99a238e17d0982301d156b20746bc42e6befaee795adb733d26f0c3240073bbf67b771a83e24ad32c17466725d469e3af82b085a546ad68d4068476c802e8d1931eee0ac0c2ec41b02bc477870398e96cfa48d9d37c85ee248498fbbdff3e1b08", 0x95, 0x1}], 0x5002, &(0x7f0000000640)={[{@nobarrier='nobarrier'}, {@type={'type', 0x3d, "4a76873c"}}], [{@subj_type={'subj_type', 0x3d, '+/[#/<*.\xfe'}}, {@fowner_gt={'fowner>', 0xee00}}]}) r2 = open(&(0x7f0000000180)='./file0\x00', 0x101000, 0x128) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, &(0x7f0000000280)) sendmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="c3", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)="c8667c5f3e6b0d6ec2979ce8d76b", 0xe}, {&(0x7f00000006c0)="46990b3dd4eca9c829060b3219adb2cffeca160ef050d970d5656c7db03b267fdf4c1ea4352958e322ed56ef7dddafbda60171c7fe387047939098e115099d3baf7b6b91749f561b8c8f84d08867183ec95951f3df26a3235447ae6ddeca99088876ada3da06913667cfa3564f4687110a2d4b798bbc9d590a06ad6f0d972c61f6e9aea55c384c5f54839ead3b14df098812586ef028b0db07a3eddec1ad6dc579510d0948c9d51a48f8e98eb2d8b2ad57694d30bc6666507af066", 0xbb}], 0x2}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)="eead95609112ff249e2b6183afa89499dfd5a1e89c46165af02f9f6e2ee252fdd2938db915cc6796cce3d122d58f554d4b5ad9b6d0450901eeeca652bb9a793b2b96ee13b3498c4a132f5d95b8fc50cfdf8806b1", 0x54}, {&(0x7f0000000000)="5554a6d8a5b5ab50e6fd4789a77430f3f802c9dc", 0x14}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000480)="661cc04a24deda4f11f3e258a4f9fbbc98c4674037a2c3cf0d0d2c67db10fae45e5e94e05e818c203e72cc9f800ee2bfc3d8d1799396baf5551d5b43eaffd627ba2265a0ef98bf03b86135f1e8258596248eff6f3169db9a6694bd1a942fc8ba25b027c0c0a74e6170161ce4c59caaca3ee94b16b5eb3aaaec54fa52d82810e2a7ae458599dd0ae61ef4a2fa6ecce46f0eb063ba73ee7c45f37f8b111b9e6d02f5c0d2eeb446d80b6d63ce144739056bdd6dcba1a738020d26c93876d6782b6bc0b082ee27596b", 0xc7}, {&(0x7f0000000380)}, {&(0x7f0000000880)="572180276e88c199cc48daf301fbdfe6b2ae3e6825eecd68c4cfe59a51d22831a3c8e31bffc0cb18a5a3af43a60e37c38e656ccc3694c2304ef1e42ea6d380dea2e2e3e0bf7fe71c7090b137d846e01f8f1f9de5d72bb5a1380820525358605f85", 0x61}], 0x5}}], 0x4, 0x0) 16:19:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x4000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x12) 16:19:21 executing program 5: ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000080)={0x0, 0xf000, 0x8, 0x3}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000140)={0x2, 0x1e1}) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x1000, 0x40) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:21 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x700, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r1, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x3fa, 0x800, 0x70bd28, 0x25dfdbff, {0x1, 0x0, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x8004) 16:19:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x4800, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 906.670296] IPVS: ftp: loaded support on port[0] = 21 16:19:22 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x7, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x3f}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x13) 16:19:22 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000440000004400000008000000000000000000000800000000000000000000000100000000000000000000000000000003000000e6000000000000000000000000000000000000000100"/100], 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 906.895671] Started in network mode [ 906.913657] Own node identity 7f, cluster identity 4711 [ 906.926359] 32-bit node address hash set to 7f [ 906.971938] IPVS: ftp: loaded support on port[0] = 21 16:19:22 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1", 0x3d}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x4c00, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x14) 16:19:22 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1", 0x3d}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x5602, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:22 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1", 0x3d}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x15) 16:19:23 executing program 4: ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000000)=0x3) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x1412, 0x300, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000580)='/dev/dlm-control\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000023c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x59) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x20c, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}}, 0xd1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x45, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16:19:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x16) 16:19:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x5865, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:25 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce868250", 0x41}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x17) 16:19:25 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000680)=[{&(0x7f00000001c0)="384bd07fe3dc858a70fdfd405cf01e8ce3e2382f89ce6f348732b0b93d4f91a7ae277d0bbe210117948a767a482f5a00ce383392f039fd3d15a52e0348a5c670777d292aeef5964f2c12d2ff576818e329f7b28a574b684dceaf2d48ed66d3ef", 0x60}, {&(0x7f0000000240)="67266c6b2260d92aa6963490b2fac3ef687565fcbaf69673c85082a295aedd55cdf2a6154c61064367990e91f31d45ad2b7ea493a1139f123b7aaada93791f1d35bb2e6a2f062212a32f21423b95b89cb13570fcbf60ae9f819c006935d9611cf53eac617972c53542ae5983224cd549927d9534236aeeca12a6411351683879f83a109c834cff508be5d0ccf3ea54b04228ad43b67e9abbecfa471af5f5d787bee144ce1a154ae1ab4f6640ec1de6f4f0c62c53819cb72746b6368a421afbb3d0528aa0c5e78f796dfb230e8c952881587efc47f2dab88be9363faad11b521a7e661c5144a53b7a98e7f82777f51cc3", 0xf0}, {&(0x7f0000000340)="fc1bc6f515bbd0eb8707edeaba9fcc07772cc556b3c53259601cc9c95675554bf1041d1ed868c29fb7f99256b0758b813a7029420b59041176152d9b103d88da49de96d78d8035a0576e6860e851843ead148e968c9c9114b5d6d00014baf7da9315e605fe7a6d9bdd42085a912a6cdca1a2072e043c044c4370608d4a0aa92bcaefc21b3fbdaffb69802d876fced1404db4588e2a56f734cbedbae9e4371ecde0ee69b73d4d60e18f53afdad6568a1972c560c1163341da996a872aadf68ebed53fdc", 0xc3}, {&(0x7f0000000440)="e2ed5f132da243124ff71c059ae858999015087225b9db63491842eeea990772213691e90f2b00f56d4a36efe4a4cd654f87ad5fc22f30", 0x37}, {&(0x7f0000000480)="365b33be2c8b71dc5860c2c59ca6b3194e6c18c33571abef776aea251a446e3b3cff5f760ff015c3000f4446d514965762858e949821971c9f8531c6e9a1af89be5016584654feca81ed9256c5ff321e2a76f169d7e5e84e8380661bea3f9dec8b7cc4bcde79026503abafc0673a2662fdf3ee10ac94aefe4dd705f7c3068f689697387af654bea6e1f24eb65a3db1bf772cf50682d8cb41ee86c5dbb2ee7365e160536ac9a500d1c7450dd71e9f6689fce6107c5a6d6fa21d250b4b8c0bc787d8d2740043b234aa1072cca31feba3ef374805", 0xd3}, {&(0x7f0000000580)="91650fabe87734c0a7841a86f464fbffdaa36671aa9fb11674e69c8eee3b24ec43ed2a7b3dc06d28a2b100b5899f90c7ad697ca33749ed12281aed4ca5146a7cf1b2c97646b6b663d3079aea23400aeca8363192659ef66dcf0e01238ed8e30b14244f9637c59f5411dd493c3d1a7dce6042edbbd74c444fbd00cd638b90f02d4c2541770a552e59c22e3af06c0624a8d06f56716b20bab746151950d2778210d36381cc740535bd8517661a11c6786e3466f7e02eb66d4f87cad9bfd944d4fb6634bc0e8d5ef3e318fa9d0e048287b87822af57e6ad2c372d217970f6df075ab9b5a8984521921679f99ee3eb0ef6c8084ce425809c76", 0xf7}], 0x6, &(0x7f0000000700)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}], 0x30}}], 0x1, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SG_GET_REQUEST_TABLE(r5, 0x2286, &(0x7f0000000780)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104000000000001000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000240012053c4ab5d8598fe66467655f736c617665000000000c0005800500040000000000"], 0x44}}, 0x0) getpeername$l2tp(r3, &(0x7f0000000900)={0x2, 0x0, @local}, &(0x7f0000000940)=0x10) 16:19:25 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(r1, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) prctl$PR_SET_PTRACER(0x59616d61, r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000001c0)=0xa7ee6c2f3254a447) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x8000, 0xdbb4) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "bd7573b506d92e10", "9fa278ace44cee6dba1296c8808e5494", "7f7922e4", "7a9cf4f630fcaf52"}, 0x28) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:25 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x7, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x3f}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x6000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:25 executing program 4: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1410c2, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800002, 0x11, r0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) dup2(r1, 0xffffffffffffffff) r4 = getpgid(0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) socket$bt_rfcomm(0x1f, 0x3, 0x3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) close(r2) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setownex(r6, 0xf, &(0x7f00000000c0)={0x2}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendfile(r5, r5, 0x0, 0x8080fffffffe) 16:19:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x18) 16:19:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x6558, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x19) 16:19:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x6800, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1a) 16:19:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x6c00, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:28 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce868250", 0x41}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1b) 16:19:28 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x20, 0x7fff) syz_mount_image$befs(&(0x7f0000000080)='befs\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x4, &(0x7f0000000500)=[{&(0x7f0000000240)="5f96ec86e1ffbe186e50f41c77f896cbddb1869e91c748521ca099166d7b9c4c4d52b72fd9bb147b5c513a2d0a49c307bd923de21434a9ac73bdc012cfddb8fd92c21f0816e2e91d7b704d70b714208db0cac97692dfa343152434b19a6308db08ad5a4336d832774b8fd415ebea971dffacc90c01ededeb1f07108a12e2a40c3ed8f8ea99e68c0799d1df79b8eb4562d6c57b554c3a614320f0793ce0ebe62a7b364d99fe8f423abff36fb8998a6c517ca903d1331a84f3b09b05ec6220503a74876c245d6fe5a994f7d8c5593f6d10d7ec119c1fcb85623eaaeb8925e23d571ca7fe3895695f412c822685c4437762c5", 0xf1, 0x4}, {&(0x7f0000000180)="024fb0b54231e7e53553b394da49b3780c0bffd639682dfcfe1f0ee316", 0x1d, 0x1}, {&(0x7f0000000340)="f96309042eb1afbd643d02993473d017061f327291c1039cd468dbc26d30fe0af38319aa44774a5818c1b2daa6b615ed5df592cb85fd99661afa5ce689c9cd7d1a85f02fb3b8ae65c5effbefa17e5600b31a6ef908ffb9f74631897206220b5a00dee23f83f22ae4b8d4d6fc95a60a58cad9b9b8af7cb668fb0a1b5a97546c4fc0eab10c88aa6d583840b2820f760a4182ff4488eb3f779e3e3e595976b3b1aafc20795b2f9125288d9fa99485bdf12fe8799cfca16861e022b655da5fa46ab0d4eba74241", 0xc5, 0x4}, {&(0x7f0000000440)="cd0c86204f8a865fce4410da70ced2a0b143c918a9dec10dbcbd3ed51bccb94b7500ffa840e6419fcad01d88184f368a1725c97ef5ed8118bff246bb109c4b4e7849acde89bd616daaed8c366917fe1451efe914c2f082a9825c30b8e0ba33563d726b08f73665a9351ee7576e308ce984e9d07c8c13e7f16172847a65d913cb367ee64576b050cde139563f2c0e4218903a95c47c5067bb4bbf2f", 0x9b, 0x3b}], 0x800040, &(0x7f0000000580)={[{'/\'--'}, {'$!-'}, {'b'}, {'\\'}, {}, {}, {']5+]::/'}], [{@appraise_type='appraise_type=imasig'}, {@fsname={'fsname', 0x3d, ']'}}, {@permit_directio='permit_directio'}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:28 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x7, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x3f}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:28 executing program 4: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1410c2, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800002, 0x11, r0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) dup2(r1, 0xffffffffffffffff) r4 = getpgid(0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) socket$bt_rfcomm(0x1f, 0x3, 0x3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) close(r2) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setownex(r6, 0xf, &(0x7f00000000c0)={0x2}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendfile(r5, r5, 0x0, 0x8080fffffffe) 16:19:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1c) 16:19:28 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce868250", 0x41}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x7400, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) [ 913.190165] befs: Unrecognized mount option "/'--" or missing value [ 913.215071] befs: (loop5): cannot parse mount options 16:19:28 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000280)) wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x8, [@typedef={0x400}, @const, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x0, 0x4}}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x66}]}, {0x0, [0x0, 0x0, 0x3e, 0x5f, 0x0, 0x0]}}, 0x0, 0x60}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="000000000007000000050001000700"/44], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x24008095) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x7a00, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1d) 16:19:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x8100, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1e) 16:19:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0xf000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x29) 16:19:31 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x7, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x3f}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0xff7f, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:31 executing program 4: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1410c2, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800002, 0x11, r0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) dup2(r1, 0xffffffffffffffff) r4 = getpgid(0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) socket$bt_rfcomm(0x1f, 0x3, 0x3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) close(r2) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setownex(r6, 0xf, &(0x7f00000000c0)={0x2}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendfile(r5, r5, 0x0, 0x8080fffffffe) 16:19:31 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fce", 0x43}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x300) 16:19:31 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x18635, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3e8) 16:19:31 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb4400000008001d00000000000000000800000000000000000000000100004527d8aad5db648ec21e000000000000000000000000200300000000000000000000000000000000000000000000000100715fcfdc000000000000000000000000000100"], 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4, 0x7fff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$USBDEVFS_CLAIMINTERFACE(r5, 0x8004550f, &(0x7f0000000080)=0x4ad64c71) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x480) 16:19:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x18636, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x18637, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:34 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x40}, 0x20) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x500) 16:19:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x18638, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:34 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fce", 0x43}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x18639, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:34 executing program 4: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1410c2, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800002, 0x11, r0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) dup2(r1, 0xffffffffffffffff) r4 = getpgid(0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r2, &(0x7f00000001c0), 0xfffffef3) socket$bt_rfcomm(0x1f, 0x3, 0x3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) close(r2) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setownex(r6, 0xf, &(0x7f00000000c0)={0x2}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendfile(r5, r5, 0x0, 0x8080fffffffe) 16:19:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x600) 16:19:34 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fce", 0x43}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:34 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000044008d0000440000000800000000000000000000080000000000000000000000010000000000000000000000000000000300000000000000000000000000000000000000000000000100000000000000000000000000000000886977897f0104922f0124ab"], 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_TSC_KHZ(r4, 0xaea2, 0x6) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x1863a, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x700) 16:19:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x1863b, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:37 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x40}, 0x20) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x900) 16:19:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x1863c, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x19) 16:19:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x1863d, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:37 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd", 0x44}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x1863e, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xa00) 16:19:38 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$KVM_ASSIGN_SET_INTX_MASK(0xffffffffffffffff, 0x4040aea4, &(0x7f0000001a80)={0x6, 0x7fffffff, 0xdafc, 0x2, 0x3}) bind$inet6(0xffffffffffffffff, &(0x7f0000001a40)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, [], 0xd}, 0x1ffe0000}, 0x1c) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) syz_mount_image$minix(&(0x7f0000000080)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x5, 0x9, &(0x7f0000001880)=[{&(0x7f0000000240)="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", 0xfc, 0xf2a0}, {&(0x7f0000000340)="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", 0x1000, 0x4}, {&(0x7f0000001340)="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", 0xfd, 0x3ff}, {&(0x7f0000001440)="419114ecdaee32491ff0af905788d1481d6e38056132e7ec66be0cacd84f1d10497c02d9690a7aa33a68cc7e881146a91e6552a0ca77ff9155be1c4bd517964d28258765afe30a45203866b5b3683c4af513fcbba9d86a2076b5d89b79413cc1bc62cd3194adfff1290f15a5941b7fbacf04ebfe48ba31950410e302b69f251d855bbb31899e024aca94e3a28361e2f3fb21f1adce0d8db077825ca21601d3a2082910cfc1f7cff8d6a31ec4e255b03220951ca10af661a6d537eb9007d99c088d24c2b04a149463d31eaf451d0bd1431043a8f2", 0xd4, 0x2}, {&(0x7f0000000180)="84f8d5359192a884ef4d157a3799c3fb2ff1e0d9371dcdc9c3f910e09e3bf7e9bd8165ace36f2effc70d46eb2b681bad7f3ea6db5a92", 0x36, 0x7}, {&(0x7f0000001540)="b5ea07b1e78d2210c80caa212702eb99a23beed78108204f441d1ba397c326490c1f511dd7eb632daee42ff1cff1a65426eaa8ca2939fb8260a37dc4a3a94a3e421e207d838943e5edc4be1ba3b0e72a465b5f03c1eab1b2d8d27e38dc887edab6be0a573b7c202a5dddd3dd7ffb8522280917412762207cc363dde4d3fe9690e33bfd51bc55be0f3bf79ff51b9c4a084cc3f9b2333828cf2406a64b94fd4465ec13ba63", 0xa4, 0x7fffffff}, {&(0x7f0000001600)="6ffa934c6f129dbdaed3fe04a3d7fd629eb1980c0d67f3bf78bc3e60b71013f7b797bea104b1f3d6b231d8852ee64de3bf8dc2002a148f15bc14e2e657ff6a95ce2f14f6f4c62c9f9f29895ee197c3d2f426bd57133a640979db85ff038de2ef25f87933b8a64cf8c510eadb02", 0x6d, 0xdc6}, {&(0x7f0000001680)="6a07ffd1047dc7dd363f18d2403f1127d981ca32514634a323b034582480eb5ad2510d3c13758f58b2d5f2692ff2af780654d2605426c91f4e8b9c4de852073852dffbfa2edaace843572bb943833c936981253f90b07d9d547f8cdbe14454ed58beaf49a24bc88dc8de43b6c949f1b1baf99fb32337b349cd85bdc1be245e73f370f9e532f1383af993ee6e7501b94f7ed9ba06d82221cee59f05ffa42f72c83de2cb585ac0d5609b64e97c2cefafeb54a26bb75f5165de2185670e40fea6c8f5aa553a0296fea744b2b863651eeef7e4c6ee347702f8", 0xd7, 0xfa}, {&(0x7f0000001780)="053ca7b6ad2191e2d86657f9db07595870dbbcecc9a7f6c13bb459ac29693c9f222e57a2925ff140c1f622f1fc478676b8433e1c9fcd40c0ee17dd53ca2afc938d85653a61510d41e90fdb9d74d2002a01adaba0f15b29f0d2d579a85336a3960629649a6cfe48f0213a253e89d62a8840732f40184a7e43ab69a037d994a0147eccafd424bfa24c8ffbd3b3c5890f7e26544010ed1f0f6c36121d86d5e9c7743afdde8d77e15357f9b5b0031c1e28205ea522d2b8b02a14c3786ea42c8059f4cb9f0418e3abffa0c96ac22d08", 0xcd, 0x1}], 0x0, &(0x7f0000001980)={[{'*$#**'}, {'*@(($).'}, {'(%'}], [{@subj_role={'subj_role'}}, {@permit_directio='permit_directio'}, {@subj_type={'subj_type', 0x3d, ':'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@seclabel='seclabel'}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@smackfshat={'smackfshat', 0x3d, '&^'}}, {@measure='measure'}, {@permit_directio='permit_directio'}]}) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x1863f, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xb00) 16:19:38 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000044000000440000000800000000000000000000080000000000000000000000010000000000000000000000080000000300000000000000000000000001000000000000007d77c24129000000000000000000"], 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) dup2(r3, r3) vmsplice(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f00000001c0)="acc9ced7114840634cce0e4aeadacd0a43a8f31024be70f856014c9d0e2b529d1ec0063ea250533e9f9a7fb71bb8ff6bb44ab977e207f944df774b35e4fc822b4ad171f5161c042c2889289b43f34a85ad75c43a544d0ee9517eab767814983e5af8015fec60a5610b54e74839d94fc47cd76cbd10f3b141bc14e0e581039e6a5f0e55654278eb8a66532b6209793a9ae6e0750d66e7ffcd925255b29cec8731b10b9d6b7a1e513361f662c069007034c0c92e29d641574e4ef17df0c3a927d2643b36596659ba97430315ad63edb379818aa7d9986196e11fc3303f9569e9fac03fa11032cdb8a036b16fb4bba81496b9e50b7eab5a3a4664", 0xf9}, {&(0x7f0000000040)="f1fd53e83998ca750d01a0d5a67f5460e77052e608956bbfa8a78b80780edb93e890221b7b97fb14385b3cae8007432ff22b1acf074deafed86213015baeed31990db10c4958af6aa90687ea3899d2926a5826507fa766f03c16ae2ec940c73046216f6e55101ad2f65bef2d7d3cc391", 0x70}, {&(0x7f00000002c0)="4321acdbb5a51bad596c90fbb2ac0673bdc20cef98c0a2d3f378f0588facf66445b4761d4d86ca1f47362c6543e2974c81b0df9f5b75678c0b49c7fbda34e0c56be6764cff7c5c5d842ce58d65cb6ec6e0f993aeed9a1d8d4728092a9301336d983c2efc681fe83a2e33268f010fc3891e340815462151c64e56f112c700be28e76d93d0b2278f226d43b50589b871fbd38f12ceef1c5b0f3ced057b9fca606284fb2781ca050627d110f9da5a13eeac054db03f7bc2f2cebcd0faafecb079765cfad630f8c053922077e08cffbf83d22aaafe1b03eafc5c48d4a955f290f0f278ed11", 0xe3}], 0x3, 0x1) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x18640, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:40 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chroot(&(0x7f0000000140)='./file0/../file0\x00') r0 = memfd_create(&(0x7f0000000280)='sec,\xb5Gur\x1e\x00}\xe2\xe8N\x8c\x92\xefuxF\xf5wp\x1a', 0x0) pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0) rmdir(&(0x7f00000001c0)='./file0\x00') mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x8, 0x80, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000040)={r2}) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') mount(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2000, 0x0) 16:19:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc00) 16:19:40 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x40}, 0x20) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xd00) 16:19:40 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd", 0x44}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xb00) 16:19:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x18641, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xe00) 16:19:40 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd", 0x44}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xb00) 16:19:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x18642, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xf00) 16:19:41 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000008000000440000004400000008000000000000000001000000000000000000000000000000030000000096b4173300000000000000000000000000000001000000000000000000000000000000007e77387c7afafcd88ab10a142cb21748203e916653462fc9d9d1bd9474020428eb7e06f9594df3eb48176bac7228087c83d29fbae7b36bc4263d8b2f21ae00"/169], 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xb00) 16:19:43 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x40}, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1100) 16:19:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x18643, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x900) 16:19:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1200) 16:19:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x900) 16:19:43 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x18644, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1300) 16:19:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x900) 16:19:44 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000440000004400000008000000000000000000000000000001000000004000000300000000000000000000000000000000000000000000000100"/84], 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) tkill(r0, 0x9) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:44 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x52) syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRESDEC, @ANYBLOB="57d41ebd47a3ef28a6c38cf6fd78389cfb647db05b7808fee362927d93f76334a8db040f1b20b77ba7d459a60cd85cea670428b67ee9dcd425a6dcdbdd2260884407118dfde172e29f60c9b1ae9a53dd286789"]) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = signalfd(r0, &(0x7f00000001c0)={[0x1ff]}, 0x8) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000340)={&(0x7f0000000200)=[0x35, 0xc4f, 0x80000001], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x3, 0xf08b}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r4) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) splice(r3, 0x0, r4, 0x0, 0x100000002, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, 0x0) 16:19:46 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x40}, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:46 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x18645, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1400) 16:19:46 executing program 4: ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000000)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x12, 0x1, 0x0, 0x80000004}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) [ 931.351799] ================================================================================ [ 931.360742] UBSAN: Undefined behaviour in net/netfilter/ipset/ip_set_hash_gen.h:125:6 [ 931.368730] shift exponent 32 is too large for 32-bit type 'unsigned int' [ 931.375710] CPU: 0 PID: 10372 Comm: syz-executor.4 Not tainted 4.19.152-syzkaller #0 [ 931.383686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 931.393063] Call Trace: [ 931.395816] dump_stack+0x22c/0x33e [ 931.399469] ubsan_epilogue+0xe/0x3a [ 931.403197] __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 [ 931.409443] ? hash_netportnet_create+0x366/0xa4d [ 931.414407] ? rcu_read_lock_sched_held+0x174/0x1e0 [ 931.419462] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 931.424334] hash_netportnet_create.cold+0x1a/0x23 [ 931.429327] ? hash_netportnet4_add+0x27c0/0x27c0 [ 931.434815] ip_set_create+0x70e/0x1380 [ 931.438913] ? __find_set_type_get+0x450/0x450 [ 931.443802] ? lock_downgrade+0x750/0x750 [ 931.448008] ? __find_set_type_get+0x450/0x450 [ 931.453070] nfnetlink_rcv_msg+0xeff/0x1210 [ 931.457600] ? nfnetlink_net_init+0x170/0x170 [ 931.462509] ? avc_has_extended_perms+0x1020/0x1020 [ 931.467916] ? avc_has_extended_perms+0x1020/0x1020 [ 931.474017] ? __dev_queue_xmit+0x16e9/0x2ec0 [ 931.479419] ? lock_downgrade+0x750/0x750 [ 931.483762] ? __local_bh_enable_ip+0x159/0x2a0 [ 931.489393] ? cred_has_capability+0x162/0x2e0 [ 931.494132] ? cred_has_capability+0x1d9/0x2e0 [ 931.498828] ? selinux_inode_copy_up+0x180/0x180 [ 931.503693] ? selinux_inode_copy_up+0x180/0x180 [ 931.508996] netlink_rcv_skb+0x160/0x440 [ 931.513073] ? nfnetlink_net_init+0x170/0x170 [ 931.517594] ? netlink_ack+0xae0/0xae0 [ 931.521784] ? ns_capable_common+0x117/0x140 [ 931.526233] nfnetlink_rcv+0x1b2/0x41b [ 931.530239] ? nfnetlink_rcv_batch+0x1710/0x1710 [ 931.535353] netlink_unicast+0x4d5/0x690 [ 931.540329] ? netlink_sendskb+0x110/0x110 [ 931.545133] netlink_sendmsg+0x717/0xcc0 [ 931.550192] ? nlmsg_notify+0x1a0/0x1a0 [ 931.554184] ? __sock_recv_ts_and_drops+0x540/0x540 [ 931.559237] ? nlmsg_notify+0x1a0/0x1a0 [ 931.563432] sock_sendmsg+0xc7/0x130 [ 931.568655] ___sys_sendmsg+0x7bb/0x8f0 [ 931.572652] ? copy_msghdr_from_user+0x440/0x440 [ 931.577427] ? find_held_lock+0x2d/0x110 [ 931.581506] ? __fget+0x386/0x570 [ 931.584981] ? lock_downgrade+0x750/0x750 [ 931.590021] ? check_preemption_disabled+0x41/0x2b0 [ 931.595078] ? __fget+0x3ad/0x570 [ 931.598560] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 931.603156] ? lock_acquire+0x170/0x3f0 [ 931.607233] ? __might_fault+0xef/0x1d0 [ 931.611803] ? __fget_light+0x1d1/0x230 [ 931.615807] __x64_sys_sendmsg+0x132/0x220 [ 931.620546] ? __sys_sendmsg+0x1b0/0x1b0 [ 931.624631] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 931.630030] ? trace_hardirqs_off_caller+0x6e/0x210 [ 931.635156] ? do_syscall_64+0x21/0x670 [ 931.639613] do_syscall_64+0xf9/0x670 [ 931.643705] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 931.648910] RIP: 0033:0x45de59 [ 931.652113] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 931.672344] RSP: 002b:00007f2564e2ac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 931.681999] RAX: ffffffffffffffda RBX: 0000000000029b40 RCX: 000000000045de59 [ 931.691911] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 931.699201] RBP: 000000000118bf60 R08: 0000000000000000 R09: 0000000000000000 [ 931.707610] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118bf2c [ 931.715060] R13: 00007ffdd518580f R14: 00007f2564e2b9c0 R15: 000000000118bf2c [ 931.722364] ================================================================================ 16:19:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1500) 16:19:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x18646, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:47 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ashmem\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000240)={'caif0\x00', {0x2, 0x0, @initdev}}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x1) io_setup(0x3, &(0x7f0000000000)=0x0) io_submit(r3, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/schedstat\x00', 0x0, 0x0) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000280)='/dev/input/mice\x00', 0x30000) recvmmsg(r5, &(0x7f0000000f80)=[{{&(0x7f00000002c0)=@can, 0x80, &(0x7f0000000480)=[{&(0x7f0000000340)=""/239, 0xef}], 0x1, &(0x7f0000000540)=""/202, 0xca}, 0x9}, {{&(0x7f0000000640)=@isdn, 0x80, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/157, 0x9d}, {&(0x7f0000000780)=""/154, 0x9a}, {&(0x7f0000000840)=""/147, 0x93}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f00000004c0)}, {&(0x7f0000000900)=""/116, 0x74}], 0x6, &(0x7f0000000a00)=""/90, 0x5a}, 0x6}, {{&(0x7f0000000a80)=@xdp, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000b00)=""/176, 0xb0}, {&(0x7f0000000bc0)}, {&(0x7f0000000c00)=""/131, 0x83}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000000cc0)=""/171, 0xab}, {&(0x7f0000000d80)=""/130, 0x82}, {&(0x7f0000003400)=""/4096, 0x1000}], 0x7, &(0x7f0000000ec0)=""/155, 0x9b}}], 0x3, 0x40000003, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x3) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0xbf, "ee8eb396db112c5e26d99ac10c1c86d7fff1fc3bbdc96d9763c7346926fe3a32c13047d3f63b22ef1973f79754485a116db3546d9935cc83e48502755765475e54322f06ff8ae7e2038edb6463c4a176e1f83c03a6d70bf2ddbd85461a02b34d462a9c788aea7e1b2e3f8827a5c7e167e5e66fde355603496c9ed07cedd59368d1b3c3bfaa181dc76c2e2261ebcb5939cec6e7e89d52e26c1e36de9ff57f501fa60f7743dc655b3c2b3832af43c6caed460fe536b3b4727d640249a1e622a9"}, &(0x7f0000000040)=0xc7) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000200)={{0x3, 0x0, @identifier="f5eff9994752aa8a6c15b239d2b581df"}}) 16:19:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1600) 16:19:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x18647, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:47 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000140)="a6756e8928a5bc9dbd3ba53174aa5d2e6bf53f48f232c6c03281e823bf9e6bd526a63e47c7682e9ff58ad8dc58d4ed80013944569974379c9ce762c678e4c8d1e79448a8d3198c10b57cc75e2542c1db751a46f0e3d92b10b78605f6fc0617730977742393385969841c271fc4fdf208d86b73412d2fa84a125c599ace15d4", 0x7f}, {&(0x7f0000000000)="0832f497d38350428e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0xe) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:47 executing program 4: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000600)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000200)=0xe8) r1 = syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000280)="53595a4b414c4c45522020080000e780325132510000e780325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202030e2fc1e9fe6778a5a33a0f0e12cdf7b108c29fc0151371bd18b", 0x65, 0x600}, {0x0, 0x0, 0x10e00}], 0x1010808, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,smackfsdef=ascii,context=unconfined_u,uid<', @ANYRESDEC=r0, @ANYBLOB="2c736d61636b66ebcd59281410c9df6e636f6e66696e65645f752c7063723d30303030303030303030303030303010303034312c646566636f6e746578743d726f6f740c7065726d69745f646972656374696f2c00"]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup3(r3, r5, 0x80000) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000180), &(0x7f00000001c0)=0x4) socket(0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file1\x00', 0x0) 16:19:49 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x40}, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x18648, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1700) 16:19:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x1, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000000)=ANY=[@ANYRES64=r0]) 16:19:49 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:49 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x18649, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:49 executing program 4: perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000240)) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0xe1608a9899496ad1) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4040045}, 0x40004) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000780), &(0x7f00000007c0)=0x4) r1 = socket$inet6(0xa, 0x80003, 0x7) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0x128, 0x1403, 0x0, 0x70bd27, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gretap0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_vlan\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_0\x00'}}]}, 0x128}, 0x1, 0x0, 0x0, 0x2400c000}, 0x40080) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f0000000040)={@remote, 0x5c}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000800)='l2tp\x00') syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5, 0x0) syz_open_dev$vivid(&(0x7f00000000c0)='/dev/video#\x00', 0x3, 0x2) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$befs(&(0x7f00000001c0)='befs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000440)={[], [{@uid_lt={'uid<', 0xee01}}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) setresuid(0x0, r2, 0x0) syz_mount_image$afs(&(0x7f0000000280)='afs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000640)=[{&(0x7f0000000380)="1dd2f6765974a521a9c61167c2", 0xd, 0x9}, {&(0x7f0000000600)="c7fc69347c", 0x5, 0x8001}], 0x2022044, &(0x7f0000000680)={[{@autocell='autocell'}, {@flock_write='flock=write'}, {@flock_local='flock=local'}, {@flock_strict='flock=strict'}], [{@euid_eq={'euid', 0x3d, r2}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@appraise='appraise'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x64, 0x63, 0x37, 0x63, 0x1, 0x38, 0x30], 0x2d, [0x63, 0x34, 0x35, 0x66], 0x2d, [0x3f, 0x65, 0x33, 0x30], 0x2d, [0x62, 0x64, 0x32, 0x63], 0x2d, [0x33, 0xe, 0x65, 0x39, 0x63, 0x31, 0x62, 0x32]}}}, {@dont_appraise='dont_appraise'}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@dont_appraise='dont_appraise'}]}) 16:19:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1800) 16:19:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x1864a, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1900) 16:19:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x1864b, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:52 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x40}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:52 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018800000000000004400000044000000080000000000000000400008000684af040000000000000100000000000100000000a213341db12d6f4d0000220000a4a72e07fa61705600000000000000000100"/100], 0x0, 0x64}, 0x20) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000140)=0xfff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="4f9e058ae3ba2f68209c85d98e79f3dd50099f4f4cabd6c2bfbb73", 0x1b}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x37) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvme-fabrics\x00', 0x4082, 0x0) read$FUSE(r4, &(0x7f0000000240)={0x2020}, 0x2020) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:52 executing program 4: r0 = socket$inet(0xa, 0x4, 0x0) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x86) r1 = accept4(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_buf(r1, 0x84, 0x8, &(0x7f0000dcffe8)=""/11, &(0x7f0000000080)=0x19a) 16:19:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1a00) 16:19:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x1864c, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:52 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:52 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r2, 0x1707, 0x0, 0x0, {0x13}, [@TIPC_NLA_BEARER={0x5, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller1\x00'}}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r2, 0x100, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x8, [@typedef, @int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x64}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_mount_image$minix(&(0x7f0000000280)='minix\x00', &(0x7f00000002c0)='./file0\x00', 0x9, 0x8, &(0x7f0000000880)=[{&(0x7f0000000300)="0418e547befedc64873a944acd54c0b12d4d2db2334ca973f48c3e3e2dac3216824a1e6e27bcea93bd1f1d8d909352bf58991ba41ae79f42782d1e39df2d83747b4b74d8f9c37c917f2d9b2d7c6f5081f406b469d18bd1f6040853262314551893e83dfac17bb7258b5e3e8be849c88be554187ce470fa14f645b75af206225acadb0b02040f16f5dfc15c6f76745dfa641513265a3f3738bc048aefc19daa62c1e90efd7702f8efd9d057843cbeb62c3ad385", 0xb3, 0x3}, {&(0x7f0000000440)="717ca5e85e0a4ada764314a3ec8441e862edab5ed51747480d13611dd8c42dc8e636b50707b2c004875a0093125252ee1d135546559343da1b20377b4a470b5a32f78dfdd7e94d8a4e703f730a69f2f975c382d950064f05118ffe1a626c51de8eef37033d5bf31571e7ad115db48e36bd80950c3a89ca0b17da4e927eccfadcf9eb104117a7148529784d352eba", 0x8e, 0x1}, {&(0x7f0000000500)="575928d98261ca74d370fb00ba2848fae34ea4217d8845b8577283128b36f91ca27ce3d8215dce91a12491a1e637c29e037550b3a37e738cda584d47d5b5252c2c130579c300615b221413807e1c31c143a65c23a1545a5f9d7279320a10cae6572ec0a9397c958eafc03045b07328e4511b3bff4b784560a07a85f1c2cd86615b416121da1430ba328fb708c4641fc09efc352c5bc3f86ce7401ed49c2f5d40c8d68d80c6", 0xa5, 0x6}, {&(0x7f00000005c0)="eb9baf2fe1f86f3c39cd3062e52bb66b27fc1d8a2e686943c29e920f039510a9f2b1fefa0825cb68b42e00f26323f04463a6e7129e5a7869de4bfb897239cda5aeee0c5d7e394062afc9f52331fd3606036254840bd0799c3560c088cb01709d97fea6bea9703e7097803e2ffb0d05", 0x6f, 0xfffffffffffffffc}, {&(0x7f0000000640)="5754c931b8ace3b1c2403768109eed9a5200dd48624fc0411f31798981f79c90f5cd8a1eb5050876872702389aa77887de72877df3da50af41fded6cb3b54a5ac6f42c265063a6c69f561f65e2793f6bba6bb534ba1a0efebb2efa3bb3c9a633b8e3bc735a56e632e0e3c8f0e02b374c6325ea2a2599f3ec277f38c2", 0x7c, 0x4}, {&(0x7f00000006c0)="fb3128ebca0e963adac002b1e58af7c9396c28ac1513aca951db69b47d76c531841d06739c3210105b28d409deac57658b1650ebf7fe54518715425033dfc9d107c51f2b0926fa6bad99d2a2e1d36a715d4ddc6157e1faf443a0a1595460992b133d2e8b302e9301393ed2961ee9dba86b2a7ac4773320704fad0dae81ce6eb2e2aa81da9bf57dd14c44ee3ea264046626e647e2a031584c71f2", 0x9a, 0x401}, {&(0x7f0000000780)="2bba2d2f729130967cc5084303b9d95499300ae132a790f3cf510a3f3dfb5063d6506a6946e84f015a6bd74e39e47dc3e6b951d6503b085f5d188c173a47d6deabafe5f2f1993f291a59d63656494db2a42d079509f41df331b00f64", 0x5c, 0x4}, {&(0x7f0000000800)="43b0fa05c081d7b1b0e1f999a3a11ed51e612031efc25b1f078c57e92c59f1c687d48ea3f6a5b4c9ef0b9125988c655e009771b76a352ab9c18720bda608f4bb6273112612777c8ea2c13dee053e00a65658ac75706023a814e7c1380b6ad0427ca923259810968e2eca8e", 0x6b, 0x2}], 0x20840, &(0x7f0000000b40)={[{'*.\',^@\xe3'}, {'syzkaller1\x00'}, {'et\bM\xfaS\xf0\xac\t\r\xa1\xc1T*\x1a.`\xe8\x863\r\x86\xb2^\x96k\xe7\x86O`\x921\xde\xf7\xeeS'}, {}, {'/'}, {'.&@'}, {'*'}, {}, {'syzkaller1\x00'}, {'TIPCv2\x00'}], [{@fowner_gt={'fowner>', 0xffffffffffffffff}}]}) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r5 = add_key$fscrypt_provisioning(&(0x7f00000009c0)='fscrypt-provisioning\x00', &(0x7f0000000a00)={'syz', 0x0}, &(0x7f0000000a40)={0x3, 0x0, "faaf196a5f9c969720cae05f7c7390dbb9102661550c4e55292c540acea39c967b0f2396e17a209ee9ee7158b064b0501a47cbded7315d3f694174f5834399715a7cc7d43c4771f72b1520c1c38858492a5d97866265e80bca6c4827f1779defb69950a4ecadbab0932f73f4248d36da22d304289ef265d9d04c96e03018ae2755eb1a714e54eae4217e7cecce858dda16875bc0b3e8946c0518086987da5f7186e831461384095ab689c2bb6c34ada705b8df070334c471d797196b4afeb68e803912f20c4dccfb77f6824363054a49817ca6e052d4e41944c2c5bfc9c3c9331ff9f4a3d42e074851f957385735feff8200ae9c6d"}, 0xfd, 0xfffffffffffffffa) keyctl$set_timeout(0xf, r5, 0x1) 16:19:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1b00) 16:19:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x1864d, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigpending(&(0x7f0000000180), 0x8) r3 = dup3(r2, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000500)={0x1, 0xfffffffffffffffc, @status={[0x400, 0x6, 0x1640d774, 0x101, 0x401, 0x514d]}, [0x7, 0x8000, 0x8, 0xff, 0x1f64, 0x5, 0x1, 0xffffffff, 0x6, 0x9, 0x7ff, 0x3e7e, 0x80000000, 0xdd7, 0x20, 0xfffffffffffffffa, 0xd20, 0x9f5, 0x10001, 0x1ff, 0x6, 0x5, 0x4, 0x5, 0xff, 0xd0c, 0x8001, 0x616b, 0x401, 0x0, 0x3, 0x4, 0x8, 0x6, 0x8, 0x19, 0x2e, 0x72, 0x8, 0x7, 0xfffffffffffffffc, 0x3, 0x5, 0x1993, 0x7, 0x81, 0x29, 0x3f, 0x2, 0x6, 0x3ae, 0x6, 0x401, 0x1, 0x1e, 0x100000001, 0x8, 0x0, 0x100000001, 0x0, 0x8, 0x24000000000, 0x8, 0x2]}) r7 = dup2(r6, r5) ioctl$DRM_IOCTL_MODE_GETFB(r7, 0xc01c64ad, &(0x7f00000001c0)={0x8, 0x10001, 0x2, 0x9, 0x6, 0xffffffff, 0xc1}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {0x0}], 0x2}, 0x2}], 0x1, 0x120, 0x0) 16:19:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x1864e, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1c00) 16:19:55 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x8, [@int, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x40}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x1864f, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1d00) 16:19:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1b00) 16:19:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1e00) 16:19:55 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1b00) 16:19:55 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0, 0x64, 0x3d, 0x3}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000080)=ANY=[], 0xa4) lsetxattr$security_ima(&(0x7f0000000100)='./bus\x00', &(0x7f0000000000)='security.ima\x00', &(0x7f0000000200)=@ng={0x4, 0xf}, 0x2, 0x0) dup3(r4, r3, 0x0) finit_module(r4, 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x1, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:19:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x18650, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}}, 0x0) 16:19:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1b00) 16:19:55 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x8, [@int, @array, @int]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x58}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 940.731408] audit: type=1804 audit(1603210795.914:32): pid=10970 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir322597539/syzkaller.CZMM2R/739/bus" dev="sda1" ino=16564 res=1 [ 940.808341] audit: type=1400 audit(1603210795.994:33): avc: denied { module_load } for pid=10970 comm="syz-executor.5" path="/root/syzkaller-testdir322597539/syzkaller.CZMM2R/739/bus" dev="sda1" ino=16564 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=system permissive=1 16:19:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000180)="6426f30fc7fb2e660f6f96416bd9e0f4f23ef0f65316f2adbaf80c66b8bc3e6c8166efbafc0cb0faee74e0bad004b000ee0fc7a20000", 0x36}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1f00) [ 940.891610] audit: type=1804 audit(1603210796.034:34): pid=10970 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir322597539/syzkaller.CZMM2R/739/bus" dev="sda1" ino=16564 res=1