000)={0x80, 0x9}) 15:13:24 executing program 5: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xfffffffffffffff8, 0x200000) fcntl$setstatus(r0, 0x407, 0x40000000) fcntl$setflags(r0, 0x2, 0x1) dup2(r2, r1) mq_timedreceive(r2, &(0x7f0000000080)=""/86, 0x56, 0x5, &(0x7f0000000100)={0x0, 0x1c9c380}) 15:13:24 executing program 4: mknod$loop(&(0x7f0000001440)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r1 = getuid() readv(r0, &(0x7f00000005c0)=[{&(0x7f00000003c0)=""/52, 0x34}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000400)=""/252, 0xfc}, {&(0x7f0000000500)=""/16, 0x10}, {&(0x7f0000000540)=""/1, 0x1}, {&(0x7f0000000580)=""/13, 0xd}], 0x6) r2 = getgid() write$FUSE_ENTRY(r0, &(0x7f0000000140)={0x90, 0x0, 0x2, {0x0, 0x0, 0x43, 0x5, 0x1, 0x7, {0x6, 0x8, 0x2, 0x3f, 0x401, 0x5, 0x23, 0x9, 0x8, 0x7, 0x4, r1, r2, 0x1, 0x9}}}, 0x90) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="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"]) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x109000, 0x0) syz_open_dev$audion(&(0x7f0000000380)='/dev/audio#\x00', 0x5, 0x800) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400403}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x78, r4, 0x301, 0x70bd2c, 0x25dfdbfe, {0x1}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x537a}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe3e}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x8000) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5}, 0x30) 15:13:24 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000004fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="10"], 0x1) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) recvfrom$inet6(r1, &(0x7f0000000000)=""/24, 0x18, 0x40, &(0x7f0000000040)={0xa, 0x4e22, 0x6, @loopback={0x0, 0x1}, 0x1000}, 0x1c) ioctl(r2, 0x4000008916, &(0x7f0000000100)="290100000016f477671070") mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x1012, r2, 0x0) ioctl(r0, 0x40084149, &(0x7f0000001f64)) 15:13:24 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x6c, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000140)=0x1000) r3 = dup(r2) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x80003) sendfile(r3, r4, &(0x7f0000d83ff8), 0x8000fffffffe) sendto$inet(r1, &(0x7f00000000c0)="e00b62f71b4f0ce4e9a63ebc07e517c158403ae1689e885f7bdcefae0e87786211fb13044a259df00dcb0597305c19812f0a24358f386af4aef845c6581cc92d7686da2e2978cacece9039ed9a2cfc822eb099ff9a326160063c97a91f27d4861b94", 0x62, 0x4004000, &(0x7f0000000140)={0x2, 0x4e24, @loopback=0x7f000001}, 0x10) 15:13:24 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}}) 15:13:24 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4547b25263]}}, 0x1c) 15:13:24 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4}) 15:13:24 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f0000000000)={0x28, 0x0, 0x2711, @host=0x2}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000040)=0x100, 0x8) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0x0) listen(r1, 0x0) exit_group(0x4) 15:13:24 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x6c, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:24 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}}, 0x1c) 15:13:24 executing program 1: r0 = socket$kcm(0x29, 0x80000400000002, 0x0) ioctl(r0, 0x200008912, &(0x7f0000000000)="0047fc2f07d82c99240970") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000290007241dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f00000000c0)={0x5, 0x2, 0x4, 0x2a48, 'syz0\x00', 0x6}) ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f0000000140)) 15:13:24 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa, 0x6b}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="2600000080"]}) close(0xffffffffffffffff) close(r1) 15:13:25 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4}) 15:13:25 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000595ff8)=0x80) writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)='U'}], 0x1) close(r1) [ 561.823210] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. 15:13:25 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80000000000000]}}, 0x1c) 15:13:25 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x60000, 0x0) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000080)={0xeed, 0xe9, 0x0, 0x9a8b, 0x1f, 0x7}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0x8030ae7c, 0xa07001) 15:13:25 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00]}}) 15:13:25 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x6c, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) [ 561.894946] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. 15:13:25 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet6(0xa, 0x3, 0x412) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040)=0x2, 0x4) 15:13:25 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="025cc83d6d345f8f762070") r1 = socket(0x11, 0x803, 0x300) syz_emit_ethernet(0x11, &(0x7f0000001180)=ANY=[@ANYBLOB="8bd50000a20000000000b76fd02bfddb69"], &(0x7f0000000040)) r2 = dup3(r1, r0, 0x80000) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000080)={0x4000, 0x10000, 0x40, 0x7fff, 0x100}) recvmmsg(r1, &(0x7f0000000000)=[{{&(0x7f0000002b80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast1}}}, 0x80, &(0x7f0000002d00), 0x0, &(0x7f0000002d40)=""/164, 0xa4}}], 0x3fffef7, 0x10022, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f00000000c0)={0x6, 0x2, 0xffffffffffffffff}) 15:13:25 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}}, 0x1c) 15:13:25 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x6c, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:25 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4}) 15:13:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x400, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000100)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000001c0)="2664460f20c70f20d835080000000f22d8660f3880233664470f013b660f3a214dff0bb9800000c00f3235010000000f30f20f1014d5322e5d8d3e0f22d066baf80cb850eaac8eef66bafc0cb887fed4faef660f3881a7a9000000", 0x5b}], 0x1, 0x0, &(0x7f0000000100), 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:13:25 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}}) 15:13:25 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfec0000000000000]}}, 0x1c) 15:13:25 executing program 5: r0 = socket$inet6_sctp(0xa, 0x3, 0x84) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, @broadcast}, &(0x7f0000000040)=0x10) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000080)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x1e, &(0x7f00000000c0), 0x0) 15:13:25 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x6c, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:25 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) write$binfmt_aout(r0, &(0x7f0000000180)={{0x0, 0x7, 0x3bb, 0x2a1, 0x315, 0x80000001, 0x22a, 0x3b837147}, "f35290a4ea4546e1b926728df51d5de129de98237cc903c3d2f43b712f3392f0318f6b55fe24ec4a0c37fc387b369398744f25e80159d2f9a3c694c5434e5df6d286e8599bdbcdbc0ff5baea15be9756ab34db2c441dcd5f5e6e767c2a3ffb58825e408415283f3dbef58359030f465388372cd8f027ccb0b0817074ceb647daa7606cbb0aea90cb2cccc15390e1f53db15dab22cd81c16f31115907a711e0935c2f4006afb6f88232e5755a38dc9e9a9c4865dd4c742c980cc7986fc2", [[]]}, 0x1dd) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000440)={{&(0x7f000025e000/0x2000)=nil, 0x2000}, 0xfffffffffffffffd}) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x0, 0x80000) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r1) 15:13:25 executing program 3: r0 = socket$inet6(0xa, 0x80000, 0x5) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") rt_sigreturn() r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x80000001, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000140)={0x2, 0x0, 0x4e040f3f, 'queue0\x00', 0x8}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000200)) fcntl$dupfd(r0, 0x406, r3) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x800, {0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x4e20, @rand_addr=0x1}, {0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x82, 0x7, 0x9, 0xfffffffffffffff9, 0x3, &(0x7f0000000000)='ip6gre0\x00', 0x95, 0xe21, 0x3}) r4 = fcntl$getown(r2, 0x9) fcntl$lock(r1, 0x6, &(0x7f0000000240)={0x0, 0x4, 0x5, 0x746, r4}) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0x8030ae7c, 0xa07001) 15:13:25 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4}) 15:13:25 executing program 5: r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x6, 0x200) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000000c0)={'irlan0\x00', 0xdd}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) sendmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000001680)=@in6={0xa, 0x4e24, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x80, &(0x7f00000028c0), 0x0, &(0x7f0000002900)=ANY=[@ANYBLOB="2b010100000000000000000000000000"], 0xc}}], 0x1, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@mcast2}, &(0x7f0000000040)=0x14) 15:13:25 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000]}}) 15:13:25 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x6c, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) ftruncate(0xffffffffffffffff, 0x80003) sendfile(r2, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:25 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80000000000000]}}, 0x1c) 15:13:25 executing program 1: r0 = socket(0x2, 0x1, 0x0) listen(r0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000)={0x77359400}, 0x239) accept4(r0, &(0x7f00002c0fec)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00003bd000)=0xffffffffffffffa2, 0x0) shutdown(r0, 0x1) r1 = gettid() getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}}, [0x400, 0x3, 0x5, 0x1, 0x100, 0x7, 0x24, 0x80, 0x1, 0x100, 0x100000000, 0xd8, 0x6, 0x4, 0xc4b]}, &(0x7f0000000140)=0x100) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r2, 0x4) timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000000080)=0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x0, 0x8}, {r4, r5+30000000}}, &(0x7f00000001c0)) tkill(r1, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000300)={'bcsh0\x00', 0x8000}) 15:13:25 executing program 5: r0 = socket(0x10, 0x3, 0x0) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000040), &(0x7f0000000080)=0x10) ioctl$sock_ifreq(r0, 0x8946, &(0x7f0000000140)={'bridge_slave_0\x00', @ifru_mtu}) 15:13:25 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x20000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x8030ae7c, 0xa07001) 15:13:25 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x6c, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x80003) sendfile(0xffffffffffffffff, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:25 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") bind$alg(0xffffffffffffffff, &(0x7f00000b8fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001f3a), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x101) r3 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x8010, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x78, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {{0x2, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x58, 0x30, &(0x7f00000001c0)=[@flat={0x776a2a85, 0x0, r3, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000100), 0x1, 0x0, 0x26}, @fd={0x66642a85, 0x0, r0, 0x0, 0x1}], &(0x7f0000000240)=[0x0, 0x68, 0x48, 0x30, 0x68, 0x30]}, 0x5}}, @release={0x40046306}, @register_looper={0x630b}, @decrefs={0x40046307, 0x3}, @acquire={0x40046305, 0x2}, @register_looper={0x630b}, @dead_binder_done={0x40086310}], 0x96, 0x0, &(0x7f0000000400)="2ea34f902f7ad42d344e626716d91810a0b535e41a25fb5e4828c1eb30fa3a7497ca75a86b90fc636f859c6ed8b04ce77e6a6ae2b393b933754bf14e87524813f1e1b8dbab57b4168c8514e3d5f8082ffc1ae79de841f10682d7a30065a82c5d596c81d606b353499f571ff322b5c4e431faff5a61434a0ddf048c8786ac71ed07a6067607710ba19d072064e1d2e221c766304fcdc8"}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000300)={'security\x00', 0x2, [{}, {}]}, 0x48) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x7fffffff, 0x16, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setflags(r0, 0x3, 0x0) 15:13:25 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87ffffff00000000]}}, 0x1c) 15:13:25 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4}) 15:13:25 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900]}}) 15:13:25 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x6c, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:25 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)="70726ff700", 0x0, 0x0) rename(&(0x7f0000000040)='./file0/bus\x00', &(0x7f0000000080)='./file0/bus\x00') mount(&(0x7f0000000180)='./file0/bus\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cifs\x00', 0x810028, &(0x7f0000000240)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x200000, 0x0) r1 = dup3(r0, r0, 0x80000) setsockopt$sock_void(r1, 0x1, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x20}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000280)) 15:13:25 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000]}}, 0x1c) 15:13:25 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x76, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x7fff) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) pipe(&(0x7f0000000080)) shutdown(r1, 0x1) 15:13:25 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000080)=r2) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0x8030ae7c, 0xa07001) 15:13:25 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x6c, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:26 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={&(0x7f000034c000)={0x10}, 0xc, &(0x7f00000daff0)={&(0x7f0000000280)=@polexpire={0xc0, 0x1b, 0x9, 0x0, 0x0, {{{@in=@multicast1=0xe0000001}, {}, {}, 0x0, 0x6e6bb1}}}, 0xc0}, 0x1}, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x5) 15:13:26 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400300]}}, 0x1c) 15:13:26 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x6c, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:26 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4}) 15:13:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x1000002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000411000)="bc", 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) ioctl$TCXONC(r0, 0x540a, 0x1) 15:13:26 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000]}}) 15:13:26 executing program 5: syz_emit_ethernet(0x6e, &(0x7f0000101000)={@random="cd390b081bf2", @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x2c, 0x0, @mcast2={0xff, 0x2, [], 0x1}, @dev={0xfe, 0x80}, [], "802a08000000006b"}}}}}}}, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x6, 0x10000) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000040)) 15:13:26 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x4) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount(&(0x7f0000000180)='.\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000500)='configfs\x00', 0x120100c, 0x0) r4 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000440)=""/186, 0x760) getdents64(r4, &(0x7f0000000100)=""/81, 0x4a) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x8030ae7c, 0xa07001) 15:13:26 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}}, 0x1c) 15:13:26 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80000, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x20001) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000939000)=0x400000019) 15:13:26 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000]}}, 0x1c) 15:13:26 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x6c, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000140)=0x1000) r1 = dup(0xffffffffffffffff) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x80003) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:26 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4}) 15:13:26 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:26 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000]}}) 15:13:26 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff]}}, 0x1c) 15:13:26 executing program 4: r0 = socket$inet6(0xa, 0x800000000000802, 0x1) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000001c0)={@local, 0x0}, &(0x7f0000000200)=0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@remote={0xfe, 0x80, [], 0xbb}, @loopback={0x0, 0x1}, @remote={0xfe, 0x80, [], 0xbb}, 0x2, 0x6, 0x800, 0x100, 0x7, 0x40000000, r1}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000180)=0x200, 0x4) modify_ldt$write(0x1, &(0x7f0000000080)={0x9, 0xffffffffffffffff, 0x400, 0x1, 0x6, 0x0, 0x6, 0x4, 0xce, 0x7}, 0x10) setsockopt$inet6_buf(r2, 0x29, 0x14, &(0x7f0000000040)="ff55d36cffba04365d0000000000000101000000", 0x14) ppoll(&(0x7f00000000c0)=[{r0, 0xe78bde6944198544}, {r0, 0x1000}, {r0, 0x104}, {r0, 0x3}, {r0, 0x10}, {r0, 0x8000}, {r0, 0x4100}, {r0, 0x204}], 0x8, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000140)={0x10000}, 0x8) setsockopt$inet6_buf(r2, 0x29, 0x15, &(0x7f0000000000)="ff55d36cffba04365d0000000000000101000000", 0x14) 15:13:26 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = dup2(r0, r0) mq_timedreceive(r1, &(0x7f00000000c0)=""/40, 0x28, 0xef0, &(0x7f0000000100)) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1dc8, 0x400000) r3 = semget(0x2, 0x3, 0x0) semctl$GETALL(r3, 0x0, 0xd, &(0x7f00000002c0)=""/4096) truncate(&(0x7f0000000080)='./file0\x00', 0x3) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r5, 0x8030ae7c, 0xa07001) 15:13:26 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4}) 15:13:26 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x40000000015, 0x805, 0x0) bind$inet(r1, &(0x7f00000a9000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r1, &(0x7f0000dbf000), 0x14c, 0x0, &(0x7f0000000040)={0x2, 0x0, @loopback=0x7f000001}, 0x10) r2 = socket(0x15, 0x80005, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r4, 0x7fffffff}}, 0x10) getsockopt(r2, 0x114, 0x2715, &(0x7f0000000000)=""/13, &(0x7f000033bffc)=0xd) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 15:13:27 executing program 1: setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000100)={0x0, {{0xa, 0x2, 0x0, @empty, 0x10000000000004}}}, 0xffffffffffffff22) 15:13:27 executing program 5: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in6=@ipv4={[], [], @broadcast}}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000300)=0xe8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x40001, 0x0) socketpair$inet6_sctp(0xa, 0x8, 0x84, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000340)=0x100000001, 0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x2, 0x9, 0x101, 0xc000000, 0x7fffffff, 0x5, 0x2, 0x7fffffff, 0x8, 0x2ab940000000000, 0x4}, 0xb) ioctl$TCSETSW(r1, 0x5403, &(0x7f00000001c0)={0x0, 0x0, 0xf44d}) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x40, 0x0) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f00000000c0)={0xfd, 0x0, [0x6, 0x800, 0x0, 0x3ff]}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000180)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0xfffffffffffffffe, 0x4) 15:13:27 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}}, 0x1c) 15:13:27 executing program 6: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x1000) r1 = dup(r0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x80003) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:27 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4}) 15:13:27 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]}}) 15:13:27 executing program 3: prctl$seccomp(0x16, 0x0, &(0x7f0000000080)={0x8, &(0x7f0000000000)=[{0x8, 0x72, 0x81, 0xc74}, {0x307, 0x4d, 0x5, 0x4a50}, {0x5, 0x80000000, 0x100000000}, {0x7, 0x7, 0x18d, 0x2}, {0xa4b4, 0x1, 0x6, 0x1}, {0x20, 0x100000000, 0x2, 0x1ff}, {0x9, 0xe9, 0x9d, 0x76}, {0x5, 0xa39, 0x280000000000000, 0x9}]}) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) write$P9_RSYMLINK(r2, &(0x7f0000000100)={0x14, 0x11, 0x2, {0x52, 0x3, 0x7}}, 0x14) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0x8030ae7c, 0xa07001) 15:13:27 executing program 4: r0 = msgget$private(0x0, 0x20000000) msgsnd(r0, &(0x7f00000003c0)={0x3, "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"}, 0xfd1, 0x0) msgrcv(r0, &(0x7f0000000080)={0x0, ""/79}, 0xb559, 0x0, 0xa4a3ad41a879dde0) 15:13:27 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000707ff0)={0x0, 0x10, &(0x7f0000f3eff0)=[@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}]}, &(0x7f000045c000)=0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xfffffffffffffffe, 0x32, 0xffffffffffffffff, 0x0) shutdown(r0, 0x2000000000000002) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={r1, 0x2c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x7fff, @local={0xfe, 0x80, [], 0xaa}, 0x20}, @in={0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}]}, &(0x7f0000000080)=0x10) 15:13:27 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfec0]}}, 0x1c) 15:13:27 executing program 6: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x1000) r1 = dup(r0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x80003) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:27 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='&Bppp0em1\x00'}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000006c0)={0xffffffffffffffff}, 0x0, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000740)={0x13, 0x10, 0xfa00, {&(0x7f00000004c0), r2, 0x1}}, 0x18) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x7fff, 0x200) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x8}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000002c0)={r4, @in6={{0xa, 0x4e22, 0xffffffffffff4e07, @empty, 0x5}}, 0xa8b7, 0x7fffffff, 0x6, 0xb3e, 0xa}, &(0x7f0000000380)=0x98) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) r6 = accept$alg(r5, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000005940)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="48107936edbbc8470fd3bd7d3faf24211f88c05f85353b1bcef5de3280f2687c2620032770501ef8a908213c16f3b17383193cefab9cd87a0e4958fa53ac2576bdf6e4aa2b73a8ae9ddad19092065a07a0df23aa43a96ad5163f8c10c3516fff9e65261d4d15fc36fc66a9b264b3bed5d84d796328051ffcf2c7b3ebd851b3da7056d7d478fd06d41cf43be76f1c4d8d063f9aa159b9a785d4acd315f4da35cc6ba1474f40ac24eb4d0d96710f22da64ecfd62e99652af5d934e310437ee6b58d579baed1cd9b72f5b9210f986f57a03a25ed92f7b0f6e387b6b01e5a9689987", 0xe0}], 0x1, &(0x7f00000000c0)}], 0x1, 0x0) recvmsg(r6, &(0x7f0000001440)={&(0x7f0000000000)=@sco, 0x80, &(0x7f00000013c0)=[{&(0x7f0000005a80)=""/4096, 0x20005e83}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) [ 564.363367] Unknown ioctl 1080602275 [ 564.369261] Unknown ioctl 35147 15:13:27 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4}) 15:13:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000000), &(0x7f0000000080)=0x4) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x8030ae7c, 0xa07001) [ 564.418280] Unknown ioctl 1080602275 [ 564.434128] Unknown ioctl 35147 15:13:27 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2002]}}) 15:13:27 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2=0xe0000002, @loopback=0x7f000001, @dev={0xac, 0x14}}, 0x34f) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000140)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000040)=0x8000, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={"6c6f0000000004000000000600", 0xfd}) 15:13:27 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80fe]}}, 0x1c) 15:13:27 executing program 6: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x1000) r1 = dup(r0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x80003) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:27 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000facfff)="06", 0x1, r1) r3 = add_key$user(&(0x7f0000000500)='user\x00', &(0x7f0000752ffb)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000580)="b3", 0x1, r1) keyctl$update(0x2, r0, &(0x7f00000005c0)="df02754677212dfc3e2abc0500000073e8e1cfef09742258cbae7b26fdc3ffa615d9da494137e175e9f2780ac5e2a09f43a1fcebf272a5a135de92bf4a9033933824f6e6aa0238014e3293535d1c0066d28e0f275188b4b4c187e18774fc2227cbb6610fc6697f5337726164c8fbe1181e6d50986cd98a5c44ac0ec375deb27eafcf7d06438f2525100400000003e7dc2f8fd85adcd88ca30e75b1e143262d94defa187e482a9b9a9a387353df7a21affce4e9149e040000000000000065afd9", 0xc0) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r3, r2}, &(0x7f0000a53ffb)=""/5, 0x4, &(0x7f00000001c0)={&(0x7f0000a3dffa)={'sha224-generic\x00'}}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getuid() setresuid(r4, r5, r6) 15:13:27 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x1000) r1 = dup(r0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x80003) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:27 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) eventfd(0x10000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f0000000040)) 15:13:27 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x1000) r1 = dup(r0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x80003) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:28 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x1000) r1 = dup(r0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x80003) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:28 executing program 6: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:28 executing program 4: writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x9, 0x3, 0x348, 0x140, 0x140, 0x140, 0x0, 0x0, 0x278, 0x278, 0x278, 0x278, 0x278, 0x3, &(0x7f0000000100), {[{{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @dev={0xfe, 0x80, [], 0x1f}, [0xffffffff, 0xffffff00, 0xff], [0xffffffff, 0x0, 0xffffff00, 0xffffffff], 'syzkaller0\x00', 'tunl0\x00', {}, {0xff}, 0x3b, 0xff, 0x1, 0x54}, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x25a89fdc5835e815}}, @common=@icmp6={0x28, 'icmp6\x00', 0x0, {0x15, 0xd57, 0xfffffffffffffffb, 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x2, 0x4, 0x800}}}, {{@uncond, 0x0, 0x118, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x2}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x6}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3a8) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') writev(r1, &(0x7f00000000c0), 0x20000000000003fa) writev(r1, &(0x7f0000000840)=[{&(0x7f0000000500)="cbe93bd4cada2b68133e8c3262bfaad77af9d4aa11031e36192b25ac6e5c48177531d9db04c1906aaa3106aff890257c5bbde6359ccfb84e8a03d91d78081799a55c31d5e198540c7ae1c2ea49bed12b726dae41ac2a457c2fe220d58ab3ee6d2377f86ad6ed4969441b8ac236dac1644678520da9575fd32cec6d32efb2", 0x7e}, {&(0x7f0000000580)="f4d8ed6537af772fc4f7b68cc42d859dc77d2869ef6fa0683f140dd42a2df7514a4b6f54e3ec7720e8306bde3990c006526940fb89dd885fcfe750c1e2c92717f8a517cb7974e423b25d0858125f8fb14df26dc019ce291225de75c6a468e471c454a1c84d8d329291c98fc258da861827611972385eb256c6a2d80ca436958373118f8960307a741db17425983cf33586e5b4f6f1a805e6e4e760d6632e4f2bd99973b64836486c4ea5a4f17241fadcdcf793555baffe4caa8cb7a375091fbacff3cdf289", 0xc5}, {&(0x7f0000000680)="f4a9550976aa0585798231121b1e92cfe641f72df60f0c56f507154eb545fba58860eb4afb47fe28bb9ed31e608ec0c174bca0cb7b8f93425c95b830f0caf787016900579745fbd0774a58cd7e123db25180a49fd756cf3b117825088b473b4fb5c173249ff131b2eb3cf1208389d5e41254ffc92295ce5694da5aa4c423510fd316434e6536374a43fc7ada03c8a54d92c465d841348af73cd716ce58f0aa63", 0xa0}, {&(0x7f0000000740)="004f2d01f8938f6e3ef0151fa4687fd8b9faf9bd3cfa8bd0acc6f6ee9d235697bd9c8d5d5111ceddceb2d8a81a0a90d29b68143ecb7ff5b9e5d116dfb2d5c1cfdb90b055e35b45c2b4d2fe389c9171d48b2c7c0660d684a09bb36968a6d0e4737b6ba0b1c0b71b26d3d8c47d461353e498db428981835062be06ddf649fae325cd2a8fb6bae3d0eedcc05fb96431beb38697b95790159eed78af23211e2a6ba5c34fc30c", 0xa4}, {&(0x7f0000000800)="9d1a7bedcdc082461104431dd0a05c94", 0x10}], 0x5) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) 15:13:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000dfdff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400000, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r2, 0x8250aea6, &(0x7f0000000040)=""/165) r3 = epoll_create(0x10001) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000f9dff4)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f00004c4fe4)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000fedffe)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) 15:13:28 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}}, 0x1c) 15:13:28 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}) 15:13:28 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4}) 15:13:28 executing program 6: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000200)) r2 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x9, 0x80) getdents(r2, &(0x7f0000000100)=""/166, 0xa6) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0x8030ae7c, 0xa07001) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$lock(r1, 0x5, &(0x7f0000000080)={0x1, 0x4, 0x101, 0x3, r4}) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f00000001c0)={'team_slave_0\x00', 0x5}) [ 565.228062] binder_alloc: binder_alloc_mmap_handler: 5180 20000000-20002000 already mapped failed -16 [ 565.329650] binder: BINDER_SET_CONTEXT_MGR already set [ 565.352866] binder_alloc: 5180: binder_alloc_buf, no vma [ 565.358534] binder: 5180:5192 transaction failed 29189/-3, size 0-0 line 2967 [ 565.388380] binder: 5180:5186 ioctl 40046207 0 returned -16 15:13:28 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000280)="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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r0, r2) r4 = socket(0xa, 0x1, 0x0) sendmsg$netlink(r3, &(0x7f0000005b00)={0x0, 0x0, &(0x7f0000005a00), 0x0, &(0x7f0000005a80)=[@rights={0x28, 0x1, 0x1, [r4, r1, r2, r1, r2]}], 0x28}, 0x0) recvmmsg(r1, &(0x7f0000005200)=[{{0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)=""/168, 0xa8}}, {{&(0x7f0000000540)=@vsock={0x0, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000007c0), 0x0, &(0x7f0000000800)=""/240, 0xf0}}, {{&(0x7f0000002040)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002400), 0x0, &(0x7f0000002480)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f00000034c0), 0x0, &(0x7f0000003500)=""/131, 0x83}}, {{0x0, 0x0, &(0x7f0000003900), 0x0, &(0x7f0000003980)=""/114, 0x72}}, {{0x0, 0x0, &(0x7f0000004b80), 0x0, &(0x7f0000004bc0)=""/131, 0x83}}, {{&(0x7f0000004c80)=@nl, 0x80, &(0x7f0000005140), 0x0, &(0x7f00000051c0)=""/57, 0x39}}], 0x7, 0x2, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000140)={{0xd000, 0xd001, 0xb, 0x1, 0x400, 0x3f, 0xc3a, 0x1, 0x7ff, 0x3f, 0x0, 0xfffffffffffff801}, {0xd000, 0xf004, 0x0, 0x5, 0x400, 0x8, 0x73, 0x6, 0x4, 0x8, 0x5, 0x5d40}, {0x0, 0x1, 0x3, 0x6, 0x40, 0xe4000000000, 0xa32, 0x3, 0x5, 0x0, 0x101, 0x2}, {0x0, 0xf000, 0x1f, 0xffffffffffffffff, 0x1, 0x20, 0x81, 0x9, 0x8, 0xa45, 0x80, 0xffffffffffffff00}, {0x1000, 0xd000, 0x3, 0x5, 0x534, 0x1, 0x6, 0x1, 0x7fff, 0x923, 0x3f, 0x2}, {0x0, 0x3000, 0x8, 0x16f, 0xffffffff, 0xd7, 0x80000001, 0x1, 0x1ff, 0x0, 0x3, 0x3}, {0x0, 0xf000, 0xf, 0x1, 0x3, 0xf667, 0x20, 0x9, 0x8, 0x5, 0xfffffffffffff000, 0x7}, {0x4, 0x10004, 0xf, 0x3, 0x800, 0x8000, 0x5, 0x1, 0x4d4, 0x2, 0x5, 0x1}, {0xfd74800a997aea22, 0x7006}, {0x104000, 0x5000}, 0x10008, 0x0, 0xf000, 0x4000, 0x2, 0x100, 0xd000, [0x8, 0xd8ae, 0x3ff, 0x20000]}) dup2(r5, r3) 15:13:28 executing program 6: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:28 executing program 4: nanosleep(&(0x7f0000000140)={0x77359400}, &(0x7f0000000180)) nanosleep(&(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0xffffffffffffffff) memfd_create(&(0x7f0000000080)='\x00', 0x0) 15:13:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x480, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f00000000c0)={r2, r3/1000+10000}, 0x10) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r5, 0x8030ae7c, 0xa07001) 15:13:28 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) ptrace$setregs(0xd, r1, 0x3, &(0x7f00000001c0)="b9cd5daac8ec3bd504e16521b0d757248f0acdcb09c461f2de3ea7713d02e5a808efec140009a6804e69337eabe118c97eb8f02876bd2d19463007e180d2f458db91d8ba5f24e0ff9682ad5454e5a8f8c5673c72d64385e2edc56b611f09e7c75be6d152c61ef80940780c7e0693b094b98591d06843cdc2d8bfab54bb0b6ff0fbe73e256b600e7037a4eba2031f769168d6f17ab29aae823a5fc38e5931bf0b2e6bf511605aeb7d8d9cb137d6d5368753ba48e85528e246c38393044d3a14a8a07abf76dd5429388c163862380c0dd7afe262737a06e2f43e601e") getsockopt$bt_hci(r0, 0x0, 0x6, &(0x7f00000000c0)=""/244, &(0x7f0000000000)=0x9c) 15:13:28 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000]}}, 0x1c) [ 565.468186] binder: undelivered TRANSACTION_ERROR: 29189 [ 565.486078] binder: send failed reply for transaction 80 to 5180:5186 [ 565.492884] binder: undelivered TRANSACTION_COMPLETE [ 565.498068] binder: undelivered TRANSACTION_ERROR: 29189 15:13:28 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2002000000000000]}}) 15:13:28 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4}) 15:13:28 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaa2aaaaaaaaaaaec827691622c75000379747a7582aaaa0086dd6050a09c00080400fe80070000000000a1d4ec56000097b5b9ce3f4ededd000000000000aa"], &(0x7f0000000040)) r0 = userfaultfd(0x80800) fdatasync(r0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x1, 0x0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000100)=0x200, &(0x7f0000000140)=0x4) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000000180)) 15:13:28 executing program 5: clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setitimer(0x0, &(0x7f0000000080)={{r0, r1/1000+30000}, {0x77359400}}, &(0x7f00000000c0)) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) time(&(0x7f0000000000)) r4 = dup2(r2, r3) ioctl$sock_bt(r4, 0x541b, &(0x7f00000001c0)="81652d764fc2ef4a084db8d4f937f3c46efc729ab8704cb563be0825915736bbabd051c214ab10544d9f0acfc41a638a883027321c6c413b696aff5d45c1332c66a4129c5e9c42b076baae10cd3ebb518ac1ea8bd609fa6c3e541b431e8c7cdc1712ae7e76da9107d8439b0f6962152df4cfc8cfd5fb19a87415") 15:13:28 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}}, 0x1c) 15:13:28 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000280)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f00000000c0)) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0x6, 0x0, 0x4, 0x0, 0x99, 0x5, 0x40, 0x0, 0x2, 0xe9}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000100)={0x0, 0x91, "fcfd4598c0c0c23c05c5ff2e25411b1b6aa7a16f082d402dc45216e7d5af1e8247134baa205e69fa10fb6406d822ed453f28e3b2eea7c78e74721b14d7ebfaccb23356b9d1b0b755876431977672ec27e3a1f032677862037d703925dc6dc6492f764ef47d16119058e0f75959340517357da8dbbdacb58654687c20275c4786648754a428305298f49562f0453e158d6f"}, &(0x7f00000001c0)=0x99) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000200)={r2, 0x5}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000080)={0x3, [0x6, 0x2, 0x7]}, 0xa) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x5c}, 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000004c0)={r2, @in6={{0xa, 0x4e21, 0x6, @local={0xfe, 0x80, [], 0xaa}, 0x9}}}, 0x84) 15:13:28 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000040002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x8030ae7c, 0xa07001) 15:13:28 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}}) 15:13:28 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000001400)='/dev/audio#\x00', 0x3ff, 0x40a00) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x40032, r0, 0x200000000000000) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000fe8)={0xaa}) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x6}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0xb, &(0x7f0000001ffc), &(0x7f0000012000)=0xfffffffffffffe59) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = dup3(r3, r1, 0x80000) dup3(r2, r1, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r4, 0x111, 0x2, 0x1, 0x4) 15:13:29 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe800000]}}, 0x1c) 15:13:29 executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000000c0)={@mcast1={0xff, 0x1, [], 0x1}}) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1, 0x101000) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000040)={r0, 0xac09, 0x5f2b8d82, "a2fb3627f22b40d8b4f22779802f994e7f5da7899c79672d0c7543f7b18b6bab50e7933940d79f9426b286d2"}) 15:13:29 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crc32-pclmul)\x00'}, 0x58) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) lseek(r1, 0x7ffffffffffffff9, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x7) r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x401, 0x4800) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f0000000100)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280), 0x0) 15:13:29 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) finit_module(r0, &(0x7f0000000000)='/dev/ppp\x00', 0x2) ioctl$EVIOCGREP(r0, 0x40047459, &(0x7f0000d1df52)=""/174) 15:13:29 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4}) 15:13:29 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:29 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000]}}, 0x1c) 15:13:29 executing program 1: bind$inet6(0xffffffffffffffff, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(0xffffffffffffffff, 0xfffffffffffff801) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000000)="a6", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x7a, 0x204002) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000080)=""/94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r3, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x0, @mcast2={0xff, 0x4, [], 0x1}, 0x4}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000d80)}, 0x0) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000100)=0x9, 0x4) write$binfmt_misc(r2, &(0x7f00000001c0)=ANY=[@ANYRES64], 0x8) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x0) 15:13:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x180, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000600)={0x53, 0x0, 0x17, 0x1, @scatter={0x7, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/207, 0xcf}, {&(0x7f0000000180)=""/100, 0x64}, {&(0x7f00000002c0)=""/198, 0xc6}, {&(0x7f0000000200)=""/60, 0x3c}, {&(0x7f0000000240)=""/56, 0x38}, {&(0x7f00000003c0)=""/107, 0x6b}, {&(0x7f0000000440)=""/72, 0x48}]}, &(0x7f0000000540)="a439299703fb1d8defb37f87ae6e0f8fe617af5ebf9bdd", &(0x7f0000000580)=""/30, 0x5, 0x14, 0x0, &(0x7f00000005c0)}) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x8030ae7c, 0xa07001) 15:13:29 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000]}}) 15:13:30 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:30 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$TCXONC(r1, 0x540a, 0x100000000) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000040)) socket$inet6(0xa, 0x0, 0x2) getsockopt$inet6_buf(r0, 0x29, 0x10, &(0x7f0000c86000), &(0x7f0000000080)=0xffffffee) 15:13:30 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}}, 0x1c) 15:13:30 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f2070") symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000040)='./file0\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x200, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) r2 = socket(0x2, 0x3, 0x2100000001) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000100)='ip_vti0\x00', 0x10) sendto$inet(r2, &(0x7f0000000140)="365be8e010e80cf7aa70012b1a185535fea6e5cefd34b9b1f06a9b4674263b96e1e3697d687e9c29defcc56900de2dd3ef1cf913d605ea3079f84e", 0x3b, 0x80, &(0x7f00000000c0)={0x2, 0x4e1f, @loopback=0x7f000001}, 0x10) 15:13:30 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000]}}) 15:13:30 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4}) 15:13:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$fiemap(r2, 0xc020660b, &(0x7f0000000080)={0x81, 0x1, 0x1, 0x2, 0x2, [{0x9, 0x322, 0xaa23, 0x0, 0x0, 0x44aa50a4495b0eb7}, {0x2, 0x748c, 0x0, 0x0, 0x0, 0x402}]}) r3 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x2, 0x8380) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, &(0x7f0000000140)={{0x7fff, 0x100, 0x6a04, 0x5, 0x1f, 0x8}, 0x4, 0x36d, 0xdb, 0x8, 0x8000, "8d24d2b7f2e297b5bdabe64d1f34e2f2692cd95fff62a8b0989d9b55c6cf9d5d817dca8ed2b231f2190803e1cf321e57fe48af84c7c1f0e5311db1eeb4f242d7b67a3714d4bba6ed8eb063895f8c96c3e93eb57f7db3819ef0342de30f3163268faf0193fb4a596db5c2197d4050f36e97e8b8bab87f1c628e40c57dcd8419bc"}) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x8030ae7c, 0xa07001) 15:13:30 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x5) write$binfmt_elf32(r0, &(0x7f0000000a00)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x1, 0x48, 0x2}, [{}]}, 0x58) write$binfmt_elf32(r0, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x800, 0x0, 0x7, 0x7fff, 0x7, 0x0, 0x3e, 0x5, 0x357, 0x38, 0x223, 0xfffffffff1d77c59, 0xffffffff, 0x20, 0x2, 0x9c9, 0x80000001, 0x7}, [{0x60000000, 0x200000000000, 0x800, 0x8, 0x24cf, 0x25, 0x80, 0x100}], "9601d07f6458780afb"}, 0x61) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0xc01) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)=0x8) 15:13:30 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc00]}}, 0x1c) 15:13:30 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:30 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x80, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000240)={0x0, @time={0x77359400}, 0xe8, {0x5}, 0x50, 0x0, 0xfffffffffffff800}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x7f) setsockopt$packet_tx_ring(r0, 0x107, 0x7, &(0x7f0000000100)=@req3, 0x1c) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x200, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x7}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={r3}, &(0x7f0000000080)=0xfffffffffffffd9f) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x84, 0x1f, 0x1, 0x74a, 0x3f, 0x4db2ae9b, 0x3}, 0x1c) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e24, 0x5, @mcast1={0xff, 0x1, [], 0x1}, 0x5}}}, 0x84) 15:13:30 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}) 15:13:30 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4}) 15:13:30 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$alg(0x26, 0x5, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40040, 0x41) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f00000014c0)={{0x6, 0x1, 0x4, 0x8, 'syz0\x00'}, 0x5, 0x47, 0x2, r3, 0x2, 0x2a, 'syz0\x00', &(0x7f0000000180)=['\x00', ')\x00'], 0x3, [], [0x800, 0x81, 0x6]}) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d66593ae164c990a0028e", 0x10) r4 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0xfffffffffffffd91) recvmsg(r4, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x34, &(0x7f0000001400)=""/123, 0x7b}, 0x0) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000002900)=""/4096, 0x1000}], 0x1, &(0x7f00000027c0)=""/183, 0xb7}, 0x0) 15:13:30 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x4, 0xc, 0x8, 0x3, 0x6, 0x0, 0xbe0, 0x0}, &(0x7f0000000080)=0x20) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={r1, 0x7f}, 0x8) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x13, &(0x7f0000000000), 0x4) 15:13:30 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff87]}}, 0x1c) 15:13:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x182, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000080)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000100)={r4, 0x101}, &(0x7f0000000180)=0x8) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x8030ae7c, 0xa07001) close(r0) 15:13:30 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x200000002, 0x375, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x24020400) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)="6e6d8f3b2778bc732f75") r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) read(0xffffffffffffffff, &(0x7f0000fb6000)=""/28, 0x1c) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000030c0)={'team0\x00'}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000003c00)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000003bc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="16000000d1e1f3819e570fc8e1cefc338f6d4459ac31f0ec5ec81fa12fb5607c9162609684ca89a045b2edcab0dba1e9f9bdaeb4685ec376176f1812fd652e67692d1187a2", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001000000"], 0x14}, 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000418f50)={{}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4"}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000001400)={'sit0\x00', &(0x7f00000013c0)=@ethtool_eee}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f000074fffc), 0x348) r3 = dup(r2) setsockopt$inet6_tcp_int(r3, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100)=0x200, 0x2) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x5) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f00000001c0)=""/205) sendto$inet6(r2, &(0x7f0000000300), 0x0, 0x20004000, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x7fff) 15:13:30 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") ioctl$FS_IOC_FSSETXATTR(r1, 0x40087602, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 15:13:30 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}) 15:13:30 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) set_robust_list(&(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040)}}, 0x18) dup2(r2, r0) openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) sendfile(r2, r2, &(0x7f0000000140)=0x15, 0x10001) 15:13:30 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4}) 15:13:30 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000]}}, 0x1c) 15:13:30 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:30 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[]}, 0x1}, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x21}, &(0x7f00000001c0)=0x10) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1b, 0x4, "89eb71945424d8e661e81421fade8f0553ff878dcd6e6efc3fff7371ee072d93aa5abdffbb5b36fa72194ba8723c60caa52873a50a90d47e6bd1d60d8d48e936", "de5064fd1885854796b36aabebbe83b45b8943504349597538d5adc38d943bc9", [0x7fffffff, 0x1399]}) ioctl(r1, 0xc2604110, &(0x7f0000000040)="c758a632b836780046eb601a42b04e404ac481b35cadefb03d08b66f69a649121807d030f9beeb") 15:13:30 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000040)={0x7b, 0x0, [0x4b564d02]}) 15:13:30 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000000000000]}}, 0x1c) 15:13:30 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}) 15:13:30 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4}) 15:13:30 executing program 1: eventfd2(0x0, 0x0) 15:13:30 executing program 4: pipe(&(0x7f0000001dc0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r0, 0x8, 0x0) close(r1) r3 = socket$inet6(0xa, 0x8000000000000001, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="b709e29eedbf1abc6706a4ddce44430addb48cb489d15ae8bb17cd5e23c4c3987f599a92c4994511e77067594bc74c774153b197dfb75fe9a4a749e347bb2cf2d3efe910d6f8117a6384357d1f490ee8f14ec51f0a97abca658eb4e0e4506460aba3a7ada87c14638ae32d2bc35562744828a8ec201ad069ce9c768aa4a1f15e7b3388469a4a7469e889049e0e5a52fb837386deb07bd3a3306bcaf28716940bdc9291bc75", 0xa5}, {&(0x7f0000000140)="e9e2cabccc5a9894f1129b6f555e445d904f35c738e40cf05ced35d34bae0a58162b0be4d0bcc79c33b151ae3a8b29d874d55ecab0744d11a2a0e279b5b9b547b7cfc10163ab4f89a54889c41b94f8feddadf53e97276d708dc396e2617e21170d98878db4af08836378d774b7974a26df8a9376846fb6b2ba7a3e2b7c1c978b22bee1ede305095c0fd966a626b723d2e407d28e691d18a3f9289d68ca01c395f0962042878cc95017a90637e6dacf52630ea339fed35c673f2d94d3535b22b266", 0xc1}, {&(0x7f0000000240)="defc76ceb957b01135fd64d1ce5ccf34b0cd1185e1296d5f6f7d025a6c9715db80fb5aa0030e0861dca19614b0a16bc99b2145a92f1e9c66be99143ec9895ad2333077d60ff8dd78b193df3b83", 0x4d}], 0x3, 0x0) 15:13:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x8030ae7c, 0xa07001) 15:13:30 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:30 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c04000000000000]}}, 0x1c) 15:13:30 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x40002, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x1, 0x4) r1 = socket$inet6(0xa, 0x1, 0x102) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffffffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) write$binfmt_misc(r2, &(0x7f0000000140)={'syz1'}, 0x4) r3 = accept4(r1, 0x0, &(0x7f0000000080), 0x0) close(r3) 15:13:30 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8, 0x109000) r3 = getpgrp(0x0) r4 = getpgrp(0x0) r5 = getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000019c0)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in=@rand_addr}}, &(0x7f0000000080)=0xe8) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000002440)=""/210) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000280)=0xc) fcntl$getownex(r1, 0x10, &(0x7f0000000340)={0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000002240)={0x0, 0x0}, &(0x7f0000002280)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000022c0)={0x0, 0x0, 0x0}, &(0x7f0000002300)=0xc) sendmsg$netlink(r2, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000000600)={0x18c, 0x31, 0x400, 0x70bd25, 0x25dfdbfb, "", [@typed={0x8, 0x34, @pid=r3}, @generic="780053df8a1a7f76263a41f64b628e4d0c31d3f753edc1acc2414bee052e6fa749a1e1b228210b03839d7a7d6fd3e53221ee895a157af4702ec64132cc45984313a60027b09d26229cd207be4930", @nested={0x2c, 0xe, [@typed={0xc, 0xb, @str='proc\x00'}, @typed={0x1c, 0x12, @str=']selfselinux*wlan0GPLs\x00'}]}, @nested={0xf8, 0x60, [@typed={0xf4, 0x80, @binary="d7005f12d24e94e7c55884847b2b52a07c96f4b3a68e5889d7cc3e0777d25e6fc7899e8b57c9b07b3ee88b2f700a238b39135179090ebebb20759821f15abb7943abef5a5f152d4987c5fae2bb67093e4493942ed76023e59f040ba7375e6154a49d1e12b425819648b81b77a864ce4146547c8d793479538820c398246dff2fdece75a2795f52ed12b62d529d92b0785e9a45a74cc6fe320a99b937bf6eafeb9fe54016e149a4582e46bf3a43219b149c48be05eb57d70b185afd4d64289a84c868cf21e5509159d5f826cd898c686ae0925b4fd501a01b2151e79fe13cfbd86a9327987f1dbb47b6df0c2cdc2f10d5"}]}]}, 0x18c}, {&(0x7f00000007c0)=ANY=[@ANYBLOB="901000003100000427bd7000fbdbdf2504000200772a065089ab52eff4664341eb2787bb5eeab683b8d260eae29cd10ecd471a0a03696380b7d0257c4126ae28d1b61573acd5186783e411512ccc4e1bf6e3229da4486c50562f5552cf792b204eee3fcf8d88fd55b5354be2071c9374c8231e26e2dc5013ddcfb53ed255ea221ead28ee90a356c83722f73be12fc55a2da349ba145364b8e8ff61d560fddfa6274cc9a4435acda3f50ee313718b2f1681339308a5ebc1be59cae2f28a8f80388e5b74fd13167400f4dda37e1b81bb6819789296d987dbfd308729c22624d484195faccebe9cb41522d932363c260ed36d0efb556e4ba1419ffacdb6d74393c82144d22bde39d2355a86d844720cf9148ff9774d1f4aac95614f94b660d26109adbb4239b922bc695756e056846d43e71126acbd62c72ff3a3cb805fec3a10e42a2852b63b018511e81b9ac0029522708e57a6ec730ce7eab518cbd7a9b050c94748839e3499fb13dfafb82c1e0d80a3f2ad5d07582b14541f65b18aca934c037eecaf5839345559219b8bd5b46b77dc7dda266c9a80feb6dd646c7e00db1281c136e28e4da9823c180ce400da6ca5170589a06e41626d81c976a42bcc8c02d87a4f74da5c22793af2d21e6a124e28a5a58e8a52cc88b8ee6046cab63548d458fbcaf1f0301f2e27c32fba345bdf5b93f2c94a4bb3feb2965ec631617cfb6151f40923989d2c518c997606e511d590f8f1bcc99a93ad5ab786ebe0ae3d98d983a1f76357df7b998297026ab50748724245a894accce1ba3b86139e9635919a1f1621fbb44afd66020fbc7ca157e354966d256d23f2ffa23184c506ee0efc3cf6718c8abe766fe407fa7ae78197850ba69bd32bfbc83be985be319fad93624f6cca7969bcf20eafcc26804f94269ca21a4b99f6b2c19db50d2a4717cdfc63944992924ed242b2e7819aefb6984b4ef70864e3d486d7b9f9d96b6d5fb379068cf30645582ef73eb822b71559ac485f00cbfb997657b7ac36560aa711f0c0fd714752cd7d1bf62351ef115782abe5faa201fc4584054495d7172724051a313b8683e0bc6d8ea680a2a8a441daa3edab12e3858811c8845eebaa577c689174920d1f5366badcb008ad4e942a6afb2ff801f3fc338e3ddebb78ca09c0c490d9dccc8ca1f177534980f6dc14b4cbdabd4464082e12776a00ec3f06fddc7254e4ebab76db3f504b5dc434fcb75c0a78fa0810ccefe8daaa08230545578f304854f88eb962dd0ce51d84a441db9f88241bd74961927736cb8321015298a6e03cce3780cc429e4f31b347af9d28c40819621ed322a0387fc2de2a9d9c9a66c65f499b183e50e882081fd3cdd989249a7ec1faa97fa1634db05a0c93d787699f244094637fb7abf2b08c0d0558f1967dc65c38d9ee21783a179bf4d92f547dd58387f87c6437ded4d1aec6d1f0230b25df86d7528c0c812baff013026b1e496da62ff0848c32fa636debfd99de7d76e77bdf9c37b2addeb8866568f60d955ee19f430350fcbded23be5c0de23cf9c3f420703570bf55ec3c2a51fb1655a3461bc5d61f95591151ab15965178d97d03c1832975e39d33a4dae4f9b77bbbe8970a4711d48cb2c4523fb926a2a59c48c1443890c63bd362f68ad9c6d8c02b547936beb5b6f75f838e2c81c9ea24110f1547371f23ceeef2b0c14130567833632fb316169f1444af2bf7f531c332981681e85de55542b4127ce34b4309588b0a28d12de0116673f90b1f3fbf09d8b957d7fdc5c0e2aeaf18ae5db34d411a2fa009637929f0816c816f4b7dc98375731e0a1620d27e00e0480b65ab8aa8a03c5e82be9ee513cb59d164af23eea935ba8078f5b50530bb8026a9511a1a2254a4868f67a77851e389802afaaea9b6580865180ac69ae6044c4241f3685334250a60fede265bf6b9507bc27ae3abf4a3bb977de90871e8021be2221a2f7382fcd055e594361537943703ed818beca60610e552923a4013c788e552901e749f6daf5c0c511e155c52ddc5d949d35abdb4d5e49d54f3021abe2572fbf82c6d09f021ed81692c22cb99a92e43fc1e06655330906da7ad1e266b042c89d600183609892747ca3d56740ea4921f6201d0e84a342a924ded042972f8ea30d7a360c10101000000000000aff14d68df11fbfdde43f4a822c697fd1222a401312aa7671f10dae56a5fbcebbd51c9ca14857e58812961f80080998e936cbc1e15092f8181bd23209c364a69af732b1859dd27207b453a0355c3e052400502bb4296a283e5ad853a9b92bf164a3c2b1612a22f2524481585de65fdae82c6d1a7726bf7ae5fc204042319f8f57535154590062d0d6079463c6174d34dea4116bc74e7f4e3b49c6ec6f2d63e901084760911ec2c57db6773502cc253851ca7c902049bcf7013581bff632b139874d0761d108f7ee6e26e25af0593a10668cc4d0927f5d681213bc89bb5b981aad930576c42fca3bed2514a6b805a039148709b1cf828d990139eae605103a3fb88f68617b2a18e85d26b86a86f33efcb30a1a10faa106874304272a7bf3865ac42c14d9cf663edd9ff3692c2424fb4fe9fcfcdad16578ed7e38c523326e091ff028c78dc5dd513073bd89421e65c18f918c82189cca71f42501b4e9e7c7fb361bec1754d380c1918f704b79c5b6e11bff7934791c19d4acf6283cbd424c379c807542a81ca60142d68e03afaba294ab3769cde675faa2881b2e608ade4d9c5b7d66a6c106a1e9d4ceb1ab4798d8dbc42dd52c56a71652051613b65517788b80dd5986a43e5af8f732caad50508d51315b356f2914c84117bb73853b9e51aca353e6cbacf94139bdc91078e5bd5f5cc4933be82e78bb79b106d2f5d9c8995b7566f0d4ae5f052e68e65f73c0354531e6121faf17f4420aa7fa7c0ecefd492ff89745ee49d2eb076bba5c1b01a55dd5fd1b06f4b249c0f99f662267e5cff99c3c3a331ee2faee640d90b0e1fa0202b0903f8edbd4f80be966f799b11a8ede39ec7ea6631019ac8a4fd8545c47164147dc68463c2a777df733929d1e921fb1859ce10c05e5b1640f5cbf9c37bcc54bd520c35c473408bf9e295ea8c01d7300593fa27a1b4384586cba3c7ecea5e70c42c05bcd826afa60da183f97154500b4da4077f0968d80ca08a459976c143b774363bd3a73fdcafdd5def3631aff91f00ca894ac89b83977a9172f5fe74b52db867b47754282eb688f7507800ce80311386dccdaac894d3b70f7777e07f8a5edd1ad3fe380f4e80c0c3f9e681f7a02e67ec92319818010ec2078dedcc6ff18275986856c2670c92043298f76d5c65d3d788380107db8e213fce6b47ad92feb7032b0b343e4ee75888775377ba6e70a3c32792fa7f046ff00e4369dbff4380dcdcaece688b75dc12033dd540f7ec83aacac1bf88d2ffb90a65b97270bb942c71b016f89ede6d74b3a517d9574bf6a2ade5bc5599ada1d0159e011d6e7fade73449feacc3482a81df64c81bbf168b67dd2426ebc632265ebbc0269887b10db0be1c0c9b9bc69a2a755670ecc8654be507303c3e90fe29093dc40ac6d0712c6a2369b441252930fb2ec0fc4358feab588ff2703e1fe464924d54d4e26a2d7a5c0eed56642e93143af9f30870b3dd32f71217ebf06c697cf4fe1033efa4bc87ff75417c9fe824296585203ebec54185550c4dabd7d41092fb1f2ee1c49f85c8325b9f20bcf784ef6745bc503b9aa5491c946f5a9a187e233e393e16dd4bb4bdc2c3c124488debfe488f9b8deb29c8ef1812dc65232d4d29a38d89bee296f01242610a9b722ed3f69cc9a45b1c99ee1893c53573ba2a8d0d1c5bf37e23e777ec16cdb7e9b44256fc218fac0e7ab97f289acad210e812f449c54a84624e608387ef7b5beaaa4e89d99e3e2efa4f6971d208c818eb1c5cf922b16a6b2269b044319fa25a3d7202033eb4031f5af552d1485d6fb664dbe2da617582f964c330435c1c1dbbf82c1745930ba0eed8ce53bf7d86a9b2f5d56d976b20db8438a2e77421ea6b4853be98ab452bd25bff6a2053b5a70040cac76884a8c1df179233bc3af6b30e7402222bfc3f4984167f5ac56e06fa46e27ced66bf18c21e5434c71c1a2fa7faaf4358d228cda4fffc38fd5f4254eb2aaf5356e0a5ec0d0b96287ab799ba718dab44bbe69459bba8bf21b64ff356e519e9429d790a6117dc9710a3c92bedcf97f041a7f9787466a5d247f6de55e78fd9f449e33347c6ed30d315e97afd00047679a1797487d05bc98759a2464d0732ba3d1a727d4e42e403f7a16a0afe9d43b8df118afbca6ed65682447ab5a6e6de855fafd61fa3d45453043dc874ffb87ca66e6227230d5b41d94b1524d9bcaa3a4144a6bf5f3da44eccc687607f616f3ca2b54e909c08c1e1764b7101073259281aa887e3bcc2b583efdc21d0db4cbed911b481f0f19880d681db5beb31689385a67eb22106908f8c9d58f9ea873fca14e89d47ab807afa12b627c5e7a44f1242bfe59fafc24f1dcbb433ebdcbae642c92da64f3c7b0a0a722d4a55edbb3ceec6bf388219cc789079ea8984c13b1826b18539a53a216971a7d42cd2ab491248823ef18a59251db7aea5bcaf92ab9b18ab51fe3dd7cf328f5588bdbe3fb1691513e1dc9dcec69d2b5ee48869f092588f683c55af494673eb0b885f133b59229262792c993b1808e6c9cad5a62bf1a1bcb4956f14f22d1cc56400627ff6489c99834fb757741b6dd3a6c63b9975a861ac25952beff54838dce27dc615f1d1526a38548ed2aa8abfb92c4c99b5214539d2fc83581a89e7fb77b8a249d274a123aa2e8f758f64ca530d02d0e69f8b2e8e85b0409eabca679a9c307b76274da905c573c7dd72b442ec9ad597efc9ac5bc5397d8b12a3385a077bef27b49d0c30708d420af86eb7c124cbea89c07d1127b1f0fd3bc15bae160bc1149069e4492f42126c9401270bfa3a2b90fc08f3efc678ba5231814a5d82f3c1b6aaddb90ed5ff87425aa5551e7dbb3f9becb03875d86bdba3bf259783622059d31e063eb9e4e83da8517ff22953a78bc7a29902dd6647f22953bad392b38d6f8b9c11cb8481d83196a9df534739f309f537164cf9f449a110fdf030cbfcecc89c2d20dddfc3af936663b09e6c448b1ddfda1f3120ef6f9623176618cd74f8960faf91136bc72b18585c332e392dbb4fcabddf1246735aa0509cf19cb3712694e64de60a7847d8c8c6f4e75d0a080be968f602d6a7ae19426829156e0fbd04cd112008f0d1dfb5ee542612f660fa0f8b6bcb48847859ef499ff78be85f5041fb4dc6e4acaf7abb37967beee2623ea6985f6d89546c88f957fa09dbaca886f44de2b7c1ef983ed8ba7927d1300dad9fbe76ea96ba73f517c9b4e9aae1d128882e6de5419ef3b2c7329adc413f63fbf399445da2c77ad10a9ac3e2f7b91492c54f60f375444befafc9301bdd14f9b06b3b14474ba3772099838294e6b7227ac94992b2f655fd620a5c82ec9abef769274bad25961070385217d0bb12f9e4e02f97a63eee5a8a4381d10f4fb1a130d65bc260e555bc050c84e0aec770255b56f220502d3cd65be30dddef07f366b82045cc5a21e75bb2daf4fe5ef2e4dca643e4ee672f0cf4a8f9195297f6fbbff8cf76311aaad62a360ab2b271ac409bdd5c71c82db59ebd269c1f1dd81487efb2b25e44cb336570da3dff6b783426b84afcdad613d595d7fd714e6d1ed87c90ef9420c9e4d2806e4b5d7755468ccb098b15288ee52b87a3ebe3835ad3ac5762a2f5f472b72e6353c6a5a2c46d5b38f0566fbd0829ae4274004d0008001500", @ANYRES32=r4, @ANYBLOB="08001c00", @ANYRES32=r0, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r5, @ANYBLOB="0c00630005000000000000008c6bf73a3f41cbc1d135ab24c9224454bd45e75f71b1da3edd3e1a898d1bb85f4f60e757667935cba4851ddadf38bf62a4e9e2f97affc71f616e5a610e9050213160c4c986602de3178f3c690800600004005800"], 0x1090}, {&(0x7f0000001880)={0x130, 0x2f, 0x10, 0x70bd27, 0x25dfdbfc, "", [@generic="c155e643cd16ab3c8617b4b69633468c4df36232eaedc2524e004bcb7b58832c039aa0935a2eaf00fddb2c22515f95b7", @generic="41399cda12cd81dd383f5b3e9a2efc071c76b302ae74f013de810a71b189a79ca00c0c587fa2e27f2418cbe273e935aae80b7cad754f90405cc68909bb2ebc0c274a78e1de1ef59cd78a5de8e81915b007590b7bdd2200f339dd6009c3cd12dbcbebaf838dbb709b66c602dd1bf4c0f95a2fab1528fad861c1af70443d322898f29a4dbb7798d501080a759e2f2989ef9707908b6fff71793e167407753050c80702b7e1ea7064e89f8b1a9e40a08fb4c56b3668c34e7642d1d27eca36d0bbbafc69c1e423c83d5e2c5bae30685aa7a5a266790df0b8acb263b7443c3873a5444d72da0a54369f694bad92f23f5bc324"]}, 0x130}, {&(0x7f0000001ac0)={0x3b0, 0x35, 0x100, 0x70bd26, 0x25dfdbfc, "", [@nested={0x19c, 0x16, [@typed={0x8, 0x58, @ipv4=@dev={0xac, 0x14, 0x14, 0xc}}, @generic="46aa7181728d7aa4dd1a38c5b0e4d56d8811c38f1393209859d3ea14091debacb0222fc356aecba884c0b90933c24d3e57d71ddab59bf6729a067823fee764bc128b672634d2148e51656195182d3e730866e2df4c30058e9fa2b440e99a75791c", @generic="3685b9e9e0d5831db18f92bf47ed84584b6be081c8766de28ec4af53019c4802464483a3bca6100d68ae5ff3fee67613371c11a6a18c91cb5eee36298531a31163e3f7afc84e5b390b946d920d44899e1d65402d512707147248955d69d4690dd4d207ee6bc5dbd349bc5b2730c14a05289c01095b800bc0635236bdfb34b1e8db11dd1c56d955b2cfe713b021b055ba6eb37cc66955924db4ff97d5de7d4ca0319e471017d479f365fd8ae954a8dd5b6e35e0c9a428e5b41e3410d90828a51dbec2931d7386f53c749ed59e91a1", @generic="30c0992a61f9f965715d7c3b5ff4938db7496b62aee5f92e7099ee64af2c74338d52b770d0897a61fba127a8b24eed5cf9a6551edffe7ac9f255a3352814d8461764d8de7cad0e7a9a77acd4f8f4de64c7490281bbaf4b4397887d65dd6833b2"]}, @nested={0xc8, 0x1a, [@typed={0x8, 0x5e, @u32=0x10001}, @generic="3d5f1f5a8f85ca5666aea9c3971bfddb912fa8d4409ecb651d8879bec6ae31db6cc5b5", @typed={0xc, 0x13, @u64=0x9}, @typed={0x8, 0x29, @fd=r1}, @typed={0x8, 0x23, @uid=r6}, @generic="22cabf7b3cf27db0811f2685583ce6ad7924ba1b852e3dca57e65d701295994e6bf6ee15a999301f6c8b2c15c3e63eafb95dda066ee6106617b7675f7af9f4860e7ae69e18b7682dbfe09cf7c9d1df98d6309f02ae312fd1a9963a5f366929396c4261817c92ff2809f40798b59f06c665ec6a8712c0e9999886e0"]}, @generic="cf83f2d2aa795b39e309f9dfae32a7539b09cd039d05c65822a475ed25044fbad2b995d68dd7c4dbe3ad324336dbb11c4855e0ec59c319093b6509e708f541690a84a05626fc0f299cb60cadf4e237cdbf63f63422b049587a1f6361ce164ddbfbe12df9bfd14d3601db1168b0cd76570e391bc794fea16ffdf4b5ee1145cf915db1e165702174a9f55c7a2f2b93284ea1dfe4309e91832a5d438c5469e3e17f6da7f77e4c561c8e89bed51849afa7cf90ce0053d1fff3c5ef0a741f5a13287307ef0573cc8d83344f65f9656b66f64fd872d2aeac84e629", @typed={0x8, 0x55, @pid=r7}, @generic="de8a0124159a06861e4668a56d5330a72acd4c9a47abea4b9291ec522e45132e77856062c2c69b91eef30d1fcc95b84a3542372a577ec9f32ef04f20a5766385088333867d1afac3acad0d29315452706ab8", @typed={0x8, 0x48, @pid=r8}]}, 0x3b0}, {&(0x7f0000002540)=ANY=[@ANYBLOB="380200002800080225bd7000fcdbdf252952a4545c0176001b9dbb0966ad5a8d739418f6b548c0c297b8a451eefdd3bb51f6544ffb7db1a8f44351e0dc35522eacbaddb66c0e2610b4587738af4845ff1bfe9134991fa51025805a6396cbce42c1a748140043006e65742f736f636b737461743600000010008f002f6465762f6c6f6f7023000069609fac304c240420412d3e14cec604095edd49cca0aabd46b972114a5b2b8cac03ea0504d4bb8157120102f9f0664c23cb21a85d24781a2bf45b718aebd6f0ab2e8e7bd544e55b864f728a68508589cfafcfc86905b0197d4304b8b346c2c9371ab75cd43f4532118a7f3ef3e82b7a3c7030d524f71527291ba537158a98df06be00a1692fad45a42ce2bf513ec1ceb35a25c9afaa7ce8fa07e748602d557141358919b61d40bd9496fdaf5311de2414eb4db0b36fa442936c546eb679f0721152f308dd0140adc91be013760a902ddbbe634bedb8481f8fc081cecf47e8630c941a9f00318dd5004febc048ad33b3e31cf22615229a49d720ab40e0af2bdb24ad12d4a766a5c5b1191c4310571ef88669b38ede174688c4769695d75f311bcc9370ad512e916c5e849f949c085dd29258efd0bd0b676e60e7b624959ed055e20aa2e9689b0db7246d891632a4c01aaa275d3204007e00c98e1a4b1f03614a2159b316f9df4585a96f87f11c5d1d112b4617708e6ae8b53587badcc3ba0a984434572e9850f443d894872b0f985ad30e72e338313962a9fc352896e3beb395558a5faac3b29f424c284531a54ca915118dfcda73050766f3a82b02100288a1e6cb0e6c3d8f558e33436039619c1c790263de3dc4709ac76479446eb4b5e12d82e1e9f51de044af4d6ccf450f42e86b95cead31b965e783bf61b28163189592ad210dea26bad525267f763fc9314bad55a8502d15e2e08b1b5f703de741d5d75b76f13d27b5"], 0x238}, {&(0x7f00000020c0)={0xcc, 0x2b, 0x600, 0x70bd2c, 0x25dfdbfb, "", [@generic="cee03603fa9461c8bc717133157aae787445bd334872d0f5f9d8f131dd74b6981ad520c8cbd9d13ae7d7b952ee280fa8149b01223073a99086505ae81792f652953f04d9d53dd5c1b5eecb9e00fd26dedbd77b2fac002c9052615412c7c11b6b62dfca051ac311983bdb4f5fcbffe8811fd130fa3d596e7c3ac5694554fad6e9b6ded40c3eaf489e5f1d1c9f05dccaf5d96b5bf9744c61059114aca64de56019e3e54a5a64f0df031e5f170191923a3cb01345d9aea1e5d01e2c9483"]}, 0xcc}], 0x6, &(0x7f0000002340)=[@rights={0x38, 0x1, 0x1, [r0, r1, r1, r1, r0, r1, r0, r0, r1, r0]}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r1, r0, r0, r0]}], 0x88, 0x805}, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, &(0x7f0000000000)={0x3}) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000500)=0x6, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) bind$vsock_dgram(0xffffffffffffffff, &(0x7f0000000380)={0x28, 0x0, 0x0, @hyper}, 0x10) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0xfffffffffffffe4f) syz_open_procfs(r12, &(0x7f00000003c0)='net/sockstat6\x00') inotify_init() r13 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r14 = memfd_create(&(0x7f0000000380)="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", 0x0) pwritev(r14, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r13, 0x4c00, r14) sendfile(r13, r14, &(0x7f0000000240)=0x4800, 0x20000102000007) read(r13, &(0x7f00000004c0)=""/244, 0xfffffea0) 15:13:31 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}}) 15:13:31 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4}) 15:13:31 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:31 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000]}}, 0x1c) 15:13:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4}) 15:13:31 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netstat\x00') write$P9_ROPEN(r0, &(0x7f0000000100)={0x18, 0x71, 0x2, {{0x40, 0x3}, 0x4}}, 0x18) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc834345f8f7620700000000000") syz_emit_ethernet(0x59, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000000)) 15:13:31 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x2}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000140)={r3, 0x9}, 0x8) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x8030ae7c, 0xa07001) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f00000001c0)={'raw\x00'}, &(0x7f00000002c0)=0x54) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000080)=0x4) pipe(&(0x7f0000001980)={0xffffffffffffffff}) setsockopt$inet_udp_int(r4, 0x11, 0x65, &(0x7f00000019c0)=0xfa5, 0x4) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000340)=0x100000000) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x40, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000300)={0x8000, 0x4}) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000240)={0x7, r5, 0x2}) 15:13:31 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}}) 15:13:31 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffffffffff]}}, 0x1c) 15:13:31 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x4, 0x0, 0x0, 0x100, 0x0, 0x0, 0x8}) perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000000c0)={0xc, 0x85bc, 0x20, 0x3f}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCGETD(r1, 0x80045440, &(0x7f0000000000)) 15:13:31 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4}) 15:13:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4}) 15:13:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000080)="f20f080f01cf0f233a66baf80cb86402868cef66bafc0c66ed67660ff6b9360036663e0f35b9c60d00000f322e2ef30fbeb541240000f30f211366baf80cb81f926b83ef66bafc0cb000ee", 0x4b}], 0x1, 0x5d, &(0x7f0000000040), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000000000000005000000000008000000049d20530f08b92181db649f06b3362a4524fd58103cb5d017e805e77fba0b43862bf8d80c8b205250ab013c95ece4271742b2b28f5278c4c81a48b954ff1bb3089fa22b9157186133174b9c39385d5e86f347d2fe7428144f8f1f5464326ddec851e0b4663cc9a2c455c3d22645aead984cb2f2168144a6de3b99a579cf393327b9754c14873548cc4657dcdbec47d1a0c4ecfb785ee49976d1c9d5a10b7ca58152ccc613d57238b3c78ff213d6f32523f8b9810b9ef167"]) r3 = fcntl$dupfd(r0, 0x406, r1) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000000)={0x5, [0x4, 0xfff, 0xb5e, 0x6, 0x1]}, 0xe) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000000040)) ioctl$KVM_GET_PIT(r0, 0xc048ae65, &(0x7f0000000100)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:13:31 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}}, 0x1c) 15:13:31 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:31 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}}) 15:13:31 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x1, 0x40) connect$unix(r0, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x7, 0x69}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000180)={r4, @in6={{0xa, 0x4e24, 0x7, @local={0xfe, 0x80, [], 0xaa}, 0x100}}, 0x1ff, 0x7, 0x1ff, 0x71, 0x5}, &(0x7f0000000240)=0x98) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0x8030ae7c, 0xa07001) 15:13:31 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40030000000000]}}, 0x1c) 15:13:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4}) 15:13:31 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:31 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}}) 15:13:31 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x82080, 0x0) close(r1) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x121000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f0000000040)={{0x3f, 0x80000001}, 'port0\x00', 0x20, 0x40000, 0xc29f804, 0x8, 0x7f800, 0xe0c, 0x10000, 0x0, 0x0, 0x1}) 15:13:31 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4}) 15:13:31 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87ffffff]}}, 0x1c) 15:13:32 executing program 1: r0 = socket$inet6(0xa, 0xe82c2a4147258183, 0xfffffffffffffffd) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) renameat(r1, &(0x7f0000000040)='./file0\x00', r1, &(0x7f00000002c0)='./file1\x00') 15:13:32 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:32 executing program 5: r0 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x480000, 0x0) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f00000001c0)={0xab80000000000000, 0x10d000, 0x5, 0x1, 0x11}) r4 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a}, &(0x7f0000000440)='\x00', 0x1, r2) r5 = add_key$user(&(0x7f0000fc0ffb)='user\x00', &(0x7f0000752ffb)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00003eb000)="b3", 0x1, r2) r6 = inotify_init1(0x0) keyctl$update(0x2, r5, &(0x7f0000000740)="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", 0x10a) flistxattr(r6, &(0x7f0000000480)=""/227, 0xe3) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r4}, &(0x7f0000a53ffb)=""/5, 0x5, &(0x7f0000c61fc8)={&(0x7f0000a3dffa)={'sha256-generic\x00'}}) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) write$P9_RXATTRWALK(r7, &(0x7f0000000080)={0xf, 0x1f, 0x1, 0x7fff}, 0xf) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000200)={0x7}) 15:13:32 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80]}}, 0x1c) 15:13:32 executing program 4: r0 = memfd_create(&(0x7f0000000100)="2360ca11593aca3ce46e08656d31232b00", 0x0) write(r0, &(0x7f0000000040)="06", 0x1) sendfile(r0, r0, &(0x7f0000000080), 0x10001) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x3) ioctl(r0, 0x800, &(0x7f00000001c0)="b78792d6fdf272b299a88e1326a146bb6b5391216d6285c930bf082e170eb21880db36bb9c84265a10f39e0ece1c7a9766128560532f47c5f422b7869d3286a42c88cd02c0aa28ba249c4d51eddc1b3388cd64fb0d437a74be61523229a0b0fa023f5eb9a8875ddf6f4411060eb39b8f0be6a48fb8c0f9a50834807e2e16ff24f4f9c0bb700536b992c52521a15d3a1a62de2ba40cc255667ce0701e9d2fc04f5a497c0281f2b3ac3c4d16b8906c7b0374425915746831c4117fe4c0b77b77b507b82e08d0ed6c") mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/46, 0x2e, 0x0, &(0x7f0000000180)) 15:13:32 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000001f000)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(authencesn(sha256-avx2,xts-serpent-avx2))\x00'}, 0x58) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x2) bind$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) 15:13:32 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000]}}) 15:13:32 executing program 3: r0 = socket$inet6(0xa, 0x805, 0xed) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x8030ae7c, 0xa07001) 15:13:32 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:32 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4}) 15:13:32 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x4) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x54080, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000080)={0x80000001, {{0x2, 0x4e24, @loopback=0x7f000001}}}, 0x88) r1 = getegid() setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@security={'security\x00', 0xe, 0x4, 0x4b8, 0x0, 0x128, 0x0, 0x0, 0x0, 0x3e8, 0x3e8, 0x3e8, 0x3e8, 0x3e8, 0x4, &(0x7f0000000140), {[{{@uncond, 0x0, 0xc8, 0x128}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local={0xfe, 0x80, [], 0xaa}, [0xff000000, 0xff, 0x0, 0xffffffff], 0x4e21, 0x4e22, 0x4e24, 0x4e24, 0x1, 0x5, 0x3, 0x2, 0xfe}}}, {{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @dev={0xfe, 0x80, [], 0x1e}, [0xffffffff, 0x0, 0xff, 0xff], [0x0, 0xff000000, 0xffffffff, 0xffffffff], 'ipddp0\x00', 'bridge_slave_1\x00', {}, {}, 0x7b, 0xb75, 0x4, 0x10}, 0x0, 0x118, 0x148, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x5, 0x0, 0x1}}, @common=@hl={0x28, 'hl\x00', 0x0, {0x3, 0x7}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xaf, 0x3, 0x20}, {0x3, 0xfffffffffffffffe, 0xe0}, 0x3, 0x3f}}}, {{@ipv6={@dev={0xfe, 0x80, [], 0x14}, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, [0xffffff00, 0x0, 0xffffffff, 0xff], [0x0, 0xffffff00, 0xffffffff], 'veth1\x00', 'syzkaller1\x00', {0xff}, {0xff}, 0x8, 0x40, 0x1, 0x1}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@mh={0x28, 'mh\x00', 0x0, {0xa6f, 0x20}}, @common=@dst={0x48, 'dst\x00', 0x0, {0x598, 0x0, 0x1, [0xfffffffffffffff7, 0x2, 0x6, 0x6, 0x1000, 0x8, 0xb3, 0x5, 0x3, 0x4, 0x100000001, 0xffff, 0x751, 0xfffffffffffffffc, 0xfffffffffffffffb, 0x10001], 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xf8d, 0xc, "cc2cc532fd85857dacf85bd9b1d61cc90923f197e0507bad1958c28c755c"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x518) ioctl$TUNSETGROUP(r0, 0x400454ce, r1) 15:13:32 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}}, 0x1c) 15:13:32 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:32 executing program 5: capset(&(0x7f0000be6ff8)={0x19980330}, &(0x7f000032e000)={0x0, 0xfffffffffffffffd, 0x1000000000000, 0x4, 0x0, 0x1}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x10000, 0x0) 15:13:32 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}}, 0x1c) 15:13:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66b844008ed80f01c466ba430066edc4e101667e5ac4c1d5755ee3f2263edbf0f20f300f01c966baf80cb842c3fa80ef66bafc0cec66bad104b010ee", 0x3c}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:13:32 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}}) 15:13:32 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4}) 15:13:32 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:32 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000800000000ff7f5f1a8acf18"], 0x14}, 0x1}, 0x1) 15:13:33 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000333f88)=ANY=[], 0xffffffffffffff41}, 0x1}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x228000, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x80000, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000040)={0x100000001, 0x6, 0xffff, 0x6, 0x9}) r2 = socket$inet6(0xa, 0x1000000000002, 0x5) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt$sock_int(r2, 0x1, 0x1e, &(0x7f0000004f40), &(0x7f00000051c0)=0x4) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000080)='rose0\x00') 15:13:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x100, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000080)=0x5, 0x4) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0x8030ae7c, 0xa07001) 15:13:33 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800]}}, 0x1c) 15:13:33 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:33 executing program 5: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x600000, 0x0) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000180)={0x5, 0x1f, [{0x9, 0x0, 0x8}, {0x81, 0x0, 0x9}, {0x4, 0x0, 0x1ff}, {0x1, 0x0, 0x40}, {0x7, 0x0, 0xc0}]}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0xc912, &(0x7f0000000200)="025cc8246d345f8f762070") connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23}, 0x10) sendto(r0, &(0x7f0000000000)="18", 0x1, 0x0, &(0x7f0000000100)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "742e8cc54fad73a40fc3d5d9e5c4a1b3d577ca7d8ac090e2bfa6a9909c5032e17e4e5f5e1a7cb7506d6c5d621d4685b5a365292c2f49ae25cb2aac8b83d83f"}, 0x80) 15:13:33 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4}) 15:13:33 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r3, 0xc0305302, &(0x7f00000000c0)={0x34, 0x0, 0x6fcb882, 0x2e0, 0x3f, 0x6}) modify_ldt$write(0x1, &(0x7f0000000100)={0x8, 0xffffffffffffffff, 0x400, 0xfffffffffffffffe, 0x8, 0x81, 0x6, 0xa7e, 0x4, 0x7fffffff}, 0x10) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000000)="baf80c66b852afb98066efbafc0cec0fc72cf30fbd719cf3d1638a66b800a0ffff0f23d00f21f866352000000b0f23f80f12fd0f381e5b650f20e06635000200000f22e0bad004b80000ef66b91a03000066b8c000000066ba000000000f30", 0x5f}], 0x1, 0x0, &(0x7f0000000180), 0x100002d0) 15:13:33 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}}) 15:13:33 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:33 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46c]}}, 0x1c) 15:13:33 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000040)={0x1, 0x8}) 15:13:33 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000100)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f691c0264192f42be07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000000)={0x3, 0xf002}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x398, 0x0) syncfs(r0) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 15:13:33 executing program 4: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/205, 0xcd}, {&(0x7f0000000140)=""/30, 0x1e}], 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="056304411d000101d012373b315a1a3c1af22e0054e2c54aa023112bea5e994a86e19d90df5e9dfa29fc9ec68cb582da78e840d005e3167f9e46dc101b6aa237607200000000000000000000"], 0x0, 0x0, &(0x7f00000000c0)}) 15:13:33 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4}) 15:13:33 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4547b25263]}}, 0x1c) 15:13:33 executing program 5: prctl$intptr(0x3f, 0x5) 15:13:33 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) [ 570.346315] binder: 5673:5674 unknown command 1090806533 [ 570.384185] binder: 5673:5674 ioctl c0306201 20a20000 returned -22 15:13:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = memfd_create(&(0x7f0000000080)='/dev/kvm\x00', 0x27bc96abe68b9625) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x5000, &(0x7f0000000000), 0x8, r3, 0xe}) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x8030ae7c, 0xa07001) 15:13:33 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}}) 15:13:33 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000040)=0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x35, &(0x7f0000000140)=0x1, 0x12f) 15:13:33 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2b, 0x801, 0x0) accept4$inet(r0, 0x0, &(0x7f0000000240)=0xfffffffffffffec6, 0x80000) 15:13:33 executing program 4: r0 = timerfd_create(0x7, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x6) socket$bt_hidp(0x1f, 0x3, 0x6) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_DIRENT(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="70000000fe7621812271b1808300000000000000000000000200000000009dda96f651a4dc26f7cc00000000000001000000000000000000008001010000000000000b000000000400003b7b6d696d655f7479706500000000000600000000000000020000000000000000000000000000000000000000000000"], 0x70) timerfd_settime(r0, 0x0, &(0x7f000000b000)={{}, {0x800010000}}, &(0x7f000000bfe0)) 15:13:33 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc00000000000000]}}, 0x1c) 15:13:33 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:33 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}}) 15:13:33 executing program 5: r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x101000, 0x0) write$FUSE_GETXATTR(r1, &(0x7f00000000c0)={0x18, 0x0, 0x4, {0x2}}, 0x18) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000002c0), &(0x7f00000003c0), 0x8) 15:13:33 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") getsockopt$sock_buf(r0, 0x1, 0x3f, &(0x7f0000000200)=""/223, &(0x7f0000000000)=0xdf) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0x40085112, &(0x7f0000000180)={{0x7fffffff, 0x100000000000b}}) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) 15:13:33 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4}) 15:13:33 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6352b24745000000]}}, 0x1c) 15:13:33 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) r1 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x200, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x2}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140)={r2, 0xffffffff00000001}, &(0x7f0000000180)=0x8) syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0xffffffffffff21dc, 0x428102) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000080)={0x0, 0x9, 0x45, &(0x7f0000000040)}) 15:13:33 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:33 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000080)=""/164, &(0x7f0000000140)=0xa4) sendto$inet(r1, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x40}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x71, &(0x7f0000112000)={r2, 0xffffffffffffffff, 0x1}, 0x8) 15:13:34 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfec00000]}}, 0x1c) 15:13:34 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x800000000000) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0x6, @remote={0xfe, 0x80, [], 0xbb}, 0xeb11}, {0xa, 0x4e20, 0x6dd, @local={0xfe, 0x80, [], 0xaa}, 0x6}, 0x3f, [0x80000000, 0x80, 0x100, 0x7, 0x9, 0x4, 0x1, 0xffffffffffffffff]}, 0x5c) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x8030ae7c, 0xa07001) fgetxattr(r1, &(0x7f0000000000)=@known='com.apple.system.Security\x00', &(0x7f0000000080)=""/121, 0x79) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x5, 0x4) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x0, 0x0) r3 = semget$private(0x0, 0x2, 0xa0) semctl$GETNCNT(r3, 0x0, 0xe, &(0x7f0000000380)=""/86) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0x23}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000002c0)={r4, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x462, 0x3}, &(0x7f0000000240)=0x90) 15:13:34 executing program 5: r0 = socket$pptp(0x18, 0x1, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x181000, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000180)=r0) r2 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x4, 0x101400) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000200)) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x200000, 0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x301) connect(r0, &(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'vlan0\x00'}}, 0x1e) r4 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7c, 0x2000) ioctl$sock_bt_bnep_BNEPCONNDEL(r4, 0x400442c9, &(0x7f00000000c0)={0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}) 15:13:34 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}) 15:13:34 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000008000)={0x8, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000040)={0x4, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) mprotect(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x7) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000008000), &(0x7f0000000000)=0x369) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000100)={0x6057, 0x34, 0x6, 0x1, 0xb7f8}) 15:13:34 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000180)={r4}) 15:13:34 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18]}}, 0x1c) 15:13:34 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:34 executing program 5: mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x40000000, &(0x7f0000000480)=0x7, 0x20, 0x3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000700)={@dev, 0x0}, &(0x7f0000000740)=0xfffffe6d) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xf, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="18003f00000095000105000000000000000000000000006017fffffcffffff0000000000000000180000000b0f0000000000000080ffff39f164691000000000000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x89, &(0x7f0000000580)=""/137, 0x41000, 0x0, [], r0, 0x7}, 0x48) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/rfkill\x00', 0x4, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000080)={"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"}) 15:13:34 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x220]}}) 15:13:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x31, 0x119, 0x0, 0x0, {0x3}, [@nested={0x8, 0x0, [@typed={0x4, 0x1, @binary}]}]}, 0x1c}, 0x1}, 0x0) 15:13:34 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) r0 = getpgrp(0x0) r1 = getpgid(0xffffffffffffffff) setpgid(r0, r1) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)='!', 0x1, 0x8000, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000280)) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="119a0e63c9476288b671afdbd53a5994e137381f62021d1951b627b8dda57a5d17d744648c81c5703ed8146ab1b0171f89091b1dd323ff07dbb633fb3804849f7768e586df460963245dedb4013ee555af99499e44ad420dbf65fd46fbc9ba1274429e2d5783751815828ec8cb3553110cca66460215353d19f6d8bbd8fb08ad0491634ac2fd10e2cd30bcd7fede24263a7fff16e53ea293f3551b7147c33a44ea437fb1f77f94db4e65807582990a0a5efddf12de3caea6611173f964de99645e2c02bef138b406ca0644146ae4bb91e0438f8c47beddb0ed22f56bc0851def35824ca6c7258c", 0xe7}], 0x1, &(0x7f0000003b40)}, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000140), &(0x7f00000001c0)=0x4) ptrace(0x420f, r0) 15:13:34 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x8030ae7c, 0xa07001) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x14) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000100)=r4) 15:13:34 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0fe]}}, 0x1c) 15:13:34 executing program 5: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) socket$can_raw(0x1d, 0x3, 0x1) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000480)=""/182) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20040404) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000040)={0x0, {{0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, [], 0x1f}, 0x8000}}, 0x1, 0x7, [{{0xa, 0x4e21, 0x2, @remote={0xfe, 0x80, [], 0xbb}, 0x4}}, {{0xa, 0x4e24, 0x37, @local={0xfe, 0x80, [], 0xaa}, 0xb0}}, {{0xa, 0x4e21, 0x6, @mcast2={0xff, 0x2, [], 0x1}, 0x200}}, {{0xa, 0x4e22, 0x1, @mcast2={0xff, 0x2, [], 0x1}, 0x5}}, {{0xa, 0x4e21, 0x7, @remote={0xfe, 0x80, [], 0xbb}, 0x101}}, {{0xa, 0x4e22, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x9}}, {{0xa, 0x4e21, 0xf3e, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}]}, 0x410) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000000)) flock(r1, 0x2) 15:13:34 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, {0xa}}, 0x5c) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x4200, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f00000000c0)=0x1c, 0x4) 15:13:34 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="ad4b18762a09754f6672e723d2635f14d956b6c5820faeb9", 0x18) r1 = memfd_create(&(0x7f0000000280)='cmac(camellia)\x00', 0x3) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001b40)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x1000040}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x28, r2, 0x0, 0x70bd29, 0x25dfdbfd, {0x2}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1=0xe0000001}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x800) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f00000002c0)=@assoc_value={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000340)=@assoc_id=r3, &(0x7f0000000380)=0x4) r4 = accept4(r0, 0x0, &(0x7f0000000240), 0x0) readv(r4, &(0x7f0000001a40)=[{&(0x7f00000003c0)=""/203, 0xcb}, {&(0x7f00000004c0)=""/67, 0x43}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000000540)=""/211, 0xd3}, {&(0x7f0000000640)=""/43, 0x2b}, {&(0x7f0000000740)=""/247, 0xf7}, {&(0x7f00000018c0)=""/104, 0x68}, {&(0x7f0000001940)=""/55, 0x37}, {&(0x7f0000001980)=""/143, 0x8f}], 0x9) accept4(r1, &(0x7f0000001c40)=@in={0x0, 0x0, @remote}, &(0x7f0000001cc0)=0x80, 0x80000) sendmsg$nl_xfrm(r4, &(0x7f0000000880)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000840)={&(0x7f0000000680)=ANY=[@ANYBLOB="c00000001b00000000000000000000000400000000000000000000000000000000000000000000000000ffffac14140000000000000000000000010000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xc0}, 0x1}, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='hash\x00'}, 0x10) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)=0x0) write$P9_RGETLOCK(r5, &(0x7f0000001d00)=ANY=[@ANYBLOB="2500000037010001d2cb9b4a000000000800001d000000009c77fdc6db6523", @ANYRES32=r6, @ANYBLOB='\a\x00selinux'], 0x25) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r4, 0x28, 0x6, &(0x7f00000000c0)={0x77359400}, 0x10) 15:13:34 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:34 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000180)={r4}) 15:13:34 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000]}}) 15:13:34 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}}, 0x1c) 15:13:34 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={0x0, 0x1bc}, 0x71) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f0000000100)=0x8) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) wait4(r2, &(0x7f0000000280), 0x80000008, &(0x7f00000002c0)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) prlimit64(r3, 0x0, &(0x7f0000000040)={0x740, 0x2981}, &(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r1, 0x9}, &(0x7f0000000180)=0xffffffffffffff22) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000001c0), 0x8) 15:13:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x5}) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x1, 0x7, 0x0, 0x5}) 15:13:34 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x0, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:34 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000100), 0x330) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [0x4b564d02, 0x1]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000100)="b800008ec8baa000b897edef66b8000000000f23d80f21f86635400000700f23f8baf80c66b81431718466efbafc0c66b80020000066ef64de6ddb670fbaa300000000240f01cfba4300edba4300edb898038ec0", 0x54}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x80, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0xc028ae92, &(0x7f0000000100)={0x2, 0xf1d}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='security.selinux\x00') ioctl$KVM_SET_NR_MMU_PAGES(r6, 0x8030ae7c, 0xa07001) 15:13:34 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000180)={r4}) 15:13:34 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x4c, 0x0) 15:13:34 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x0, @broadcast=0xffffffff, 0x4e23, 0x1, 'ovf\x00', 0x0, 0x4, 0x4}, 0x2c) 15:13:34 executing program 1: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) write$sndseq(r1, &(0x7f000082cf40), 0x203a0) write$P9_RUNLINKAT(r1, &(0x7f0000000080)={0x7, 0x4d, 0x1}, 0x7) read(r1, &(0x7f0000000100)=""/153, 0x99) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000040)=0x8) close(r1) close(r0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f00000000c0)) 15:13:34 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c040000]}}, 0x1c) 15:13:34 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x0, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:34 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}}) 15:13:34 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000000)) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x8200, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f00000000c0)={0x8, 0x0, 0x6}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='status\x00') ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f00000001c0)={&(0x7f000035e000/0x4000)=nil, &(0x7f00004ef000/0x2000)=nil, 0x4000}) preadv(r2, &(0x7f0000000040), 0x10000000000000a6, 0x0) 15:13:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x9000000000004) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400190000bb4b80040d8c5628060000000004106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) r1 = dup3(r0, r0, 0x80000) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)=0xffffffffffffffe9, 0x4) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000180)) mkdir(&(0x7f0000000140)='./file0\x00', 0x20) fchdir(r0) 15:13:34 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)) 15:13:34 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000]}}, 0x1c) 15:13:35 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x0, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:35 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x81) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = accept4(r0, &(0x7f00000003c0)=@in={0x0, 0x0, @multicast1}, &(0x7f0000000540)=0x80, 0x0) shutdown(r0, 0x0) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20}], 0xa, "9c46dcaabaaa3d2778dfbc7829d25898b6cb7e8393c4fff6013fc165fa4180b0cb14611fa0806960dabf454de6f141cba4839e5701b732988db037667f85d5362d770200176101f4a7aefbc96ef06a7a2d07740891d404026dcf43486ef40a552421ba022868b066e319135fed1ce724ed6a7a036f41cffd4eb2ab3bf27257f0c87dce38e32a332ff37ef0371654c1d857dfd8e5bb181290834086ef0df326ac5f992ae60398b7384f725200e613a0d9028f616f5f5ff842427d1472366163ea67050f7a312b994ff896ed"}, 0xd7) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getpeername$netlink(r2, &(0x7f0000000000), &(0x7f0000000040)=0xc) 15:13:35 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff]}}, 0x1c) 15:13:35 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000100)) bind(r0, &(0x7f0000000000)=@pppoe={0x18, 0x0, {0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'ip6gretap0\x00'}}, 0xfffffffffffffef4) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000240)={0x402, 0x5}) r2 = dup2(r0, r0) ioctl(r0, 0x6, &(0x7f0000000140)="2b1974bf02d1d7d9963793a7afd969abab336d859caaa8457b2660dc7aa16421c820e9233267ad6c95bfb2d19e71cbf0d7d4e6e8a0e7ff6c70711e2174fb2a53961ba84f610b7ff1da292404f513d34cf57ec9f31bece7ae26d1ac43643e02260d0c1ad5d3e86ecf0b703ef916d8091c3bcb26d321f7e59df74322e7d7f8c4c7df9008ab4b0223d427b73e769cf4a6b112") getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) [ 572.001584] QAT: Invalid ioctl [ 572.026536] QAT: Invalid ioctl 15:13:35 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c04]}}, 0x1c) 15:13:35 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x8001) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0x15) 15:13:35 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:35 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)) 15:13:35 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0]}}, 0x1c) 15:13:35 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000000)=0x1, 0xfffffffffffffea6) 15:13:35 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x4000, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x101700, 0x0) ioctl$RTC_WIE_OFF(r3, 0x7010) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x8030ae7c, 0xa07001) 15:13:35 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0xfffffffffffffffc, 0xfffffffffffff4c3, 0x6, 0x4, 0x4f8a, 0xc0, 0x5}, 0x1c) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000380)={0x8004, 0x1, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000040)=0x1) dup3(r2, r2, 0x80000) 15:13:35 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)) 15:13:35 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:35 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) getsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000100)=""/177, &(0x7f0000000000)=0xb1) 15:13:35 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x8000, 0x8100) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000040)) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140)=0x2, 0x4) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000180)) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000200)={0x4, {0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x4e22, @multicast1=0xe0000001}, {0x2, 0x4e23, @multicast1=0xe0000001}, 0x28, 0x80000001, 0x84, 0x5, 0xffffffffffff8001, &(0x7f00000001c0)='eql\x00', 0x9, 0x954, 0x7}) r1 = getuid() r2 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$get_persistent(0x16, r1, r2) accept4$packet(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000440)=0x14, 0x800) sendto$packet(r0, &(0x7f0000000300)="d67a8037de745aea9cddf63800edbe90087971e325e40353f68d5bbc920a6da74295d4ff269c", 0x26, 0x40080, &(0x7f0000000480)={0x11, 0x16, r3, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000004c0)={{0xa, 0x4e23, 0x3, @loopback={0x0, 0x1}, 0x1ff}, {0xa, 0x4e23, 0x8, @empty, 0x4}, 0x2, [0x81, 0x4, 0x5d, 0x8, 0x80cf, 0x9c9a, 0x3ff, 0xfffffffffffffffc]}, 0x5c) r4 = dup3(r0, r0, 0x80000) ioctl$KVM_PPC_GET_SMMU_INFO(r4, 0x8250aea6, &(0x7f0000000540)=""/94) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f00000005c0)={0x200, 0x8}) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000680)="4d78e5a59edab54dce9c75b0359f980176831ce4fc7b1a009bcd066f003f252c6b4bfaf6954422725f60c938326c9b39030f0735bba3faf07b45dc0b180d86abd30d844e0985691948904e8f8bdfde8a44", 0x51, r2) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000700)={'filter\x00'}, &(0x7f0000000780)=0x78) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f00000007c0)={0x7}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000840)={&(0x7f0000000800)='./file0\x00', 0x0, 0x8}, 0x10) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000880)) geteuid() pwrite64(r4, &(0x7f00000008c0)="8ed1d7475083e8c31761e4720a2f0bdb650a2ad4b8c9e117e13f753b174ae00657f1fd3e87540be01d3d61c4eae621e2d362d51d96e46638d84d13bb25160a16cb10a33c6b6f3b1e3a8aa147b45fc04f66e41e7c11f23b17ec98e3fc5d40815cb851d646859655746a35dc188abf56695d87e1756dac6bc2c5cc4874ec6651be1795b50488d64cfdf2c7fe4f91f0c9d791e7eb0048cb004334adc0825735bca1ff485cfcfcf1939463145d2cd3cf1fa1d296370934e7c2a1582e2f1472e3d2e9e8b83c4cfdd07788f49cbe6f441cfd889fcff449e58196613cede72766f095fac1d6c8e938", 0xe5, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000009c0), &(0x7f0000000a00)=0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000a40)={0x0, 0x7}, &(0x7f0000000a80)=0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000ac0)={r5, @in={{0x2, 0x4e20, @multicast1=0xe0000001}}, 0x5, 0x3, 0x7, 0x2}, &(0x7f0000000b80)=0x98) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000d40)={0x3, 0x0, &(0x7f0000000bc0)="be72a4e984506bf1a3c1fc254b69822267d01b25f76501010c403eebd728bc6adf41f7ed507d2f371be6e70b82ef3e86634e32592bd8b5d2d06e8465e333418258032e31efd0eb84b77f8ddcdcc083ee4e1077ba507ae2fa3c585ffaac83feb665f341ef0c56fedf99bed4e709e602bff865554cd881ca34a2d9deb59e549707f3d94115a415e3f7b2d66e6c6afa1b212f63b271040b626bb0fa5ca4cf583937dc2f9a58bf54976ff63b2be05cbf7e9f68616641d99f0e1fef867d8deb154bf1", &(0x7f0000000c80)="8c3e41ee9f84e30605904d8162e6ed6732e5ac2c87467403046547adc7d3da8c9e486947f4579904c522023f6d8246d9a203705c5207821eaaadac2266ffdd6d51996dea4b0a96b68136cbd3142ed81f5617f3b35b4757aeebd1dd144b9a04a646563d41460759fe3d7d722c349c881da2bcd8379f120a7ebb04a16655765fb061ee7f41e2cc9de012c0d1536f5fbde3", 0xc0, 0x90}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000d80)={&(0x7f0000fec000/0x14000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x14000, 0x1}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000dc0)={{0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, {0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x44, {0x2, 0x4e20, @multicast1=0xe0000001}, 'syz_tun\x00'}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000e40)={r5, @in={{0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}}, [0x7f, 0x9, 0x0, 0x92ca, 0x0, 0x4, 0x50, 0x3, 0x80000000, 0x10000, 0x1, 0xe9a, 0x7, 0x6, 0x79]}, &(0x7f0000000f40)=0x100) mount(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0)='./file0\x00', &(0x7f0000001000)='ext4\x00', 0x2000000, &(0x7f0000001040)="96b5730dd1e2f11b827e2e0edc8cf622aad55c15b9c0873734819778015ca505bfd62934766620d78c0997d49a04b9202c89ac5ae738a2d585a4d0f6a449c7778d5b62ec3c132dd161cc29c6514034fde7c0e97370f0626af70decd91992087ff17a06ce3cadb8b4188720d6a903c84e242c2338933cb413b81fd9a3ee11a3f7d09e72157ff7f89929ebc7619319963a16779e2e3824496fcd9774aeac34045ccaf203dc9e7751c1dbe0991d2a6f0df816747d1b17037b854de269fc7ef114d0e55d611e23c380") 15:13:35 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000]}}, 0x1c) [ 572.626659] ion_buffer_destroy: buffer still mapped in the kernel 15:13:35 executing program 4: r0 = socket$inet_sctp(0x2, 0x401, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0x71, &(0x7f0000000280), &(0x7f00000002c0)=0x20) 15:13:35 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:35 executing program 2 (fault-call:7 fault-nth:0): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4}) 15:13:35 executing program 0: r0 = socket$inet6(0xa, 0xfffffffffffffff8, 0x100000000) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x9) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) r2 = shmget(0x2, 0x1000, 0x400, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000100)=""/82) shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000180)=""/243) 15:13:35 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x8030ae7c, 0xa07001) 15:13:35 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x8) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000040)={r0}) 15:13:35 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}}, 0x1c) 15:13:35 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f00000003c0)='/dev/snd/pcmC#D#c\x00', 0x3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000009f7c)=""/132, 0x84}, {&(0x7f0000012000)=""/252, 0xfc}, {&(0x7f0000012000)=""/155, 0x9b}, {&(0x7f00000001c0)=""/11, 0xb}, {&(0x7f0000000000)=""/102, 0xfffffffffffffef8}], 0x5, 0x0) ioctl$void(r0, 0xc0045878) openat$cgroup_int(r0, &(0x7f0000000100)='io.weight\x00', 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/92, 0x5c}, {&(0x7f0000000240)=""/7, 0x7}, {&(0x7f0000002680)=""/4096, 0x1000}], 0x3, 0x100000000000000) recvmmsg(0xffffffffffffffff, &(0x7f00000015c0)=[{{&(0x7f0000001400)=@rc, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)=""/34, 0x22}], 0x1, &(0x7f0000001480)=""/174, 0xae}}], 0x1, 0x0, &(0x7f0000001640)) fcntl$getflags(r0, 0xb) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x4800, 0x0) ioctl(r0, 0xc2604110, &(0x7f0000000000)) openat$cgroup(r0, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) [ 572.898281] FAULT_INJECTION: forcing a failure. [ 572.898281] name failslab, interval 1, probability 0, space 0, times 0 [ 572.909682] CPU: 0 PID: 5963 Comm: syz-executor2 Not tainted 4.18.0-rc4+ #143 [ 572.916967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 572.926328] Call Trace: [ 572.928931] dump_stack+0x1c9/0x2b4 [ 572.932586] ? dump_stack_print_info.cold.2+0x52/0x52 [ 572.937791] ? check_noncircular+0x20/0x20 [ 572.942036] ? graph_lock+0x170/0x170 [ 572.945853] should_fail.cold.4+0xa/0x1a [ 572.949920] ? rcu_read_lock+0x70/0x70 [ 572.953827] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 572.958950] ? __update_load_avg_blocked_se.isra.33+0x460/0x460 [ 572.965015] ? graph_lock+0x170/0x170 [ 572.968833] ? find_held_lock+0x36/0x1c0 [ 572.972921] ? check_same_owner+0x340/0x340 [ 572.977258] ? rcu_note_context_switch+0x730/0x730 [ 572.982200] __should_failslab+0x124/0x180 [ 572.986448] should_failslab+0x9/0x14 [ 572.990260] kmem_cache_alloc_trace+0x2cb/0x780 [ 572.994939] ? rb_erase+0x3550/0x3550 [ 572.998752] kvm_irqfd+0x18f/0x1ef0 [ 573.002388] ? lock_downgrade+0x8f0/0x8f0 [ 573.006553] ? print_usage_bug+0xc0/0xc0 [ 573.010621] ? graph_lock+0x170/0x170 [ 573.014432] ? kvm_eventfd_init+0x2c0/0x2c0 [ 573.018770] ? print_usage_bug+0xc0/0xc0 [ 573.022850] ? find_held_lock+0x36/0x1c0 [ 573.026934] ? lock_downgrade+0x8f0/0x8f0 [ 573.031096] ? lock_release+0xa30/0xa30 [ 573.035077] ? check_same_owner+0x340/0x340 [ 573.039410] ? trace_hardirqs_on+0x10/0x10 15:13:36 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r2, 0x11, 0x65, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000140)=0x4) 15:13:36 executing program 4: r0 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00000000c0)='bond_slave_1\x00') r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000004c0)=@broute={'broute\x00', 0x20, 0x1, 0x240, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x2b8) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000680)) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x4000, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'sit0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000000540)={@local, 0x0}, &(0x7f0000000580)=0x14) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f00000005c0)) sendmsg$nl_route(r3, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000200)=ANY=[@ANYPTR64, @ANYPTR64=&(0x7f0000000180)=ANY=[@ANYRESDEC=r3, @ANYRES64, @ANYRES16=r3, @ANYRESHEX=r4, @ANYPTR64=&(0x7f0000000140)=ANY=[@ANYPTR, @ANYRESDEC=r0], @ANYRESHEX=r0, @ANYRESDEC], @ANYBLOB="080006000000000008000100", @ANYPTR], 0x4}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 15:13:36 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, 0x1c) 15:13:36 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000240)={0x40, 0x6, 0x100000000, 0x100000000, 0x3, 0x1f}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000400)={{{@in=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@rand_addr}}, &(0x7f0000000080)=0xe8) sendto$packet(r0, &(0x7f00000002c0)="23d3aa273b45aa949a94c96a2582a0e3fe8baed4a865ee4dc21eb9cf0772bd7b45245fb3e3c36fab363907ec99f6a46c1fb00cbcee5c39355fcaa088a20ac4ae7f8b77d0302269c724f560ab02a3c3bd99f3d26ca3b3206d5b3938e3725d1ee6dea4c17d2d1b772bda3b6ecf0173079a9cfac7ece8f5b6c6039bbda313b373fab3a380c059717f02e386", 0x8a, 0x20000840, &(0x7f0000000380)={0x11, 0x0, r2, 0x1, 0x401, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000500), &(0x7f0000000540)=0xc) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xe8, r1, 0x900, 0x70bd25, 0x25dfdbfd, {0x9}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x62a21f86}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2=0xe0000002}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x200}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10000}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x8}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40}, 0x80) syslog(0xa, 0x0, 0x5) [ 573.043668] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 573.049300] ? _copy_from_user+0xdf/0x150 [ 573.053466] kvm_vm_ioctl+0xf80/0x1d80 [ 573.057372] ? kvm_set_memory_region+0x50/0x50 [ 573.061962] ? __fdget_pos+0x1bb/0x200 [ 573.065859] ? graph_lock+0x170/0x170 [ 573.069680] ? find_held_lock+0x36/0x1c0 [ 573.073757] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 573.079300] ? _parse_integer+0x13b/0x190 [ 573.083459] ? graph_lock+0x170/0x170 [ 573.087334] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 573.092879] ? _kstrtoull+0x188/0x250 15:13:36 executing program 1: r0 = socket$inet(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001400ff09fffefd956fa283b763a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0xfffffffffffff27}, 0x0) 15:13:36 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") signalfd4(r0, &(0x7f0000000000)={0x3b}, 0x8, 0x80800) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = fcntl$dupfd(r1, 0x0, r0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000001b40)={0xfffe0000}, 0x1) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x8030ae7c, 0x89) [ 573.096684] ? _parse_integer+0x190/0x190 [ 573.100839] ? graph_lock+0x170/0x170 [ 573.104643] ? lock_release+0xa30/0xa30 [ 573.108624] ? find_held_lock+0x36/0x1c0 [ 573.112694] ? find_held_lock+0x36/0x1c0 [ 573.116769] ? lock_downgrade+0x8f0/0x8f0 [ 573.120929] ? kasan_check_read+0x11/0x20 [ 573.125085] ? rcu_is_watching+0x8c/0x150 [ 573.129255] ? __fget+0x414/0x670 [ 573.132717] ? match_held_lock+0x821/0x8d0 [ 573.136962] ? expand_files.part.8+0x9c0/0x9c0 [ 573.141556] ? kasan_check_write+0x14/0x20 [ 573.145799] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 573.150742] ? kvm_set_memory_region+0x50/0x50 [ 573.155336] do_vfs_ioctl+0x1de/0x1720 [ 573.159235] ? __lock_is_held+0xb5/0x140 [ 573.163482] ? ioctl_preallocate+0x300/0x300 [ 573.167898] ? __fget_light+0x2f7/0x440 [ 573.171876] ? fget_raw+0x20/0x20 [ 573.175337] ? __sb_end_write+0xac/0xe0 [ 573.179324] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 573.184863] ? fput+0x130/0x1a0 [ 573.188150] ? ksys_write+0x1ae/0x260 [ 573.191950] ? security_file_ioctl+0x94/0xc0 [ 573.196366] ksys_ioctl+0xa9/0xd0 [ 573.199827] __x64_sys_ioctl+0x73/0xb0 [ 573.203723] do_syscall_64+0x1b9/0x820 [ 573.207644] ? syscall_slow_exit_work+0x500/0x500 [ 573.212493] ? syscall_return_slowpath+0x5e0/0x5e0 [ 573.217425] ? syscall_return_slowpath+0x31d/0x5e0 [ 573.222345] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 573.227695] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 573.232531] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 573.237704] RIP: 0033:0x455a79 [ 573.240872] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 573.260111] RSP: 002b:00007fe64c120c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 573.267807] RAX: ffffffffffffffda RBX: 00007fe64c1216d4 RCX: 0000000000455a79 [ 573.275062] RDX: 0000000020000180 RSI: 000000004020ae76 RDI: 0000000000000015 [ 573.282313] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 573.289572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000018 15:13:36 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(0xffffffffffffffff) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) [ 573.296826] R13: 00000000004bdb85 R14: 00000000004cc5a0 R15: 0000000000000000 15:13:36 executing program 1: r0 = socket$inet6(0xa, 0x5, 0xfffffffffffffffd) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x8, 0x4) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) dup2(0xffffffffffffffff, r0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)="2e2f6367726f75702e63707500eac5bea7af575a45fddd5af3a7709295a69e7bc5fd0592bf2a4dc8ace908be8842141ca2a714ed0163d4afd8ac48123d4869e05556a93347d6a7430e03a5f2beb186f16bacf2e4dcdcf3b9ff1d99165ce38d996e7798fe471d9a0d81acd08788fcc9892a2487efcde7a649614b14ba1c18", 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)="6370757365742e6370757300b8bc002bb7191349c7b9aba2dca23812513b4f1ffe5139d8f2eb4d82f9982e7f25a33cce1eedd6392ee0a4e7754a8b43a2278198232c22de4037b440748634c0ff72aecf7cef41e9e3cb863daa01ca7e7a79d8ee46a49bbd07e20f6705e75700000000adc57166495d5a367509000000000000002f37782704f7f2fd6b93946231aa1181b0346068ae2bc573be0c5c1109a0d084d46ee4b59072552d9802710a73a095c64069cf697072b1cc1f81efa2dda34644a0c537a47d935e552335792531a79149e602", 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x0, 0x0) sendfile(r2, r2, &(0x7f00000000c0), 0x5) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000240)={0x1d}, 0x10) 15:13:36 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000]}}, 0x1c) 15:13:36 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000280)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="0a0775b005e381e5b3b60ced5c54dbb7", 0x16a) r2 = accept$alg(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="03007800004a4832e50004000000", @ANYRES32=0x0], &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={r3, 0x8}, &(0x7f0000000180)=0x8) sendmmsg$alg(r2, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x390, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3}], 0x18}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000400)={r4, @in6={{0xa, 0x4e22, 0x8001, @dev={0xfe, 0x80, [], 0x21}, 0xfffffffffffff001}}, 0x9, 0x10000, 0x5, 0x0, 0x1}, &(0x7f0000000000)=0x98) recvmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000500)=""/84, 0xf}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x2, &(0x7f00000000c0)=""/50, 0x32}, 0x0) creat(&(0x7f0000000380)='./file0\x00', 0x8) 15:13:36 executing program 2 (fault-call:7 fault-nth:1): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4}) 15:13:36 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x80, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0xffffffffffffff00, 0x7, 0x100}) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x79, &(0x7f0000000000), 0x8) close(r3) close(r2) 15:13:36 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x4000, 0x0) ioctl$KVM_GET_CLOCK(r2, 0x8030ae7c, &(0x7f0000000080)) 15:13:36 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:36 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000000c0)=0x8000, 0x4) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000080)=0x3, 0x4) r3 = getpid() fstat(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={r3, r4, r5}, 0xc) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 15:13:36 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x8030ae7c, 0xa07001) 15:13:36 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc000000]}}, 0x1c) 15:13:36 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/28, 0x1c) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x8, @time={0x0, 0x1c9c380}, 0xb589, {0xbbc, 0x8}, 0xc41, 0x1, 0x6}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc0305302, &(0x7f0000000180)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000efb000)='/dev/sequencer2\x00', 0x0, 0x0) 15:13:36 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") socket$kcm(0x29, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8994, &(0x7f0000000100)={"626f6e643000000000041300", @ifru_hwaddr=@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}) 15:13:36 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x46c}, 0x1c) 15:13:36 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000180)={0x11, 0xff, 0x2, 0x0, 0x0, [{r0, 0x0, 0xfff}, {r1, 0x0, 0x877}]}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x800, 0x0) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000100)=""/76) 15:13:36 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:36 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x100000000000, 0x100) ioctl$KVM_PPC_GET_PVINFO(r0, 0x4080aea1, &(0x7f0000000140)=""/17) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x4, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x94ed) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x3000, 0x1}) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0x8030ae7c, 0xa07001) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x1, @local={0xfe, 0x80, [], 0xaa}, 0x3}, {0xa, 0x4e22, 0x80000001, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x6, [0x9, 0x2, 0x6d3, 0x4, 0x0, 0x5, 0xff, 0xffffffff]}, 0x5c) 15:13:36 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4}) 15:13:36 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x18}, 0x1c) 15:13:36 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:36 executing program 1: sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48001e83", @ANYRES16=0x0, @ANYBLOB="0000000000000000000011000000280003001400020069706464703000000000000000000000080004000000000008000100000000000c0001000800090000000000"], 0x48}, 0x1}, 0x0) r0 = dup(0xffffffffffffffff) ioctl(r0, 0xffffffffffff1794, &(0x7f0000000000)="47331182a8f46738e44ec30fae1e220ebc2908d11eb3b15df788498774267e1a50c61914be5dd757e249bf1309") ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040)={0x3b7, 0x0, [{0x107001, 0x2c, &(0x7f0000000140)=""/44}]}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000080), &(0x7f0000000200)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00003cefe4)={&(0x7f0000000300)={0x10, 0x36200}, 0xc, &(0x7f0000007ff0)={&(0x7f0000000180)={0xffce, 0x2e, 0x6fd, 0x0, 0x0, {0x2004}, [@nested={0xc, 0x0, [@typed={0x62, 0x0, @ipv4}]}]}, 0xffce}, 0x1}, 0x0) [ 573.850110] netlink: 65350 bytes leftover after parsing attributes in process `syz-executor1'. [ 573.859005] openvswitch: netlink: Message has 4 unknown bytes. [ 573.912953] netlink: 65350 bytes leftover after parsing attributes in process `syz-executor1'. [ 573.922044] openvswitch: netlink: Message has 4 unknown bytes. 15:13:37 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0xfffff000}, 0x1c) 15:13:37 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20200, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000100)=0xfffffffffffffffe, &(0x7f0000000140)=0x4) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000180)=0x10001, 0x8) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000000)) 15:13:37 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0xc008ae67, &(0x7f0000000180)={r4}) 15:13:37 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:37 executing program 5: r0 = epoll_create1(0x0) fsetxattr(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff010800732e26298c6563757269747900"], &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) epoll_create1(0x80000) syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x80) 15:13:37 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x100) socketpair(0x1b, 0x80000, 0x1, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x100, 0x0) ioctl$KIOCSOUND(r3, 0x4b2f, 0xa2) getsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r4, 0x8030ae7c, 0xa07001) 15:13:37 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:37 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000)=0x7fff, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040), 0x4) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x8100, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000600)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000001f0000000000000009000000181b0000", @ANYRES32=r1, @ANYBLOB="0000000000f2ff0004653b32030200000000000000000000181300006126ef59b63d7ecf45e31a4d052e1d931477e19a3fa406438896bf17ebb8b5a6303b28aa6a8647880535f098455fef9b3aae0e0e466a4be140739746e720986e280217", @ANYRES32=r2, @ANYBLOB="000000000000000095000000000000000000000000000000f90a10000000000000000000000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x1ff, 0xf0, &(0x7f00000004c0)=""/240, 0x41100, 0x1, [], r3, 0xf}, 0x48) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000001c0)={{{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f00000002c0)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000b20800000000000d030000009500000000000000000000000000000095000000000000000000000000000000850000003500000000000000000000007f062000fcffffff00000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x80000001, 0x68, &(0x7f0000000140)=""/104, 0x41000, 0xf2333528aa17f6b9, [], r4, 0x2}, 0x48) 15:13:37 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0xfe80}, 0x1c) 15:13:37 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="7f454c460026dc000000000000000000000000000100000011000000000000004000000000000000000000"], 0x2b) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x113, r0, 0x4) read(r0, &(0x7f00000001c0)=""/196, 0x6) 15:13:37 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) r2 = add_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000100)="c67f8b36647c704351a127f594f741fb8a2caeee64424d67857eb4c77d46be1e543ed852cf396c5faddaf7848ab90f254039e3f0ed3a0ef8e50078dea3fed0c5dd7755", 0x43, 0x0) keyctl$revoke(0x3, r2) 15:13:37 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = accept(r0, &(0x7f0000000080)=@pppoe={0x0, 0x0, {0x0, @local}}, &(0x7f0000000140)=0x80) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000c0}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x400, 0x70bd25, 0x25dfdbfc, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x80000000, 0xcf, 0x9, 0xfffffffffffffffc}, {0x0, 0x800, 0x100000001, 0xfffffffffffffffb}, {0x7, 0x1f, 0x7fda, 0x8}, {0x86f, 0x7, 0x402e9e1}]}, 0x10) socket$alg(0x26, 0x5, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl(r3, 0x10000008912, &(0x7f0000000240)="0047fc2f07d82c99240970") mmap(&(0x7f0000000000/0xe73000)=nil, 0xe73000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$l2tp(0x18, 0x1, 0x1) bind$alg(r1, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) connect$l2tp(r5, &(0x7f0000000380)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x3, 0x0, 0x3, 0x0, {0xa, 0x2, 0x3, @remote={0xfe, 0x80}, 0x4}}}, 0x32) getpeername(r5, &(0x7f0000000080)=@vsock={0x0, 0x0, 0x0, @reserved}, &(0x7f0000000000)=0x80) pipe(&(0x7f00000002c0)) 15:13:37 executing program 3: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8d762074") lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/226, 0xe2) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x509000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x5) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x8030ae7c, 0xa07001) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e22, @multicast1=0xe0000001}, @in={0x2, 0x4e21, @loopback=0x7f000001}], 0x20) 15:13:37 executing program 1: r0 = socket$inet6(0x10, 0x10002, 0x3) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="5500000018007f7000fe01b2a4a280930a60000000a84302910000003900090023000c00020000000d0005000b0000000000c78b80082314e9030b9d566885b16732009b84e7b1df136ef75afb0000000000000000", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x3, 0x200000) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e23, 0x2, @local={0xfe, 0x80, [], 0xaa}, 0x400}}}, &(0x7f00000000c0)=0x84) getdents64(r1, &(0x7f0000000340)=""/52, 0x34) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000140)={r2, 0x6, 0x8, 0x3df1}, &(0x7f0000000300)=0x10) 15:13:37 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) [ 574.636430] sg_write: data in/out 14427612/1 bytes for SCSI command 0x0-- guessing data in; [ 574.636430] program syz-executor5 not setting count and/or reply_len properly 15:13:37 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0xfc00}, 0x1c) 15:13:37 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4010ae68, &(0x7f0000000180)={r4}) 15:13:37 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000001c0)=0x1) socketpair(0xa, 0x800, 0x8, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$KDSKBLED(r0, 0x4b65, 0xffffffff7fffffff) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x7) 15:13:37 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:37 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40) r0 = getpgrp(0x0) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x8, 0x408100) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000180)) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000240)={'vlan0\x00', {0x2, 0x4e21, @multicast2=0xe0000002}}) bind$vsock_dgram(r2, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f00000001c0)={{0x32, @dev={0xac, 0x14, 0x14, 0xb}, 0x4e22, 0x0, 'lc\x00', 0xef51753bb6a74adf, 0x7, 0x5a}, {@remote={0xac, 0x14, 0x14, 0xbb}, 0x4e21, 0x2, 0xffffffffffffff00, 0x1f, 0x3ff}}, 0x44) 15:13:37 executing program 0: r0 = getpgid(0xffffffffffffffff) prctl$setptracer(0x59616d61, r0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r2 = socket(0xa, 0x1, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400802, 0x0) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000080)={0x0, 0x241}) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 15:13:38 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0xfc00000000000000}, 0x1c) 15:13:38 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(0xffffffffffffffff, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x8030ae7c, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r2) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x9}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000002c0)={r3, 0xdf, "47bf50ced88bea1207e75c769791ce4bb81c885ebefea2004746177469aaa148620c5ad80dd8e1849fcb0d6e9af70a5089e8e626e0d69bfa805e9a1cfb43b6772905809a808e15a2c1e2304a3790b2a16205ec0d476a328b989b63bb5760c040cba5abb1bc7b2a067e8d9be4173fd9d47d5ff1f3526402df99a1fba7995bf12460a3674fe77fe898c90c3b4b5da76642a369c688761545e7f7f4a033b99c9eda44243f2a1b05e35be51b6efb95df12e5b4b2de6583b400b7a7bfadb3bd3e42af5621ebecf3b29afbb13ddaef0b7af9e82840f6bb13ec0a6a759b6766bc280b"}, &(0x7f00000003c0)=0xe7) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23}}}, &(0x7f00000001c0)=0x84) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000200)={r5, 0x7, 0x6}, 0x8) 15:13:38 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070ad36d8e15c3eff5fe0afb80b2128d5bde1bdc3ab72e30f0f90db330536c1d2400d6460720095f70719cdb53a618a3afa412048fa41bbc9e0174efc2f333ca7da43ab58edf534bd53d1923816528d83bed55dbba3a5b02e426e8d42a987d5bd1b689df15f665cf343309e7fd4499ba95fadbe474f414edbf0bd83e6ec04b1a01157dd92") r1 = socket$packet(0x11, 0x2, 0x300) sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x8035, 0xd, @local={0xfe, 0x80, [], 0xaa}}, 0x1c) 15:13:38 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x98082, 0x0) write$P9_RLOCK(r0, &(0x7f0000000140)={0x8, 0x35, 0x1, 0x3}, 0x8) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000faffe7)=@known='security.capability\x00', &(0x7f00000001c0)="0000000201000000000000010400000000000040", 0x14, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000100)) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f00000000c0)=0x6) socket$pptp(0x18, 0x1, 0x2) 15:13:38 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x6352b24745000000}, 0x1c) 15:13:38 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000000)=0x6, 0x8) 15:13:38 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cryptd(ctr-camellia-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) clock_gettime(0x6, &(0x7f0000000140)) recvmsg(r1, &(0x7f0000000100)={&(0x7f0000000180)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000016c0)=""/209, 0x20001791}], 0x1, &(0x7f00000017c0)=""/201, 0xc9}, 0x0) 15:13:38 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:38 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae46, &(0x7f0000000180)={r4}) 15:13:38 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa, 0x23}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8932, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="4b00000000001000"]}) close(r2) close(r1) 15:13:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f0000000000)=0xe8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x8030ae7c, 0xa07001) [ 575.430220] sg_write: data in/out 14427612/1 bytes for SCSI command 0x0-- guessing data in; [ 575.430220] program syz-executor5 not setting count and/or reply_len properly 15:13:38 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x0) 15:13:38 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0xfc000000}, 0x1c) 15:13:38 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x890f, &(0x7f0000000000)="025c30df2109459d44c83d6d345f8f762070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x50}, 0x1}, 0x0) 15:13:38 executing program 1: r0 = socket$inet6(0xa, 0x800, 0x1) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r1 = gettid() r2 = socket$inet(0x2, 0x6, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x400, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r3, 0x800442d3, &(0x7f00000001c0)={0x2, 0x6, 0x1, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'teql0\x00'}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000040)={0x0, 0xfffffffffffffe01}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x20, 0x3, 0x0, 0xffffffffffffffff, 0x7fff, 0x0, 0x6, 0x6, r4}, &(0x7f0000000140)=0x1a) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f000064effb)="8907040000", 0x5) connect$inet(r2, &(0x7f0000000300)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000380)={r5, 0x10001}, 0x8) ioctl(r3, 0x6, &(0x7f00000003c0)="e7995ddf77d4645354c14c56fc94a6da2d6619352c66dbd6aa4bf470cd679bd454d9f1a40e8a0be3a95f9af6fea6dabfceda1c4988fb0dcd1cae146c1854f70adceed4b908fc71426975f6d55c3c549f9ae5f6f48915060eecc727f1be14dabdfc0661277dc6c76aa1aacfc5da9994ce179c98cd4ec8800825d802e13eb9b67595f9c4cfbf2259201ba05db6d39945993f4605c4b6b5462c781a3808e7f7439ae2cddd3b905fbd536e99dcdeea0001b3e4b62695ca6a595044c5b4f02fc363356c6ccb73446ea52f79cc1e535c0c29ee89534e9036bf1fbe2b8fdd145f3da9afd09afddd02fd8a324d11c2fca36e7f0bd5d371bf5dec58fba62f546c7dc0e4697000fb5b5980dd96a7ebdb8a4548bafcac29984d98a9787992a132edd2ef50bdb1520c17028a11b1cdaa7b0a4ec21a5943a16cd453ed44d263f6951e02e8c706569446211554f5b75c6970940fd51862be4f4685263827fc3dd9f5aa72cf6a30109b4a44723cbccd3ccb65424752ef1b2dff1c8e80f90e9c5be029e963f1c86e5a3515e993b387c5532cb262b3783d9b9f11ee29ca7dfceaa1f790afb798f3dd2c6fd21a33d3ec1aa39a8bfaa769e1cc1410bff767b7cff85000a727d7a0babc7eb307c7166fa8f1617c9fd622bb49d896581040968ca8e94d3140d8e93d414eca784c221a9f8cc6132467447cc61a40cb39e94e36f5f9257933f4a930a117d5a62fa29af86636dcf5cd7e0081d8fd1df83d6b26552f0cb4813cf41720fbbcbbbcb9a1820f9b3162a678bd00093e16b379d139a1043d43bc17d60ab9ebdac3a42f599fac6e074432d8f583987f866cc35012db6e21194005fd35dd440a411100fb1c2fbd5a8a8c7bbe892ff23f19a9989729d077ab4e126618303b33aae32744f41ea42b198cddb7fcf5d728903db19648777e9de5a180a3736899cab6aa82198a74cbf6263cbf656097ccedeb0c378dc322645b303ae2d9e1cb8c490f8126ded275373cbd2e2170a31fc581c06b6fd1591681568f9778ceca635edd8fd831ded15a27cf62efacc48aaae713712ed78194d03c02d760cc04e04c2d4e3cbf61fc0ea9757aaef44967bf5511deaa3154fb8cccc56d0452b67aa1aabeaec3e50e6a89c3b1af95fa5e8680a08f50244ae9450f0a4ad8412e5a5df2838d1c3eb2ede64d76af3c9e8f7091cedad2ae286be59978a119fd99c703ea622d61005963f0ddc44b6d34effeafe7f1d9bf238dc53dbe29946ac767d2031e1df07701e190d65beaa340d302bdffe011943b8af5c53d6ae561f2f8195d5e41ae9213da105744072a8e9993f2db58dc0de3fda8a0ce0d4169d0faf12f4e38fd3e55423fbd563d47280e67d697ec071ea4460ed39bfe9c53ddef04b836cbca7d51cc09297288daca066f001409175cccfb7cc51256cc74d1f0c084f14d5fda4dbb1a5a9fab650c03f166eb70d6c47b709f6c46d4b71d8b750dcda0dc317dec9967667ce97f64eed3af9394dbddad4317f74180e0690dbda4c29904473c3de4acb8c078788e6598b4be5b2d6477cdf56e8259c809e358f3b92037c5e63298b5eac4c284034f40408cc91b3c1263cfa3f8b7e12de3d95680e81a2f72c364fbb33124e6f0e01e4980fa78cb1679639935a997daf18040f843502c23454511467917b61c4e2765b96a6dc3850e61005d903736312a93607c1a951906fdbaac32e05512ea2807e9b1ce095d988e547bbbcaf6866e47815867eed471f9851225aa53204fe07ab8b6c3439172821b1d441383c77328f49967231e2341850de5b689bbd03595477cbcd9e6fe45bbb6ab2e0cc43ae5880846ace3f3d02555c21cabb89d5c3b2bb55555defb5eeb440a5e0a53ed8fb92de83c55ee3648ea31e92372557c0e7b551f10b99bec8fffea696637e8026e579fd4eaa765e62c84fb5e05c444d2d5baafa704c94455016295b173da7bff7440d6a12e34a43ccc598e8841641a4a45a2758ff1c8e7c10aacccdf07bec38234d1b337142a078e8f04c2a357a7bdf6272d25f72f332ede90c7dc60e4d481d748f189ca76924a52e20edd82a7280347f264973183f7505adee1873becb95c1ad22ed20db5cc2770f89dc760f5267fdae7e7fd7029112fc2d978b1cc87d0248a64b48b6b707df42d29f3647a347ba354315a870305f1ab2b49b1db19ffc00e66c8b3323de74ac91a50cf3fade5f96609038f27c7c69ce92a1bde8d2c5a08b2d741a349fe5154f232d94eeffc402ad5d03e5cc2565bc52fb83cb7eb46f33bcf22788b416775dd2d6cdc4f83dcb6c61136bd89b13f804fb369d793706c34c940b4714101845f2155ba62ce0271e2f1c61466dbbcc020932377ec60ed6a65eea83241872355f9fe868c84a4b0131b45a2703af5492cc57ac2bc4deb32261b249d2b7981f52eda8727e7ffc78dc2927c896c9c0a768c19b7d3d61bfd4befe677cbfbfed3927b0bda7739750d534b9fe86d8d3eb81fb22bfe4d21e8c3b341c38e5c2871c2d87eb121547feffcbdf6ddce493c418103b2d029e761f1ae01c57a910bda8a63841a63820b41444faf95c631a16379b2dc39279919d278e95e9429a1c45d9072d7a9202d8bbd9b15649f51055cd227221e02b5149884a45b690c4154ad9d4367515cbe7fe352fac2c4d0fc7df69f570dd2bd244fc42cb298062f0ac38b4b1b4692f7eb6342848e2d568c17ed669cf09cf757d93e1db3a5a7d9617c36de56ce94c4f9150ec96b621d4a11ddbb6bb6ad97a6330f94eb158b6e0d174a034710c7dac934d32b61ef40494937eb5ff772e62929faf81fdd28499478009c0e7bfeac73aca4c1bef39f30aa858c5400c1119e74638443f29c82e541ec5a09636aa15ff2f034dd338ddd26ab670be88085835696ba07b2df00e547cb5da1cb5fa5912eca4b79451a7cca70ce31a9ee7ed8fe3f22950811b3dcea22cc8a9c4f224c74924bc092064e0a11703f4953baa87bac448ee301ba4ff064354de1ec6f768fc187b28d8e7faa42c17709d69d87e5a8dff7cb6a564d69aa2c04d5dbc3910ae4bf53894aba08ee6914fcf246eb2970cd8edb430e5894d58e5e621c59b095cac5a8403a9b48abcc70f70295a4198b51071db290eb1fbf45c706224d633d4cacdde341eeff1c103c01c7650f4ac4de5c3a059a78194a8387943983b1b57e002b1468b4e7ad881c4dd93ff74c065bf26223e2d96833cc37e436dfff1d14eb7bfd320299c1c95c83ca7f2027965508a0acd3a597a91eb5aea0efdbc858d1823086acff054bc5958fd9c7ffacd48def1d55cb419ca457653118f198c7bbbe1721b979d7d2d29ea0e389ed51f776172a85bcb08a2db1feec905370f3d523800de216d1ed6f1d0d94220fcfe061f244bfbab9b2d0428a645db7670b337078cf512f93bf33427ce5ced859abef7cb46ba1f5336e5d7230c3725421c1e1fe5a866f8dedce5e01b2ec2e8520922973c6bbabb5f19decca5e3c515d435014536ca1e56e38ee4b8504eda99fa298c2c8e71e60ba434c35f114ab236bd469b4606b3e548769a7564b2c7005adc60b2366da3dcd6b67c80405ac3e87c739017fe7d1ad8291d0b8f1769d6249db014f98fc4a2ef1a6e6b4df9a3ff5d8f16edf0b8f34aea00ce7bd9b7f60ddf2e110903024128fbce227f892292e45beb46c02119425d529fd995377b44848182324b821424d481218e2cb184b3556e2937f0bd293e4d1208df05e107c1de6db1f1e30969e3c2e698d689a27842924c07423f416abbe940f1e5f4be09b8d04aa7834317b02a122bdcf0891ff56d884f782b543cebb0651bac441a701a932c2c9c05e32312148ae4117089a13ece4b3a77d7685c87755b22b2145b3249e58ecbbfb9f05c71d290929cb1618e516ef5a3b124acf9d97a4abb06b9f029fbf3bcfb412d5e966a7a65767c555f78399598404da3b256e3fc08bd297300f083ea1f4ea53373003148beb38d498ee6b8261bd218ea20772e560877a9d84caf6ce995c0515f235441ad9f98cfc46ec571399ab617a754914e1da9090e8f68fad7ad6b7610b8eacfa5d9b80c78c217b2de0e81580fc5904b83f5638c30f4ae564d91592d9ac12a03269e8ed71cd6195f5b99ad2957c0ffaf9ef70be5eef3a689f734abeb3993b23a1ea39aeb164eaa1e784f2f235c36accf837c0b9437749df63d1f47868806f073b44d330d67775cbd4b3a71e531d31510855a2559058e9f60930fa79d6b74c56e6bbbb156ce5d316f5af03b6a42307d37540ed7b39bd8a4a5b62fbbe3394be394b510345a0e3d9fc74cf82ad23d5d3b7e8c02e15e45594b3f93586880a246d659834fb6c41c4351dda677bf2522ea34c8370b6715971c3e4736f6f0a5cc42764d05904c042bde9b9bb0a7abcc7da7fa796b0592e81f5a49c3883849e58288698b0ee1ea8fcf7b0fb9559b85d7e9b0d0e93cb0b1d12974512f2ca4331f0824bf101026d48deaac32a80a4ceee83478b1d2f671888f9588afc1456978db4a50c3f1e0b7e2da086e8cc91ceb80873209c4cb7c6bf63ac4ab7615630cd0a165a7c8c0e457fd3d12643612b9928d60be88c429a1f15f3bec7d58548f199833e714dc7f044840ce3f9f3107b3255baedf9ac6202a54fca34cc30b4b283b3ad2ed85482d51762aa4b414e8aa033e7f240e8d78cf552a3bd0ae28bdba5a7914c6e810805d8306e6f2dedefa7a0dde92e0581a936dceee7278d867759bb325436eef2336a69ad79e03c708aa9fa63caaa1da694c4fc7404b42be1c08978f7d92ecf9cc4e54e3c07c1f3d6ed273692088879944df4d87179f1402d06b83a364ea3b1b5cc11231eb743f2ab86b094538865c09389bdd7618ae7e66275b9f91900d404757dd0380961a4853f45e110ae01f80729ef2021f99c0e159715964767851a1301cd97aa524786f0cdc6e5423e454e066f5e34cb657e43e21c0ca73b402b01821d88bfab830c86c11f5ccb3fe3c42e004d6b47b66002e3fb1d619383c5f10954291d4e4d3c54012f1e6d1839a476e97198a44dba96d0a5219521b25c95ab4f73afef12d1c8827a3580ae608e4dc5e469a0d3105a7b86ffc816e4f9d89a56bfe652d790f19804540c619d6c08bee8f85af5c5a8ab5729b39dc7bae50bf621fd3fdce0e016ffb9a59705dd3459fba5fd04a253aca67c52eb17878ae65dbd1a12ade7f9e629d3ddbab5754ae120b529a1d154014f81da9010b5b58ff920045ee429e7f85916db22cca5d01c31c473d6c8af831d13819237e29a29dc7d65944d5a208ec2a00f3fa19905c592abf000c503b6210f6063b5705a1e35e0b8af856f36d052615f3738ae5ceda6468c4c0a2fae490e3bb827c30b05df4b1b7121d67079d40c8d8a53358da369e4eaf3613cce6429f076d4140c9f004ce780c34906af8c43ed24b3933969a2cc64f74c4c846bb737fff18932e6bc41410b06f65227d10456b768c354de8769f9bb265f2c2d5444b993b5d936416338203d164ff0bc6c17d0ae789ac00d0175f4ec515b19f2e861e51668d532b9bdc48723e083dcea48147e0ca72cdd14ec7fd9062f2ac446ec2093561dd6d510fa6b412ccf061374ec179305bf6bfdfabacc80405e8a5deaaf7c8bbeacf5ce1b8f4eae655995289ea2a56473686b5088532ab9885012106d1cc6ee6e829b118831e2c70c7ecde13fa376b98232337f1af96206a4e6750c37ea2fc95a0f39c1c12094bf635f3fa54dde3324c7df73c188689045242c2b1f22cf78a2c42dae84ef44a23a7f7b315ae657e266f68821275c938fce13ccc2018f55b5fba122f01911") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000583ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f00000002c0)=""/3, 0x100000, 0x800, 0x10001}, 0x18) timer_create(0x0, &(0x7f0000000200)={0x0, 0x12, 0x6, @tid=r1}, &(0x7f0000000240)) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000859000/0x18000)=nil, &(0x7f0000001440)=[@text32={0x20, &(0x7f00000013c0)="b9800000c00f3235010000000f300f015803b9840b0000b802000000ba000000000f30c4e1792ba56f2f0000d9ee640f017ca8cd66ba4200ed0f015f0e0fc7ad0e0000000f07", 0x46}], 0x1, 0xc, &(0x7f0000001480)=[@dstype0={0x6, 0xf}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000280)='cdg\x00', 0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x15) 15:13:38 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) semget(0x2, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:13:38 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x0) 15:13:38 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x1800}, 0x1c) 15:13:38 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x40049409, &(0x7f0000000180)={r4}) 15:13:38 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) semget(0x2, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:13:38 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000480)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) stat(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000480)) read$FUSE(r0, &(0x7f0000001000), 0x1000) read$FUSE(r0, &(0x7f00000020c0), 0x1129) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b}}, 0x50) write$FUSE_DIRENT(r0, &(0x7f0000000500)={0x90, 0x0, 0x2, [{0x1, 0x0, 0xb, 0x0, 'em1nodevem1'}, {0x0, 0x0, 0x1, 0x0, ','}, {0x0, 0x0, 0x1c, 0x0, "2b73797374656dcc6370757365746367726f7570246367726f757015"}]}, 0x90) 15:13:38 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") setsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f0000000080)=0xe021, 0x4) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x6, 0x80000) io_setup(0x3ff, &(0x7f00000001c0)=0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001600)='/dev/rtc0\x00', 0x200000, 0x0) io_submit(r3, 0x5, &(0x7f0000001680)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0xa, 0x2, r2, &(0x7f0000000200)="49d04d0af4ccd9c18b9918a59aada95e418108a2e85c358cd8f26acab561fd70abf11ede3319593606ba1a585d96459789028d8ed3330be028808508040435f180fd2eabf472a5772debf86994461b747c014343ea09426a53b8b46799feb80509d1fd7f83617e9153e10322a197742d4229310d3e97a24732c2a16dfeda4d62d801a45fdad2831127a8b372069a83b7687d2e0e55d2cfa5259613071a73bc07b33fad2adf61bc17162ea7482f7280675368543f0058a50b", 0xb8, 0x3, 0x0, 0x1, r2}, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x6, 0x7f95, r1, &(0x7f0000000300)="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", 0x1000, 0x4f, 0x0, 0x1, r2}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x7, 0x4, r2, &(0x7f0000001340)="7ebed0a628838a67bbec43d78071a520b16fd8406421a7", 0x17, 0x4, 0x0, 0x0, r2}, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x3, 0x0, r1, &(0x7f00000013c0)="dd21f21f7fe663ad37ecc861bd11792891437672af9dc0524383e03eda2c35c73e7990ea85c260d85412a1a5c0b89e926335b3aa0bb37d950f01b4faa40ab6a2b5551f3b47b7843967a53811e7887d53d1f0dc38d2a451dcc66f1f869530387caa28662b0d2a33463d4d7ffba30ecab20df94f61b7fe7e9bedbfa30a69d465fff8b617ab5dc53a16683abfe7423f1b69446e0e6d5c11a1bc1abafbd812b834d16e56acd363bcb55cfaf160ad0ad6780d205023fe8acc288f1080d0875730dc34bc1b65e5eb02c31b2c55344ff7a3bc04289a073588", 0xd5, 0x3ff, 0x0, 0x1, r2}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x8, 0xffffffffffffff5a, r0, &(0x7f0000001500)="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", 0xfb, 0x7, 0x0, 0x1, r4}]) write$P9_RRENAMEAT(r2, &(0x7f0000000180)={0x7, 0x4b, 0x1}, 0x7) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000100)={0x2, 0x0, [{0x0, 0x3, 0x0, 0x0, @irqchip={0x3, 0x1ff}}, {0x80000001, 0x4, 0x0, 0x0, @adapter={0xff, 0x3ff, 0x3, 0x2}}]}) 15:13:38 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x60000, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000080)={'IDLETIMER\x00'}, &(0x7f00000000c0)=0x1e) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0x8030ae7c, 0xa07001) 15:13:39 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x0) 15:13:39 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0xff00000000000000}, 0x1c) 15:13:39 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") fchmod(r0, 0x2a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth0_to_bridge\x00', &(0x7f0000000000)=@ethtool_rxfh={0x46, 0x699c, 0x9a2f, 0x4, 0x401, "b30d10", 0x8, [0x0]}}) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xb, 0x0) readv(r1, &(0x7f0000a6fff0)=[{&(0x7f0000000180)=""/110, 0xfffffec7}], 0x1000000000000258) ioctl$int_in(r1, 0x8000008010500d, &(0x7f0000003ff8)) 15:13:39 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) semget(0x2, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:13:39 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x284000, 0x0) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000100)=""/68) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r2 = socket(0xa, 0x1, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000080)=[0x7, 0x9]) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) 15:13:39 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0xfeffffff}, 0x1c) 15:13:39 executing program 6 (fault-call:7 fault-nth:0): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:39 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) semget(0x2, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:13:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x8030ae7c, 0xa07001) [ 576.158864] FAULT_INJECTION: forcing a failure. [ 576.158864] name failslab, interval 1, probability 0, space 0, times 0 [ 576.170304] CPU: 1 PID: 6291 Comm: syz-executor6 Not tainted 4.18.0-rc4+ #143 [ 576.177587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 576.186949] Call Trace: [ 576.189555] dump_stack+0x1c9/0x2b4 [ 576.193202] ? dump_stack_print_info.cold.2+0x52/0x52 [ 576.198405] ? trace_hardirqs_on+0x10/0x10 [ 576.202656] ? trace_hardirqs_on+0x10/0x10 15:13:39 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0xc0045878, &(0x7f0000000180)={r4}) [ 576.206916] should_fail.cold.4+0xa/0x1a [ 576.210995] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 576.216118] ? perf_trace_lock+0xde/0x920 [ 576.220278] ? trace_hardirqs_on+0x10/0x10 [ 576.224531] ? find_held_lock+0x36/0x1c0 [ 576.228620] ? check_same_owner+0x340/0x340 [ 576.232962] ? rcu_note_context_switch+0x730/0x730 [ 576.238002] __should_failslab+0x124/0x180 [ 576.242251] should_failslab+0x9/0x14 [ 576.246066] kmem_cache_alloc_trace+0x2cb/0x780 [ 576.250759] alloc_pipe_info+0x175/0x5a0 [ 576.254833] ? pipe_read+0x940/0x940 15:13:39 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x400300}, 0x1c) 15:13:39 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) signalfd4(r0, &(0x7f0000000140)={0x6}, 0x8, 0x80000) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer2\x00', 0x30000, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f00000001c0)={0x3, 0x100000000000}) r2 = socket(0x8, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x380c0, 0x0) ioctl$sock_ifreq(r2, 0x8913, &(0x7f0000000040)={"69705f7674693000000400", @ifru_hwaddr=@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x14}}) pselect6(0x40, &(0x7f0000000200)={0x500000000000, 0x3, 0x1000, 0x7, 0x60a, 0x7fff, 0x0, 0x6}, &(0x7f0000000240)={0xf5, 0x6354, 0x100000000, 0x9, 0x7, 0xa9f, 0x6, 0x8}, &(0x7f0000000280)={0x1, 0xfffffffffffffffd, 0x435, 0x5, 0x1, 0x0, 0xffff, 0x5fe}, &(0x7f00000002c0), &(0x7f0000000340)={&(0x7f0000000300), 0x8}) [ 576.258557] ? __fget+0x414/0x670 [ 576.262027] ? expand_files.part.8+0x9c0/0x9c0 [ 576.266621] ? find_held_lock+0x36/0x1c0 [ 576.270700] splice_direct_to_actor+0x6fc/0x8f0 [ 576.275379] ? fsnotify+0xbb4/0x14e0 [ 576.279106] ? pipe_to_sendpage+0x400/0x400 [ 576.283449] ? do_splice_to+0x190/0x190 [ 576.287439] ? rw_verify_area+0x118/0x360 [ 576.291607] do_splice_direct+0x2d4/0x420 [ 576.295784] ? splice_direct_to_actor+0x8f0/0x8f0 [ 576.300642] ? rw_verify_area+0x118/0x360 [ 576.304804] do_sendfile+0x623/0xe20 [ 576.308545] ? do_compat_pwritev64+0x1c0/0x1c0 [ 576.313149] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 576.318704] ? _copy_from_user+0xdf/0x150 [ 576.322871] __x64_sys_sendfile64+0x15d/0x250 [ 576.327380] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 576.331975] ? do_syscall_64+0x9a/0x820 [ 576.335968] do_syscall_64+0x1b9/0x820 [ 576.339864] ? finish_task_switch+0x1d3/0x870 [ 576.344381] ? syscall_return_slowpath+0x5e0/0x5e0 [ 576.349321] ? syscall_return_slowpath+0x31d/0x5e0 [ 576.354261] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 576.359635] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 576.364496] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 576.369690] RIP: 0033:0x455a79 [ 576.372874] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 576.392293] RSP: 002b:00007f6aec1acc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 576.400038] RAX: ffffffffffffffda RBX: 00007f6aec1ad6d4 RCX: 0000000000455a79 15:13:39 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0xff000000}, 0x1c) [ 576.407330] RDX: 0000000020d83ff8 RSI: 0000000000000016 RDI: 0000000000000015 [ 576.414600] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 576.421864] R10: 00008000fffffffe R11: 0000000000000246 R12: 0000000000000017 [ 576.429125] R13: 00000000004c0d39 R14: 00000000004d1340 R15: 0000000000000000 15:13:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0xffffffff, 0x6}, 'port0\x00', 0x8, 0x60008, 0xfffffffffffffffb, 0x10000, 0x4, 0xffff, 0x81, 0x0, 0x3, 0x4f8d}) getsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000100), &(0x7f0000000080)=0xee9a) 15:13:39 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:13:39 executing program 6 (fault-call:7 fault-nth:1): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:39 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0xc020660b, &(0x7f0000000180)={r4}) 15:13:39 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0xffffff87}, 0x1c) [ 576.765173] FAULT_INJECTION: forcing a failure. [ 576.765173] name failslab, interval 1, probability 0, space 0, times 0 [ 576.776453] CPU: 0 PID: 6329 Comm: syz-executor6 Not tainted 4.18.0-rc4+ #143 [ 576.783725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 576.793070] Call Trace: [ 576.795663] dump_stack+0x1c9/0x2b4 [ 576.799281] ? dump_stack_print_info.cold.2+0x52/0x52 [ 576.804456] ? __save_stack_trace+0x8d/0xf0 [ 576.808768] should_fail.cold.4+0xa/0x1a [ 576.812835] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 576.817924] ? save_stack+0x43/0xd0 [ 576.821536] ? kasan_kmalloc+0xc4/0xe0 [ 576.825405] ? kmem_cache_alloc_trace+0x152/0x780 [ 576.830238] ? alloc_pipe_info+0x175/0x5a0 [ 576.834456] ? splice_direct_to_actor+0x6fc/0x8f0 [ 576.839284] ? do_sendfile+0x623/0xe20 [ 576.843155] ? __x64_sys_sendfile64+0x15d/0x250 [ 576.847808] ? do_syscall_64+0x1b9/0x820 [ 576.851857] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 576.857215] ? find_held_lock+0x36/0x1c0 [ 576.861273] ? check_same_owner+0x340/0x340 [ 576.865580] ? rcu_is_watching+0x8c/0x150 [ 576.869723] ? rcu_note_context_switch+0x730/0x730 [ 576.874648] __should_failslab+0x124/0x180 [ 576.878872] should_failslab+0x9/0x14 [ 576.882658] __kmalloc+0x2c8/0x760 [ 576.886185] ? kmem_cache_alloc_trace+0x616/0x780 [ 576.891023] ? alloc_pipe_info+0x2a8/0x5a0 [ 576.895247] alloc_pipe_info+0x2a8/0x5a0 [ 576.899292] ? pipe_read+0x940/0x940 [ 576.902990] ? __fget+0x414/0x670 [ 576.906437] ? expand_files.part.8+0x9c0/0x9c0 [ 576.911008] ? find_held_lock+0x36/0x1c0 [ 576.915062] splice_direct_to_actor+0x6fc/0x8f0 [ 576.919713] ? fsnotify+0xbb4/0x14e0 [ 576.923414] ? pipe_to_sendpage+0x400/0x400 [ 576.927722] ? do_splice_to+0x190/0x190 [ 576.931684] ? rw_verify_area+0x118/0x360 [ 576.935818] do_splice_direct+0x2d4/0x420 [ 576.939953] ? splice_direct_to_actor+0x8f0/0x8f0 [ 576.944782] ? rw_verify_area+0x118/0x360 [ 576.948927] do_sendfile+0x623/0xe20 [ 576.952629] ? do_compat_pwritev64+0x1c0/0x1c0 [ 576.957218] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 576.962742] ? _copy_from_user+0xdf/0x150 [ 576.966880] __x64_sys_sendfile64+0x15d/0x250 [ 576.971370] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 576.975939] ? do_syscall_64+0x9a/0x820 [ 576.979904] do_syscall_64+0x1b9/0x820 [ 576.983773] ? finish_task_switch+0x1d3/0x870 [ 576.988256] ? syscall_return_slowpath+0x5e0/0x5e0 [ 576.993171] ? syscall_return_slowpath+0x31d/0x5e0 [ 576.998095] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 577.003447] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 577.008280] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 577.013453] RIP: 0033:0x455a79 [ 577.016620] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 577.035844] RSP: 002b:00007f6aec1acc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 577.043538] RAX: ffffffffffffffda RBX: 00007f6aec1ad6d4 RCX: 0000000000455a79 [ 577.050806] RDX: 0000000020d83ff8 RSI: 0000000000000016 RDI: 0000000000000015 [ 577.058064] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 577.065314] R10: 00008000fffffffe R11: 0000000000000246 R12: 0000000000000017 [ 577.072568] R13: 00000000004c0d39 R14: 00000000004d1340 R15: 0000000000000001 15:13:40 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000000)={0x8}, 0x139) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x100, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000100), &(0x7f0000000140)=0x4) r3 = accept$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000bfef9b9d2a4b20079fffffffffffffe000225070097c11ed4c2c4dc42ffa86eb9", 0x30) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000180)) sendmmsg$alg(r3, &(0x7f0000009ac0)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000003400)="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", 0x100}], 0x1, &(0x7f0000009cc0)=ANY=[]}], 0x1, 0x0) recvmsg(r3, &(0x7f0000158000)={&(0x7f00002fffa0)=@nfc_llcp, 0x60, &(0x7f0000b9c000)=[{&(0x7f000080f000)=""/4096, 0x1000}], 0x1, &(0x7f0000da2000)}, 0x0) 15:13:40 executing program 0: socketpair(0x10b, 0x7, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={r2, 0x0, &(0x7f0000000140)}, &(0x7f00000001c0)=0x10) r3 = socket$inet6(0xa, 0x1, 0x1) ioctl(r1, 0x8910, &(0x7f00000000c0)="025cc83d6d345f8f762070") socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 15:13:40 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000080)={0x2, 0x6}) ioctl$KVM_ASSIGN_SET_INTX_MASK(r2, 0x4040aea4, &(0x7f0000000000)={0x40, 0x3c5, 0x1a9a, 0x6, 0x404a}) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x8030ae7c, 0xa07001) 15:13:40 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x34000}, 0x1c) 15:13:40 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:13:40 executing program 6 (fault-call:7 fault-nth:2): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:40 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000a8d000)={&(0x7f0000c78ff4)={0x10}, 0xc, &(0x7f0000df6000)={&(0x7f0000b04cf4)=ANY=[@ANYBLOB="1c000000150afdff00002300000000008000000008000100"], 0x1c}, 0x1}, 0x0) 15:13:40 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020940d, &(0x7f0000000180)={r4}) [ 577.340847] FAULT_INJECTION: forcing a failure. [ 577.340847] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 577.352776] CPU: 1 PID: 6353 Comm: syz-executor6 Not tainted 4.18.0-rc4+ #143 [ 577.360051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 577.369390] Call Trace: [ 577.371967] dump_stack+0x1c9/0x2b4 [ 577.375585] ? dump_stack_print_info.cold.2+0x52/0x52 [ 577.380775] ? zap_class+0x740/0x740 [ 577.384484] should_fail.cold.4+0xa/0x1a [ 577.388580] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 577.393686] ? find_held_lock+0x36/0x1c0 [ 577.397737] ? find_held_lock+0x36/0x1c0 [ 577.401797] ? check_same_owner+0x340/0x340 [ 577.406107] ? rcu_note_context_switch+0x730/0x730 [ 577.411039] __alloc_pages_nodemask+0x36e/0xdb0 [ 577.415830] ? check_noncircular+0x20/0x20 [ 577.420061] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 577.425064] ? perf_trace_lock+0xde/0x920 [ 577.429202] ? zap_class+0x740/0x740 [ 577.432907] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 577.437915] ? percpu_counter_add_batch+0xf2/0x150 [ 577.442833] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 577.447844] ? __vm_enough_memory+0x590/0x980 [ 577.452338] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 577.457863] alloc_pages_vma+0xdd/0x540 [ 577.461828] shmem_alloc_page+0xa8/0x190 [ 577.465877] ? shmem_swapin+0x230/0x230 [ 577.469853] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 577.474856] ? percpu_counter_add_batch+0xf2/0x150 [ 577.479776] shmem_alloc_and_acct_page+0x1f1/0x820 [ 577.484698] ? shmem_alloc_hugepage+0x4e0/0x4e0 [ 577.489358] ? trace_hardirqs_on+0x10/0x10 [ 577.493584] shmem_getpage_gfp+0x6ea/0x41e0 [ 577.497893] ? zap_class+0x740/0x740 [ 577.501604] ? shmem_writepage+0x1380/0x1380 [ 577.505997] ? zap_class+0x740/0x740 [ 577.509708] ? print_usage_bug+0xc0/0xc0 [ 577.513758] ? print_usage_bug+0xc0/0xc0 [ 577.517814] ? print_usage_bug+0xc0/0xc0 [ 577.521870] ? __lock_acquire+0x7fc/0x5020 [ 577.526091] ? __lock_acquire+0x7fc/0x5020 [ 577.530320] ? trace_hardirqs_on+0x10/0x10 [ 577.534553] ? print_usage_bug+0xc0/0xc0 [ 577.538598] ? __lock_acquire+0x7fc/0x5020 [ 577.542816] ? page_add_new_anon_rmap+0x870/0x870 [ 577.547646] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 577.552651] ? print_usage_bug+0xc0/0xc0 [ 577.556698] ? print_usage_bug+0xc0/0xc0 [ 577.560744] ? print_usage_bug+0xc0/0xc0 [ 577.565150] ? perf_trace_lock+0xde/0x920 [ 577.569294] ? print_usage_bug+0xc0/0xc0 [ 577.573342] ? zap_class+0x740/0x740 [ 577.577044] ? __lock_acquire+0x7fc/0x5020 [ 577.581268] ? lock_acquire+0x1e4/0x540 [ 577.585229] ? zap_class+0x740/0x740 [ 577.588927] ? zap_class+0x740/0x740 [ 577.592626] ? graph_lock+0x170/0x170 [ 577.596435] ? __lock_acquire+0x7fc/0x5020 [ 577.600662] ? find_held_lock+0x36/0x1c0 [ 577.604716] ? lock_downgrade+0x8f0/0x8f0 [ 577.608854] ? rcu_is_watching+0x8c/0x150 [ 577.612993] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 577.617397] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 577.621794] ? is_bpf_text_address+0xd7/0x170 [ 577.626285] ? kernel_text_address+0x79/0xf0 [ 577.630680] ? __kernel_text_address+0xd/0x40 [ 577.635160] ? unwind_get_return_address+0x61/0xa0 [ 577.640078] ? __save_stack_trace+0x8d/0xf0 [ 577.644388] shmem_file_read_iter+0x39f/0x1090 [ 577.649041] ? kasan_kmalloc+0xc4/0xe0 [ 577.652914] ? alloc_pipe_info+0x2a8/0x5a0 [ 577.657145] ? shmem_fallocate+0x12e0/0x12e0 [ 577.661545] ? lock_downgrade+0x8f0/0x8f0 [ 577.665681] ? rcu_is_watching+0x8c/0x150 [ 577.669815] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 577.674209] ? __lockdep_init_map+0x105/0x590 [ 577.678694] ? lockdep_init_map+0x9/0x10 [ 577.682747] ? debug_mutex_init+0x2d/0x60 [ 577.686879] ? __mutex_init+0x1f7/0x290 [ 577.690846] ? rcu_pm_notify+0xc0/0xc0 [ 577.694723] ? __ia32_sys_membarrier+0x150/0x150 [ 577.699465] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 577.704993] ? fsnotify+0xbb4/0x14e0 [ 577.708701] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 577.713708] ? iov_iter_pipe+0xc2/0x2f0 [ 577.717670] generic_file_splice_read+0x5cd/0x9d0 [ 577.722499] ? add_to_pipe+0x360/0x360 [ 577.726383] ? rw_verify_area+0x118/0x360 [ 577.730514] ? add_to_pipe+0x360/0x360 [ 577.734386] do_splice_to+0x12e/0x190 [ 577.738180] splice_direct_to_actor+0x270/0x8f0 [ 577.742834] ? pipe_to_sendpage+0x400/0x400 [ 577.747144] ? do_splice_to+0x190/0x190 [ 577.751108] ? rw_verify_area+0x118/0x360 [ 577.755243] do_splice_direct+0x2d4/0x420 [ 577.759383] ? splice_direct_to_actor+0x8f0/0x8f0 [ 577.764223] ? rw_verify_area+0x118/0x360 [ 577.768358] do_sendfile+0x623/0xe20 [ 577.772066] ? do_compat_pwritev64+0x1c0/0x1c0 [ 577.776656] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 577.782181] ? _copy_from_user+0xdf/0x150 [ 577.786319] __x64_sys_sendfile64+0x15d/0x250 [ 577.790809] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 577.795381] ? do_syscall_64+0x9a/0x820 [ 577.799346] do_syscall_64+0x1b9/0x820 [ 577.803220] ? finish_task_switch+0x1d3/0x870 [ 577.807701] ? syscall_return_slowpath+0x5e0/0x5e0 [ 577.812623] ? syscall_return_slowpath+0x31d/0x5e0 [ 577.817552] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 577.822903] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 577.827738] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 577.832918] RIP: 0033:0x455a79 [ 577.836097] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 577.855357] RSP: 002b:00007f6aec1acc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 577.863136] RAX: ffffffffffffffda RBX: 00007f6aec1ad6d4 RCX: 0000000000455a79 [ 577.870388] RDX: 0000000020d83ff8 RSI: 0000000000000016 RDI: 0000000000000015 [ 577.877656] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 577.884908] R10: 00008000fffffffe R11: 0000000000000246 R12: 0000000000000017 [ 577.892166] R13: 00000000004c0d39 R14: 00000000004d1340 R15: 0000000000000002 15:13:41 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0xfc}, 0x1c) 15:13:41 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x8400}, {r0, 0x10c5}, {r0, 0xeea1a6758bb79f3a}, {r0, 0x80}, {r0, 0x8248}, {r0, 0x80}], 0x6, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={0x100}, 0x8) r1 = socket$alg(0x26, 0x5, 0x0) bind(r1, &(0x7f0000000200)=@l2={0x1f, 0xfffffffffffffbff, {0x800, 0xff, 0x2, 0x0, 0x6, 0x8}, 0x0, 0x81}, 0x80) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 15:13:41 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x419a, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) r2 = semget$private(0x0, 0x0, 0x1) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000080)={0x1, '}'}, 0x2) semctl$SEM_INFO(r2, 0x2, 0x13, &(0x7f0000000000)=""/6) 15:13:41 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:13:41 executing program 6 (fault-call:7 fault-nth:3): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) [ 578.112636] FAULT_INJECTION: forcing a failure. [ 578.112636] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 578.124600] CPU: 1 PID: 6390 Comm: syz-executor6 Not tainted 4.18.0-rc4+ #143 [ 578.131885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 578.141245] Call Trace: [ 578.143842] dump_stack+0x1c9/0x2b4 [ 578.147480] ? dump_stack_print_info.cold.2+0x52/0x52 [ 578.152684] ? zap_class+0x740/0x740 [ 578.156419] should_fail.cold.4+0xa/0x1a 15:13:41 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:13:41 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) [ 578.160497] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 578.165619] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 578.170652] ? find_held_lock+0x36/0x1c0 [ 578.174724] ? find_held_lock+0x36/0x1c0 [ 578.178845] ? check_same_owner+0x340/0x340 [ 578.183181] ? rcu_note_context_switch+0x730/0x730 [ 578.188134] __alloc_pages_nodemask+0x36e/0xdb0 [ 578.192819] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 578.197850] ? trace_hardirqs_on+0x10/0x10 [ 578.202113] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 578.207145] ? percpu_counter_add_batch+0xf2/0x150 15:13:41 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0x11, 0x800, 0x3) semtimedop(0xffffffffffffffff, &(0x7f0000000f00)=[{}], 0x1, &(0x7f0000000f40)={0x0, 0x989680}) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 578.212089] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 578.217115] ? __vm_enough_memory+0x590/0x980 [ 578.221625] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 578.227173] alloc_pages_vma+0xdd/0x540 [ 578.231162] shmem_alloc_page+0xa8/0x190 [ 578.235235] ? shmem_swapin+0x230/0x230 [ 578.239248] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 578.244281] ? percpu_counter_add_batch+0xf2/0x150 [ 578.249230] shmem_alloc_and_acct_page+0x1f1/0x820 [ 578.254178] ? shmem_alloc_hugepage+0x4e0/0x4e0 [ 578.258857] ? do_raw_spin_unlock+0xa7/0x2f0 15:13:41 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:13:41 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x403ff, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x4, 0x8000, 0x7fffffff, 0x1f, 0x0}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140)={r3, 0x4}, &(0x7f0000000180)=0xfffffffffffffeb5) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000001c0)={r4, 0x9}, 0x8) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 578.263270] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 578.267862] ? _raw_spin_unlock_irq+0x27/0x70 [ 578.272368] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 578.277400] shmem_getpage_gfp+0x6ea/0x41e0 [ 578.281732] ? zap_class+0x740/0x740 [ 578.285474] ? shmem_writepage+0x1380/0x1380 [ 578.289991] ? print_usage_bug+0xc0/0xc0 [ 578.294064] ? print_usage_bug+0xc0/0xc0 [ 578.298140] ? print_usage_bug+0xc0/0xc0 [ 578.302220] ? __lock_acquire+0x7fc/0x5020 [ 578.306466] ? __lock_acquire+0x7fc/0x5020 [ 578.310714] ? trace_hardirqs_on+0x10/0x10 [ 578.314961] ? print_usage_bug+0xc0/0xc0 [ 578.319025] ? __lock_acquire+0x7fc/0x5020 [ 578.323297] ? page_add_new_anon_rmap+0x870/0x870 [ 578.328149] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 578.333175] ? print_usage_bug+0xc0/0xc0 [ 578.337241] ? print_usage_bug+0xc0/0xc0 [ 578.341305] ? print_usage_bug+0xc0/0xc0 [ 578.345376] ? perf_trace_lock+0xde/0x920 [ 578.349528] ? print_usage_bug+0xc0/0xc0 [ 578.353597] ? zap_class+0x740/0x740 [ 578.357319] ? __lock_acquire+0x7fc/0x5020 15:13:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f00000002c0)=0xe8) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000300)={@dev={0xfe, 0x80, [], 0x13}, @loopback={0x0, 0x1}, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0xfffffffffffff800, 0x400, 0x13, 0x100, 0x8, 0x1, r3}) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x8030ae7c, 0xa07001) 15:13:41 executing program 0: r0 = socket$inet6(0xa, 0xffffffffffffffff, 0xb283) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") socket(0xa, 0x4000000, 0x40) ioctl$sock_ifreq(r0, 0x891a, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x5, 0x82202) write$FUSE_DIRENT(r1, &(0x7f0000000100)={0x100, 0xfffffffffffffffe, 0x6, [{0x2, 0x7, 0x5, 0x5, ']eth0'}, {0x2, 0x100000001, 0x8, 0x5, 'ip_vti0\x00'}, {0x1, 0x8, 0x16, 0x4, ',[posix_acl_accessem0['}, {0x2, 0x10001, 0x0, 0x22}, {0x2, 0x8, 0xa, 0x200, '\\mime_type'}, {0x4, 0x5, 0x8, 0x6, 'ip_vti0\x00'}, {0x0, 0x60, 0x8, 0x6ec7, 'ip_vti0\x00'}]}, 0x100) 15:13:41 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:13:41 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0xfe80000000000000}, 0x1c) [ 578.361559] ? lock_acquire+0x1e4/0x540 [ 578.365546] ? zap_class+0x740/0x740 [ 578.369269] ? zap_class+0x740/0x740 [ 578.372991] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 578.378535] ? page_mapping+0x44f/0x5e0 [ 578.382526] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 578.388076] ? mark_page_accessed+0x672/0xd30 [ 578.392587] ? shmem_parse_options.cold.50+0x49/0x49 [ 578.397698] ? activate_page+0x9a0/0x9a0 [ 578.401773] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 578.407349] ? __set_page_dirty_no_writeback+0x14a/0x290 15:13:41 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f691c0264192f42be07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x398, 0x0) syncfs(r0) rt_sigpending(&(0x7f0000000000), 0x8) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') 15:13:41 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4040ae79, &(0x7f0000000180)={r4}) [ 578.412810] ? do_writepages+0x1a0/0x1a0 [ 578.416894] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 578.421920] ? sanity+0x238/0x330 [ 578.425381] ? do_writepages+0x1a0/0x1a0 [ 578.429459] ? kasan_check_write+0x14/0x20 [ 578.433704] ? copy_page_to_iter+0x534/0xf50 [ 578.438139] ? rcu_note_context_switch+0x730/0x730 [ 578.443075] ? check_same_owner+0x340/0x340 [ 578.447406] ? __save_stack_trace+0x8d/0xf0 [ 578.451746] shmem_file_read_iter+0x39f/0x1090 [ 578.456354] ? shmem_fallocate+0x12e0/0x12e0 [ 578.460778] ? lock_downgrade+0x8f0/0x8f0 [ 578.464931] ? rcu_is_watching+0x8c/0x150 [ 578.469084] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 578.473499] ? __lockdep_init_map+0x105/0x590 [ 578.478004] ? lockdep_init_map+0x9/0x10 [ 578.482071] ? debug_mutex_init+0x2d/0x60 [ 578.486224] ? __mutex_init+0x1f7/0x290 [ 578.490198] ? rcu_pm_notify+0xc0/0xc0 [ 578.494095] ? __ia32_sys_membarrier+0x150/0x150 [ 578.498858] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 578.504399] ? fsnotify+0xbb4/0x14e0 [ 578.508125] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 578.513145] ? iov_iter_pipe+0xc2/0x2f0 [ 578.517132] generic_file_splice_read+0x5cd/0x9d0 [ 578.521973] ? add_to_pipe+0x360/0x360 [ 578.525866] ? rw_verify_area+0x118/0x360 [ 578.530004] ? add_to_pipe+0x360/0x360 [ 578.533889] do_splice_to+0x12e/0x190 [ 578.537685] splice_direct_to_actor+0x270/0x8f0 [ 578.542345] ? pipe_to_sendpage+0x400/0x400 [ 578.546749] ? do_splice_to+0x190/0x190 [ 578.550718] ? rw_verify_area+0x118/0x360 [ 578.554860] do_splice_direct+0x2d4/0x420 [ 578.559005] ? splice_direct_to_actor+0x8f0/0x8f0 [ 578.563846] ? rw_verify_area+0x118/0x360 [ 578.567988] do_sendfile+0x623/0xe20 [ 578.571703] ? do_compat_pwritev64+0x1c0/0x1c0 [ 578.576287] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 578.581813] ? _copy_from_user+0xdf/0x150 [ 578.585958] __x64_sys_sendfile64+0x15d/0x250 [ 578.590445] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 578.595023] ? do_syscall_64+0x9a/0x820 [ 578.599084] do_syscall_64+0x1b9/0x820 [ 578.602957] ? finish_task_switch+0x1d3/0x870 [ 578.607451] ? syscall_return_slowpath+0x5e0/0x5e0 [ 578.612372] ? syscall_return_slowpath+0x31d/0x5e0 [ 578.617299] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 578.622665] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 578.627504] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 578.632682] RIP: 0033:0x455a79 [ 578.635855] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 578.655224] RSP: 002b:00007f6aec1acc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 578.662922] RAX: ffffffffffffffda RBX: 00007f6aec1ad6d4 RCX: 0000000000455a79 [ 578.670365] RDX: 0000000020d83ff8 RSI: 0000000000000016 RDI: 0000000000000015 [ 578.677628] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 578.684885] R10: 00008000fffffffe R11: 0000000000000246 R12: 0000000000000017 [ 578.692141] R13: 00000000004c0d39 R14: 00000000004d1340 R15: 0000000000000003 15:13:41 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:13:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r3 = dup(r1) write(r3, &(0x7f00000000c0)="1b0000003a001f0fff07f4f9002304000a04f51108000100020100", 0x1b) recvmmsg(r3, &(0x7f0000004c40)=[{{&(0x7f0000004500)=@rc, 0x80, &(0x7f0000004640), 0x0, &(0x7f0000004680)=""/160, 0x52}}, {{&(0x7f0000004740)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000004ac0), 0x147, &(0x7f0000004b40)=""/206, 0xce}}], 0x2, 0x0, &(0x7f0000004dc0)={0x77359400}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000000) ioctl$KVM_SET_CPUID(r5, 0x5000aea5, &(0x7f0000000000)=ANY=[@ANYBLOB="0003000000000000"]) 15:13:41 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x18000000}, 0x1c) 15:13:41 executing program 6 (fault-call:7 fault-nth:4): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:42 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x10, r0, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) ftruncate(r0, 0xf4a3) 15:13:42 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x1, 0x0) syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x4be31970f38e0039) r1 = syz_open_dev$admmidi(&(0x7f0000000280)='/dev/admmidi#\x00', 0x5, 0x200800) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000300), &(0x7f0000000200)=0xfffffffffffffedd) ioctl$SG_IO(r0, 0x2275, &(0x7f0000000140)={0xfdfdffff, 0x0, 0x0, 0x0, @buffer={0x0, 0x16, &(0x7f0000000000)=""/22}, &(0x7f0000000040), &(0x7f0000000080)=""/17, 0x0, 0x0, 0x0, &(0x7f0000000100)}) 15:13:42 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:13:42 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0xf000}, 0x1c) 15:13:42 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'ipddp0\x00', {0x2, 0x4e22, @multicast2=0xe0000002}}) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x2000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x8030ae7c, 0x100000) 15:13:42 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x5452, &(0x7f0000000180)={r4}) 15:13:42 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:13:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2}, {0x14}}) r1 = shmget$private(0x0, 0x7000, 0x0, &(0x7f0000ff6000/0x7000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000000)=""/12) r2 = dup3(r0, r0, 0x80000) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000140)) socket$alg(0x26, 0x5, 0x0) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000180)) 15:13:42 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x742af8149ddc4082, 0x0) ioctl$TIOCNOTTY(r0, 0x5422) r1 = socket$inet6(0xa, 0x1, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000001c0)=0xfffffffffffffffa, 0x4) ioctl(r1, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r2 = socket(0x100000000004, 0x1, 0x3) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@sack_info={0x0, 0x6, 0xffff}, &(0x7f0000000180)=0xc) 15:13:42 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0xfec0}, 0x1c) 15:13:42 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:13:42 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_mr_vif\x00') ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000640)=0x7fff) r1 = socket$inet6(0xa, 0x3, 0x3c) chroot(&(0x7f0000000680)='./file0\x00') getsockopt$sock_buf(r1, 0x1, 0x0, &(0x7f0000000280)=""/66, &(0x7f0000000400)=0x42) ioctl$BLKRRPART(r0, 0x125f, 0x0) sendmmsg(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="ecc542a1e9e6f1589434f063b849513a1b9f6b9a8dd85713d49005eced74f8e9673b39c8a3b25469c067414a6ac0cd97472a5ba8936467129b3222f0380ec5b2f2b924ff2be7a7b9e49386049ec5f1a12efbdf88b0a5917dcea3e1196d8a966ccff18c613889b80a71e9324efa8fbd8008da2d0221702764acfeddfe7fb430cc28f5e9f65c2070e515e1", 0x8a}], 0x1}, 0x1ff}, {{&(0x7f0000000440)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000000540)=[{&(0x7f00000004c0)="32202e95ce5dc3d568fab804dc80a6e153b3356f6609065f6344851d168a4a635f61e8b6e7307f1253f5b19e44d046b952343daaa6a90ec0096276f887bba8a68d723c8832dacc63ac1287689c97dcc99854497df7cbe3bb02d54ed3c9824cd85eae0ddc6a0a540a09", 0x69}], 0x1, 0x0, 0x0, 0x844}}], 0x2, 0x40) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) sendto$inet6(r1, &(0x7f0000000200)='!', 0x1, 0x8000, 0x0, 0x0) ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f0000000700)=0x3) sysfs$3(0x3) openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x88) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="119a0e63c9476288b671afdbd53a5994e137381f62021d1951b627b8dda57a5d17d744648c81c5703ed8146ab1b0171f89091b1dd323ff07dbb633fb3804849f7768e586df460963245dedb4013ee555af99499e44ad420dbf65fd46fbc9ba1274429e2d5783751815828ec8cb3553110cca66460215353d19f6d8bbd8fb08ad0491634ac2fd10e2cd30bcd7fede24263a7fff16e53ea293f3551b7147c33a44ea437fb1f77f94db4e65807582990a0a5efddf12de3caea6611173f964de99645e2c02bef138b406ca0644146ae4bb91e0438f8c47beddb0ed22f56bc0851def35824ca6c7258c", 0xe7}], 0x1, &(0x7f0000003b40)}, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000740)) [ 579.254788] FAULT_INJECTION: forcing a failure. [ 579.254788] name failslab, interval 1, probability 0, space 0, times 0 [ 579.266466] CPU: 0 PID: 6473 Comm: syz-executor6 Not tainted 4.18.0-rc4+ #143 [ 579.273742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 579.283102] Call Trace: [ 579.285707] dump_stack+0x1c9/0x2b4 [ 579.289349] ? dump_stack_print_info.cold.2+0x52/0x52 [ 579.294551] ? graph_lock+0x170/0x170 [ 579.298373] should_fail.cold.4+0xa/0x1a 15:13:42 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000100)={'filter\x00', 0x0, 0x4, 0x1000, [], 0x5, &(0x7f0000000080)=[{}, {}, {}, {}, {}], &(0x7f00000002c0)=""/4096}, &(0x7f0000000000)=0x78) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x8030ae7c, 0xa07001) 15:13:42 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:13:42 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x400000000000000}, 0x1c) [ 579.302457] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 579.307565] ? find_held_lock+0x36/0x1c0 [ 579.311640] ? print_usage_bug+0xc0/0xc0 [ 579.315719] ? print_usage_bug+0xc0/0xc0 [ 579.319788] ? lock_downgrade+0x8f0/0x8f0 [ 579.323952] ? do_raw_spin_unlock+0xa7/0x2f0 [ 579.328393] ? __lock_acquire+0x7fc/0x5020 [ 579.332637] ? __lock_acquire+0x7fc/0x5020 [ 579.336882] ? print_usage_bug+0xc0/0xc0 [ 579.340954] __should_failslab+0x124/0x180 [ 579.345205] should_failslab+0x9/0x14 [ 579.349022] kmem_cache_alloc+0x47/0x760 [ 579.353104] ? __lock_acquire+0x7fc/0x5020 [ 579.357355] radix_tree_node_alloc.constprop.19+0x1e6/0x310 [ 579.363082] radix_tree_extend+0x295/0x650 [ 579.367338] ? radix_tree_node_alloc.constprop.19+0x310/0x310 [ 579.373237] ? trace_hardirqs_on+0x10/0x10 [ 579.377480] __radix_tree_create+0x656/0x840 [ 579.381902] ? radix_tree_maybe_preload_order+0x110/0x110 [ 579.387450] ? find_held_lock+0x36/0x1c0 [ 579.391532] ? graph_lock+0x170/0x170 [ 579.395348] ? kasan_check_read+0x11/0x20 [ 579.399497] ? rcu_is_watching+0x8c/0x150 [ 579.403642] ? find_held_lock+0x36/0x1c0 [ 579.407695] __radix_tree_insert+0x107/0x8f0 [ 579.412100] ? graph_lock+0x170/0x170 [ 579.415893] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 579.420952] ? __radix_tree_create+0x840/0x840 [ 579.425531] ? lock_acquire+0x1e4/0x540 [ 579.429494] ? shmem_add_to_page_cache+0x49c/0xe00 [ 579.434413] ? lock_release+0xa30/0xa30 [ 579.438379] ? kasan_check_write+0x14/0x20 [ 579.442603] ? do_raw_spin_lock+0xc1/0x200 [ 579.446828] shmem_add_to_page_cache+0x988/0xe00 [ 579.451566] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 579.457091] ? shmem_put_link+0x280/0x280 [ 579.461223] ? percpu_ref_put_many+0x131/0x240 [ 579.465804] ? percpu_ref_tryget+0x2d0/0x2d0 [ 579.470210] ? mem_cgroup_try_charge+0x548/0xa70 [ 579.474955] ? mem_cgroup_protected+0xa60/0xa60 [ 579.479617] ? percpu_counter_add_batch+0xf2/0x150 [ 579.484532] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 579.490056] ? shmem_alloc_and_acct_page+0x31a/0x820 [ 579.495154] ? shmem_alloc_hugepage+0x4e0/0x4e0 [ 579.499812] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 579.504387] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 579.509385] ? __radix_tree_preload+0x173/0x1d0 [ 579.514045] shmem_getpage_gfp+0x81b/0x41e0 [ 579.518362] ? shmem_writepage+0x1380/0x1380 [ 579.522760] ? print_usage_bug+0xc0/0xc0 [ 579.526817] ? print_usage_bug+0xc0/0xc0 [ 579.530872] ? print_usage_bug+0xc0/0xc0 [ 579.534927] ? __lock_acquire+0x7fc/0x5020 [ 579.539149] ? __lock_acquire+0x7fc/0x5020 [ 579.543371] ? trace_hardirqs_on+0x10/0x10 [ 579.547591] ? print_usage_bug+0xc0/0xc0 [ 579.551645] ? __lock_acquire+0x7fc/0x5020 [ 579.555863] ? page_add_new_anon_rmap+0x870/0x870 [ 579.560689] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 579.565689] ? print_usage_bug+0xc0/0xc0 [ 579.569735] ? print_usage_bug+0xc0/0xc0 [ 579.573778] ? print_usage_bug+0xc0/0xc0 [ 579.577825] ? print_usage_bug+0xc0/0xc0 [ 579.581870] ? __lock_acquire+0x7fc/0x5020 [ 579.586086] ? lock_acquire+0x1e4/0x540 [ 579.590044] ? alloc_set_pte+0x1027/0x1620 [ 579.594266] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 579.599788] ? page_mapping+0x44f/0x5e0 [ 579.603746] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 579.609265] ? mark_page_accessed+0x672/0xd30 [ 579.613744] ? shmem_parse_options.cold.50+0x49/0x49 [ 579.618833] ? activate_page+0x9a0/0x9a0 [ 579.622879] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 579.628400] ? __set_page_dirty_no_writeback+0x14a/0x290 [ 579.633844] ? do_writepages+0x1a0/0x1a0 [ 579.637896] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 579.642895] ? sanity+0x238/0x330 [ 579.646330] ? do_writepages+0x1a0/0x1a0 [ 579.650379] ? kasan_check_write+0x14/0x20 [ 579.654605] ? copy_page_to_iter+0x534/0xf50 [ 579.659015] ? rcu_note_context_switch+0x730/0x730 [ 579.663935] ? check_same_owner+0x340/0x340 [ 579.668245] ? __save_stack_trace+0x8d/0xf0 [ 579.672554] shmem_file_read_iter+0x39f/0x1090 [ 579.677134] ? shmem_fallocate+0x12e0/0x12e0 [ 579.681531] ? lock_downgrade+0x8f0/0x8f0 [ 579.685666] ? kasan_check_read+0x11/0x20 [ 579.689796] ? rcu_is_watching+0x8c/0x150 [ 579.693929] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 579.698338] ? __lockdep_init_map+0x105/0x590 [ 579.702821] ? lockdep_init_map+0x9/0x10 [ 579.706867] ? debug_mutex_init+0x2d/0x60 [ 579.711003] ? __mutex_init+0x1f7/0x290 [ 579.714970] ? rcu_pm_notify+0xc0/0xc0 [ 579.718844] ? __ia32_sys_membarrier+0x150/0x150 [ 579.723588] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 579.729110] ? fsnotify+0xbb4/0x14e0 [ 579.732809] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 579.737812] ? iov_iter_pipe+0xc2/0x2f0 [ 579.741775] generic_file_splice_read+0x5cd/0x9d0 [ 579.746608] ? add_to_pipe+0x360/0x360 [ 579.750493] ? rw_verify_area+0x118/0x360 [ 579.754626] ? add_to_pipe+0x360/0x360 [ 579.758500] do_splice_to+0x12e/0x190 [ 579.762288] splice_direct_to_actor+0x270/0x8f0 [ 579.766948] ? pipe_to_sendpage+0x400/0x400 [ 579.771257] ? do_splice_to+0x190/0x190 [ 579.775216] ? rw_verify_area+0x118/0x360 [ 579.779437] do_splice_direct+0x2d4/0x420 [ 579.783575] ? splice_direct_to_actor+0x8f0/0x8f0 [ 579.788414] ? rw_verify_area+0x118/0x360 [ 579.792547] do_sendfile+0x623/0xe20 [ 579.796258] ? do_compat_pwritev64+0x1c0/0x1c0 [ 579.800834] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 579.806356] ? _copy_from_user+0xdf/0x150 [ 579.810491] __x64_sys_sendfile64+0x15d/0x250 [ 579.814983] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 579.819555] ? do_syscall_64+0x9a/0x820 [ 579.823519] do_syscall_64+0x1b9/0x820 [ 579.827397] ? syscall_return_slowpath+0x5e0/0x5e0 [ 579.832311] ? syscall_return_slowpath+0x31d/0x5e0 [ 579.837231] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 579.842585] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 579.847417] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 579.852588] RIP: 0033:0x455a79 [ 579.855756] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 579.874997] RSP: 002b:00007f6aec1acc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 579.882701] RAX: ffffffffffffffda RBX: 00007f6aec1ad6d4 RCX: 0000000000455a79 [ 579.889958] RDX: 0000000020d83ff8 RSI: 0000000000000016 RDI: 0000000000000015 [ 579.897228] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 579.904490] R10: 00008000fffffffe R11: 0000000000000246 R12: 0000000000000017 [ 579.911744] R13: 00000000004c0d39 R14: 00000000004d1340 R15: 0000000000000004 15:13:43 executing program 6 (fault-call:7 fault-nth:5): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:43 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x4000000089f0, &(0x7f0000000000)={'vcan0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 15:13:43 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x10}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$sock_timeval(r2, 0x1, 0x19, &(0x7f0000000100)={0x0, 0x7530}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) close(r0) close(r1) 15:13:43 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x2, &(0x7f0000000180)={r4}) 15:13:43 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:13:43 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x2000000000000000}, 0x1c) 15:13:43 executing program 1: r0 = socket$inet6(0xa, 0x2, 0xffff) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") unshare(0x2000400) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') fchmod(r1, 0x0) read(r0, &(0x7f00000002c0)=""/4096, 0x1000) 15:13:43 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x8030ae7c, 0xa07001) prctl$getreaper(0x19, &(0x7f0000000000)) [ 580.098629] FAULT_INJECTION: forcing a failure. [ 580.098629] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 580.110531] CPU: 0 PID: 6524 Comm: syz-executor6 Not tainted 4.18.0-rc4+ #143 [ 580.117811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 580.127167] Call Trace: [ 580.129768] dump_stack+0x1c9/0x2b4 [ 580.133407] ? dump_stack_print_info.cold.2+0x52/0x52 [ 580.138601] ? __radix_tree_lookup+0x3dd/0x6e0 [ 580.143205] should_fail.cold.4+0xa/0x1a 15:13:43 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) [ 580.147283] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 580.152396] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 580.157426] ? find_held_lock+0x36/0x1c0 [ 580.161500] ? find_held_lock+0x36/0x1c0 [ 580.165594] ? check_same_owner+0x340/0x340 [ 580.169933] ? rcu_note_context_switch+0x730/0x730 [ 580.174886] __alloc_pages_nodemask+0x36e/0xdb0 [ 580.179575] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 580.184604] ? trace_hardirqs_on+0x10/0x10 [ 580.188863] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 580.193892] ? percpu_counter_add_batch+0xf2/0x150 [ 580.198843] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 580.203874] ? __vm_enough_memory+0x590/0x980 [ 580.208380] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 580.213927] alloc_pages_vma+0xdd/0x540 [ 580.217898] shmem_alloc_page+0xa8/0x190 [ 580.221973] ? shmem_swapin+0x230/0x230 [ 580.225959] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 580.230964] ? percpu_counter_add_batch+0xf2/0x150 [ 580.235885] shmem_alloc_and_acct_page+0x1f1/0x820 [ 580.240805] ? shmem_alloc_hugepage+0x4e0/0x4e0 [ 580.245456] ? do_raw_spin_unlock+0xa7/0x2f0 [ 580.249848] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 580.254423] ? _raw_spin_unlock_irq+0x27/0x70 [ 580.258913] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 580.263924] shmem_getpage_gfp+0x6ea/0x41e0 [ 580.268243] ? shmem_writepage+0x1380/0x1380 [ 580.272655] ? print_usage_bug+0xc0/0xc0 [ 580.276704] ? print_usage_bug+0xc0/0xc0 [ 580.280754] ? print_usage_bug+0xc0/0xc0 [ 580.284817] ? __lock_acquire+0x7fc/0x5020 [ 580.289041] ? __lock_acquire+0x7fc/0x5020 [ 580.293272] ? trace_hardirqs_on+0x10/0x10 [ 580.297496] ? print_usage_bug+0xc0/0xc0 [ 580.301543] ? __lock_acquire+0x7fc/0x5020 [ 580.305764] ? page_add_new_anon_rmap+0x870/0x870 [ 580.310592] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 580.315605] ? print_usage_bug+0xc0/0xc0 [ 580.319659] ? print_usage_bug+0xc0/0xc0 [ 580.323705] ? print_usage_bug+0xc0/0xc0 [ 580.327754] ? print_usage_bug+0xc0/0xc0 [ 580.331801] ? __lock_acquire+0x7fc/0x5020 [ 580.336028] ? lock_acquire+0x1e4/0x540 [ 580.339988] ? alloc_set_pte+0x1027/0x1620 [ 580.344232] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 580.349752] ? page_mapping+0x44f/0x5e0 [ 580.353708] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 580.359805] ? mark_page_accessed+0x672/0xd30 [ 580.364286] ? shmem_parse_options.cold.50+0x49/0x49 [ 580.369373] ? activate_page+0x9a0/0x9a0 [ 580.373424] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 580.378947] ? __set_page_dirty_no_writeback+0x14a/0x290 [ 580.384382] ? do_writepages+0x1a0/0x1a0 [ 580.388450] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 580.393461] ? sanity+0x238/0x330 [ 580.396913] ? do_writepages+0x1a0/0x1a0 [ 580.400962] ? kasan_check_write+0x14/0x20 [ 580.405179] ? copy_page_to_iter+0x534/0xf50 [ 580.409585] ? rcu_note_context_switch+0x730/0x730 [ 580.414497] ? check_same_owner+0x340/0x340 [ 580.418806] ? __save_stack_trace+0x8d/0xf0 [ 580.423116] shmem_file_read_iter+0x39f/0x1090 [ 580.427693] ? shmem_fallocate+0x12e0/0x12e0 [ 580.432090] ? lock_downgrade+0x8f0/0x8f0 [ 580.436224] ? kasan_check_read+0x11/0x20 [ 580.440364] ? rcu_is_watching+0x8c/0x150 [ 580.444494] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 580.448891] ? __lockdep_init_map+0x105/0x590 [ 580.453373] ? lockdep_init_map+0x9/0x10 [ 580.457424] ? debug_mutex_init+0x2d/0x60 [ 580.461554] ? __mutex_init+0x1f7/0x290 [ 580.465509] ? rcu_pm_notify+0xc0/0xc0 [ 580.469380] ? __ia32_sys_membarrier+0x150/0x150 [ 580.474120] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 580.479641] ? fsnotify+0xbb4/0x14e0 [ 580.483349] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 580.488348] ? iov_iter_pipe+0xc2/0x2f0 [ 580.492310] generic_file_splice_read+0x5cd/0x9d0 [ 580.497148] ? add_to_pipe+0x360/0x360 [ 580.501045] ? rw_verify_area+0x118/0x360 [ 580.505188] ? add_to_pipe+0x360/0x360 [ 580.509068] do_splice_to+0x12e/0x190 [ 580.512860] splice_direct_to_actor+0x270/0x8f0 [ 580.517518] ? pipe_to_sendpage+0x400/0x400 [ 580.521827] ? do_splice_to+0x190/0x190 [ 580.525786] ? rw_verify_area+0x118/0x360 [ 580.529919] do_splice_direct+0x2d4/0x420 [ 580.534052] ? splice_direct_to_actor+0x8f0/0x8f0 [ 580.538885] ? rw_verify_area+0x118/0x360 [ 580.543023] do_sendfile+0x623/0xe20 [ 580.546732] ? do_compat_pwritev64+0x1c0/0x1c0 [ 580.551304] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 580.556828] ? _copy_from_user+0xdf/0x150 [ 580.560963] __x64_sys_sendfile64+0x15d/0x250 [ 580.565444] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 580.570027] ? do_syscall_64+0x9a/0x820 [ 580.573987] do_syscall_64+0x1b9/0x820 [ 580.577861] ? finish_task_switch+0x1d3/0x870 [ 580.582352] ? syscall_return_slowpath+0x5e0/0x5e0 [ 580.587267] ? syscall_return_slowpath+0x31d/0x5e0 [ 580.592188] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 580.597537] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 580.602367] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 580.607538] RIP: 0033:0x455a79 [ 580.610708] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 580.629934] RSP: 002b:00007f6aec1acc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 580.637633] RAX: ffffffffffffffda RBX: 00007f6aec1ad6d4 RCX: 0000000000455a79 15:13:43 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) r1 = getpid() ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)=r1) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) [ 580.644888] RDX: 0000000020d83ff8 RSI: 0000000000000016 RDI: 0000000000000015 [ 580.652142] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 580.659401] R10: 00008000fffffffe R11: 0000000000000246 R12: 0000000000000017 [ 580.666652] R13: 00000000004c0d39 R14: 00000000004d1340 R15: 0000000000000005 15:13:43 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x6c04000000000000}, 0x1c) 15:13:43 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:13:43 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x1, 0x30}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000001c0)={r1, 0x2}, &(0x7f0000000200)=0x8) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x125001, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl(r0, 0xcbca, &(0x7f0000000300)="31d86eec98b6724e2aab713a9a496728376d2750c8e6787cbe4ebe52762690fd5746c5ee7952213f562f4dfa64317d2ea1b0a3b21b4837adc295be5489684c37fbca58f9bc8dcff1f0214f81607d16bd6e117ad13c2ef19c7c4155678035bcb5a8a25af322138b9e18f3c78fbf4586170a29ed1c9ce0eee318a9a141862d8cdcce4d519c0f78803055aa2e749ed1c5d9bb2d831690ea84e2aa161322a03347d188c295d93deaf40f310de3bfc8eaba9e6406a8397a700db38e6c58142c8a1ea2f8487c5d1ff8bf834aa24e3688e11c95c2ff38389b8be3702ebf16a390b11bde03e1c74fef") r3 = socket$inet6(0xa, 0x1, 0x100000003) msgget(0x3, 0x540) msgget(0x2, 0x100) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0xfffffffffffffffd, &(0x7f0000000280)=0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r4 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r4, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) ustat(0x1, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_netfilter(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xa0000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x18, 0x12, 0x4, 0x21b, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x9}, [@nested={0x4, 0x7b}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 15:13:43 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x80fe}, 0x1c) 15:13:43 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x5451, &(0x7f0000000180)={r4}) 15:13:44 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000001240)="88", 0x1}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x6, 0x2, 0x1, r0}) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) sendfile(r1, r2, &(0x7f00000000c0), 0x100000080000000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x6, 0x800}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000001c0)={r3, 0x20}, 0x8) ioctl$VT_RELDISP(r1, 0x5605) 15:13:44 executing program 6 (fault-call:7 fault-nth:6): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:44 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:13:44 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = epoll_create(0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x100000001}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r2, 0x1800000, 0x40}, &(0x7f0000000100)=0xc) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20000001}) 15:13:44 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x100000000000000}, 0x1c) 15:13:44 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x8c200, 0x0) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000080)=0x8, &(0x7f00000000c0)=0x2) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000100)=0x2, 0x4) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0x8030ae7c, 0xa07001) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 15:13:44 executing program 0: r0 = open(&(0x7f0000000000)='./file0\x00', 0x448000, 0x20) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r2 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x1, 0xffff, 0xffffffffffff0001, 0x3f}, 0xc) 15:13:44 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:13:44 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4010ae67, &(0x7f0000000180)={r4}) 15:13:44 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x4000000}, 0x1c) 15:13:44 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x1d5) ioctl(r0, 0x9, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r1, 0x40045108, &(0x7f0000000140)) 15:13:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) fgetxattr(r0, &(0x7f0000000000)=@random={'security.', '\x00'}, &(0x7f0000000040)=""/5, 0x5) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x1, 0x2) r2 = getuid() ioctl$TUNSETOWNER(r1, 0x400454cc, r2) 15:13:44 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:13:44 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x4, 0x0, 0x0, 0x400000000000000, 0x0, @perf_bp, 0x0, 0x0, 0x1000000000000000, 0xfffffffffffffffe, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init() inotify_rm_watch(r0, 0x0) 15:13:44 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x87ffffff}, 0x1c) 15:13:44 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)="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", 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000140)='cpuset.\x00', 0x2, 0x0) sendfile(r2, r2, &(0x7f0000000000)=0x1, 0x5) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000040)={0x0, {{0xa, 0x4e23, 0x6, @empty, 0xfffffffffffeffff}}}, 0x88) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000100)={'\x00', {0x2, 0x4e24, @multicast2=0xe0000002}}) 15:13:44 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) [ 581.335629] FAULT_INJECTION: forcing a failure. [ 581.335629] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 581.347561] CPU: 1 PID: 6580 Comm: syz-executor6 Not tainted 4.18.0-rc4+ #143 [ 581.354840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 581.364200] Call Trace: [ 581.366800] dump_stack+0x1c9/0x2b4 [ 581.370445] ? dump_stack_print_info.cold.2+0x52/0x52 [ 581.375648] ? __radix_tree_lookup+0x3dd/0x6e0 [ 581.380251] should_fail.cold.4+0xa/0x1a [ 581.384328] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 581.389489] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 581.394541] ? find_held_lock+0x36/0x1c0 [ 581.398621] ? find_held_lock+0x36/0x1c0 [ 581.402712] ? check_same_owner+0x340/0x340 [ 581.407046] ? rcu_note_context_switch+0x730/0x730 [ 581.411984] __alloc_pages_nodemask+0x36e/0xdb0 [ 581.416652] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 581.421663] ? trace_hardirqs_on+0x10/0x10 [ 581.425897] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 581.430903] ? percpu_counter_add_batch+0xf2/0x150 [ 581.435821] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 581.440822] ? __vm_enough_memory+0x590/0x980 [ 581.445309] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 581.450833] alloc_pages_vma+0xdd/0x540 [ 581.454813] shmem_alloc_page+0xa8/0x190 [ 581.458858] ? shmem_swapin+0x230/0x230 [ 581.462831] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 581.467833] ? percpu_counter_add_batch+0xf2/0x150 [ 581.472750] shmem_alloc_and_acct_page+0x1f1/0x820 [ 581.477669] ? shmem_alloc_hugepage+0x4e0/0x4e0 [ 581.482331] ? do_raw_spin_unlock+0xa7/0x2f0 [ 581.486721] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 581.491293] ? _raw_spin_unlock_irq+0x27/0x70 [ 581.495778] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 581.500783] shmem_getpage_gfp+0x6ea/0x41e0 [ 581.505102] ? shmem_writepage+0x1380/0x1380 [ 581.509503] ? print_usage_bug+0xc0/0xc0 [ 581.513552] ? print_usage_bug+0xc0/0xc0 [ 581.517599] ? print_usage_bug+0xc0/0xc0 [ 581.521655] ? __lock_acquire+0x7fc/0x5020 [ 581.525878] ? __lock_acquire+0x7fc/0x5020 [ 581.530104] ? trace_hardirqs_on+0x10/0x10 [ 581.534329] ? print_usage_bug+0xc0/0xc0 [ 581.538372] ? __lock_acquire+0x7fc/0x5020 [ 581.542598] ? page_add_new_anon_rmap+0x870/0x870 [ 581.547433] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 581.552432] ? print_usage_bug+0xc0/0xc0 [ 581.556478] ? print_usage_bug+0xc0/0xc0 [ 581.560522] ? print_usage_bug+0xc0/0xc0 [ 581.564576] ? print_usage_bug+0xc0/0xc0 [ 581.568622] ? __lock_acquire+0x7fc/0x5020 [ 581.572841] ? lock_acquire+0x1e4/0x540 [ 581.576813] ? alloc_set_pte+0x1027/0x1620 [ 581.581041] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 581.586571] ? page_mapping+0x44f/0x5e0 [ 581.590529] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 581.596068] ? mark_page_accessed+0x672/0xd30 [ 581.600547] ? shmem_parse_options.cold.50+0x49/0x49 [ 581.605636] ? activate_page+0x9a0/0x9a0 [ 581.609692] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 581.615224] ? __set_page_dirty_no_writeback+0x14a/0x290 [ 581.620667] ? do_writepages+0x1a0/0x1a0 [ 581.624719] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 581.629720] ? sanity+0x238/0x330 [ 581.633158] ? do_writepages+0x1a0/0x1a0 [ 581.637205] ? kasan_check_write+0x14/0x20 [ 581.641425] ? copy_page_to_iter+0x534/0xf50 [ 581.645832] ? rcu_note_context_switch+0x730/0x730 [ 581.650745] ? check_same_owner+0x340/0x340 [ 581.655050] ? __save_stack_trace+0x8d/0xf0 [ 581.659360] shmem_file_read_iter+0x39f/0x1090 [ 581.663936] ? shmem_fallocate+0x12e0/0x12e0 [ 581.668341] ? lock_downgrade+0x8f0/0x8f0 [ 581.672476] ? kasan_check_read+0x11/0x20 [ 581.676605] ? rcu_is_watching+0x8c/0x150 [ 581.680735] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 581.685128] ? __lockdep_init_map+0x105/0x590 [ 581.689610] ? lockdep_init_map+0x9/0x10 [ 581.693656] ? debug_mutex_init+0x2d/0x60 [ 581.697787] ? __mutex_init+0x1f7/0x290 [ 581.701744] ? rcu_pm_notify+0xc0/0xc0 [ 581.705620] ? __ia32_sys_membarrier+0x150/0x150 [ 581.710363] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 581.715882] ? fsnotify+0xbb4/0x14e0 [ 581.719584] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 581.724585] ? iov_iter_pipe+0xc2/0x2f0 [ 581.728555] generic_file_splice_read+0x5cd/0x9d0 [ 581.733384] ? add_to_pipe+0x360/0x360 [ 581.737263] ? rw_verify_area+0x118/0x360 [ 581.741398] ? add_to_pipe+0x360/0x360 [ 581.745275] do_splice_to+0x12e/0x190 [ 581.749063] splice_direct_to_actor+0x270/0x8f0 [ 581.753717] ? pipe_to_sendpage+0x400/0x400 [ 581.758030] ? do_splice_to+0x190/0x190 [ 581.761989] ? rw_verify_area+0x118/0x360 [ 581.766128] do_splice_direct+0x2d4/0x420 [ 581.770268] ? splice_direct_to_actor+0x8f0/0x8f0 [ 581.775100] ? rw_verify_area+0x118/0x360 [ 581.779234] do_sendfile+0x623/0xe20 [ 581.782938] ? do_compat_pwritev64+0x1c0/0x1c0 [ 581.787511] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 581.793034] ? _copy_from_user+0xdf/0x150 [ 581.797170] __x64_sys_sendfile64+0x15d/0x250 [ 581.801654] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 581.806226] ? do_syscall_64+0x9a/0x820 [ 581.810189] do_syscall_64+0x1b9/0x820 [ 581.814060] ? finish_task_switch+0x1d3/0x870 [ 581.818540] ? syscall_return_slowpath+0x5e0/0x5e0 [ 581.823453] ? syscall_return_slowpath+0x31d/0x5e0 [ 581.828370] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 581.833720] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 581.838551] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 581.843722] RIP: 0033:0x455a79 [ 581.846890] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 581.866123] RSP: 002b:00007f6aec1acc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 581.873817] RAX: ffffffffffffffda RBX: 00007f6aec1ad6d4 RCX: 0000000000455a79 [ 581.881078] RDX: 0000000020d83ff8 RSI: 0000000000000016 RDI: 0000000000000015 [ 581.888341] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 581.895593] R10: 00008000fffffffe R11: 0000000000000246 R12: 0000000000000017 [ 581.902845] R13: 00000000004c0d39 R14: 00000000004d1340 R15: 0000000000000006 15:13:45 executing program 6 (fault-call:7 fault-nth:7): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x8030ae7c, 0x4) 15:13:45 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x8040, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f0000000100)={0x7b, 0x0, [0xfffffffffffffffd, 0x100000000, 0x6, 0x5]}) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 15:13:45 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:13:45 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000280)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x4880, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000002c0)={0x8, 0x0, [{0x100000001, 0x1, 0x0, 0x0, @sint={0x8, 0xb}}, {0x7, 0x1, 0x0, 0x0, @irqchip={0x0, 0xffffffffffffffff}}, {0x2, 0x4, 0x0, 0x0, @sint={0x6, 0x70}}, {0x4, 0x1, 0x0, 0x0, @irqchip={0x0, 0x800}}, {0x9, 0x1, 0x0, 0x0, @irqchip={0x95d, 0x1}}, {0x10001, 0x4, 0x0, 0x0, @msi={0x6, 0x43f599da, 0x8001}}, {0x48, 0x2, 0x0, 0x0, @irqchip={0x6, 0x2}}, {0x9, 0x3, 0x0, 0x0, @sint={0xfffffffffffffffe, 0x400}}]}) 15:13:45 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") unshare(0x10040007ff) r1 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x6, 0x4000) r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x152, 0x10000) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000100)={0x0, r3}) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x40081271, &(0x7f0000000080)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x840, 0x0) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000180)={0xc966, 0x0, 0x1}) 15:13:45 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x40030000000000}, 0x1c) 15:13:45 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4008ae61, &(0x7f0000000180)={r4}) 15:13:45 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x0, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:13:45 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x14) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000001c0)=""/240, &(0x7f0000000080)=0xf0) [ 582.079600] QAT: Invalid ioctl [ 582.107008] FAULT_INJECTION: forcing a failure. [ 582.107008] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 582.119020] CPU: 1 PID: 6652 Comm: syz-executor6 Not tainted 4.18.0-rc4+ #143 [ 582.126307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 582.133122] QAT: Invalid ioctl [ 582.135669] Call Trace: [ 582.135694] dump_stack+0x1c9/0x2b4 [ 582.135714] ? dump_stack_print_info.cold.2+0x52/0x52 [ 582.150277] ? __radix_tree_lookup+0x3dd/0x6e0 [ 582.154889] should_fail.cold.4+0xa/0x1a [ 582.158954] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 582.164058] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 582.169075] ? find_held_lock+0x36/0x1c0 [ 582.173129] ? find_held_lock+0x36/0x1c0 [ 582.177201] ? check_same_owner+0x340/0x340 [ 582.181518] ? rcu_note_context_switch+0x730/0x730 [ 582.186447] __alloc_pages_nodemask+0x36e/0xdb0 [ 582.191111] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 582.196118] ? trace_hardirqs_on+0x10/0x10 [ 582.200353] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 582.205364] ? percpu_counter_add_batch+0xf2/0x150 [ 582.210284] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 582.215286] ? __vm_enough_memory+0x590/0x980 [ 582.219949] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 582.225475] alloc_pages_vma+0xdd/0x540 [ 582.229448] shmem_alloc_page+0xa8/0x190 [ 582.233498] ? shmem_swapin+0x230/0x230 [ 582.237482] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 582.242486] ? percpu_counter_add_batch+0xf2/0x150 [ 582.247411] shmem_alloc_and_acct_page+0x1f1/0x820 [ 582.252334] ? shmem_alloc_hugepage+0x4e0/0x4e0 [ 582.256989] ? do_raw_spin_unlock+0xa7/0x2f0 [ 582.261388] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 582.265961] ? _raw_spin_unlock_irq+0x27/0x70 [ 582.270447] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 582.275454] shmem_getpage_gfp+0x6ea/0x41e0 [ 582.279781] ? shmem_writepage+0x1380/0x1380 [ 582.284184] ? __lock_is_held+0xb5/0x140 [ 582.288236] ? __account_cfs_rq_runtime+0x770/0x770 [ 582.293252] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 582.298779] ? __perf_event_task_sched_out+0x2f0/0x1a60 [ 582.304133] ? active_load_balance_cpu_stop+0x1030/0x1030 [ 582.309664] ? perf_event_update_userpage+0xd30/0xd30 [ 582.314842] ? graph_lock+0x170/0x170 [ 582.318634] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 582.324157] ? __perf_event_task_sched_in+0x24f/0xbb0 [ 582.329344] ? find_held_lock+0x36/0x1c0 [ 582.333405] ? lock_downgrade+0x8f0/0x8f0 [ 582.337540] ? finish_task_switch+0x18a/0x870 [ 582.342037] ? kasan_check_read+0x11/0x20 [ 582.346173] ? do_raw_spin_unlock+0xa7/0x2f0 [ 582.350569] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 582.355164] ? compat_start_thread+0x80/0x80 [ 582.359573] ? _raw_spin_unlock_irq+0x27/0x70 [ 582.364120] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 582.369127] ? trace_hardirqs_on+0xd/0x10 [ 582.373266] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 582.378792] ? page_mapping+0x44f/0x5e0 [ 582.382753] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 582.388295] ? mark_page_accessed+0x672/0xd30 [ 582.392779] ? shmem_parse_options.cold.50+0x49/0x49 [ 582.397886] ? activate_page+0x9a0/0x9a0 [ 582.401936] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 582.407462] ? __set_page_dirty_no_writeback+0x14a/0x290 [ 582.412901] ? do_writepages+0x1a0/0x1a0 [ 582.416955] ? __schedule+0x884/0x1ed0 [ 582.420833] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 582.425838] ? sanity+0x238/0x330 [ 582.429279] ? do_writepages+0x1a0/0x1a0 [ 582.433336] ? kasan_check_write+0x14/0x20 [ 582.437559] ? copy_page_to_iter+0x534/0xf50 [ 582.441984] ? rcu_note_context_switch+0x730/0x730 [ 582.446905] ? check_same_owner+0x340/0x340 [ 582.451228] shmem_file_read_iter+0x39f/0x1090 [ 582.455815] ? shmem_fallocate+0x12e0/0x12e0 [ 582.460217] ? lock_downgrade+0x8f0/0x8f0 [ 582.464359] ? kasan_check_read+0x11/0x20 [ 582.468491] ? rcu_is_watching+0x8c/0x150 [ 582.472625] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 582.477030] ? __lockdep_init_map+0x105/0x590 [ 582.481517] ? lockdep_init_map+0x9/0x10 [ 582.485564] ? debug_mutex_init+0x2d/0x60 [ 582.489713] ? __mutex_init+0x1f7/0x290 [ 582.493676] ? rcu_pm_notify+0xc0/0xc0 [ 582.497554] ? __ia32_sys_membarrier+0x150/0x150 [ 582.502300] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 582.507824] ? fsnotify+0xbb4/0x14e0 [ 582.511542] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 582.516641] ? iov_iter_pipe+0xc2/0x2f0 [ 582.520609] generic_file_splice_read+0x5cd/0x9d0 [ 582.525446] ? add_to_pipe+0x360/0x360 [ 582.529335] ? rw_verify_area+0x118/0x360 [ 582.533473] ? add_to_pipe+0x360/0x360 [ 582.537349] do_splice_to+0x12e/0x190 [ 582.541142] splice_direct_to_actor+0x270/0x8f0 [ 582.545803] ? pipe_to_sendpage+0x400/0x400 [ 582.550128] ? do_splice_to+0x190/0x190 [ 582.554095] ? rw_verify_area+0x118/0x360 [ 582.558234] do_splice_direct+0x2d4/0x420 [ 582.562385] ? splice_direct_to_actor+0x8f0/0x8f0 [ 582.567235] ? rw_verify_area+0x118/0x360 [ 582.571375] do_sendfile+0x623/0xe20 [ 582.575095] ? do_compat_pwritev64+0x1c0/0x1c0 [ 582.579685] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 582.585213] ? _copy_from_user+0xdf/0x150 [ 582.589358] __x64_sys_sendfile64+0x15d/0x250 [ 582.593843] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 582.598416] ? do_syscall_64+0x9a/0x820 [ 582.602385] do_syscall_64+0x1b9/0x820 [ 582.606262] ? finish_task_switch+0x1d3/0x870 [ 582.610747] ? syscall_return_slowpath+0x5e0/0x5e0 [ 582.615666] ? syscall_return_slowpath+0x31d/0x5e0 [ 582.620589] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 582.625948] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 582.630783] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 582.635960] RIP: 0033:0x455a79 [ 582.639131] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 15:13:45 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000913000)={{&(0x7f00004b3000/0x5000)=nil, 0x5000}, 0x1}) clone(0x0, &(0x7f00000001c0), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000001000)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync_file_range(r0, 0x0, 0x5, 0x2) read(r0, &(0x7f0000910000)=""/100, 0x64) 15:13:45 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0xfe800000}, 0x1c) [ 582.658476] RSP: 002b:00007f6aec1acc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 582.666174] RAX: ffffffffffffffda RBX: 00007f6aec1ad6d4 RCX: 0000000000455a79 [ 582.673430] RDX: 0000000020d83ff8 RSI: 0000000000000016 RDI: 0000000000000015 [ 582.680685] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 582.687941] R10: 00008000fffffffe R11: 0000000000000246 R12: 0000000000000017 [ 582.695204] R13: 00000000004c0d39 R14: 00000000004d1340 R15: 0000000000000007 15:13:45 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x40) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000240)) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000001081f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x5, 0x100) ioctl$TIOCSTI(r2, 0x5412, 0x0) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000080)=""/72) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/2, 0x100000, 0x800, 0x9}, 0x18) ioctl$KDSETLED(r2, 0x4b32, 0x8000) 15:13:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000080)={0x2f, @dev={0xac, 0x14, 0x14, 0x1d}, 0x4e24, 0x0, 'fo\x00', 0x3, 0x65, 0x29}, 0x2c) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0x8030ae7c, 0xa07001) 15:13:45 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 15:13:46 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x1000000}, 0x1c) [ 582.809507] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 582.824137] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 15:13:46 executing program 6 (fault-call:7 fault-nth:8): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x2000025dfdbfb}, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0xc000000}, 0xa) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0xb, 0x4) 15:13:46 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) exit(0x8) 15:13:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x4000, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6}]}, 0x10) sendmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="240000005e0007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) bind$alg(r1, &(0x7f0000000480)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r5, 0x8030ae7c, 0xa07001) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000080)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)=""/151, 0x97}, {&(0x7f00000002c0)=""/211, 0xd3}], 0x2, &(0x7f00000001c0)=""/75, 0x4b, 0x82c}, 0x1) getpeername$netlink(r6, &(0x7f00000003c0), &(0x7f0000000400)=0xc) 15:13:46 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x20000000}, 0x1c) 15:13:46 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4008ae6a, &(0x7f0000000180)={r4}) 15:13:46 executing program 1: r0 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x6, 0x0) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000000)={r0, 0x6c7, 0x9, r0}) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0, 0x100000000}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={r1, 0x9}, &(0x7f0000000240)=0x8) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f00000000c0)=0x9, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000140)=0x6) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'dh\x00', 0x0, 0x0, 0x40000000}, 0x2c) 15:13:46 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x0, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:13:46 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0xc0fe}, 0x1c) [ 583.154707] FAULT_INJECTION: forcing a failure. [ 583.154707] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 583.166599] CPU: 0 PID: 6707 Comm: syz-executor6 Not tainted 4.18.0-rc4+ #143 [ 583.173877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 583.183235] Call Trace: [ 583.185834] dump_stack+0x1c9/0x2b4 [ 583.189481] ? dump_stack_print_info.cold.2+0x52/0x52 [ 583.194682] ? __radix_tree_lookup+0x3dd/0x6e0 [ 583.199285] should_fail.cold.4+0xa/0x1a [ 583.203355] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 583.208469] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 583.213497] ? find_held_lock+0x36/0x1c0 [ 583.217571] ? find_held_lock+0x36/0x1c0 [ 583.221649] ? check_same_owner+0x340/0x340 [ 583.225982] ? rcu_note_context_switch+0x730/0x730 [ 583.230908] __alloc_pages_nodemask+0x36e/0xdb0 [ 583.235574] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 583.240578] ? trace_hardirqs_on+0x10/0x10 [ 583.244813] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 583.249819] ? percpu_counter_add_batch+0xf2/0x150 [ 583.254743] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 583.259749] ? __vm_enough_memory+0x590/0x980 [ 583.264233] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 583.269758] alloc_pages_vma+0xdd/0x540 [ 583.273721] shmem_alloc_page+0xa8/0x190 [ 583.277766] ? shmem_swapin+0x230/0x230 [ 583.281737] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 583.286739] ? percpu_counter_add_batch+0xf2/0x150 [ 583.291662] shmem_alloc_and_acct_page+0x1f1/0x820 [ 583.296580] ? shmem_alloc_hugepage+0x4e0/0x4e0 [ 583.301237] ? do_raw_spin_unlock+0xa7/0x2f0 [ 583.305637] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 583.310207] ? _raw_spin_unlock_irq+0x27/0x70 [ 583.314693] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 583.319708] shmem_getpage_gfp+0x6ea/0x41e0 [ 583.324036] ? shmem_writepage+0x1380/0x1380 [ 583.328436] ? print_usage_bug+0xc0/0xc0 [ 583.332480] ? print_usage_bug+0xc0/0xc0 [ 583.336529] ? print_usage_bug+0xc0/0xc0 [ 583.340582] ? __lock_acquire+0x7fc/0x5020 [ 583.344806] ? __lock_acquire+0x7fc/0x5020 [ 583.349035] ? trace_hardirqs_on+0x10/0x10 [ 583.353262] ? print_usage_bug+0xc0/0xc0 [ 583.357310] ? __lock_acquire+0x7fc/0x5020 [ 583.361531] ? page_add_new_anon_rmap+0x870/0x870 [ 583.366361] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 583.371365] ? print_usage_bug+0xc0/0xc0 [ 583.375415] ? print_usage_bug+0xc0/0xc0 [ 583.379465] ? print_usage_bug+0xc0/0xc0 [ 583.383517] ? print_usage_bug+0xc0/0xc0 [ 583.387576] ? __lock_acquire+0x7fc/0x5020 [ 583.391794] ? lock_acquire+0x1e4/0x540 [ 583.396199] ? alloc_set_pte+0x1027/0x1620 [ 583.400433] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 583.405965] ? page_mapping+0x44f/0x5e0 [ 583.409923] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 583.415444] ? mark_page_accessed+0x672/0xd30 [ 583.419923] ? shmem_parse_options.cold.50+0x49/0x49 [ 583.425030] ? activate_page+0x9a0/0x9a0 [ 583.429076] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 583.434598] ? __set_page_dirty_no_writeback+0x14a/0x290 [ 583.440039] ? do_writepages+0x1a0/0x1a0 [ 583.444091] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 583.449089] ? sanity+0x238/0x330 [ 583.452527] ? do_writepages+0x1a0/0x1a0 [ 583.456578] ? kasan_check_write+0x14/0x20 [ 583.460795] ? copy_page_to_iter+0x534/0xf50 [ 583.465198] ? rcu_note_context_switch+0x730/0x730 [ 583.470112] ? check_same_owner+0x340/0x340 [ 583.474420] ? __save_stack_trace+0x8d/0xf0 [ 583.478740] shmem_file_read_iter+0x39f/0x1090 [ 583.483318] ? shmem_fallocate+0x12e0/0x12e0 [ 583.487713] ? lock_downgrade+0x8f0/0x8f0 [ 583.491848] ? kasan_check_read+0x11/0x20 [ 583.495979] ? rcu_is_watching+0x8c/0x150 [ 583.500108] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 583.504502] ? __lockdep_init_map+0x105/0x590 [ 583.508982] ? lockdep_init_map+0x9/0x10 [ 583.513032] ? debug_mutex_init+0x2d/0x60 [ 583.517688] ? __mutex_init+0x1f7/0x290 [ 583.521647] ? rcu_pm_notify+0xc0/0xc0 [ 583.525527] ? __ia32_sys_membarrier+0x150/0x150 [ 583.530275] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 583.535796] ? fsnotify+0xbb4/0x14e0 [ 583.539497] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 583.544498] ? iov_iter_pipe+0xc2/0x2f0 [ 583.548459] generic_file_splice_read+0x5cd/0x9d0 [ 583.553290] ? add_to_pipe+0x360/0x360 [ 583.557171] ? rw_verify_area+0x118/0x360 [ 583.561303] ? add_to_pipe+0x360/0x360 [ 583.565174] do_splice_to+0x12e/0x190 [ 583.568967] splice_direct_to_actor+0x270/0x8f0 [ 583.573646] ? pipe_to_sendpage+0x400/0x400 [ 583.577955] ? do_splice_to+0x190/0x190 [ 583.581915] ? rw_verify_area+0x118/0x360 [ 583.586049] do_splice_direct+0x2d4/0x420 [ 583.590184] ? splice_direct_to_actor+0x8f0/0x8f0 [ 583.595019] ? rw_verify_area+0x118/0x360 [ 583.599154] do_sendfile+0x623/0xe20 [ 583.602856] ? do_compat_pwritev64+0x1c0/0x1c0 [ 583.607433] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 583.612955] ? _copy_from_user+0xdf/0x150 [ 583.617093] __x64_sys_sendfile64+0x15d/0x250 [ 583.621595] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 583.626169] ? do_syscall_64+0x9a/0x820 [ 583.630133] do_syscall_64+0x1b9/0x820 [ 583.634001] ? finish_task_switch+0x1d3/0x870 [ 583.638488] ? syscall_return_slowpath+0x5e0/0x5e0 [ 583.643401] ? syscall_return_slowpath+0x31d/0x5e0 [ 583.648327] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 583.653677] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 583.658508] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 583.663678] RIP: 0033:0x455a79 [ 583.666854] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 583.686091] RSP: 002b:00007f6aec1acc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 583.693875] RAX: ffffffffffffffda RBX: 00007f6aec1ad6d4 RCX: 0000000000455a79 15:13:46 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x0, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) [ 583.701128] RDX: 0000000020d83ff8 RSI: 0000000000000016 RDI: 0000000000000015 [ 583.708380] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 583.715643] R10: 00008000fffffffe R11: 0000000000000246 R12: 0000000000000017 [ 583.722896] R13: 00000000004c0d39 R14: 00000000004d1340 R15: 0000000000000008 [ 583.827460] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. 15:13:47 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff}) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0xd000) r1 = perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r2, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)='#', 0x1}], 0x1}}], 0x1, 0x0) dup2(r3, r1) 15:13:47 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0xc00caee0, &(0x7f0000000180)={r4}) 15:13:47 executing program 1: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={&(0x7f0000cf1ff4)={0x10}, 0xc, &(0x7f0000703000)={&(0x7f000023f000)=ANY=[@ANYBLOB="840000000000000000000000000000000046659a62290ffc380c2dbfc75e89e106ba4206274d760dfe0597260617e101000006000000001cb4e2bf501db1bb9427ecd8337f6d63cc8769c29c4d91b00ffff0be48b748d30549c1700612dbc3080c91125fa158cf0d70309f7f19007c8262d732940142ab1cf90b11e0141c63f5f940"], 0x82}, 0x1}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f000023f000)=ANY=[@ANYBLOB="840000000000000000000000000000000000ffff"], 0x14}, 0x1}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x15, 0x802, 0x4) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x20b) 15:13:47 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x0, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:13:47 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0xfffffffe}, 0x1c) 15:13:47 executing program 6 (fault-call:7 fault-nth:9): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) [ 584.000578] FAULT_INJECTION: forcing a failure. [ 584.000578] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 584.012511] CPU: 0 PID: 6737 Comm: syz-executor6 Not tainted 4.18.0-rc4+ #143 [ 584.019787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 584.029128] Call Trace: [ 584.031712] dump_stack+0x1c9/0x2b4 [ 584.035330] ? dump_stack_print_info.cold.2+0x52/0x52 [ 584.040504] ? __radix_tree_lookup+0x3dd/0x6e0 [ 584.045077] should_fail.cold.4+0xa/0x1a [ 584.049127] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 584.054218] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 584.059223] ? find_held_lock+0x36/0x1c0 [ 584.063270] ? find_held_lock+0x36/0x1c0 [ 584.067333] ? check_same_owner+0x340/0x340 [ 584.071638] ? rcu_note_context_switch+0x730/0x730 [ 584.076565] __alloc_pages_nodemask+0x36e/0xdb0 [ 584.081229] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 584.086232] ? trace_hardirqs_on+0x10/0x10 [ 584.090459] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 584.095462] ? percpu_counter_add_batch+0xf2/0x150 [ 584.100377] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 584.105380] ? __vm_enough_memory+0x590/0x980 [ 584.109868] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 584.115390] alloc_pages_vma+0xdd/0x540 [ 584.119353] shmem_alloc_page+0xa8/0x190 [ 584.123398] ? shmem_swapin+0x230/0x230 [ 584.127371] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 584.132383] ? percpu_counter_add_batch+0xf2/0x150 [ 584.137303] shmem_alloc_and_acct_page+0x1f1/0x820 [ 584.142223] ? shmem_alloc_hugepage+0x4e0/0x4e0 [ 584.146876] ? do_raw_spin_unlock+0xa7/0x2f0 [ 584.151270] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 584.155840] ? _raw_spin_unlock_irq+0x27/0x70 [ 584.160324] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 584.165332] shmem_getpage_gfp+0x6ea/0x41e0 [ 584.169664] ? shmem_writepage+0x1380/0x1380 [ 584.174064] ? print_usage_bug+0xc0/0xc0 [ 584.178109] ? print_usage_bug+0xc0/0xc0 [ 584.182159] ? print_usage_bug+0xc0/0xc0 [ 584.186211] ? __lock_acquire+0x7fc/0x5020 [ 584.190433] ? __lock_acquire+0x7fc/0x5020 [ 584.194657] ? trace_hardirqs_on+0x10/0x10 [ 584.198884] ? print_usage_bug+0xc0/0xc0 [ 584.202931] ? __lock_acquire+0x7fc/0x5020 [ 584.207152] ? page_add_new_anon_rmap+0x870/0x870 [ 584.211980] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 584.216984] ? print_usage_bug+0xc0/0xc0 [ 584.221032] ? print_usage_bug+0xc0/0xc0 [ 584.225079] ? print_usage_bug+0xc0/0xc0 [ 584.229128] ? print_usage_bug+0xc0/0xc0 [ 584.233198] ? __lock_acquire+0x7fc/0x5020 [ 584.237416] ? lock_acquire+0x1e4/0x540 [ 584.241377] ? alloc_set_pte+0x1027/0x1620 [ 584.245602] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 584.251121] ? page_mapping+0x44f/0x5e0 [ 584.255079] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 584.260608] ? mark_page_accessed+0x672/0xd30 [ 584.265094] ? shmem_parse_options.cold.50+0x49/0x49 [ 584.270191] ? activate_page+0x9a0/0x9a0 [ 584.274246] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 584.279767] ? __set_page_dirty_no_writeback+0x14a/0x290 [ 584.285264] ? do_writepages+0x1a0/0x1a0 [ 584.289320] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 584.294322] ? sanity+0x238/0x330 [ 584.297757] ? do_writepages+0x1a0/0x1a0 [ 584.301805] ? kasan_check_write+0x14/0x20 [ 584.306033] ? copy_page_to_iter+0x534/0xf50 [ 584.310526] ? rcu_note_context_switch+0x730/0x730 [ 584.315453] ? check_same_owner+0x340/0x340 [ 584.319761] ? __save_stack_trace+0x8d/0xf0 [ 584.324161] shmem_file_read_iter+0x39f/0x1090 [ 584.328740] ? shmem_fallocate+0x12e0/0x12e0 [ 584.333138] ? lock_downgrade+0x8f0/0x8f0 [ 584.337274] ? kasan_check_read+0x11/0x20 [ 584.341406] ? rcu_is_watching+0x8c/0x150 [ 584.345539] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 584.349934] ? __lockdep_init_map+0x105/0x590 [ 584.354417] ? lockdep_init_map+0x9/0x10 [ 584.359106] ? debug_mutex_init+0x2d/0x60 [ 584.363238] ? __mutex_init+0x1f7/0x290 [ 584.367194] ? rcu_pm_notify+0xc0/0xc0 [ 584.371064] ? __ia32_sys_membarrier+0x150/0x150 [ 584.375808] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 584.381328] ? fsnotify+0xbb4/0x14e0 [ 584.385031] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 584.390031] ? iov_iter_pipe+0xc2/0x2f0 [ 584.394003] generic_file_splice_read+0x5cd/0x9d0 [ 584.398849] ? add_to_pipe+0x360/0x360 [ 584.402728] ? rw_verify_area+0x118/0x360 [ 584.406861] ? add_to_pipe+0x360/0x360 [ 584.410736] do_splice_to+0x12e/0x190 [ 584.414525] splice_direct_to_actor+0x270/0x8f0 [ 584.419192] ? pipe_to_sendpage+0x400/0x400 [ 584.423504] ? do_splice_to+0x190/0x190 [ 584.427464] ? rw_verify_area+0x118/0x360 [ 584.431603] do_splice_direct+0x2d4/0x420 [ 584.435740] ? splice_direct_to_actor+0x8f0/0x8f0 [ 584.440568] ? rw_verify_area+0x118/0x360 [ 584.444700] do_sendfile+0x623/0xe20 [ 584.448406] ? do_compat_pwritev64+0x1c0/0x1c0 [ 584.452980] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 584.458512] ? _copy_from_user+0xdf/0x150 [ 584.463261] __x64_sys_sendfile64+0x15d/0x250 [ 584.467739] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 584.472316] ? do_syscall_64+0x9a/0x820 [ 584.476286] do_syscall_64+0x1b9/0x820 [ 584.480168] ? finish_task_switch+0x1d3/0x870 [ 584.484648] ? syscall_return_slowpath+0x5e0/0x5e0 [ 584.489561] ? syscall_return_slowpath+0x31d/0x5e0 [ 584.494479] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 584.499843] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 584.504673] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 584.509845] RIP: 0033:0x455a79 [ 584.513019] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 584.532243] RSP: 002b:00007f6aec1acc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 584.539938] RAX: ffffffffffffffda RBX: 00007f6aec1ad6d4 RCX: 0000000000455a79 15:13:47 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000000)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 15:13:47 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x0, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) [ 584.547190] RDX: 0000000020d83ff8 RSI: 0000000000000016 RDI: 0000000000000015 [ 584.554443] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 584.561698] R10: 00008000fffffffe R11: 0000000000000246 R12: 0000000000000017 [ 584.568948] R13: 00000000004c0d39 R14: 00000000004d1340 R15: 0000000000000009 15:13:47 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x4}, 0x1c) [ 584.710098] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. 15:13:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x8030ae7c, 0xa07001) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x20000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x1006}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f00000002c0)={0x6, 0x118, 0xfa00, {{0x3d, 0x7, "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", 0xb1, 0x2, 0x9, 0x0, 0x3, 0x0, 0x1}, r4}}, 0x120) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x143000, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r5, 0x4018aee2, &(0x7f00000000c0)={0x0, 0x5, 0x0, &(0x7f0000000080)=0xffffffff}) 15:13:47 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x1}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) r3 = syz_open_pts(0xffffffffffffff9c, 0x40800) ioctl$TCFLSH(r3, 0x540b, 0x100000001) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x66, &(0x7f00000000c0)={r2}, &(0x7f00000001c0)=0x10) 15:13:47 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r0, &(0x7f0000aacfe4)={0xa}, 0x1c) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '#! '}, {0x20, '#! '}, {0x20, '-,md5sum-%locgroup-&vboxnet1^trusted'}, {0x20}], 0xa, "fd44c9bea18857bd77d94f09c167d9b23eabe9114bd50383ac27348ff3f79d41095998aa2e116350ba2e54964129232bd3801560cd17609b0568b8d4e5c6480275ec71ebfa984386bed166d67138ce6513a453b796ae4b99a0dd7f36dfb25d0918f772ee21a969ee"}, 0xa1) 15:13:47 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x1800000000000000}, 0x1c) 15:13:47 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x0, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:13:47 executing program 6 (fault-call:7 fault-nth:10): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:47 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x5460, &(0x7f0000000180)={r4}) 15:13:47 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) move_pages(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000ffe000/0x1000)=nil], &(0x7f0000000100)=[0x72, 0x8, 0x100000000, 0xdf02], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x6) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 584.833164] FAULT_INJECTION: forcing a failure. [ 584.833164] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 584.845087] CPU: 0 PID: 6777 Comm: syz-executor6 Not tainted 4.18.0-rc4+ #143 [ 584.852367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 584.861826] Call Trace: [ 584.864434] dump_stack+0x1c9/0x2b4 [ 584.868075] ? dump_stack_print_info.cold.2+0x52/0x52 [ 584.873278] ? __radix_tree_lookup+0x3dd/0x6e0 [ 584.877881] should_fail.cold.4+0xa/0x1a [ 584.881964] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 584.887078] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 584.892109] ? find_held_lock+0x36/0x1c0 [ 584.896184] ? find_held_lock+0x36/0x1c0 [ 584.900269] ? check_same_owner+0x340/0x340 [ 584.904604] ? rcu_note_context_switch+0x730/0x730 [ 584.909545] __alloc_pages_nodemask+0x36e/0xdb0 [ 584.914211] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 584.919222] ? trace_hardirqs_on+0x10/0x10 [ 584.923452] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 584.928461] ? percpu_counter_add_batch+0xf2/0x150 [ 584.933387] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 584.938394] ? __vm_enough_memory+0x590/0x980 [ 584.942879] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 584.948500] alloc_pages_vma+0xdd/0x540 [ 584.952463] shmem_alloc_page+0xa8/0x190 [ 584.956512] ? shmem_swapin+0x230/0x230 [ 584.960491] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 584.965498] ? percpu_counter_add_batch+0xf2/0x150 [ 584.970414] shmem_alloc_and_acct_page+0x1f1/0x820 [ 584.975333] ? shmem_alloc_hugepage+0x4e0/0x4e0 [ 584.979987] ? do_raw_spin_unlock+0xa7/0x2f0 [ 584.984383] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 584.988959] ? _raw_spin_unlock_irq+0x27/0x70 [ 584.993444] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 584.998455] shmem_getpage_gfp+0x6ea/0x41e0 [ 585.002797] ? shmem_writepage+0x1380/0x1380 [ 585.007195] ? print_usage_bug+0xc0/0xc0 [ 585.011238] ? print_usage_bug+0xc0/0xc0 [ 585.015289] ? print_usage_bug+0xc0/0xc0 [ 585.019345] ? __lock_acquire+0x7fc/0x5020 [ 585.023568] ? __lock_acquire+0x7fc/0x5020 [ 585.027792] ? trace_hardirqs_on+0x10/0x10 [ 585.032018] ? print_usage_bug+0xc0/0xc0 [ 585.036067] ? __lock_acquire+0x7fc/0x5020 [ 585.040408] ? page_add_new_anon_rmap+0x870/0x870 [ 585.045244] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 585.050245] ? print_usage_bug+0xc0/0xc0 [ 585.054293] ? print_usage_bug+0xc0/0xc0 [ 585.058337] ? print_usage_bug+0xc0/0xc0 [ 585.062386] ? print_usage_bug+0xc0/0xc0 [ 585.066435] ? __lock_acquire+0x7fc/0x5020 [ 585.070653] ? lock_acquire+0x1e4/0x540 [ 585.074619] ? alloc_set_pte+0x1027/0x1620 [ 585.078844] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 585.084366] ? page_mapping+0x44f/0x5e0 [ 585.088323] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 585.093843] ? mark_page_accessed+0x672/0xd30 [ 585.098324] ? shmem_parse_options.cold.50+0x49/0x49 [ 585.103441] ? activate_page+0x9a0/0x9a0 [ 585.107501] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 585.113028] ? __set_page_dirty_no_writeback+0x14a/0x290 [ 585.118486] ? do_writepages+0x1a0/0x1a0 [ 585.122540] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 585.127538] ? sanity+0x238/0x330 [ 585.130977] ? do_writepages+0x1a0/0x1a0 [ 585.135030] ? kasan_check_write+0x14/0x20 [ 585.139248] ? copy_page_to_iter+0x534/0xf50 [ 585.143666] ? rcu_note_context_switch+0x730/0x730 [ 585.148579] ? check_same_owner+0x340/0x340 [ 585.152885] ? __save_stack_trace+0x8d/0xf0 [ 585.157196] shmem_file_read_iter+0x39f/0x1090 [ 585.161780] ? shmem_fallocate+0x12e0/0x12e0 [ 585.166178] ? lock_downgrade+0x8f0/0x8f0 [ 585.170325] ? kasan_check_read+0x11/0x20 [ 585.174455] ? rcu_is_watching+0x8c/0x150 [ 585.178590] ? retint_kernel+0x10/0x10 [ 585.182460] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 585.186856] ? __lockdep_init_map+0x105/0x590 [ 585.191354] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 585.196101] ? lockdep_init_map+0x9/0x10 [ 585.200155] ? debug_mutex_init+0x2d/0x60 [ 585.204287] ? __mutex_init+0x1f7/0x290 [ 585.208242] ? rcu_pm_notify+0xc0/0xc0 [ 585.212116] ? __ia32_sys_membarrier+0x150/0x150 [ 585.216857] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 585.222377] ? fsnotify+0xbb4/0x14e0 [ 585.226086] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 585.231089] ? iov_iter_pipe+0xc2/0x2f0 [ 585.235051] generic_file_splice_read+0x5cd/0x9d0 [ 585.239885] ? add_to_pipe+0x360/0x360 [ 585.243767] ? rw_verify_area+0x118/0x360 [ 585.247901] ? add_to_pipe+0x360/0x360 [ 585.251774] do_splice_to+0x12e/0x190 [ 585.255564] splice_direct_to_actor+0x270/0x8f0 [ 585.260221] ? pipe_to_sendpage+0x400/0x400 [ 585.264531] ? do_splice_to+0x190/0x190 [ 585.268493] ? rw_verify_area+0x118/0x360 [ 585.272633] do_splice_direct+0x2d4/0x420 [ 585.276771] ? splice_direct_to_actor+0x8f0/0x8f0 [ 585.281603] ? rw_verify_area+0x118/0x360 [ 585.285737] do_sendfile+0x623/0xe20 [ 585.289439] ? do_compat_pwritev64+0x1c0/0x1c0 [ 585.294028] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 585.299548] ? _copy_from_user+0xdf/0x150 [ 585.303681] __x64_sys_sendfile64+0x15d/0x250 [ 585.308161] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 585.312735] ? do_syscall_64+0x9a/0x820 [ 585.316704] do_syscall_64+0x1b9/0x820 [ 585.320574] ? finish_task_switch+0x1d3/0x870 [ 585.325053] ? syscall_return_slowpath+0x5e0/0x5e0 [ 585.329971] ? syscall_return_slowpath+0x31d/0x5e0 [ 585.334891] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 585.340241] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 585.345084] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 585.350259] RIP: 0033:0x455a79 [ 585.353438] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 585.372692] RSP: 002b:00007f6aec1acc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 15:13:48 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x20009) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 15:13:48 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000e15000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001040)="71e67a15", 0x4) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffeee, 0x0, &(0x7f0000351ff0)=@ipx={0x4, 0x0, 0x0, "a074edebb7e1"}, 0x10) mmap(&(0x7f0000431000/0x400000)=nil, 0x400000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ppoll(&(0x7f00000012c0)=[{r1}], 0x1, &(0x7f0000001300)={0x77359400}, &(0x7f0000001340), 0x8) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/4096, 0xfea7}], 0x1) 15:13:48 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x0, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) [ 585.380396] RAX: ffffffffffffffda RBX: 00007f6aec1ad6d4 RCX: 0000000000455a79 [ 585.387651] RDX: 0000000020d83ff8 RSI: 0000000000000016 RDI: 0000000000000015 [ 585.394903] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 585.402154] R10: 00008000fffffffe R11: 0000000000000246 R12: 0000000000000017 [ 585.409578] R13: 00000000004c0d39 R14: 00000000004d1340 R15: 000000000000000a 15:13:48 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0xff00}, 0x1c) 15:13:48 executing program 6 (fault-call:7 fault-nth:11): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:48 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x0, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) [ 585.505198] Unknown ioctl 1075359458 [ 585.586297] FAULT_INJECTION: forcing a failure. [ 585.586297] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 585.598277] CPU: 0 PID: 6805 Comm: syz-executor6 Not tainted 4.18.0-rc4+ #143 [ 585.603140] Unknown ioctl 1075359458 [ 585.605555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 585.605561] Call Trace: [ 585.605588] dump_stack+0x1c9/0x2b4 [ 585.605609] ? dump_stack_print_info.cold.2+0x52/0x52 [ 585.605623] ? __radix_tree_lookup+0x3dd/0x6e0 [ 585.605646] should_fail.cold.4+0xa/0x1a [ 585.638674] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 585.644255] ? find_held_lock+0x36/0x1c0 [ 585.648432] ? find_held_lock+0x36/0x1c0 [ 585.652520] ? check_same_owner+0x340/0x340 [ 585.656856] ? rcu_note_context_switch+0x730/0x730 [ 585.661801] __alloc_pages_nodemask+0x36e/0xdb0 [ 585.666483] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 585.671513] ? __update_load_avg_blocked_se.isra.33+0x460/0x460 [ 585.677578] ? graph_lock+0x170/0x170 [ 585.681394] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 585.686414] ? percpu_counter_add_batch+0xf2/0x150 [ 585.691785] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 585.696803] ? __vm_enough_memory+0x590/0x980 [ 585.701292] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 585.706817] alloc_pages_vma+0xdd/0x540 [ 585.710780] shmem_alloc_page+0xa8/0x190 [ 585.714825] ? shmem_swapin+0x230/0x230 [ 585.718796] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 585.723801] ? percpu_counter_add_batch+0xf2/0x150 [ 585.728722] shmem_alloc_and_acct_page+0x1f1/0x820 [ 585.733638] ? shmem_alloc_hugepage+0x4e0/0x4e0 [ 585.738294] ? find_held_lock+0x36/0x1c0 [ 585.742345] shmem_getpage_gfp+0x6ea/0x41e0 [ 585.746663] ? shmem_writepage+0x1380/0x1380 [ 585.751059] ? __lock_is_held+0xb5/0x140 [ 585.755103] ? __account_cfs_rq_runtime+0x770/0x770 [ 585.760109] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 585.765632] ? __perf_event_task_sched_out+0x2f0/0x1a60 [ 585.770978] ? active_load_balance_cpu_stop+0x1030/0x1030 [ 585.776502] ? perf_event_update_userpage+0xd30/0xd30 [ 585.781685] ? graph_lock+0x170/0x170 [ 585.785472] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 585.790995] ? __perf_event_task_sched_in+0x24f/0xbb0 [ 585.796178] ? find_held_lock+0x36/0x1c0 [ 585.800247] ? lock_downgrade+0x8f0/0x8f0 [ 585.804482] ? finish_task_switch+0x18a/0x870 [ 585.808966] ? kasan_check_read+0x11/0x20 [ 585.813096] ? do_raw_spin_unlock+0xa7/0x2f0 [ 585.817485] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 585.822055] ? compat_start_thread+0x80/0x80 [ 585.826477] ? _raw_spin_unlock_irq+0x27/0x70 [ 585.830965] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 585.835967] ? trace_hardirqs_on+0xd/0x10 [ 585.840109] ? _raw_spin_unlock_irq+0x27/0x70 [ 585.844591] ? finish_task_switch+0x1d3/0x870 [ 585.849070] ? finish_task_switch+0x18a/0x870 [ 585.853550] ? preempt_notifier_register+0x200/0x200 [ 585.858647] ? lock_repin_lock+0x430/0x430 [ 585.862880] ? __schedule+0x884/0x1ed0 [ 585.866757] ? __sched_text_start+0x8/0x8 [ 585.870894] ? kasan_check_write+0x14/0x20 [ 585.875125] ? copy_page_to_iter+0x534/0xf50 [ 585.879531] ? check_same_owner+0x340/0x340 [ 585.883842] shmem_file_read_iter+0x39f/0x1090 [ 585.888420] ? shmem_fallocate+0x12e0/0x12e0 [ 585.892817] ? lock_downgrade+0x8f0/0x8f0 [ 585.896951] ? kasan_check_read+0x11/0x20 [ 585.901082] ? rcu_is_watching+0x8c/0x150 [ 585.905222] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 585.909614] ? __lockdep_init_map+0x105/0x590 [ 585.914094] ? lockdep_init_map+0x9/0x10 [ 585.918136] ? debug_mutex_init+0x2d/0x60 [ 585.922356] ? __mutex_init+0x1f7/0x290 [ 585.926319] ? rcu_pm_notify+0xc0/0xc0 [ 585.930200] ? __ia32_sys_membarrier+0x150/0x150 [ 585.934941] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 585.940461] ? fsnotify+0xbb4/0x14e0 [ 585.944160] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 585.949159] ? iov_iter_pipe+0xc2/0x2f0 [ 585.953124] generic_file_splice_read+0x5cd/0x9d0 [ 585.957952] ? add_to_pipe+0x360/0x360 [ 585.961831] ? rw_verify_area+0x118/0x360 [ 585.965962] ? add_to_pipe+0x360/0x360 [ 585.969836] do_splice_to+0x12e/0x190 [ 585.973625] splice_direct_to_actor+0x270/0x8f0 [ 585.978283] ? pipe_to_sendpage+0x400/0x400 [ 585.982592] ? do_splice_to+0x190/0x190 [ 585.986552] ? rw_verify_area+0x118/0x360 [ 585.990687] do_splice_direct+0x2d4/0x420 [ 585.994824] ? splice_direct_to_actor+0x8f0/0x8f0 [ 585.999652] ? rw_verify_area+0x118/0x360 [ 586.003783] do_sendfile+0x623/0xe20 [ 586.007487] ? do_compat_pwritev64+0x1c0/0x1c0 [ 586.012060] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 586.017582] ? _copy_from_user+0xdf/0x150 [ 586.021719] __x64_sys_sendfile64+0x15d/0x250 [ 586.026200] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 586.030767] ? do_syscall_64+0x9a/0x820 [ 586.034729] do_syscall_64+0x1b9/0x820 [ 586.038601] ? finish_task_switch+0x1d3/0x870 [ 586.043081] ? syscall_return_slowpath+0x5e0/0x5e0 [ 586.048001] ? syscall_return_slowpath+0x31d/0x5e0 [ 586.052925] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 586.058275] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 586.063114] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 586.068288] RIP: 0033:0x455a79 15:13:48 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x0, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:13:48 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40000, 0x0) 15:13:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000080)={0x5ba}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0x8030ae7c, 0xa07001) [ 586.071466] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 586.090691] RSP: 002b:00007f6aec1acc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 586.098388] RAX: ffffffffffffffda RBX: 00007f6aec1ad6d4 RCX: 0000000000455a79 [ 586.105640] RDX: 0000000020d83ff8 RSI: 0000000000000016 RDI: 0000000000000015 [ 586.112891] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 586.120143] R10: 00008000fffffffe R11: 0000000000000246 R12: 0000000000000017 [ 586.127398] R13: 00000000004c0d39 R14: 00000000004d1340 R15: 000000000000000b 15:13:49 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0xc0045878, &(0x7f0000000180)={r4}) 15:13:49 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x2000}, 0x1c) 15:13:49 executing program 6 (fault-call:7 fault-nth:12): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:49 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x0, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:13:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x100000000003) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) syz_open_dev$sg(&(0x7f0000000440)='/dev/sg#\x00', 0x6, 0x90000) r3 = dup(r0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000480)={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000640)={r4, 0x84, &(0x7f0000000580)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, @in={0x2, 0x4e24, @multicast2=0xe0000002}, @in6={0xa, 0x4e23, 0xd59, @dev={0xfe, 0x80, [], 0xa}, 0x80000001}, @in6={0xa, 0x4e21, 0x86, @dev={0xfe, 0x80, [], 0x1b}, 0x2}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x19}}, @in6={0xa, 0x4e22, 0x5, @loopback={0x0, 0x1}, 0xbdf}]}, &(0x7f0000000680)=0x10) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r3, 0x2) r5 = fcntl$dupfd(r3, 0x3, r2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000240)=0x14) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000000380)={@mcast1={0xff, 0x1, [], 0x1}, @remote={0xfe, 0x80, [], 0xbb}, @dev={0xfe, 0x80, [], 0xf}, 0x3ff, 0x5, 0xfffffffffffffff9, 0x0, 0xcff5, 0x6, r6}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x80000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f00000002c0)={0x14, 0x88, 0xfa00, {r8, 0x10, 0x0, @in6={0xa, 0x4e22, 0x8cc9, @dev={0xfe, 0x80, [], 0x1a}, 0x1000}}}, 0x90) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000001c0)="2664460f20c70f20d835080000000f22d8660f3880233664470f013b660f3a214dff0bb9800000c00f3235010000000f30f20f1014d5322e5d8d3e0f22d066baf80cb850eaac8eef66bafc0cb887fed4faef660f3881a7a9000000", 0x5b}], 0x1, 0x0, &(0x7f0000000100), 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x2c0801, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 15:13:49 executing program 0: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x100) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f000000b080)=[@in6={0xa, 0x4e23, 0xfc0, @local={0xfe, 0x80, [], 0xaa}, 0x80}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e21, 0x100, @remote={0xfe, 0x80, [], 0xbb}, 0xe00000}, @in6={0xa, 0x4e23, 0x5, @ipv4={[], [0xff, 0xff]}, 0x2}], 0x64) r1 = socket$inet6(0xa, 0x8000a, 0x0) ioctl(r1, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r2 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0x2}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000100)={r3, @in6={{0xa, 0x4e21, 0x3f, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x100000000}}, [0x5, 0x401, 0x200, 0xfffffffffffff2d2, 0xb4fe, 0xe, 0x77b, 0x1, 0xca, 0x7f, 0x4f83b9d1, 0xffff, 0x7ff, 0x5, 0x8]}, &(0x7f0000000200)=0x100) 15:13:49 executing program 3: r0 = socket$inet6(0xa, 0x80000, 0x0) getpeername$inet6(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000240)=0x1c) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x8030ae7c, 0xfb) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000080)=ANY=[@ANYBLOB="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"]) [ 586.318676] FAULT_INJECTION: forcing a failure. [ 586.318676] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 586.330631] CPU: 0 PID: 6834 Comm: syz-executor6 Not tainted 4.18.0-rc4+ #143 [ 586.337913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 586.347272] Call Trace: [ 586.349878] dump_stack+0x1c9/0x2b4 [ 586.353524] ? dump_stack_print_info.cold.2+0x52/0x52 [ 586.359516] ? zap_class+0x740/0x740 [ 586.363432] should_fail.cold.4+0xa/0x1a 15:13:49 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xffe, 0x2) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000080)={0x19, 0x3, 0x2}) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 586.367512] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 586.372638] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 586.377674] ? find_held_lock+0x36/0x1c0 [ 586.381748] ? find_held_lock+0x36/0x1c0 [ 586.385924] ? check_same_owner+0x340/0x340 [ 586.390259] ? rcu_note_context_switch+0x730/0x730 [ 586.395217] __alloc_pages_nodemask+0x36e/0xdb0 [ 586.399898] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 586.404919] ? trace_hardirqs_on+0x10/0x10 [ 586.409152] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 586.414162] ? percpu_counter_add_batch+0xf2/0x150 [ 586.419089] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 586.424095] ? __vm_enough_memory+0x590/0x980 [ 586.428577] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 586.434101] alloc_pages_vma+0xdd/0x540 [ 586.438065] shmem_alloc_page+0xa8/0x190 [ 586.442111] ? shmem_swapin+0x230/0x230 [ 586.446082] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 586.451097] ? percpu_counter_add_batch+0xf2/0x150 [ 586.456023] shmem_alloc_and_acct_page+0x1f1/0x820 [ 586.460943] ? shmem_alloc_hugepage+0x4e0/0x4e0 [ 586.465597] ? do_raw_spin_unlock+0xa7/0x2f0 [ 586.469988] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 586.474567] ? _raw_spin_unlock_irq+0x27/0x70 [ 586.479050] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 586.484063] shmem_getpage_gfp+0x6ea/0x41e0 [ 586.488373] ? zap_class+0x740/0x740 [ 586.492086] ? shmem_writepage+0x1380/0x1380 [ 586.496485] ? print_usage_bug+0xc0/0xc0 [ 586.500528] ? print_usage_bug+0xc0/0xc0 [ 586.504578] ? print_usage_bug+0xc0/0xc0 [ 586.508633] ? __lock_acquire+0x7fc/0x5020 [ 586.512855] ? __lock_acquire+0x7fc/0x5020 [ 586.517078] ? trace_hardirqs_on+0x10/0x10 [ 586.521308] ? print_usage_bug+0xc0/0xc0 [ 586.525359] ? __lock_acquire+0x7fc/0x5020 [ 586.529577] ? page_add_new_anon_rmap+0x870/0x870 [ 586.534423] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 586.539421] ? print_usage_bug+0xc0/0xc0 [ 586.543468] ? print_usage_bug+0xc0/0xc0 [ 586.547516] ? print_usage_bug+0xc0/0xc0 [ 586.551562] ? perf_trace_lock+0xde/0x920 [ 586.555703] ? print_usage_bug+0xc0/0xc0 [ 586.559748] ? zap_class+0x740/0x740 [ 586.563452] ? __lock_acquire+0x7fc/0x5020 [ 586.567678] ? lock_acquire+0x1e4/0x540 [ 586.571637] ? zap_class+0x740/0x740 [ 586.575334] ? zap_class+0x740/0x740 [ 586.579041] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 586.584563] ? page_mapping+0x44f/0x5e0 [ 586.588520] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 586.594044] ? mark_page_accessed+0x672/0xd30 [ 586.598522] ? shmem_parse_options.cold.50+0x49/0x49 [ 586.603610] ? activate_page+0x9a0/0x9a0 [ 586.607655] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 586.613176] ? __set_page_dirty_no_writeback+0x14a/0x290 [ 586.618620] ? do_writepages+0x1a0/0x1a0 [ 586.622671] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 586.627668] ? sanity+0x238/0x330 [ 586.631114] ? do_writepages+0x1a0/0x1a0 [ 586.635172] ? kasan_check_write+0x14/0x20 [ 586.639389] ? copy_page_to_iter+0x534/0xf50 [ 586.643794] ? rcu_note_context_switch+0x730/0x730 [ 586.648716] ? check_same_owner+0x340/0x340 [ 586.653026] ? __save_stack_trace+0x8d/0xf0 [ 586.657358] shmem_file_read_iter+0x39f/0x1090 [ 586.661934] ? shmem_fallocate+0x12e0/0x12e0 [ 586.666328] ? lock_downgrade+0x8f0/0x8f0 [ 586.670475] ? rcu_is_watching+0x8c/0x150 [ 586.674606] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 586.679000] ? __lockdep_init_map+0x105/0x590 [ 586.683488] ? lockdep_init_map+0x9/0x10 [ 586.687533] ? debug_mutex_init+0x2d/0x60 [ 586.691665] ? __mutex_init+0x1f7/0x290 [ 586.695629] ? rcu_pm_notify+0xc0/0xc0 [ 586.699501] ? __ia32_sys_membarrier+0x150/0x150 [ 586.704243] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 586.709762] ? fsnotify+0xbb4/0x14e0 [ 586.713464] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 586.718464] ? iov_iter_pipe+0xc2/0x2f0 [ 586.722433] generic_file_splice_read+0x5cd/0x9d0 [ 586.728131] ? add_to_pipe+0x360/0x360 [ 586.732018] ? rw_verify_area+0x118/0x360 [ 586.736152] ? add_to_pipe+0x360/0x360 [ 586.740027] do_splice_to+0x12e/0x190 [ 586.743814] splice_direct_to_actor+0x270/0x8f0 [ 586.748469] ? pipe_to_sendpage+0x400/0x400 [ 586.752776] ? do_splice_to+0x190/0x190 [ 586.756735] ? rw_verify_area+0x118/0x360 [ 586.760882] do_splice_direct+0x2d4/0x420 [ 586.765026] ? splice_direct_to_actor+0x8f0/0x8f0 [ 586.769864] ? rw_verify_area+0x118/0x360 [ 586.773998] do_sendfile+0x623/0xe20 [ 586.777704] ? do_compat_pwritev64+0x1c0/0x1c0 [ 586.782277] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 586.787798] ? _copy_from_user+0xdf/0x150 [ 586.791935] __x64_sys_sendfile64+0x15d/0x250 [ 586.796416] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 586.800985] ? do_syscall_64+0x9a/0x820 [ 586.804956] do_syscall_64+0x1b9/0x820 [ 586.808827] ? finish_task_switch+0x1d3/0x870 [ 586.813315] ? syscall_return_slowpath+0x5e0/0x5e0 [ 586.818231] ? syscall_return_slowpath+0x31d/0x5e0 [ 586.823150] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 586.828508] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 586.833344] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 586.838513] RIP: 0033:0x455a79 [ 586.841680] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 586.860904] RSP: 002b:00007f6aec1acc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 586.868597] RAX: ffffffffffffffda RBX: 00007f6aec1ad6d4 RCX: 0000000000455a79 [ 586.875856] RDX: 0000000020d83ff8 RSI: 0000000000000016 RDI: 0000000000000015 [ 586.883107] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 586.890360] R10: 00008000fffffffe R11: 0000000000000246 R12: 0000000000000017 [ 586.897611] R13: 00000000004c0d39 R14: 00000000004d1340 R15: 000000000000000c 15:13:50 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x183000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000100)) ioctl$IOC_PR_RELEASE(r0, 0x401070c9, &(0x7f0000000080)) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x400000, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000040)={0x2, "abac"}, 0x3) 15:13:50 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x0, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:13:50 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x6c040000}, 0x1c) 15:13:50 executing program 6 (fault-call:7 fault-nth:13): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:50 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x10001) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@loopback={0x0, 0x1}, 0xe8, 0x3, 0x1, 0x4, 0x101, 0x2, 0x2}, 0x20) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f0000000080)=@buf={0xb6, &(0x7f0000000100)="9e87244aaddfaa2c90a0914083bfeda70957e01ae156a9252320259b709ecfea89431c4e8bae1a5881844f04c8a814ff94d802e049b99903d197cd1cb98d1298c5499f761b52b8bf414722940d7a1526473e73eccdf98ea904a25797414536b1943986993d7c7596da906be65773cd190b56030cecdea25349202e46ecc3d0a974a272690501967595981e62ba73321da4c9edd66a9a8fd0cfa760b9208570114de1b9b806485d2b5949309c7fc15e696413ba503095"}) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 15:13:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x4, 0x200) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000040)={0xfe5, 0x800c, 0x0, 0x200, 0x0}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000180)={r2, @in={{0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}}, 0xe2, 0x67ac, 0x9, 0x9, 0x80000000}, &(0x7f0000000240)=0x98) lseek(r1, 0x0, 0x3) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000440)={r2, @in={{0x2, 0x4e23, @rand_addr=0x9}}}, 0x84) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000000d0000400500000005000000000100000000004000000000010000000000000025000000ffffffff00040000000000000a00000006ed"]) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x186, 0x0, 0x100000000000000}]}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000280)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000300)={{0x3, 0x3, 0x3, 0x6, '\x00', 0xcf}, 0x0, 0x430, 0x10000, r5, 0x7, 0x2, 'syz1\x00', &(0x7f00000002c0)=['/dev/kvm\x00', 'eth1\x00', '/dev/kvm\x00', '\x00', '/dev/kvm\x00', '\x00', '\x00'], 0x23, [], [0xfe30, 0x3, 0x0, 0x100]}) 15:13:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x2) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$vcsn(&(0x7f00000003c0)='/dev/vcs#\x00', 0x1, 0x20000) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, &(0x7f0000000400)={0x4, 0x7, 0x100}) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x2) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000300)={0x2, 0x55}) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x220080, 0x0) ioctl$GIO_FONT(r5, 0x4b60, &(0x7f00000001c0)=""/134) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x8030ae7c, 0xa07001) write$P9_RSTATFS(r5, &(0x7f0000000340)={0x43, 0x9, 0x2, {0x7, 0x80000001, 0xffffffffb4eccf50, 0xbd700000000, 0x917, 0x0, 0x81, 0x8, 0x4}}, 0x43) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x48, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x5, @empty, 0x9dbb}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e21, 0x81, @empty, 0x2}]}, &(0x7f0000000100)=0x10) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x7, 0x40000) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000140)={r6, 0x4}, 0x8) 15:13:50 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x0, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:13:50 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0xae03, &(0x7f0000000180)={r4}) 15:13:50 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x4547b25263}, 0x1c) 15:13:50 executing program 0: r0 = socket$inet6(0xa, 0x8000000001, 0x3e) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000180)={0xa, 0x1, 0x40, 0xffffffffffffff80, 'syz0\x00', 0x800}) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") ppoll(&(0x7f0000000000)=[{r0, 0x1}, {r0, 0x40}, {r0, 0x4}], 0x3, &(0x7f0000000080)={0x77359400}, &(0x7f0000000100)={0x9}, 0x8) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 15:13:50 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB]) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_POLL(r0, &(0x7f00000001c0)={0x18, 0x0, 0x1, {0x7}}, 0x18) read$FUSE(r0, &(0x7f00000030c0), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) [ 587.295325] FAULT_INJECTION: forcing a failure. [ 587.295325] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 587.307267] CPU: 0 PID: 6900 Comm: syz-executor6 Not tainted 4.18.0-rc4+ #143 [ 587.314563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 587.323925] Call Trace: [ 587.326520] dump_stack+0x1c9/0x2b4 [ 587.330138] ? dump_stack_print_info.cold.2+0x52/0x52 [ 587.335312] ? __radix_tree_lookup+0x3dd/0x6e0 [ 587.339886] should_fail.cold.4+0xa/0x1a [ 587.343937] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 587.349031] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 587.354046] ? find_held_lock+0x36/0x1c0 [ 587.358097] ? find_held_lock+0x36/0x1c0 [ 587.362155] ? check_same_owner+0x340/0x340 [ 587.366462] ? rcu_note_context_switch+0x730/0x730 [ 587.371385] __alloc_pages_nodemask+0x36e/0xdb0 [ 587.376043] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 587.381049] ? trace_hardirqs_on+0x10/0x10 [ 587.385280] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 587.390289] ? percpu_counter_add_batch+0xf2/0x150 [ 587.395204] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 587.400205] ? __vm_enough_memory+0x590/0x980 [ 587.404691] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 587.410213] alloc_pages_vma+0xdd/0x540 [ 587.414179] shmem_alloc_page+0xa8/0x190 [ 587.418225] ? shmem_swapin+0x230/0x230 [ 587.422196] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 587.427197] ? percpu_counter_add_batch+0xf2/0x150 [ 587.432131] shmem_alloc_and_acct_page+0x1f1/0x820 [ 587.437051] ? shmem_alloc_hugepage+0x4e0/0x4e0 [ 587.441706] ? do_raw_spin_unlock+0xa7/0x2f0 [ 587.446101] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 587.450668] ? _raw_spin_unlock_irq+0x27/0x70 [ 587.455150] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 587.460167] shmem_getpage_gfp+0x6ea/0x41e0 [ 587.464487] ? shmem_writepage+0x1380/0x1380 [ 587.468885] ? print_usage_bug+0xc0/0xc0 [ 587.472938] ? print_usage_bug+0xc0/0xc0 [ 587.476986] ? print_usage_bug+0xc0/0xc0 [ 587.481043] ? __lock_acquire+0x7fc/0x5020 [ 587.485268] ? __lock_acquire+0x7fc/0x5020 [ 587.489492] ? trace_hardirqs_on+0x10/0x10 [ 587.493712] ? print_usage_bug+0xc0/0xc0 [ 587.497765] ? __lock_acquire+0x7fc/0x5020 [ 587.502025] ? page_add_new_anon_rmap+0x870/0x870 [ 587.506852] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 587.511854] ? print_usage_bug+0xc0/0xc0 [ 587.515898] ? print_usage_bug+0xc0/0xc0 [ 587.519944] ? print_usage_bug+0xc0/0xc0 [ 587.524003] ? print_usage_bug+0xc0/0xc0 [ 587.528055] ? __lock_acquire+0x7fc/0x5020 [ 587.532278] ? lock_acquire+0x1e4/0x540 [ 587.536236] ? alloc_set_pte+0x1027/0x1620 [ 587.540464] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 587.545993] ? page_mapping+0x44f/0x5e0 [ 587.549957] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 587.555480] ? mark_page_accessed+0x672/0xd30 [ 587.559960] ? shmem_parse_options.cold.50+0x49/0x49 [ 587.565048] ? activate_page+0x9a0/0x9a0 [ 587.569107] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 587.574627] ? __set_page_dirty_no_writeback+0x14a/0x290 [ 587.580063] ? do_writepages+0x1a0/0x1a0 [ 587.584114] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 587.589112] ? sanity+0x238/0x330 [ 587.592548] ? do_writepages+0x1a0/0x1a0 [ 587.596599] ? kasan_check_write+0x14/0x20 [ 587.601075] ? copy_page_to_iter+0x534/0xf50 [ 587.605477] ? rcu_note_context_switch+0x730/0x730 [ 587.610388] ? check_same_owner+0x340/0x340 [ 587.614693] ? __save_stack_trace+0x8d/0xf0 [ 587.619006] shmem_file_read_iter+0x39f/0x1090 [ 587.623586] ? shmem_fallocate+0x12e0/0x12e0 [ 587.627981] ? lock_downgrade+0x8f0/0x8f0 [ 587.632119] ? kasan_check_read+0x11/0x20 [ 587.636251] ? rcu_is_watching+0x8c/0x150 [ 587.640380] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 587.644773] ? __lockdep_init_map+0x105/0x590 [ 587.649258] ? lockdep_init_map+0x9/0x10 [ 587.653305] ? debug_mutex_init+0x2d/0x60 [ 587.657436] ? __mutex_init+0x1f7/0x290 [ 587.661389] ? rcu_pm_notify+0xc0/0xc0 [ 587.665273] ? __ia32_sys_membarrier+0x150/0x150 [ 587.670022] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 587.675543] ? fsnotify+0xbb4/0x14e0 [ 587.679241] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 587.684242] ? iov_iter_pipe+0xc2/0x2f0 [ 587.688209] generic_file_splice_read+0x5cd/0x9d0 [ 587.693038] ? add_to_pipe+0x360/0x360 [ 587.696918] ? rw_verify_area+0x118/0x360 [ 587.701050] ? add_to_pipe+0x360/0x360 [ 587.704920] do_splice_to+0x12e/0x190 [ 587.708720] splice_direct_to_actor+0x270/0x8f0 [ 587.713374] ? pipe_to_sendpage+0x400/0x400 [ 587.717683] ? do_splice_to+0x190/0x190 [ 587.721653] ? rw_verify_area+0x118/0x360 [ 587.725790] do_splice_direct+0x2d4/0x420 [ 587.729923] ? splice_direct_to_actor+0x8f0/0x8f0 [ 587.734753] ? rw_verify_area+0x118/0x360 [ 587.738887] do_sendfile+0x623/0xe20 [ 587.742589] ? do_compat_pwritev64+0x1c0/0x1c0 [ 587.747162] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 587.752688] ? _copy_from_user+0xdf/0x150 [ 587.756834] __x64_sys_sendfile64+0x15d/0x250 [ 587.761400] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 587.765967] ? do_syscall_64+0x9a/0x820 [ 587.769929] do_syscall_64+0x1b9/0x820 [ 587.773800] ? finish_task_switch+0x1d3/0x870 [ 587.778284] ? syscall_return_slowpath+0x5e0/0x5e0 [ 587.783212] ? syscall_return_slowpath+0x31d/0x5e0 [ 587.788135] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 587.793486] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 587.798413] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 587.803590] RIP: 0033:0x455a79 [ 587.806763] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 587.826175] RSP: 002b:00007f6aec1acc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 587.833870] RAX: ffffffffffffffda RBX: 00007f6aec1ad6d4 RCX: 0000000000455a79 15:13:51 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0xffffffff00000000}, 0x1c) 15:13:51 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) [ 587.841131] RDX: 0000000020d83ff8 RSI: 0000000000000016 RDI: 0000000000000015 [ 587.848385] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 587.855636] R10: 00008000fffffffe R11: 0000000000000246 R12: 0000000000000017 [ 587.862887] R13: 00000000004c0d39 R14: 00000000004d1340 R15: 000000000000000d 15:13:51 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(authenc(crc32-pclmul,ecb(aes)))\x00'}, 0x28) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) sendmsg$rds(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x0, @loopback=0x7f000001}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000180)=""/51, 0x33}, {&(0x7f00000001c0)=""/50, 0x32}, {&(0x7f0000000200)=""/245, 0xf5}], 0x3, &(0x7f0000000100), 0x0, 0x1000000}, 0x0) 15:13:51 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:13:51 executing program 6 (fault-call:7 fault-nth:14): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:51 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x87ffffff00000000}, 0x1c) [ 588.065655] FAULT_INJECTION: forcing a failure. [ 588.065655] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 588.077754] CPU: 1 PID: 6933 Comm: syz-executor6 Not tainted 4.18.0-rc4+ #143 [ 588.085045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 588.094401] Call Trace: [ 588.096984] dump_stack+0x1c9/0x2b4 [ 588.100603] ? dump_stack_print_info.cold.2+0x52/0x52 [ 588.105777] ? __radix_tree_lookup+0x3dd/0x6e0 [ 588.110358] should_fail.cold.4+0xa/0x1a [ 588.114408] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 588.119502] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 588.124512] ? find_held_lock+0x36/0x1c0 [ 588.128652] ? find_held_lock+0x36/0x1c0 [ 588.132716] ? check_same_owner+0x340/0x340 [ 588.137035] ? rcu_note_context_switch+0x730/0x730 [ 588.141956] __alloc_pages_nodemask+0x36e/0xdb0 [ 588.146611] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 588.151622] ? trace_hardirqs_on+0x10/0x10 [ 588.155848] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 588.160850] ? percpu_counter_add_batch+0xf2/0x150 [ 588.165767] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 588.170773] ? __vm_enough_memory+0x590/0x980 [ 588.175344] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 588.180869] alloc_pages_vma+0xdd/0x540 [ 588.184837] shmem_alloc_page+0xa8/0x190 [ 588.188886] ? shmem_swapin+0x230/0x230 [ 588.192872] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 588.197877] ? percpu_counter_add_batch+0xf2/0x150 [ 588.202794] shmem_alloc_and_acct_page+0x1f1/0x820 [ 588.207715] ? shmem_alloc_hugepage+0x4e0/0x4e0 [ 588.212372] ? do_raw_spin_unlock+0xa7/0x2f0 [ 588.216765] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 588.221332] ? _raw_spin_unlock_irq+0x27/0x70 [ 588.225816] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 588.230819] shmem_getpage_gfp+0x6ea/0x41e0 [ 588.235138] ? shmem_writepage+0x1380/0x1380 [ 588.239536] ? print_usage_bug+0xc0/0xc0 [ 588.243582] ? print_usage_bug+0xc0/0xc0 [ 588.247630] ? print_usage_bug+0xc0/0xc0 [ 588.251685] ? __lock_acquire+0x7fc/0x5020 [ 588.255912] ? __lock_acquire+0x7fc/0x5020 [ 588.260135] ? trace_hardirqs_on+0x10/0x10 [ 588.264365] ? print_usage_bug+0xc0/0xc0 [ 588.268420] ? __lock_acquire+0x7fc/0x5020 [ 588.272640] ? page_add_new_anon_rmap+0x870/0x870 [ 588.277467] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 588.282468] ? print_usage_bug+0xc0/0xc0 [ 588.286521] ? print_usage_bug+0xc0/0xc0 [ 588.290566] ? print_usage_bug+0xc0/0xc0 [ 588.294614] ? print_usage_bug+0xc0/0xc0 [ 588.298661] ? __lock_acquire+0x7fc/0x5020 [ 588.302889] ? lock_acquire+0x1e4/0x540 [ 588.306848] ? alloc_set_pte+0x1027/0x1620 [ 588.311081] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 588.316605] ? page_mapping+0x44f/0x5e0 [ 588.320578] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 588.326102] ? mark_page_accessed+0x672/0xd30 [ 588.330581] ? shmem_parse_options.cold.50+0x49/0x49 [ 588.335669] ? activate_page+0x9a0/0x9a0 [ 588.339727] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 588.345247] ? __set_page_dirty_no_writeback+0x14a/0x290 [ 588.350681] ? do_writepages+0x1a0/0x1a0 [ 588.354748] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 588.359754] ? sanity+0x238/0x330 [ 588.363194] ? do_writepages+0x1a0/0x1a0 [ 588.367244] ? kasan_check_write+0x14/0x20 [ 588.371470] ? copy_page_to_iter+0x534/0xf50 [ 588.375873] ? rcu_note_context_switch+0x730/0x730 [ 588.380789] ? check_same_owner+0x340/0x340 [ 588.385097] ? __save_stack_trace+0x8d/0xf0 [ 588.389411] shmem_file_read_iter+0x39f/0x1090 [ 588.393990] ? shmem_fallocate+0x12e0/0x12e0 [ 588.398390] ? lock_downgrade+0x8f0/0x8f0 [ 588.402528] ? kasan_check_read+0x11/0x20 [ 588.406657] ? rcu_is_watching+0x8c/0x150 [ 588.410791] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 588.415195] ? __lockdep_init_map+0x105/0x590 [ 588.419681] ? lockdep_init_map+0x9/0x10 [ 588.423738] ? debug_mutex_init+0x2d/0x60 [ 588.427871] ? __mutex_init+0x1f7/0x290 [ 588.431829] ? rcu_pm_notify+0xc0/0xc0 [ 588.435701] ? __ia32_sys_membarrier+0x150/0x150 [ 588.440443] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 588.445963] ? fsnotify+0xbb4/0x14e0 [ 588.449664] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 588.454667] ? iov_iter_pipe+0xc2/0x2f0 [ 588.458632] generic_file_splice_read+0x5cd/0x9d0 [ 588.463469] ? add_to_pipe+0x360/0x360 [ 588.467353] ? rw_verify_area+0x118/0x360 [ 588.471486] ? add_to_pipe+0x360/0x360 [ 588.475367] do_splice_to+0x12e/0x190 [ 588.479174] splice_direct_to_actor+0x270/0x8f0 [ 588.483831] ? pipe_to_sendpage+0x400/0x400 [ 588.488142] ? do_splice_to+0x190/0x190 [ 588.492105] ? rw_verify_area+0x118/0x360 [ 588.496238] do_splice_direct+0x2d4/0x420 [ 588.500373] ? splice_direct_to_actor+0x8f0/0x8f0 [ 588.505204] ? rw_verify_area+0x118/0x360 [ 588.509338] do_sendfile+0x623/0xe20 [ 588.513045] ? do_compat_pwritev64+0x1c0/0x1c0 [ 588.517617] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 588.523137] ? _copy_from_user+0xdf/0x150 [ 588.527274] __x64_sys_sendfile64+0x15d/0x250 [ 588.531756] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 588.537025] ? do_syscall_64+0x9a/0x820 [ 588.540989] do_syscall_64+0x1b9/0x820 [ 588.544863] ? finish_task_switch+0x1d3/0x870 [ 588.549342] ? syscall_return_slowpath+0x5e0/0x5e0 [ 588.554256] ? syscall_return_slowpath+0x31d/0x5e0 [ 588.559176] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 588.564526] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 588.569359] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 588.574530] RIP: 0033:0x455a79 [ 588.577701] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 588.596922] RSP: 002b:00007f6aec1acc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 588.604614] RAX: ffffffffffffffda RBX: 00007f6aec1ad6d4 RCX: 0000000000455a79 15:13:51 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x5421, &(0x7f0000000180)={r4}) 15:13:51 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0xfec00000}, 0x1c) [ 588.611882] RDX: 0000000020d83ff8 RSI: 0000000000000016 RDI: 0000000000000015 [ 588.619138] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 588.626390] R10: 00008000fffffffe R11: 0000000000000246 R12: 0000000000000017 [ 588.633652] R13: 00000000004c0d39 R14: 00000000004d1340 R15: 000000000000000e 15:13:51 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:13:51 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) pread64(r1, &(0x7f00000000c0)=""/142, 0x8e, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7b, 0x40482) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x9) 15:13:52 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x3) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0xc004aea7, &(0x7f0000000080)=0x7) flistxattr(r2, &(0x7f0000000000)=""/52, 0x34) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x8030ae7c, 0xa07001) 15:13:52 executing program 6 (fault-call:7 fault-nth:15): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:52 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = fcntl$getown(r0, 0x9) getpriority(0x1, r1) getpriority(0x2, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e24, @broadcast=0xffffffff}}, 0x6, 0x4, 0x100000001, 0x6, 0x401}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r3, &(0x7f0000000180)=0x4) 15:13:52 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0xf0ffff}, 0x1c) [ 588.894141] FAULT_INJECTION: forcing a failure. [ 588.894141] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 588.906344] CPU: 1 PID: 6969 Comm: syz-executor6 Not tainted 4.18.0-rc4+ #143 [ 588.913627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 588.922994] Call Trace: [ 588.925593] dump_stack+0x1c9/0x2b4 [ 588.929233] ? dump_stack_print_info.cold.2+0x52/0x52 [ 588.934433] ? __radix_tree_lookup+0x3dd/0x6e0 [ 588.939032] should_fail.cold.4+0xa/0x1a [ 588.943093] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 588.948191] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 588.953205] ? find_held_lock+0x36/0x1c0 [ 588.957262] ? find_held_lock+0x36/0x1c0 [ 588.961322] ? check_same_owner+0x340/0x340 [ 588.965629] ? rcu_note_context_switch+0x730/0x730 [ 588.970554] __alloc_pages_nodemask+0x36e/0xdb0 [ 588.975211] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 588.980213] ? trace_hardirqs_on+0x10/0x10 [ 588.984453] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 588.989455] ? percpu_counter_add_batch+0xf2/0x150 [ 588.994380] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 588.999384] ? __vm_enough_memory+0x590/0x980 [ 589.003868] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 589.009476] alloc_pages_vma+0xdd/0x540 [ 589.013448] shmem_alloc_page+0xa8/0x190 [ 589.017496] ? shmem_swapin+0x230/0x230 [ 589.021474] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 589.026476] ? percpu_counter_add_batch+0xf2/0x150 [ 589.031394] shmem_alloc_and_acct_page+0x1f1/0x820 [ 589.036311] ? shmem_alloc_hugepage+0x4e0/0x4e0 [ 589.040961] ? do_raw_spin_unlock+0xa7/0x2f0 [ 589.045355] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 589.049923] ? _raw_spin_unlock_irq+0x27/0x70 [ 589.054407] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 589.059412] shmem_getpage_gfp+0x6ea/0x41e0 [ 589.063731] ? shmem_writepage+0x1380/0x1380 [ 589.068128] ? print_usage_bug+0xc0/0xc0 [ 589.072173] ? print_usage_bug+0xc0/0xc0 [ 589.079693] ? print_usage_bug+0xc0/0xc0 [ 589.083755] ? __lock_acquire+0x7fc/0x5020 [ 589.087986] ? __lock_acquire+0x7fc/0x5020 [ 589.092211] ? trace_hardirqs_on+0x10/0x10 [ 589.096432] ? print_usage_bug+0xc0/0xc0 [ 589.100476] ? __lock_acquire+0x7fc/0x5020 [ 589.104695] ? update_load_avg+0x2de/0x2590 [ 589.109007] ? print_usage_bug+0xc0/0xc0 [ 589.113058] ? __lock_acquire+0x7fc/0x5020 [ 589.117277] ? update_load_avg+0x2de/0x2590 [ 589.121585] ? alloc_set_pte+0x1027/0x1620 [ 589.125806] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 589.131328] ? page_mapping+0x44f/0x5e0 [ 589.135291] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 589.140814] ? mark_page_accessed+0x672/0xd30 [ 589.145297] ? shmem_parse_options.cold.50+0x49/0x49 [ 589.150388] ? activate_page+0x9a0/0x9a0 [ 589.154444] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 589.159968] ? __set_page_dirty_no_writeback+0x14a/0x290 [ 589.165402] ? do_writepages+0x1a0/0x1a0 [ 589.169463] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 589.174462] ? sanity+0x238/0x330 [ 589.177899] ? do_writepages+0x1a0/0x1a0 [ 589.181957] ? kasan_check_write+0x14/0x20 [ 589.186178] ? copy_page_to_iter+0x534/0xf50 [ 589.191235] ? rcu_note_context_switch+0x730/0x730 [ 589.196158] ? check_same_owner+0x340/0x340 [ 589.200466] ? __save_stack_trace+0x8d/0xf0 [ 589.204786] shmem_file_read_iter+0x39f/0x1090 [ 589.209363] ? shmem_fallocate+0x12e0/0x12e0 [ 589.213759] ? lock_downgrade+0x8f0/0x8f0 [ 589.217898] ? kasan_check_read+0x11/0x20 [ 589.222030] ? rcu_is_watching+0x8c/0x150 [ 589.226174] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 589.230570] ? __lockdep_init_map+0x105/0x590 [ 589.235051] ? lockdep_init_map+0x9/0x10 [ 589.239104] ? debug_mutex_init+0x2d/0x60 [ 589.243242] ? __mutex_init+0x1f7/0x290 [ 589.247198] ? rcu_pm_notify+0xc0/0xc0 [ 589.251082] ? __ia32_sys_membarrier+0x150/0x150 [ 589.255826] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 589.261344] ? fsnotify+0xbb4/0x14e0 [ 589.265045] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 589.270049] ? iov_iter_pipe+0xc2/0x2f0 [ 589.274030] generic_file_splice_read+0x5cd/0x9d0 [ 589.278864] ? add_to_pipe+0x360/0x360 [ 589.282747] ? rw_verify_area+0x118/0x360 [ 589.286878] ? add_to_pipe+0x360/0x360 [ 589.290752] do_splice_to+0x12e/0x190 [ 589.294542] splice_direct_to_actor+0x270/0x8f0 [ 589.299213] ? pipe_to_sendpage+0x400/0x400 [ 589.303523] ? do_splice_to+0x190/0x190 [ 589.307485] ? rw_verify_area+0x118/0x360 [ 589.311623] do_splice_direct+0x2d4/0x420 [ 589.315760] ? splice_direct_to_actor+0x8f0/0x8f0 [ 589.320590] ? rw_verify_area+0x118/0x360 [ 589.324727] do_sendfile+0x623/0xe20 [ 589.328430] ? do_compat_pwritev64+0x1c0/0x1c0 [ 589.333006] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 589.338535] ? _copy_from_user+0xdf/0x150 [ 589.342671] __x64_sys_sendfile64+0x15d/0x250 [ 589.347327] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 589.351899] ? do_syscall_64+0x9a/0x820 [ 589.355880] do_syscall_64+0x1b9/0x820 [ 589.359752] ? syscall_slow_exit_work+0x500/0x500 [ 589.364590] ? syscall_return_slowpath+0x5e0/0x5e0 [ 589.369523] ? syscall_return_slowpath+0x31d/0x5e0 [ 589.374442] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 589.379792] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 589.384628] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 589.389800] RIP: 0033:0x455a79 [ 589.392968] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 589.412205] RSP: 002b:00007f6aec1acc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 589.419909] RAX: ffffffffffffffda RBX: 00007f6aec1ad6d4 RCX: 0000000000455a79 [ 589.427163] RDX: 0000000020d83ff8 RSI: 0000000000000016 RDI: 0000000000000015 [ 589.434427] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 15:13:52 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x200000, 0x0) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000100)=""/226) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r2 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 15:13:52 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000100)=0x100, 0x4) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000080)) sendto$inet(r0, &(0x7f00000002c0)="afae25b9178f0776831e557d5f245a51abe5a915b546b316896c717aee", 0x1d, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 15:13:52 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0xae41, &(0x7f0000000180)={r4}) 15:13:52 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) [ 589.441691] R10: 00008000fffffffe R11: 0000000000000246 R12: 0000000000000017 [ 589.448952] R13: 00000000004c0d39 R14: 00000000004d1340 R15: 000000000000000f 15:13:52 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x6c04}, 0x1c) 15:13:52 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x18000, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f0000000040)=0x8) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) 15:13:52 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:13:52 executing program 1: r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$cgroup_pid(r0, &(0x7f0000000040), 0x12) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x1000) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f0000000080)=0x100000) 15:13:52 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4010ae42, &(0x7f0000000180)={r4}) 15:13:52 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x4000, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000140)=0x0) migrate_pages(r4, 0x9, &(0x7f0000000180)=0x63, &(0x7f00000001c0)) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x4e22, @loopback=0x7f000001}, @in6={0xa, 0x4e22, 0x8, @loopback={0x0, 0x1}, 0x400000008000}, @in={0x2, 0x4e24, @multicast2=0xe0000002}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x17}}], 0x4c) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e00000010000000000000000000000dc4e8efe065f8d5d86318ca1797da03238b908bb326c15e2eb629cc9391f7c0000000000000000000a000000000000008a66c2a7943e97885565524f383036316dffffffff473b02fcc0696c81fc1d47901bef7563658303b5f68391c062468dd265da5f57173e8297428541d160641900000000a4f87e342b23f0462cb916ef321f7e1529070236e9f1cf118491db42cea32105c16b68da2ed56074c52012bca57129040f47d623d04ef0", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb8}, 0x1}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@mcast1={0xff, 0x1, [], 0x1}, 0x0, 0x0, 0xff}, 0x20) 15:13:52 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0xf0}, 0x1c) 15:13:52 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/qat_adf_ctl\x00', 0x380, 0x0) getpeername$packet(0xffffffffffffff9c, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000300)=0x14) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000340)=r1) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r3 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@rand_addr}}, &(0x7f0000000000)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', r4}) accept$packet(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000240)=0x14) fallocate(r0, 0x2b, 0x3f, 0x49b) [ 589.757626] QAT: Invalid ioctl [ 589.786454] QAT: Invalid ioctl 15:13:53 executing program 3: r0 = socket$inet6(0xa, 0x1000000000004, 0x7) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x8030ae7c, 0xa07001) 15:13:53 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'irlan0\x00', 0x1}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x1000000002000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'irlan0\x00', 0x1}) 15:13:53 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:13:53 executing program 6 (fault-call:7 fault-nth:16): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:53 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0xfffffffffffff000}, 0x1c) 15:13:53 executing program 5: r0 = socket(0x1e, 0x805, 0x0) r1 = socket(0xf, 0x8000000006, 0xffeffffffffffffe) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x111100, 0x0) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f00000000c0)="f7fd4dbda1d65dac1fd8065064b44e36efb7a1cd6ef03053d19624b0c37d05373a2ce234e3832f95896c3674c74a6f2b640ea584165a02508d168dd43d4ab2191713905fbcc61501e44f761a7da3ed356b86bae04dfaebc428d55cb00ebe2d7bc9ad28dc84c26a15befb6a0e10c8a0e8") setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000380)=@req3={0x80000000}, 0xd23) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda) sendmsg(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000003c0)="ad9e916638987ab3274acf7d029ab0498abc26e307f0ca594402d70481f70843283e43baf7ff4b57d244b4902d90139fda6405ee0c71ea32f0e2eb4c8b508cd19dcf6f93455ff13f7533c18a21cd6e111276a3b6019d8d45ff3eeb9074c998e8ab4523fdb213d5908db388ab8ccb3d5d551c91ce151626265b86e47da28f727630ee5daf4b2d26634e514b6d8da6bb0f3f28a322e6d314b032aa61b12950bbc37bdecc14f4f08be081953aeee72b9ccdf5f46cc5bd24650c05bd2151d0e59e817c1df0aaffdaf8d0d10d6b060ef873ef3d252317923d2f7d5116dac01b909f149851c1760828e52f66638ea34a177e8b9ddcea3c", 0xf4}, {&(0x7f00000004c0)="bcb8fa86685fa4e7b3a77360badf5cf4f2e1c60774736ba0047b2703fa1c79c5d6a708686bf96b9e57830a497e074fb120f016e32226636b68ff4076fce59154ab6b2fd89518447cc603567b3173de3cc4bcc81492afc99088c7fd8004521774f47bacaba789d591f8d320b8faba1003ee1b5b8d1229da27e2b0fb3ca4e0c4c814badf04cd054e7a00a9e40ffcdfc900da4ffbb736f23bd00b3c2459cae272b542e55fb8605b362d8f2da2ae521ddfdce27f30ebdaf387e3a2522b5da46db54340d7a65988261fe9c2d5", 0xca}, {&(0x7f00000005c0)="58e91703007f6a58830e4bc9755aa6b6cf59f2f275c492e8bf60c0205ee18ba4d88a176085774339060b00abc604132c129183d28073671e61c7700688e2646e6d456371417bd3ebc9f077f4d6f8512b86f0181a362047ad292ef41c4797587fa757baa7c4a77c0f8ac8a4f48c6f64e03a27ab1b42d9f5926022002a17808a7c5a42dcce04a6c3371517ea9aa41c5b565901de", 0x93}, {&(0x7f0000000680)="850f5a568b03618436668fe63ceb91281bc57c29aa2385db8390479b02aada5c321d33919421e36a0bee3ff79bdf0f20e7ff9394fb956219da0de9fd0850b332cb31e603c243c8a1a80b93ec0f4164f5b71820438228a53fa2a3456553bb6d22e2bd1c7b4ebd1fcb4e974e5b56818bd3ce8a2e0515f15d4718f112626e003e295b054ed6269dbd40a54804661b861955c316dd564c067c2f9e092fc6be5e2c11b721a5ea2f5cbb6f42e3e04006810eb30109a10d49f20dd47dd6d1342b69c97e4738f43d9ad61575531542d586cb11eb082eb2b338", 0xd5}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000001780)="b210d7b76059097aeee2ef2a9a5cbc477b6faeb6", 0x14}], 0x6, &(0x7f0000001840)=[{0x88, 0x1ff, 0x8, "31f8c0befa053ac2b5277c500ddd99e298bda0de7602300eb5a7811b88dab8edb2838d893db475c05df54a2b27f023cf7bed1a4e521f80c65e2c591f6148290f0e22b16bb88a64a162ebeb6b9b99798a8a4504bb225f2bd95c6d96811898817ffac7ed25d3007c12e51dcd4c01f7417e8b8d423641"}, {0xb8, 0x88, 0xfffffffffffffffc, "df125871228cf9cc9e5b09415c0a53e2e43c6e045b7a6757688c08e8fc2b6e67685d93f05fa860b95b6e737a20c5e78da8d0b1afa43941c9c167bc19d6091c1966bbac8e0d49b4554b7e032e6e867fc5c4c6eaf7dd59649b7161192d73d153b6a92da1dcde2f2843aa6bcbbe66213c2d20786b244ca9dcaa92fcc912e6790e7f848758a2a59049371a66b8aa87f415202163ac9d4836583cf3f499d64ca47efbcd4c"}], 0x140}, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000447ff0), 0x0, &(0x7f00006e9c68)}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='!^\x00', r2}, 0x10) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000340)={0x3, r2}) ioctl$KDGETLED(r2, 0x4b31, &(0x7f00000001c0)) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x1860) ioctl$KVM_PPC_GET_PVINFO(r2, 0x4080aea1, &(0x7f0000000200)=""/167) close(r0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000180)) 15:13:53 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020aea5, &(0x7f0000000180)={r4}) 15:13:53 executing program 0: r0 = socket$inet6(0xa, 0x800006, 0x6) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'bcsh0\x00', @ifru_map={0x40, 0x80000001, 0x2, 0x0, 0x7, 0x7}}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x171402, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000080)={0x3, 0x9, [{0x8c7d, 0x0, 0x2}, {0x7f, 0x0, 0x4}, {0x101, 0x0, 0x10001}]}) [ 589.923613] FAULT_INJECTION: forcing a failure. [ 589.923613] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 589.935638] CPU: 1 PID: 7038 Comm: syz-executor6 Not tainted 4.18.0-rc4+ #143 [ 589.942926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 589.952286] Call Trace: [ 589.954888] dump_stack+0x1c9/0x2b4 [ 589.958524] ? dump_stack_print_info.cold.2+0x52/0x52 [ 589.963715] ? __radix_tree_lookup+0x3dd/0x6e0 [ 589.968300] should_fail.cold.4+0xa/0x1a [ 589.972350] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 589.977444] ? find_held_lock+0x36/0x1c0 [ 589.981500] ? find_held_lock+0x36/0x1c0 [ 589.985564] ? check_same_owner+0x340/0x340 [ 589.989875] ? rcu_note_context_switch+0x730/0x730 [ 589.994801] __alloc_pages_nodemask+0x36e/0xdb0 [ 589.999481] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 590.004486] ? trace_hardirqs_on+0x10/0x10 [ 590.008712] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 590.013715] ? percpu_counter_add_batch+0xf2/0x150 [ 590.018642] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 590.023647] ? __vm_enough_memory+0x590/0x980 [ 590.028131] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 590.033653] alloc_pages_vma+0xdd/0x540 [ 590.037617] shmem_alloc_page+0xa8/0x190 [ 590.041672] ? shmem_swapin+0x230/0x230 [ 590.045645] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 590.050651] ? percpu_counter_add_batch+0xf2/0x150 [ 590.055569] shmem_alloc_and_acct_page+0x1f1/0x820 [ 590.060486] ? shmem_alloc_hugepage+0x4e0/0x4e0 [ 590.065228] ? do_raw_spin_unlock+0xa7/0x2f0 [ 590.069619] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 590.074188] ? _raw_spin_unlock_irq+0x27/0x70 [ 590.078676] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 590.083682] shmem_getpage_gfp+0x6ea/0x41e0 [ 590.088001] ? shmem_writepage+0x1380/0x1380 [ 590.092410] ? print_usage_bug+0xc0/0xc0 [ 590.096459] ? print_usage_bug+0xc0/0xc0 [ 590.100504] ? print_usage_bug+0xc0/0xc0 [ 590.104556] ? print_usage_bug+0xc0/0xc0 [ 590.108628] ? __lock_acquire+0x7fc/0x5020 [ 590.112849] ? __lock_acquire+0x7fc/0x5020 [ 590.117081] ? trace_hardirqs_on+0x10/0x10 [ 590.121302] ? print_usage_bug+0xc0/0xc0 [ 590.125345] ? __lock_acquire+0x7fc/0x5020 [ 590.129563] ? page_add_new_anon_rmap+0x870/0x870 [ 590.134400] ? print_usage_bug+0xc0/0xc0 [ 590.138445] ? print_usage_bug+0xc0/0xc0 [ 590.142491] ? print_usage_bug+0xc0/0xc0 [ 590.146544] ? print_usage_bug+0xc0/0xc0 [ 590.150591] ? __lock_acquire+0x7fc/0x5020 [ 590.154812] ? lock_acquire+0x1e4/0x540 [ 590.158781] ? alloc_set_pte+0x1027/0x1620 [ 590.163013] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 590.168543] ? page_mapping+0x44f/0x5e0 [ 590.172504] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 590.178037] ? mark_page_accessed+0x672/0xd30 [ 590.182518] ? shmem_parse_options.cold.50+0x49/0x49 [ 590.187617] ? activate_page+0x9a0/0x9a0 [ 590.191665] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 590.197187] ? __set_page_dirty_no_writeback+0x14a/0x290 [ 590.202622] ? do_writepages+0x1a0/0x1a0 [ 590.206690] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 590.211688] ? sanity+0x238/0x330 [ 590.215127] ? do_writepages+0x1a0/0x1a0 [ 590.219265] ? kasan_check_write+0x14/0x20 [ 590.223492] ? copy_page_to_iter+0x534/0xf50 [ 590.227895] ? rcu_note_context_switch+0x730/0x730 [ 590.232814] ? check_same_owner+0x340/0x340 [ 590.237120] ? __save_stack_trace+0x8d/0xf0 [ 590.241438] shmem_file_read_iter+0x39f/0x1090 [ 590.246024] ? shmem_fallocate+0x12e0/0x12e0 [ 590.250431] ? lock_downgrade+0x8f0/0x8f0 [ 590.254568] ? kasan_check_read+0x11/0x20 [ 590.258699] ? rcu_is_watching+0x8c/0x150 [ 590.262829] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 590.267222] ? __lockdep_init_map+0x105/0x590 [ 590.271703] ? lockdep_init_map+0x9/0x10 [ 590.275748] ? debug_mutex_init+0x2d/0x60 [ 590.279881] ? __mutex_init+0x1f7/0x290 [ 590.283837] ? rcu_pm_notify+0xc0/0xc0 [ 590.287718] ? __ia32_sys_membarrier+0x150/0x150 [ 590.292460] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 590.297980] ? fsnotify+0xbb4/0x14e0 [ 590.301680] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 590.306678] ? iov_iter_pipe+0xc2/0x2f0 [ 590.310640] generic_file_splice_read+0x5cd/0x9d0 [ 590.315474] ? add_to_pipe+0x360/0x360 [ 590.319705] ? rw_verify_area+0x118/0x360 [ 590.323838] ? add_to_pipe+0x360/0x360 [ 590.327712] do_splice_to+0x12e/0x190 [ 590.331501] splice_direct_to_actor+0x270/0x8f0 [ 590.336160] ? pipe_to_sendpage+0x400/0x400 [ 590.340470] ? do_splice_to+0x190/0x190 [ 590.344432] ? rw_verify_area+0x118/0x360 [ 590.348576] do_splice_direct+0x2d4/0x420 [ 590.352722] ? splice_direct_to_actor+0x8f0/0x8f0 [ 590.357564] ? rw_verify_area+0x118/0x360 [ 590.361702] do_sendfile+0x623/0xe20 [ 590.365405] ? do_compat_pwritev64+0x1c0/0x1c0 [ 590.369980] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 590.375502] ? _copy_from_user+0xdf/0x150 [ 590.379732] __x64_sys_sendfile64+0x15d/0x250 [ 590.384211] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 590.388787] ? do_syscall_64+0x9a/0x820 [ 590.392758] do_syscall_64+0x1b9/0x820 [ 590.396629] ? finish_task_switch+0x1d3/0x870 [ 590.401129] ? syscall_return_slowpath+0x5e0/0x5e0 [ 590.406045] ? syscall_return_slowpath+0x31d/0x5e0 [ 590.410978] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 590.416329] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 590.421168] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 590.426341] RIP: 0033:0x455a79 [ 590.429514] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 590.448737] RSP: 002b:00007f6aec1acc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 590.456440] RAX: ffffffffffffffda RBX: 00007f6aec1ad6d4 RCX: 0000000000455a79 [ 590.463696] RDX: 0000000020d83ff8 RSI: 0000000000000016 RDI: 0000000000000015 15:13:53 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:13:53 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0xfec0000000000000}, 0x1c) [ 590.470956] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 590.478209] R10: 00008000fffffffe R11: 0000000000000246 R12: 0000000000000017 [ 590.485463] R13: 00000000004c0d39 R14: 00000000004d1340 R15: 0000000000000010 15:13:53 executing program 6 (fault-call:7 fault-nth:17): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:53 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0xe) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f00000000c0)={'icmp6\x00'}, &(0x7f0000000100)=0x1e) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) 15:13:53 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0xf0ffffffffffff}, 0x1c) 15:13:53 executing program 4 (fault-call:3 fault-nth:0): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:13:53 executing program 0: r0 = socket$inet6(0xa, 0xfffffffffffffffe, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xe, 0x7, 0x1) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 15:13:53 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x5450, &(0x7f0000000180)={r4}) [ 590.694728] FAULT_INJECTION: forcing a failure. [ 590.694728] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 590.706640] CPU: 1 PID: 7067 Comm: syz-executor6 Not tainted 4.18.0-rc4+ #143 [ 590.713923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 590.723280] Call Trace: [ 590.725864] dump_stack+0x1c9/0x2b4 [ 590.729487] ? dump_stack_print_info.cold.2+0x52/0x52 [ 590.734668] ? zap_class+0x740/0x740 [ 590.738375] should_fail.cold.4+0xa/0x1a [ 590.742437] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 590.747530] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 590.752538] ? find_held_lock+0x36/0x1c0 [ 590.756589] ? find_held_lock+0x36/0x1c0 [ 590.760650] ? check_same_owner+0x340/0x340 [ 590.764962] ? rcu_note_context_switch+0x730/0x730 [ 590.769886] __alloc_pages_nodemask+0x36e/0xdb0 [ 590.774545] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 590.779550] ? trace_hardirqs_on+0x10/0x10 [ 590.783795] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 590.788806] ? percpu_counter_add_batch+0xf2/0x150 [ 590.793727] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 590.798819] ? __vm_enough_memory+0x590/0x980 [ 590.803306] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 590.808829] alloc_pages_vma+0xdd/0x540 [ 590.812795] shmem_alloc_page+0xa8/0x190 [ 590.816847] ? shmem_swapin+0x230/0x230 [ 590.820824] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 590.825829] ? percpu_counter_add_batch+0xf2/0x150 [ 590.830748] shmem_alloc_and_acct_page+0x1f1/0x820 [ 590.835672] ? shmem_alloc_hugepage+0x4e0/0x4e0 [ 590.840331] ? do_raw_spin_unlock+0xa7/0x2f0 [ 590.844726] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 590.849299] ? _raw_spin_unlock_irq+0x27/0x70 [ 590.853786] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 590.858882] shmem_getpage_gfp+0x6ea/0x41e0 [ 590.863190] ? zap_class+0x740/0x740 [ 590.866902] ? shmem_writepage+0x1380/0x1380 [ 590.871301] ? print_usage_bug+0xc0/0xc0 [ 590.875349] ? print_usage_bug+0xc0/0xc0 [ 590.879399] ? print_usage_bug+0xc0/0xc0 [ 590.883454] ? __lock_acquire+0x7fc/0x5020 [ 590.887689] ? __lock_acquire+0x7fc/0x5020 [ 590.891922] ? trace_hardirqs_on+0x10/0x10 [ 590.896148] ? print_usage_bug+0xc0/0xc0 [ 590.900195] ? __lock_acquire+0x7fc/0x5020 [ 590.904413] ? page_add_new_anon_rmap+0x870/0x870 [ 590.909243] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 590.914245] ? print_usage_bug+0xc0/0xc0 [ 590.918290] ? print_usage_bug+0xc0/0xc0 [ 590.922336] ? print_usage_bug+0xc0/0xc0 [ 590.926385] ? perf_trace_lock+0xde/0x920 [ 590.930522] ? print_usage_bug+0xc0/0xc0 [ 590.934580] ? zap_class+0x740/0x740 [ 590.938276] ? __lock_acquire+0x7fc/0x5020 [ 590.942497] ? lock_acquire+0x1e4/0x540 [ 590.946471] ? zap_class+0x740/0x740 [ 590.950169] ? zap_class+0x740/0x740 [ 590.953870] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 590.959394] ? page_mapping+0x44f/0x5e0 [ 590.963372] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 590.968893] ? mark_page_accessed+0x672/0xd30 [ 590.973373] ? shmem_parse_options.cold.50+0x49/0x49 [ 590.978468] ? activate_page+0x9a0/0x9a0 [ 590.982525] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 590.988049] ? __set_page_dirty_no_writeback+0x14a/0x290 [ 590.993492] ? do_writepages+0x1a0/0x1a0 [ 590.997545] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 591.002543] ? sanity+0x238/0x330 [ 591.005985] ? do_writepages+0x1a0/0x1a0 [ 591.010046] ? kasan_check_write+0x14/0x20 [ 591.014276] ? copy_page_to_iter+0x534/0xf50 [ 591.018857] ? rcu_note_context_switch+0x730/0x730 [ 591.023769] ? check_same_owner+0x340/0x340 [ 591.028076] ? __save_stack_trace+0x8d/0xf0 [ 591.032394] shmem_file_read_iter+0x39f/0x1090 [ 591.036975] ? shmem_fallocate+0x12e0/0x12e0 [ 591.041371] ? lock_downgrade+0x8f0/0x8f0 [ 591.045510] ? rcu_is_watching+0x8c/0x150 [ 591.049641] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 591.054040] ? __lockdep_init_map+0x105/0x590 [ 591.058523] ? lockdep_init_map+0x9/0x10 [ 591.062569] ? debug_mutex_init+0x2d/0x60 [ 591.066703] ? __mutex_init+0x1f7/0x290 [ 591.070668] ? rcu_pm_notify+0xc0/0xc0 [ 591.074541] ? __ia32_sys_membarrier+0x150/0x150 [ 591.079286] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 591.084809] ? fsnotify+0xbb4/0x14e0 [ 591.088514] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 591.093515] ? iov_iter_pipe+0xc2/0x2f0 [ 591.097479] generic_file_splice_read+0x5cd/0x9d0 [ 591.102311] ? add_to_pipe+0x360/0x360 [ 591.106205] ? rw_verify_area+0x118/0x360 [ 591.110338] ? add_to_pipe+0x360/0x360 [ 591.114213] do_splice_to+0x12e/0x190 [ 591.118002] splice_direct_to_actor+0x270/0x8f0 [ 591.122662] ? pipe_to_sendpage+0x400/0x400 [ 591.126972] ? do_splice_to+0x190/0x190 [ 591.130932] ? rw_verify_area+0x118/0x360 [ 591.135076] do_splice_direct+0x2d4/0x420 [ 591.139211] ? splice_direct_to_actor+0x8f0/0x8f0 [ 591.144045] ? rw_verify_area+0x118/0x360 [ 591.148179] do_sendfile+0x623/0xe20 [ 591.151887] ? do_compat_pwritev64+0x1c0/0x1c0 [ 591.156477] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 591.162010] ? _copy_from_user+0xdf/0x150 [ 591.166152] __x64_sys_sendfile64+0x15d/0x250 [ 591.170641] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 591.175210] ? do_syscall_64+0x9a/0x820 [ 591.179182] do_syscall_64+0x1b9/0x820 [ 591.183074] ? syscall_slow_exit_work+0x500/0x500 [ 591.188650] ? syscall_return_slowpath+0x5e0/0x5e0 [ 591.193572] ? syscall_return_slowpath+0x31d/0x5e0 [ 591.198495] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 591.203850] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 591.208684] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 591.213856] RIP: 0033:0x455a79 [ 591.217028] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 591.236281] RSP: 002b:00007f6aec1acc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 591.243975] RAX: ffffffffffffffda RBX: 00007f6aec1ad6d4 RCX: 0000000000455a79 [ 591.251251] RDX: 0000000020d83ff8 RSI: 0000000000000016 RDI: 0000000000000015 [ 591.258507] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 591.265764] R10: 00008000fffffffe R11: 0000000000000246 R12: 0000000000000017 [ 591.273025] R13: 00000000004c0d39 R14: 00000000004d1340 R15: 0000000000000011 [ 591.307872] FAULT_INJECTION: forcing a failure. [ 591.307872] name failslab, interval 1, probability 0, space 0, times 0 [ 591.319348] CPU: 1 PID: 7080 Comm: syz-executor4 Not tainted 4.18.0-rc4+ #143 [ 591.326635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 591.335996] Call Trace: [ 591.338601] dump_stack+0x1c9/0x2b4 [ 591.342248] ? dump_stack_print_info.cold.2+0x52/0x52 [ 591.347493] should_fail.cold.4+0xa/0x1a [ 591.351553] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 591.356682] ? __fget+0x414/0x670 [ 591.360169] ? find_held_lock+0x36/0x1c0 [ 591.364250] ? check_same_owner+0x340/0x340 [ 591.368564] ? rcu_note_context_switch+0x730/0x730 [ 591.373492] __should_failslab+0x124/0x180 [ 591.377715] should_failslab+0x9/0x14 [ 591.381527] __kmalloc_track_caller+0x2c4/0x760 [ 591.386189] ? __check_object_size+0x9d/0x5f2 [ 591.390676] ? map_update_elem+0x24a/0xc90 [ 591.394906] memdup_user+0x2c/0xa0 [ 591.398453] map_update_elem+0x24a/0xc90 [ 591.402507] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 591.408039] __x64_sys_bpf+0x32d/0x510 [ 591.411913] ? bpf_prog_get+0x20/0x20 [ 591.415709] ? do_syscall_64+0x9a/0x820 [ 591.419693] do_syscall_64+0x1b9/0x820 [ 591.423567] ? finish_task_switch+0x1d3/0x870 [ 591.428052] ? syscall_return_slowpath+0x5e0/0x5e0 [ 591.432972] ? syscall_return_slowpath+0x31d/0x5e0 [ 591.437897] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 591.443251] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 591.448086] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 591.453258] RIP: 0033:0x455a79 [ 591.456431] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 591.475713] RSP: 002b:00007f04238b9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 591.483408] RAX: ffffffffffffffda RBX: 00007f04238ba6d4 RCX: 0000000000455a79 [ 591.490663] RDX: 0000000000000020 RSI: 0000000020000440 RDI: 0000000000000002 [ 591.497918] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 15:13:54 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x8030ae7c, 0xa07001) [ 591.505172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 591.512426] R13: 00000000004bb75d R14: 00000000004c8b50 R15: 0000000000000000 15:13:54 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") ioctl$sock_ifreq(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 15:13:54 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r2 = syz_open_dev$admmidi(&(0x7f0000001180)='/dev/admmidi#\x00', 0x6, 0x2000) ioctl$TIOCSTI(r2, 0x5412, 0x4) r3 = openat$cgroup_ro(r2, &(0x7f0000001240)='cpuset.effective_mems\x00', 0x0, 0x0) accept$unix(r2, &(0x7f0000001280), &(0x7f0000001300)=0x6e) getsockopt$inet6_dccp_int(r1, 0x21, 0x2, &(0x7f00000013c0), &(0x7f0000001200)=0x4) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000001400)=""/66) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000001340)={0xda22, 0x100, 0x1f, {}, 0x200, 0x2}) semget(0x2, 0x2, 0x4) flistxattr(r0, &(0x7f0000000180)=""/4096, 0x1000) ioctl$int_out(r0, 0x80804531, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000000c0)=0x100000001, 0x4) 15:13:54 executing program 6 (fault-call:7 fault-nth:18): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:54 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0xfeffffff00000000}, 0x1c) 15:13:54 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200080, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)=0xab) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000002c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:13:54 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x17) 15:13:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x121000, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) ioctl(r1, 0xfffffffffffffffa, &(0x7f00000000c0)="025cc83d6d345f8f762070") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000240)={0x10}, 0x33, &(0x7f0000000000)={&(0x7f0000000200)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x8, 0xc, [{0x4}]}]}, 0x28}, 0x1}, 0x0) 15:13:54 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0xc0189436, &(0x7f0000000180)={r4}) 15:13:54 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={r2, 0xbf}, &(0x7f0000000140)=0x8) 15:13:54 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x200000dc) [ 591.765328] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.771799] bridge0: port 1(bridge_slave_0) entered forwarding state 15:13:55 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4, 0xfffffdfd}) 15:13:55 executing program 7: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) [ 591.843092] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.849580] bridge0: port 1(bridge_slave_0) entered forwarding state 15:13:55 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:13:55 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='dctcp\x00', 0x6) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e319aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0001c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x0, &(0x7f0000e66000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') recvfrom$inet(r0, &(0x7f0000000080)=""/218, 0xfe7c, 0x0, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) r1 = gettid() r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x8000, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f00000002c0)={0x42, 0x3, 0x0, {0x4, 0x21, 0x0, 'selfvboxnet0$:)]selinuxppp1nodev%'}}, 0x42) syz_open_procfs$namespace(r1, &(0x7f00000001c0)='ns/ipc\x00') shutdown(r0, 0x1) 15:13:55 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2, 0x11, r3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x0, 0x0) bind$netlink(r4, &(0x7f0000000480)={0x10, 0x0, 0x25dfdbff}, 0xc) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = socket(0xa, 0x1, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)="6e6f646576292f9573656c6670707031776c616e31776c616e312f5e00", 0xffffffffffffff9c}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000400)={0x3, 0x0, &(0x7f0000000200)=""/227, &(0x7f0000000300)=""/25, &(0x7f0000000340)=""/144, 0x3000}) splice(r0, &(0x7f0000000000), r5, &(0x7f0000000080), 0x81, 0x1) getsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$sock_ifreq(r5, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 15:13:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x100, @empty, 0x8}, 0x1c) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x8030ae7c, 0xa07001) socket$inet6(0xa, 0x800, 0xffffffff) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 15:13:55 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f0000001400)='setgroups\x00') dup2(r0, r1) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/188, 0xbc}, {&(0x7f00000000c0)=""/203, 0xcb}, {&(0x7f00000002c0)=""/235, 0xeb}], 0x3) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f00000003c0)={'icmp\x00'}, &(0x7f0000000400)=0x1e) 15:13:55 executing program 7: r0 = socket$inet6(0xa, 0x200000000000000a, 0x8000) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$netlink(r2, &(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x81010}, 0xc) r3 = syz_open_pts(0xffffffffffffff9c, 0x10200) ioctl$VT_DISALLOCATE(r3, 0x5608) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) socketpair$inet6(0xa, 0x1, 0x7, &(0x7f0000000140)) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) [ 592.245863] FAULT_INJECTION: forcing a failure. [ 592.245863] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 592.257930] CPU: 0 PID: 7150 Comm: syz-executor6 Not tainted 4.18.0-rc4+ #143 [ 592.265221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 592.274580] Call Trace: [ 592.277187] dump_stack+0x1c9/0x2b4 [ 592.280838] ? dump_stack_print_info.cold.2+0x52/0x52 [ 592.286044] ? __radix_tree_lookup+0x3dd/0x6e0 [ 592.290647] should_fail.cold.4+0xa/0x1a [ 592.294705] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 592.299805] ? find_held_lock+0x36/0x1c0 [ 592.303868] ? check_same_owner+0x340/0x340 [ 592.308175] ? rcu_note_context_switch+0x730/0x730 [ 592.313098] __alloc_pages_nodemask+0x36e/0xdb0 [ 592.317760] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 592.322768] ? trace_hardirqs_on+0x10/0x10 [ 592.326998] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 592.332026] ? percpu_counter_add_batch+0xf2/0x150 [ 592.336954] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 592.341966] ? __vm_enough_memory+0x590/0x980 [ 592.346453] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 592.351989] alloc_pages_vma+0xdd/0x540 [ 592.356677] shmem_alloc_page+0xa8/0x190 [ 592.360728] ? shmem_swapin+0x230/0x230 [ 592.364714] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 592.369716] ? percpu_counter_add_batch+0xf2/0x150 [ 592.374637] shmem_alloc_and_acct_page+0x1f1/0x820 [ 592.379579] ? shmem_alloc_hugepage+0x4e0/0x4e0 [ 592.384236] ? do_raw_spin_unlock+0xa7/0x2f0 [ 592.388630] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 592.393203] ? _raw_spin_unlock_irq+0x27/0x70 [ 592.397688] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 592.402692] shmem_getpage_gfp+0x6ea/0x41e0 [ 592.407016] ? shmem_writepage+0x1380/0x1380 [ 592.411417] ? print_usage_bug+0xc0/0xc0 [ 592.415471] ? print_usage_bug+0xc0/0xc0 [ 592.419531] ? print_usage_bug+0xc0/0xc0 [ 592.423589] ? __lock_acquire+0x7fc/0x5020 [ 592.427815] ? __lock_acquire+0x7fc/0x5020 [ 592.432046] ? trace_hardirqs_on+0x10/0x10 [ 592.436275] ? print_usage_bug+0xc0/0xc0 [ 592.440321] ? __lock_acquire+0x7fc/0x5020 [ 592.444549] ? page_add_new_anon_rmap+0x870/0x870 [ 592.449385] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 592.454387] ? print_usage_bug+0xc0/0xc0 [ 592.458432] ? print_usage_bug+0xc0/0xc0 [ 592.462478] ? print_usage_bug+0xc0/0xc0 [ 592.466527] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 592.471353] ? print_usage_bug+0xc0/0xc0 [ 592.475417] ? perf_trace_lock+0x920/0x920 [ 592.479636] ? perf_trace_lock+0x920/0x920 [ 592.483861] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 592.489383] ? page_mapping+0x44f/0x5e0 [ 592.493343] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 592.498865] ? mark_page_accessed+0x672/0xd30 [ 592.503347] ? shmem_parse_options.cold.50+0x49/0x49 [ 592.508435] ? activate_page+0x9a0/0x9a0 [ 592.512483] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 592.518007] ? __set_page_dirty_no_writeback+0x14a/0x290 [ 592.523448] ? do_writepages+0x1a0/0x1a0 [ 592.527501] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 592.532503] ? sanity+0x238/0x330 [ 592.535943] ? do_writepages+0x1a0/0x1a0 [ 592.540002] ? kasan_check_write+0x14/0x20 [ 592.544225] ? copy_page_to_iter+0x534/0xf50 [ 592.548634] ? rcu_note_context_switch+0x730/0x730 [ 592.553546] ? check_same_owner+0x340/0x340 [ 592.557857] ? __save_stack_trace+0x8d/0xf0 [ 592.562170] shmem_file_read_iter+0x39f/0x1090 [ 592.566752] ? shmem_fallocate+0x12e0/0x12e0 [ 592.571150] ? lock_downgrade+0x8f0/0x8f0 [ 592.575301] ? kasan_check_read+0x11/0x20 [ 592.579442] ? rcu_is_watching+0x8c/0x150 [ 592.583572] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 592.587965] ? __lockdep_init_map+0x105/0x590 [ 592.592446] ? lockdep_init_map+0x9/0x10 [ 592.596493] ? debug_mutex_init+0x2d/0x60 [ 592.600625] ? __mutex_init+0x1f7/0x290 [ 592.604589] ? rcu_pm_notify+0xc0/0xc0 [ 592.608466] ? __ia32_sys_membarrier+0x150/0x150 [ 592.613206] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 592.618725] ? fsnotify+0xbb4/0x14e0 [ 592.622425] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 592.627425] ? iov_iter_pipe+0xc2/0x2f0 [ 592.631387] generic_file_splice_read+0x5cd/0x9d0 [ 592.636216] ? add_to_pipe+0x360/0x360 [ 592.640101] ? rw_verify_area+0x118/0x360 [ 592.644237] ? add_to_pipe+0x360/0x360 [ 592.648119] do_splice_to+0x12e/0x190 [ 592.651911] splice_direct_to_actor+0x270/0x8f0 [ 592.656568] ? pipe_to_sendpage+0x400/0x400 [ 592.660878] ? do_splice_to+0x190/0x190 [ 592.664855] ? rw_verify_area+0x118/0x360 [ 592.669001] do_splice_direct+0x2d4/0x420 [ 592.673144] ? splice_direct_to_actor+0x8f0/0x8f0 [ 592.677974] ? rw_verify_area+0x118/0x360 [ 592.682107] do_sendfile+0x623/0xe20 [ 592.685814] ? do_compat_pwritev64+0x1c0/0x1c0 [ 592.690397] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 592.695941] ? _copy_from_user+0xdf/0x150 [ 592.700088] __x64_sys_sendfile64+0x15d/0x250 [ 592.704567] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 592.709137] ? do_syscall_64+0x9a/0x820 [ 592.713102] do_syscall_64+0x1b9/0x820 [ 592.716971] ? finish_task_switch+0x1d3/0x870 [ 592.721453] ? syscall_return_slowpath+0x5e0/0x5e0 [ 592.726368] ? syscall_return_slowpath+0x31d/0x5e0 [ 592.731286] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 592.736638] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 592.741469] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 592.746641] RIP: 0033:0x455a79 [ 592.749812] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 592.769080] RSP: 002b:00007f6aec1acc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 592.776775] RAX: ffffffffffffffda RBX: 00007f6aec1ad6d4 RCX: 0000000000455a79 [ 592.784039] RDX: 0000000020d83ff8 RSI: 0000000000000016 RDI: 0000000000000015 15:13:55 executing program 6 (fault-call:7 fault-nth:19): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:55 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3, 0x80703) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = gettid() process_vm_readv(r2, &(0x7f0000000300)=[{&(0x7f0000000140)=""/161, 0xa1}, {&(0x7f0000000080)=""/12, 0xc}, {&(0x7f0000000200)=""/82, 0x52}, {&(0x7f00000002c0)}], 0x4, &(0x7f0000000500)=[{&(0x7f0000000340)=""/223, 0xdf}, {&(0x7f0000000440)=""/148, 0x94}], 0x2, 0x0) mkdir(&(0x7f00001a3000)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, 0x0) 15:13:55 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0xf, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:13:55 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4, 0x100000000000000}) 15:13:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x8030ae7c, 0xa07001) 15:13:55 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) 15:13:55 executing program 0: socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_hci(r0, 0x0, 0x0, &(0x7f0000000100)=""/85, &(0x7f0000000080)=0x55) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r2 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) ioctl(r0, 0x0, &(0x7f0000000180)="ebd32a554840d8da8b35d1824d62cadd1bf16c26383d2097599648901bc555da8094163d29e664a1f81ee30efd4274d5ca8a5b9c83468b515f98621c3732c9c6ebc93062fa0ecf9ed8e300fcbca5342ed60d6734e4c2c9d741723003b520fb153eb10928bf7abfb562332e1bdc51522b343e53d86c86c573ef4a7c96f1e82424") [ 592.791293] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 592.798565] R10: 00008000fffffffe R11: 0000000000000246 R12: 0000000000000017 [ 592.805828] R13: 00000000004c0d39 R14: 00000000004d1340 R15: 0000000000000012 [ 592.876732] 9pnet_virtio: no channels available for device ./file0 [ 592.916462] FAULT_INJECTION: forcing a failure. 15:13:56 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) 15:13:56 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0xe, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) [ 592.916462] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 592.928413] CPU: 0 PID: 7189 Comm: syz-executor6 Not tainted 4.18.0-rc4+ #143 [ 592.935695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 592.945050] Call Trace: [ 592.947657] dump_stack+0x1c9/0x2b4 [ 592.951299] ? dump_stack_print_info.cold.2+0x52/0x52 [ 592.956498] ? __radix_tree_lookup+0x3dd/0x6e0 [ 592.961104] should_fail.cold.4+0xa/0x1a [ 592.965182] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 592.970477] ? __sanitizer_cov_trace_cmp4+0x16/0x20 15:13:56 executing program 1: r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, r0) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, r0) sysfs$2(0x2, 0x8, &(0x7f0000000000)=""/4096) r1 = socket$inet6(0xa, 0x80000, 0xe30) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001000)={r1}) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x3) r3 = request_key(&(0x7f0000001040)='pkcs7_test\x00', &(0x7f0000001080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000010c0)="2b7d6367726f7570706f7369785f61636c5f6163636573737365637572697479cd5d2f00", 0xfffffffffffffff8) keyctl$setperm(0x5, r3, 0x10002000) r4 = getgid() setfsgid(r4) prctl$setmm(0x23, 0x6, &(0x7f0000ffc000/0x3000)=nil) ustat(0x4, &(0x7f0000001100)) r5 = openat(0xffffffffffffffff, &(0x7f0000001140)='./file0\x00', 0x4100, 0x34) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001180)={0xffffffffffffffff}, 0x117, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000001200)={0x7, 0x8, 0xfa00, {r6, 0x1498}}, 0x10) munlockall() getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000001240)=@sack_info={0x0, 0x6, 0x3f}, &(0x7f0000001280)=0xc) setsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f00000012c0)=@assoc_id=r7, 0x4) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000001380)={@ipx={0x4, 0x8000, 0x3, "1c647699507d", 0x8}, {&(0x7f0000001300)=""/19, 0x13}, &(0x7f0000001340)}, 0xa0) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000001440)={@local}, &(0x7f0000001480)=0x14) r8 = accept$packet(r5, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000001500)=0x14) r9 = fcntl$getown(r5, 0x9) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000001600)={{0x0, 0x7, 0xffff, 0x7, 'syz0\x00', 0x5}, 0x4, 0x6, 0x80000000, r9, 0xa, 0x8, 'syz1\x00', &(0x7f0000001540)=["2b7d6367726f7570706f7369785f61636c5f6163636573737365637572697479cd5d2f00", 'pkcs7_test\x00', ':security\x00', 'pkcs7_test\x00', 'pkcs7_test\x00', '/\x00', '#GPL)[self{\x00', "2b7d6367726f7570706f7369785f61636c5f6163636573737365637572697479cd5d2f00", 'pkcs7_test\x00', 'mime_type{\x00'], 0x97, [], [0x1aad0812, 0x4, 0x3, 0x8001]}) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000001740)={r7, 0x1, 0x2, [0x5, 0x8000]}, 0xc) getsockopt$inet6_buf(r5, 0x29, 0xff, &(0x7f0000001780)=""/168, &(0x7f0000001840)=0xa8) ioctl$PERF_EVENT_IOC_DISABLE(r5, 0x2401, 0x52) getsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000001880), &(0x7f00000018c0)=0x4) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000001900)={r7, @in6={{0xa, 0x4e20, 0x6, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}}}, &(0x7f00000019c0)=0x84) syz_open_dev$amidi(&(0x7f0000001a00)='/dev/amidi#\x00', 0x4, 0x400000) [ 592.975522] ? find_held_lock+0x36/0x1c0 [ 592.979616] ? check_same_owner+0x340/0x340 [ 592.983965] ? rcu_note_context_switch+0x730/0x730 [ 592.988925] __alloc_pages_nodemask+0x36e/0xdb0 [ 592.993617] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 592.998654] ? trace_hardirqs_on+0x10/0x10 [ 593.002917] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 593.007951] ? percpu_counter_add_batch+0xf2/0x150 [ 593.012898] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 593.017928] ? __vm_enough_memory+0x590/0x980 [ 593.022455] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 593.028008] alloc_pages_vma+0xdd/0x540 [ 593.032012] shmem_alloc_page+0xa8/0x190 [ 593.036083] ? shmem_swapin+0x230/0x230 [ 593.040093] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 593.045122] ? percpu_counter_add_batch+0xf2/0x150 [ 593.050075] shmem_alloc_and_acct_page+0x1f1/0x820 [ 593.055027] ? shmem_alloc_hugepage+0x4e0/0x4e0 [ 593.059699] ? do_raw_spin_unlock+0xa7/0x2f0 [ 593.064103] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 593.068689] ? _raw_spin_unlock_irq+0x27/0x70 [ 593.073187] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 593.078204] shmem_getpage_gfp+0x6ea/0x41e0 [ 593.082560] ? shmem_writepage+0x1380/0x1380 [ 593.086982] ? print_usage_bug+0xc0/0xc0 [ 593.091044] ? print_usage_bug+0xc0/0xc0 [ 593.095101] ? print_usage_bug+0xc0/0xc0 [ 593.099166] ? __lock_acquire+0x7fc/0x5020 [ 593.103397] ? __lock_acquire+0x7fc/0x5020 [ 593.107629] ? trace_hardirqs_on+0x10/0x10 [ 593.111861] ? print_usage_bug+0xc0/0xc0 [ 593.115913] ? __lock_acquire+0x7fc/0x5020 [ 593.120146] ? page_add_new_anon_rmap+0x870/0x870 [ 593.124976] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 593.129992] ? print_usage_bug+0xc0/0xc0 [ 593.134049] ? print_usage_bug+0xc0/0xc0 [ 593.138098] ? print_usage_bug+0xc0/0xc0 [ 593.142153] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 593.146988] ? print_usage_bug+0xc0/0xc0 [ 593.151053] ? perf_trace_lock+0x920/0x920 [ 593.155276] ? perf_trace_lock+0x920/0x920 [ 593.159507] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 593.165041] ? page_mapping+0x44f/0x5e0 [ 593.169020] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 593.174553] ? mark_page_accessed+0x672/0xd30 [ 593.179055] ? shmem_parse_options.cold.50+0x49/0x49 [ 593.184153] ? activate_page+0x9a0/0x9a0 [ 593.188222] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 593.193753] ? __set_page_dirty_no_writeback+0x14a/0x290 [ 593.199210] ? do_writepages+0x1a0/0x1a0 [ 593.203274] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 593.208298] ? sanity+0x238/0x330 [ 593.211743] ? do_writepages+0x1a0/0x1a0 [ 593.215805] ? kasan_check_write+0x14/0x20 [ 593.220035] ? copy_page_to_iter+0x534/0xf50 [ 593.224456] ? rcu_note_context_switch+0x730/0x730 [ 593.229373] ? check_same_owner+0x340/0x340 [ 593.233684] ? __save_stack_trace+0x8d/0xf0 [ 593.238010] shmem_file_read_iter+0x39f/0x1090 [ 593.242615] ? shmem_fallocate+0x12e0/0x12e0 [ 593.247025] ? lock_downgrade+0x8f0/0x8f0 [ 593.251188] ? kasan_check_read+0x11/0x20 [ 593.255322] ? rcu_is_watching+0x8c/0x150 [ 593.259460] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 593.263858] ? __lockdep_init_map+0x105/0x590 [ 593.268347] ? lockdep_init_map+0x9/0x10 [ 593.272395] ? debug_mutex_init+0x2d/0x60 [ 593.276531] ? __mutex_init+0x1f7/0x290 [ 593.280498] ? rcu_pm_notify+0xc0/0xc0 [ 593.284376] ? __ia32_sys_membarrier+0x150/0x150 [ 593.289121] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 593.294650] ? fsnotify+0xbb4/0x14e0 [ 593.298354] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 593.303358] ? iov_iter_pipe+0xc2/0x2f0 [ 593.307341] generic_file_splice_read+0x5cd/0x9d0 [ 593.312176] ? add_to_pipe+0x360/0x360 [ 593.316069] ? rw_verify_area+0x118/0x360 [ 593.320204] ? add_to_pipe+0x360/0x360 [ 593.324080] do_splice_to+0x12e/0x190 [ 593.327875] splice_direct_to_actor+0x270/0x8f0 [ 593.332538] ? pipe_to_sendpage+0x400/0x400 [ 593.336854] ? do_splice_to+0x190/0x190 [ 593.340819] ? rw_verify_area+0x118/0x360 [ 593.344978] do_splice_direct+0x2d4/0x420 [ 593.349121] ? splice_direct_to_actor+0x8f0/0x8f0 [ 593.353957] ? rw_verify_area+0x118/0x360 [ 593.358095] do_sendfile+0x623/0xe20 [ 593.361823] ? do_compat_pwritev64+0x1c0/0x1c0 [ 593.366406] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 593.371933] ? _copy_from_user+0xdf/0x150 [ 593.376073] __x64_sys_sendfile64+0x15d/0x250 [ 593.380558] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 593.385134] ? do_syscall_64+0x9a/0x820 [ 593.389103] do_syscall_64+0x1b9/0x820 [ 593.392980] ? finish_task_switch+0x1d3/0x870 [ 593.397476] ? syscall_return_slowpath+0x5e0/0x5e0 [ 593.402406] ? syscall_return_slowpath+0x31d/0x5e0 [ 593.407329] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 593.412686] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 593.417707] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 593.422884] RIP: 0033:0x455a79 [ 593.426057] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 593.445424] RSP: 002b:00007f6aec1acc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 593.453126] RAX: ffffffffffffffda RBX: 00007f6aec1ad6d4 RCX: 0000000000455a79 [ 593.460391] RDX: 0000000020d83ff8 RSI: 0000000000000016 RDI: 0000000000000015 [ 593.467648] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 15:13:56 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000000)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) accept$unix(r1, &(0x7f0000000040), &(0x7f0000000100)=0x6e) [ 593.474906] R10: 00008000fffffffe R11: 0000000000000246 R12: 0000000000000017 [ 593.482169] R13: 00000000004c0d39 R14: 00000000004d1340 R15: 0000000000000013 15:13:56 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x100, 0x0) ioctl$KVM_GET_PIT(r0, 0xc048ae65, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") connect$pptp(r0, &(0x7f0000000100)={0x18, 0x2, {0x0, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1e) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0x8030ae7c, 0xfffffffffffffffa) 15:13:56 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cryptd(ctr-camellia-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='mounts\x00') r3 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000300)="7e4fddde9af8eebda63d9fb109556b5eec319e0327ede4423d3ad41138437d3a4c8ada3ec305fcda112f3176e1dc82f5deda4f9e6f6474f08f23e9b97925bbc97ffac6085c97410ea9319e0ebf63922fd8cd1ff99f9c7673d63c0c46bd6e12418ceafb45dc77bf9a397a45225a04464acba80b27b92f9a797800defc3dead342d553e8a36c7d6122c7c8f90f86905a2397f9329e4099c25cac7ec1f872931db8b3746ef15493b1fd995fe708d7f23e6ac79a15f43db48e1101", 0xb9, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f00000003c0)=""/122, 0x7a) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f0000000240)={0x34, 0x0, &(0x7f0000000200)}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000100)={&(0x7f0000000180)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000016c0)=""/209, 0x20001791}], 0x1, &(0x7f00000017c0)=""/201, 0xc9}, 0x0) 15:13:56 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x200, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000004c0)='fou\x00') sendmsg$FOU_CMD_GET(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0092a8", @ANYRES16=r3, @ANYBLOB="02002cbd7000fedbdf2503000000080003003c000000080003002f0000000800030087000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) getsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000400)=""/12, &(0x7f0000000600)=0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0x2c, [], 0x1, &(0x7f0000000140)=[{}], &(0x7f0000000180)=""/44}, &(0x7f00000003c0)=0x78) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) 15:13:56 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000e20000002000068e000000100000000000000000800120002000200000044afc26f000030000000020300000000000f00000000020000000000000092ab0000000000010200143b0020000000000000000000000300050000000000020000f3df0000210000000002000000"], 0x80}, 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x2, 0x202, 0xffffffffffff8001, 0x2, 0x0}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r2, 0x7, 0x20}, &(0x7f0000000140)=0xc) 15:13:56 executing program 6 (fault-call:7 fault-nth:20): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:56 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4, 0x1000000}) [ 593.707836] FAULT_INJECTION: forcing a failure. [ 593.707836] name failslab, interval 1, probability 0, space 0, times 0 [ 593.719626] CPU: 0 PID: 7223 Comm: syz-executor6 Not tainted 4.18.0-rc4+ #143 [ 593.726914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 593.736277] Call Trace: [ 593.738880] dump_stack+0x1c9/0x2b4 [ 593.742525] ? dump_stack_print_info.cold.2+0x52/0x52 [ 593.747742] should_fail.cold.4+0xa/0x1a [ 593.751819] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 593.756936] ? trace_hardirqs_on+0x10/0x10 [ 593.761176] ? print_usage_bug+0xc0/0xc0 [ 593.765252] ? graph_lock+0x170/0x170 [ 593.769056] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 593.774092] ? find_held_lock+0x36/0x1c0 [ 593.778165] ? __lock_is_held+0xb5/0x140 [ 593.782243] ? check_same_owner+0x340/0x340 [ 593.786579] ? page_mapping+0x44f/0x5e0 [ 593.790560] ? rcu_note_context_switch+0x730/0x730 [ 593.795496] ? shmem_parse_options.cold.50+0x49/0x49 [ 593.800609] __should_failslab+0x124/0x180 [ 593.804866] should_failslab+0x9/0x14 [ 593.808667] kmem_cache_alloc_node+0x272/0x780 [ 593.813244] ? print_usage_bug+0xc0/0xc0 [ 593.817294] ? find_held_lock+0x36/0x1c0 [ 593.821371] __alloc_skb+0x119/0x790 [ 593.825077] ? skb_scrub_packet+0x580/0x580 [ 593.829391] ? mark_held_locks+0xc9/0x160 [ 593.833524] ? __local_bh_enable_ip+0x161/0x230 [ 593.838180] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 593.843183] ? lock_sock_nested+0x9f/0x120 [ 593.847402] ? trace_hardirqs_on+0xd/0x10 [ 593.851533] ? __local_bh_enable_ip+0x161/0x230 [ 593.856193] kcm_sendpage+0x1053/0x1a30 [ 593.860159] ? kcm_write_msgs+0x1c90/0x1c90 [ 593.864476] ? shmem_fallocate+0x12e0/0x12e0 [ 593.868871] ? lock_downgrade+0x8f0/0x8f0 [ 593.873023] kernel_sendpage+0x93/0xf0 [ 593.876897] ? kcm_write_msgs+0x1c90/0x1c90 [ 593.881203] sock_sendpage+0x8c/0xc0 [ 593.884902] ? kernel_sendpage+0xf0/0xf0 [ 593.888949] pipe_to_sendpage+0x2d0/0x400 [ 593.893083] ? generic_pipe_buf_nosteal+0x10/0x10 [ 593.897923] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 593.903446] ? splice_from_pipe_next.part.9+0x296/0x340 [ 593.908802] ? __ia32_sys_membarrier+0x150/0x150 [ 593.913545] __splice_from_pipe+0x38e/0x7c0 [ 593.917851] ? generic_pipe_buf_nosteal+0x10/0x10 [ 593.922683] splice_from_pipe+0x1ea/0x340 [ 593.926814] ? add_to_pipe+0x360/0x360 [ 593.930688] ? generic_pipe_buf_nosteal+0x10/0x10 [ 593.935520] ? splice_shrink_spd+0xd0/0xd0 [ 593.939756] generic_splice_sendpage+0x3c/0x50 [ 593.944320] ? splice_from_pipe+0x340/0x340 [ 593.948627] direct_splice_actor+0x128/0x190 [ 593.953030] splice_direct_to_actor+0x318/0x8f0 [ 593.957683] ? pipe_to_sendpage+0x400/0x400 [ 593.961999] ? do_splice_to+0x190/0x190 [ 593.965963] ? rw_verify_area+0x118/0x360 [ 593.970097] do_splice_direct+0x2d4/0x420 [ 593.974238] ? splice_direct_to_actor+0x8f0/0x8f0 [ 593.979067] ? rw_verify_area+0x118/0x360 [ 593.983200] do_sendfile+0x623/0xe20 [ 593.986912] ? do_compat_pwritev64+0x1c0/0x1c0 [ 593.991485] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 593.997010] ? _copy_from_user+0xdf/0x150 [ 594.001150] __x64_sys_sendfile64+0x15d/0x250 [ 594.005629] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 594.010197] ? do_syscall_64+0x9a/0x820 [ 594.014159] do_syscall_64+0x1b9/0x820 [ 594.018036] ? syscall_return_slowpath+0x5e0/0x5e0 [ 594.022962] ? syscall_return_slowpath+0x31d/0x5e0 [ 594.027893] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 594.033332] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 594.038337] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 594.043512] RIP: 0033:0x455a79 [ 594.046688] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 594.065920] RSP: 002b:00007f6aec1acc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 594.073626] RAX: ffffffffffffffda RBX: 00007f6aec1ad6d4 RCX: 0000000000455a79 [ 594.080878] RDX: 0000000020d83ff8 RSI: 0000000000000016 RDI: 0000000000000015 [ 594.088128] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 594.095379] R10: 00008000fffffffe R11: 0000000000000246 R12: 0000000000000017 [ 594.102641] R13: 00000000004c0d39 R14: 00000000004d1340 R15: 0000000000000014 15:13:57 executing program 0: r0 = socket$inet6(0xa, 0x8, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) r2 = dup3(r0, 0xffffffffffffffff, 0x80000) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000000)) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 15:13:57 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x80000, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000240)={0x7, 0x1}) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = add_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000002c0)="479fc21a002d732c3e0a209c9af032c3bd8c1577bc06189a655b6e0f24f0b68f744031fe33eb0ef2dec98abc8164afd21f15d1cfac6aab415bd343f7a2e8f577b5dd151f9267cd38e9be9598d5c36796d103a17e2d2639c59c54b1e994c50f376c67de5e5935340e5233cb5607f6dc13640016e75b01b456a2c5f32e6112a477d6878749", 0x84, 0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) keyctl$search(0xa, r2, &(0x7f0000000380)='asymmetric\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a, 0x0}, r2) r3 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffb) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) keyctl$reject(0x13, r2, 0x5, 0x8, r3) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000100)="9a8ae5fa7ccb27789f3307c816c097f0ed2d74acc6d5a2cbced8d0597bbe4d68966768b0ec80a96e70ce34260033012e270abc0806a485d96b23e875768be127e817bf97ecb428608c", 0x49, r2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001400)}}, 0x20) creat(&(0x7f0000000400)='./file0\x00', 0x10) 15:13:57 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000040)) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x7fff, 0x0) ioctl$BLKPBSZGET(r3, 0x127b, &(0x7f0000000140)) 15:13:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000400)=0x641, 0x11) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000140)={{0xa, 0x4e20, 0x1, @mcast1={0xff, 0x1, [], 0x1}, 0x80000001}, {0xa, 0x4e23, 0x40, @local={0xfe, 0x80, [], 0xaa}, 0xf4}, 0x1, [0x4, 0x0, 0x222, 0xff, 0x3, 0x7fffffff, 0x8050, 0x1]}, 0x5c) sendto$inet6(r0, &(0x7f0000000100)='|', 0x1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000440)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000000)=""/250, 0xfa}, 0x2000) 15:13:57 executing program 1: r0 = accept4$packet(0xffffffffffffff9c, &(0x7f0000000080), &(0x7f0000000100)=0x14, 0x80000) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240), &(0x7f0000000180)=0x388) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x2ef, &(0x7f0000d1b000), 0x0, &(0x7f000012e000)}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r2, 0xc0045520, &(0x7f0000000140)=0x9) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x2000, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000200)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x3000, 0x1}) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000280)={0x7, 0xafdf, 0x3, 0x101}, 0x8) sendmsg$nl_generic(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f000000d379)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1800003a00001df60000126b42a1e004ecedd975a1f282dbbcbaa1668b8db05d61533d10a1d6659ca5d098dbfb9d5fc5fd943d089d040e50f8aabcce3690a8c86aae55c2705da906470dec0f85deea9ac8cbb0725dcf8f87beaabc11af1ef124d1f9570ec92758226159dec39e58e3c9cff7538b946827e93fc4c090e6a82e215a73b6a61c85e3d7955459e014109613a75096fa163b14387a0872e40355c77e53148c37fa96fae9a9c7a5a7cdd21050345581"], 0x1}, 0x1}, 0x0) 15:13:57 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) [ 594.210433] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 15:13:57 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x7, &(0x7f0000000180)="025cc83ded345f8f762070bd0c8b467e9ef11ea1063ec6f82c513a14d5561f9341d5030790c006a88b") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) r3 = getpgrp(0x0) ptrace$getsig(0x4202, r3, 0x3, &(0x7f0000000040)) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) sched_rr_get_interval(r3, &(0x7f0000000000)) 15:13:57 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4, 0xfdfdffff}) 15:13:57 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x113, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000900)={&(0x7f0000000980)=@delsa={0x28, 0x11, 0x601, 0x0, 0x0, {@in=@broadcast=0xffffffff, 0x0, 0x0, 0xf0ffffff}}, 0x28}, 0x1}, 0x0) 15:13:57 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x400, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) r3 = socket(0x6, 0xd, 0x1ff) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000a00)=0x0) stat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000b00)=[0xee01, 0xffffffffffffffff, 0xee00]) r7 = getpid() getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000001000)={{{@in6=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000001100)=0xe8) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001140)={0x0, 0x0, 0x0}, &(0x7f0000001180)=0xc) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000011c0)={0x0}, &(0x7f0000001200)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001240)={0x0, 0x0}, &(0x7f0000001280)=0xc) getgroups(0x9, &(0x7f00000012c0)=[0xee01, 0xee01, 0x0, 0xee01, 0xee00, 0x0, 0xee01, 0xee00, 0xee00]) r13 = syz_open_dev$audion(&(0x7f0000001300)='/dev/audio#\x00', 0x7, 0x500) sendmmsg$unix(r1, &(0x7f0000001940)=[{&(0x7f0000000600)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000680)="463f2afcd9fbe0e48861a8abb757f25d698c7b75bd2943e59c65da654b291c467578022e05368fd6557aaf3e8dec4f8cdb576eedea40bcbd58dfcf8774ca", 0x3e}, {&(0x7f00000006c0)="672ecacdfe12e9743957c09c80d4d634d7e493849f5a47aeed6187d58b176b2ff9233d645efe0719a4a7b672557ef73da7e31e50d2d0e5aca9a849d1d267ea06de4b2c77fbcbea8873647e97e5b28c6ab6f6000a99be09401aecdc6eda7ff5383487643d8979b8e03b6df823dcabbecff0c776dfe3286a44d6c0c8634a704581eb273863ee562472027821bd10a111b78837f1eeae2435a2994f94ce791cc61082f7adf9334cf50e253b25df0e791fa0a96551ffb3", 0xb5}, {&(0x7f0000000780)="69025d5b697ffcb200fcc813e9327f460758f7ffb0ad8d7d3d092ed8d8bf9ae648d88fae6343e9ea3b38a9cd0cb1aa77b44a65cfbf4830200ef0f7749aad02f2ab908e382c4b033f741385de255baccabfcf2f80871244ca970b3d01b3ba208cbe1f47e2c009b8259e6f1e920838b8ece281e6cbea0eddb268b431086fc62b9e52d51473c55eb8", 0x87}, {&(0x7f0000000840)="1f4dfbf8daf83f3e12f96d930291269f081e", 0x12}, {&(0x7f0000000880)="9ad31968b45c386747412dadf421164341fff8061fd98584b5e1afcbc550af4578e07681ac9562cd121dcb5660b86a19ebb50f907ab7905bb6b11046aed1ca59af5e39272b77fb25c64df52ad266be58e04bef8c323a8a3b55b23e0d91ae979150a4c1609103386c60bb14bd94425f1feb91e127434d82f46f3dbe50ee1d639f72a8b9ca32567fa2f4c83b5c358cc0f87b977df2137934445433586f78adbf5b416c939272d7eef2ea610c4cf7240837a1b6254fb99e2d1fd359a77fe2ed50a46dbe5edcc1cc0a9741bd8210d73539dbaf9a04141fc7f39918fb168f2beb944f317b9e89475c4b16142b2327e0b6", 0xee}], 0x5, &(0x7f0000000b40)=[@cred={0x20, 0x1, 0x2, r4, r5, r6}], 0x20, 0x10}, {&(0x7f0000000b80)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000f80)=[{&(0x7f0000000c00)="73397f093dead162b939c38963c2a1b7ee91da48c6249ae7ad8ba90ee0d752b8ac20d3705817e98b09780fa965ba4aea7294f6eb210a0884fdce892715181e8b04850a22424756d5b8e70bb0cc64b5bfa978278152f5961bbb4354", 0x5b}, {&(0x7f0000000c80)="430680c493277b6f1db0391642a848ae601b43da6725a7f3a7377bb9cd97b7fd6b0902b6b24823bb73291f28ac1507ad1b8559a348f6d68223b3c5b6d3c07cb724befa8c3eaf0df97695e3dda4ce2a368302374f38f9f746faa830e8ee171c93473539131f55500c109800928205b19e04f122570548b49691045785c79d6a9326281b52cccf87a68e8c42669aa13601", 0x90}, {&(0x7f0000000d40)="bce5232490de6e8a6c30cc3392beed4d88c5daf7727b39e2d2cf2f9c286670ef1c7bc13478e435290f74b3a6568bf4e941c00c01c9e3993d029b09c31056210400acce3616b25810efabe3fe945e476916b0c3443b6402818a309330563a32e375", 0x61}, {&(0x7f0000000dc0)="f0230ef856e750707866677d74fb6d7a428031b02fbe46323e79dadd3930532a527f5bba0c3d6c51cde39d609e29d589ffb7f79769970cbd050418b980c796f911670e4d555063762e0976eadad648c1ac96482bdc7ef80d53637180601a3018fea88890f388f657d9127f69db72affcf75438b38e3ba2c0dd0906f554813137288cf2c336e7ba30af2484f7ab71054455ec2154f0e11852d235ab51a838f28705ab364193a1612e8d3b4efd87f0e8d0b873c15a0d14b38c1849a6e910", 0xbd}, {&(0x7f0000000e80)="7c3a0617d03bd69f54829dda14b46f8609fc1ab27bebc22d573488b40f3c780f94f870ca66e090c211027c4c739709923474ecb43b06f65752930e307f581205b2775280e4fc9cb3939be8a2438e56af6bc72d0ddf5a102013f9db290935628d48c308a4cb98dd49f0", 0x69}, {&(0x7f0000000f00)="512d95e651269bab97444516b67cfa339ee84b11bdcb7520c2001c666595", 0x1e}, {&(0x7f0000000f40)="1c3744854da11b54ae65230d386e26fb6e2baa834e6f42ff8cde", 0x1a}], 0x7, &(0x7f0000001340)=[@cred={0x20, 0x1, 0x2, r7, r8, r9}, @rights={0x20, 0x1, 0x1, [r1, r0, r1]}, @rights={0x18, 0x1, 0x1, [r1]}, @rights={0x18, 0x1, 0x1, [r1]}, @cred={0x20, 0x1, 0x2, r10, r11, r12}, @rights={0x20, 0x1, 0x1, [r3, r1, r3, r13]}, @rights={0x20, 0x1, 0x1, [r1, r0, r3, r0]}], 0xd0}, {&(0x7f0000001440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001500)=[{&(0x7f00000014c0)="a6a1e2ce34e70d009740562e42b4883d4d", 0x11}], 0x1, 0x0, 0x0, 0x40080}, {&(0x7f0000001540)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000018c0)=[{&(0x7f00000015c0)="ffac31423dc4294c054c737db0d48e79e22717fd91ef74b0bb9c8dcaffc6fdc1e0a9544f01d6ef28d276365a98833de712c4823fd88d9b8265063a040e3e9094f5d88f0444e16930556d45d5c3", 0x4d}, {&(0x7f0000001640)="481ae0991166926204ed5313b4083c4009ba847b4d754b1e8f14541bc71f42d82d99c3e5d3213700b2fca52eb6e0d4afa2e65c545bbd4abf0a4d988cff09c98b174d3d3c50c9bcdfe79c97ebc35c006d1957151d164a8a52e091f80a75b89f9602749f194de42a86ae68535bc3dad48b3a0cf3719a27033cc3c83955214ded96160d01e61313fe96274ffa1c26f84f1e930c8b598a67ffdb0d82739045e9894d0bd75fc0762875f2890a9d8c448d", 0xae}, {&(0x7f0000001700)="d7d31a04ad4c5487be1edf3de0947d8e62dc565b9d0a6bd209a7156c86768bfe98ae45b560c199943f4898e67d0b1e172a57c6fb7beaac6e346ee92cb254cb21", 0x40}, {&(0x7f0000001740)="24824eb4f84f9c9ecb6cd0e9295bc7d97b25301f9890cf5462a6b4fcbe47daf29e2f0954651f414a85145fd7ede3b80adf33", 0x32}, {&(0x7f0000001780)="e31157591d1fba67a6b674db4f9dbb770c336fe043ad682fba49c09af18fcdb6a14adcedac2c5c37660a95699df7396aa2ccb401434dc592e559d7648c8cc0ab49ab1e04023d3ace7c5de8374bc8fb15e398f0395e56266c8766665d30892f676f1aed959693fa276d8f634d1975b5d1a5aa4cfac184e7e8c0fdfbbe9bd039a606fe32b6c99ef48dee77fb3b548c773b7cd0323141601729debfbedff10701d240e0ea75eaab8e9c96d620c2e66d4081b5cf0af876d933f1fb5c11e2a4b44571673b770d7c80f47da25e6d59997b83b938b016695fe3e1c3ad4629252df983558e1b", 0xe2}, {&(0x7f0000001880)="ebc501bc08775b740abd63f549e5951bc7df56898b372a02099bc0f8c816daded74f1325d4ae", 0x26}], 0x6, 0x0, 0x0, 0x80}], 0x4, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, &(0x7f0000000000), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x3, 0x0, 0x0, 'vcan0\x00', 'bridge0\x00', 'sit0\x00', 'team0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0x1d8, 0x1d8, 0x210, [@comment={'comment\x00', 0x100}, @statistic={'statistic\x00', 0x18}]}}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 0xffffffffffffffff}}}}, {{{0x1b, 0x0, 0x0, 'team_slave_1\x00', 'irlan0\x00', 'irlan0\x00', 'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2}, [], @random="f646793b7b39", [], 0x70, 0x70, 0xa8}}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 0xffffffffffffffff}}}}]}]}, 0x3c0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x20000140, 0x0, 0x0, 0x20000170, 0x200001a0], 0x2, &(0x7f0000000040), &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x138) 15:13:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x8030ae7c, 0xa07001) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) 15:13:57 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) r3 = accept(r1, &(0x7f0000000100)=@nfc, &(0x7f0000000040)=0x80) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000180)={0x0, 0x4}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000003c0)={r4, @in={{0x2, 0x4e24, @rand_addr=0x1ff}}}, 0x84) 15:13:57 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) ioctl$sock_ifreq(r0, 0x897f, &(0x7f0000000000)={'tunl0\x00', @ifru_ivalue=0x1ff}) 15:13:57 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x3, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:13:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 15:13:57 executing program 1: r0 = memfd_create(&(0x7f00000000c0)="70726f63ae6d696d655f74797065776c616e316e6f64657600", 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) io_cancel(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xb, 0xd, r0, &(0x7f0000000100)="1706c45e7fbed1d211b142fd644b7eb91ebb9c1b0e7c7341298f29a1f689574bb2593c604b97229cc0549bd0668d1355d4f98a3182fdbf805e9904687921e66da32b06c512b7338d967df6ac1fc1c9feb1a085d94c8fc54e41ea1a41d99a48853936b13e17b94e0d06232a478e9b5e586e8500309db15fedfba513e3fb2cfb9efabcdb3a990867f58841e5020e2a92c11f784b3e2d1746abbc06d1d5ce3673da1537f6bc92a56e894fadc7eae39ff9f5e63c2aef08ff523492", 0xb9, 0x0, 0x0, 0x0, r0}, &(0x7f0000000080)) getsockopt$sock_int(r0, 0x1, 0x3f, &(0x7f00000001c0), &(0x7f0000000200)=0x4) fstatfs(r0, &(0x7f00000002c0)=""/4096) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 15:13:57 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x131880, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x11, &(0x7f0000000140)={0x2, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}}}, 0x108) syz_emit_ethernet(0x1e, &(0x7f0000000040)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, [], {@can={0xc, {{0x4, 0x5, 0x8, 0x7}, 0x0, 0x1, 0x0, 0x0, "f0ec9a54a171a1c1"}}}}, &(0x7f0000000080)={0x0, 0x3, [0x18a, 0x76c, 0x2ff, 0x7d0]}) 15:13:57 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4, 0xffff8000}) 15:13:57 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x5, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:13:57 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x7, 0x20, 0x4, 0x1, 0x0, 0x1, 0x100, 0xd, 0x79, 0xc50e, 0x80800000, 0x7ff, 0x401, 0xfff0000000000000, 0x2, 0x83, 0x3, 0x5, 0x3, 0x2, 0x9, 0x7, 0x4, 0x10001, 0x3f, 0x100000000, 0x6, 0x2, 0x80000001, 0xfd6c, 0x5, 0x5, 0x3, 0x27, 0x8, 0x1, 0x0, 0x6, 0x3, @perf_bp={&(0x7f0000000080), 0xd}, 0x10000, 0x0, 0x80000001, 0x5, 0x3ff, 0x4, 0x5db7}, r1, 0x0, r0, 0x8) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) clone(0x0, &(0x7f0000000000)="97a3e45f1ae87fec9e37373447c924b4eb0cb4b06a291efb81a8df0d033576a50dd313ccfc8780", &(0x7f0000001ffc), &(0x7f00000001c0), &(0x7f0000000040)) accept4$unix(r0, &(0x7f0000000140), &(0x7f0000000200)=0x6e, 0x0) 15:13:57 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=0x0, &(0x7f0000000080)=0x4) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000100)={r2, 0x10000}, 0x8) 15:13:57 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x200, 0x0) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000100)=0x81, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) 15:13:57 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfa) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x811, r0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x4000, 0x0) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f00000000c0)={0x5, 0x0, 0x1f, 0x3}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000080)={0x3}) 15:13:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0xa00, 0x8000fffffffe) 15:13:57 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) write$tun(r1, &(0x7f00000000c0)={@void, @void, @x25={0x0, 0x0, 0x0, "4020377dfa940d6abfec33ce30f71bcecbef6b0866f35babd83d0b35a5b1"}}, 0x21) r2 = accept4(r0, &(0x7f0000000000)=@un=@abs, &(0x7f0000000080)=0x80, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000100)="cd8360cac0edbaac446e97ae2d65e2ec", 0x10) 15:13:57 executing program 7: r0 = socket$inet6(0xa, 0x1000000000007, 0x6) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) 15:13:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000001a80)=[{{&(0x7f0000000600)=@nfc, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000680)=""/248, 0xf8}, {&(0x7f0000000780)=""/35, 0x23}], 0x2, &(0x7f0000000800)=""/166, 0xa6, 0x6}, 0xffffffffffffffe0}, {{&(0x7f00000008c0)=@nl=@proc, 0x80, &(0x7f00000019c0)=[{&(0x7f0000000940)=""/94, 0x5e}, {&(0x7f00000009c0)=""/4096, 0x1000}], 0x2, &(0x7f0000001a00)=""/82, 0x52, 0x5}, 0x5}], 0x2, 0x40000100, &(0x7f0000001b00)) getsockopt$inet_dccp_int(r2, 0x21, 0xf, &(0x7f0000001bc0), &(0x7f0000001c00)=0x4) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000540)={0x53, 0xffffffffffffffff, 0x7b, 0x2d5c309, @scatter={0x3, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)=""/211, 0xd3}, {&(0x7f00000002c0)=""/152, 0x98}, {&(0x7f0000000380)=""/85, 0x55}]}, &(0x7f0000000440)="4407d4a506ae3b19e7616a17da467138f8f75eaf8cf5b0e960dd9c92f61e6024f0f99706386780823ddc3b204fb1a1e40abbbf59ed1369d628b9623ba6044e70eccc63d637f5df9b6cfc8e9c63486940435eb1a59ad0bc29e13438bbf99491fdac35b9271c19bd91ca1dd8dee52b3ba48719a5dd22fb645c1dcc9c", &(0x7f00000004c0)=""/62, 0x0, 0x10000, 0xffffffffffffffff, &(0x7f0000000500)}) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r4, 0x8030ae7c, 0xa07001) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f0000001b40)={'icmp6\x00'}, &(0x7f0000001b80)=0x1e) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000000)={0xd000, 0x15000}) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000080)=""/191) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000001c40)={0x6, 0x1000, 0x3, 0x3, 0x2, [{0x400, 0x9, 0x5, 0x0, 0x0, 0x80}, {0x2, 0x6, 0x5, 0x0, 0x0, 0xa}]}) pipe(&(0x7f00000005c0)) 15:13:58 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}, &(0x7f0000000080)=0x10) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) r2 = open(&(0x7f0000000100)='./file0\x00', 0x30000, 0x120) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000140)=""/206) 15:13:58 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4, 0x1000000000000}) 15:13:58 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x2) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000180)=0x2, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) setsockopt$sock_void(r0, 0x1, 0x24, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000040)=0x7f, 0x4) read(r0, &(0x7f0000000100)=""/74, 0x4a) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x20c0, 0x0) accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000003c0)=0x6e) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) 15:13:58 executing program 5: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x2000105082) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f00000000c0)) syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0) r2 = memfd_create(&(0x7f0000000040)="003fcc78ffff2d", 0x0) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000100)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) fallocate(r0, 0x11, 0x0, 0x100000003) 15:13:58 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0xa, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:13:58 executing program 1: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c833, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000400), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001840)=0x0) r3 = geteuid() fstat(r0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getpgid(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001900)={{{@in6, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f0000001a00)=0xe8) getresgid(&(0x7f0000001a40)=0x0, &(0x7f0000001a80), &(0x7f0000001ac0)) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000001b00)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001b40)={{{@in=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f0000001c40)=0xe8) stat(&(0x7f0000001c80)='./file0\x00', &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000002380)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000023c0)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast2}}, &(0x7f00000024c0)=0xe8) fstat(r0, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getpid() fstat(r0, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000002600)=[0xffffffffffffffff, 0xffffffffffffffff]) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000002640)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002680)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000002780)=0xe8) stat(&(0x7f00000027c0)='./file0\x00', &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000032c0)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000003300)={{{@in=@rand_addr, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f0000003400)=0xe8) lstat(&(0x7f0000003440)='./file0\x00', &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r23 = getpgid(0x0) lstat(&(0x7f0000003500)='./file0\x00', &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000035c0), &(0x7f0000003600), &(0x7f0000003640)=0x0) r26 = gettid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000003680)={{{@in6=@loopback, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000003780)=0xe8) r28 = getgid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000037c0)=0x0) lstat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, 0x0}) r31 = getgid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000003e00)=0x0) getresuid(&(0x7f0000003e40), &(0x7f0000003e80), &(0x7f0000003ec0)=0x0) r34 = getgid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000003f00)=0x0) fstat(r0, &(0x7f0000003f40)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000003fc0), &(0x7f0000004000), &(0x7f0000004040)=0x0) r38 = getpgrp(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000004080)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f0000004180)=0xe8) r40 = getegid() fcntl$getownex(r0, 0x10, &(0x7f00000041c0)={0x0, 0x0}) stat(&(0x7f0000004200)='./file0\x00', &(0x7f0000004240)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000042c0), &(0x7f0000004300)=0x0, &(0x7f0000004340)) r44 = getpid() r45 = getuid() lstat(&(0x7f0000004380)='./file0\x00', &(0x7f00000043c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r47 = fcntl$getown(r0, 0x9) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004440)={{{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f0000004540)=0xe8) lstat(&(0x7f0000004580)='./file0\x00', &(0x7f00000045c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f0000004740)=[{&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000100)="c7fd341824e9141e7798b5348bf471144b4194d88ca5a4c85462c2251543741cd190ee4cc8b7557ba7d36cf98a5553ef1f2c1833610a897e01c68eeb95310c368d0e3e8beb2bf2df237c75aafb48af6b93e89489db733b99f3f1ae29fb5a24169544e4dc2fc8f8def3803748a29e6cb1b9f1cca358b0f28d445e51e225a25105c8399e2427a46366de9a40a529e26cfd06f6246f72ec605c72359310b9a21880a1029e41fea9282e9421292de27d1404530d0f6853b184d53ea6e027342a48629ccfde4b9af70357f03bad94f8198c954659e5b1c5609a57351e1875953004c2a0eb64144861d94ac46733ae552ecfcf6b1a82", 0xf3}, {&(0x7f0000000200)="d90f69f491efa7cdf689ca4c9ba9d776bdb5766430c03617ddb38b8f340f9077b3be4a0e4eac5404c3516bad57dcd37830c8e55e5a93eeffe4deecbefe674773d753a35f8f2696022ed8433543057f29d49edaa84934bd0e207fe8843890fd994491d461ca71ec2562742f366dc299a8ca7c0d97cac50683d6521abd5dd365806c5811fcdf0469704a2ffd6b93e4502ca61407bc42f9dddb78343447b5290d3ccc2ed774930d486f92672affcdb21f60cdb33ac4f174e864fa6a25f1a31c3042200a03f75274", 0xc6}, {&(0x7f0000000300)="a95365d7017f8331f1ede3d3ec39807c9e34b2eb1d089d58780502262054eb5705efda661707074ef56aca11f909d884fa976a23f354e35c4432922b1328833e5ae4bb9e6151db2421863577af9097d64a3acfdba470a030436bc6948a9137dd4d0924f2545b38f39aa1123fcff8d0a416f814b1c61d95cdb5f0faa268a2edaa025371edb876f1fad5473a8966143914a7a2c3c18fbbb3e0aa77b52991100185371446e5b850b5e6ad62086d17fefce09676bf70cb464f3f4d93d06f5af0da49f7f224aaaca99b1cd5e7ffe568d98ebfc339", 0xd2}, {&(0x7f0000000440)="84c7465bb62515cd4a2d8e0ee8aec242864015392fac5254ea3d08911efdfb1294568e939b67a62c72", 0x29}, {&(0x7f0000000480)="4389100069d5804cf93bfefe832f9b17b93e5b0c57a3a4d733247e314224ce5f23cea3fdeb89412f41bcdee39d67c57dcdc303f5d18b877af3ae51dd00a50ac37b9d7a396dc234538c8573c6b455410b00525f37c8adcaa58ca9f6c5dc57d7c4c11eadd79eb9ef0b97339a5b01411f", 0x6f}, {&(0x7f0000000500)="69e2507dd80621998ef1d63057448e00a8d898ff16da65f7a7ffb562d516f71c79d2bf8c70a83dcb093e3ccb780de22f9e71ef5e6a6632719520dce6eac728df39c3a47bf449c769a4f87057196b02bf32", 0x51}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="e892feac16a42da227296c79a80e891db82d4e03d5d56a31a85f", 0x1a}, {&(0x7f00000015c0)="7df9ba48512d864e8427b16499e08693c753e71fd67b4e38f95fb8f839bf5c8e40c55b7205446a9d288c78fe604845bc83f6ed10c178fe4a44869a022db203880e7a2f7d2269bd8a9c6a56ce9697dc303aeac4be3525652f7249adabdc993aa984680a6cc74e2420979626370645518656992f564fe9f5640ac25793baf3249023087f1e5f2ced621c77319dd82dcb43851e6d16b8733979a168fd9b50cc5d686e16a80ed93ffd578d5e06d11cc436ad1bc21db7867ad0296047ec72", 0xbc}], 0x9, 0x0, 0x0, 0x20048015}, {&(0x7f0000001740)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001800)=[{&(0x7f00000017c0)="ebd1528cc5da938afaaa73215aad422362f89a2e", 0x14}], 0x1, &(0x7f0000001d40)=[@rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @cred={0x20, 0x1, 0x2, r8, r9, r10}], 0xd0, 0x94}, {&(0x7f0000001e40)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000002040)=[{&(0x7f0000001ec0)="1e8bdd48a501af27c17e4d0cf101909f77ddeb953f4f2d03ee53f094bc41a17712befc8cfed635aacfe14a15c65b22706ceba342cc71e544bc50fa330d7af1c75827dbd06b9b07d58c971eb9b945674f7d4d33b49a40d953b95864bc0574069901e7485020bb88c4826e675c98d6184d0a9d9c7a39bffc3116f21e90bc77180d2b712ea851e2cdbac574ad128e79dc2611794f52a41893397ccedbbba06ceb3cd6ab813741e627e8aeb8e5af2ae6230d4497", 0xb2}, {&(0x7f0000001f80)="a68b9a104c56367ca42bb7309735a97316aae21d884640f617145c94371ee5f961a692a75e9490683d5c6d062e5c40d5594100f9ec7b64553de3a02b3aea26233ef0771e8573a60221c629b685c27042e1cd49d97d21bfe8c96d4af1b168d064e3a72e622b498cc83b6f24f95c027955ec0ee6c4e01e8ddb587b76c6dc41304639aab2cee57966b21f332371948c833a6803782b9642a6936263cadabdbd", 0x9e}], 0x2, &(0x7f0000002080)=[@rights={0x18, 0x1, 0x1, [r0, r0]}], 0x18, 0x8891}, {&(0x7f00000020c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002340)=[{&(0x7f0000002140)="b0584a622bfb800adbc168c40de0ae73fe93de55d17594c4471c52e96c18b68dd43eebeaf6dbfae6c48a5dcfdb7244a5f41191b6f2164e66fa12ba0044ab89bd701eb7b7b8504ce9aefd08e785c058350cf376b2b38c8ce2270182c45ea009d8a6155720af9e00ee09808214a76fb56ab3f1bd35a04ad0d1e30f940943227702ba6c8586c27185314dd840794bb8d1bf60b24954ab78fdd5e9167165afb68c2f566501d46045", 0xa6}, {&(0x7f0000002200)="8b06759bcca0e4141732b60aa956bc0474ce61e27551a5086728f4a0c8288499d39734223fbad6914d48b8", 0x2b}, {&(0x7f0000002240)="5223f93bdd66871e031ddb16e8669b06d7a0d82617794729ad29c9781c712875a9fb133b075a10909ac4cb943f38cf0687878467da366cffa3d927171c43eda5f76d664f981162f71b5b9f3b56bbba263c119c99d3b471a3265e1ddc518c1f9e911bd4397ee2c18ce1e74a3ef5f8da0712d1d62a7d80225ddc82a20a7bbc5431f10f481bc5ef2777413871423864a55a056f5a9dec752fd6ed1ae5feb78ea77354b79427864e5ecf48dca0a6899c3e6ce230f7ba91c77ab96e099b0ffe047b2569fc1f429a2e76f6f0e489f0f7e7f2c7c122dff2715cb15cc6cbe9c38e83e6cec2ebe0d2e99a060409fd521b458ff6df0397bcfd60", 0xf5}], 0x3, &(0x7f0000002880)=[@cred={0x20, 0x1, 0x2, r11, r12, r13}, @cred={0x20, 0x1, 0x2, r14, r15, r16}, @cred={0x20, 0x1, 0x2, r17, r18, r19}], 0x60}, {&(0x7f0000002900)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002b80)=[{&(0x7f0000002980)="584f3a679793f06f98dcfe03b21a31f6ca84c835da587abf43b5fd15c4116f818b56cedc2b4c675da0618332fa55dde74fb2fbeb098389fd0725b53604218d351aefcab676efd6e1488d7aef24eaa285826e3a7c1e84552ad013edd0b138408f55ba482b0a75920c25432b79bac7b6bccc7152ab1c4b81b4364e25f07c67aa9b7f53a44ae07536ba52669f72fe1bae3384cfb0f46155fe4276b973b043d97a3040b0d47acb926a8de9afb5efb1b928d58c493967d4f8d25693f720e1b29127b6a18bac0882441eafdcfc16c7cdce9cb17b4e150ad5b0ec2ca6f37a338079dec8413a662caf3afd9b3990f27c63", 0xed}, {&(0x7f0000002a80)}, {&(0x7f0000002ac0)="9ad905d2876f9358f4b0244551f69e194a0736c3f86cf9bc1435940ddf931ac4f827607e11da191cc1a5771f2342a79fc598033c35680a5a08809254fce0760813da35b762b967007a899a4e3e4282debc184b841be6801862c5f08dbfdbb4712b8c648a2b607907a6aa5741b00940169e4274fa0045e10bb85e2cc6aa1247a1279173a98b97f0e8a7e536f4761be7aedbb9", 0x92}], 0x3, 0x0, 0x0, 0x8000}, {&(0x7f0000002bc0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000003200)=[{&(0x7f0000002c40)="a40da76c4c9d2a8cc221873b63d87aafb3cd8a52591a39e018e61271a88f0c920c23fbf24ac5edb5354d3e88697b01036fc846788010d89984ee77c36a9f7adff57b75a8e6da5551b46a73662ee8f370b6f136a44695", 0x56}, {&(0x7f0000002cc0)="70becbd8f6648cf901354e6dd6261e", 0xf}, {&(0x7f0000002d00)="d650ab96915edc6294f4d9f4f8f7507a847538b7daefc21edde02d7c025b5f16930443c762b1de17e97e390f684b3e0fc00957a7701f631c54f36f431203d566f6b63a4d2c820bffd786d7772146f7056a90d9a2a9305fd4dcda97883ee8a1ac3304ac9323f77b9bf95506a95d7273a6d4c5dfd31dcd74c0899709cd223d362c9e9d7003bcbf10e838526cdae08bd25d6a9aaac7c3f1f90a7a1faba5c489b616", 0xa0}, {&(0x7f0000002dc0)="6aa524300d37ec9a225b7087cc11458fc2b8815dd0d984e177230b53796f6da15b9db2049f9f3266276c048ca37201be913486c783b7a5176c68fd77833403421b0d4b14b09a48e1141be4f504853939245b8f3df2b22caaaa54896ff340b16fa053c1f6f786eae4045c87e0464b2d1f89136b8a3033f68c14baa68a1e071b0f22413a1f0e71fadaf7f54ad1f81192e1194d9d129e0bbeddf86c8fe22a0750fa6f8456ab1cff55e5e5eca798151ff8908f3f1fb4f19f57cc37fcbd733c951eb5981065a29d5990f0102b951e7cbc712c2b0c1135d195b7bafa7dc980b41a469a5de21052357f1a92189b221f1eac34b177a6bb1e79", 0xf5}, {&(0x7f0000002ec0)="b2db07281fce553c27b2f54bded77a23dde49b3284646b885381ce2f4f91863f93457a9d21910d28e4d136b282a3b1e53d3fa4e9b566c1119432ce463e9c8f87da4c5d607ba88b20dd78ffa4923a7dad14d7d491de8489d5f1ef5c44a1b9bd42b42db24571b8250d759dfcd63ff1bf3c7f04c48d6a87da5223172f5f54031a81dd2fc94a3d15948ab68904146ef9f97a6e0d2493400e0d7edf7ac1bc19148ae7a3c0d14b9b866284f91001410dc9904262238ee49f52e9d228f0d31050ac514ec3bb0c0a1e39eb6fa427219dfc16869330c030f30eedc00a576c730028c07a39be6d1387f53410c0b5", 0xe9}, {&(0x7f0000002fc0)="bef04dbb14f0ca63c9089074239e42ce02736e8a738ad62a9ef88614636ffea429c71e50ffc12afd4d202438e615c95c25abb2b455ba652384d430986f34e6a5c6aaea8adb453da2ec10c766d307b7ef0326422d49ee0a62e21fe2045f8298ef8e5726d4e1f4b42de933d81325caa43bf09e9db59d58b99c5d47f4ab7e4096148d51d9a65864109e391283feb5cf", 0x8e}, {&(0x7f0000003080)="59a61976a1b4a20f1807d9f47baec0ca34fef33581a8493456eeb016531b", 0x1e}, {&(0x7f00000030c0)="cc98259f10e6d60a9c1775124f9aed", 0xf}, {&(0x7f0000003100)="6cb35c6bfcbea5c74f20bf9ca954a03f33bff53aecb7adfdd8df0358737cb2ca08d69736522043ed5169660bf8b792acce2f0c12a7eb67bb121509d02d98a7920e9aba5431b4b7e58006c7f2da0291a05dfc0c990d5d5946f40fe06f932299791e73c47059767ec2b4177fa5f2af1e581a66751c36bde8708ab543ee7e262ffec20443a566e6fb410090a2c49b40f8da973fa245d6c30622a12a0e0030eac84139a65dbf61892d8200cc16b5d629540d07d01087bcfbdd4cb888143ad8c0f01ac818c09381f4ec20c2b27dfe000ec6641ed818399ddf", 0xd6}], 0x9, &(0x7f00000038c0)=[@cred={0x20, 0x1, 0x2, r20, r21, r22}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r23, r24, r25}, @cred={0x20, 0x1, 0x2, r26, r27, r28}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @cred={0x20, 0x1, 0x2, r29, r30, r31}, @rights={0x10, 0x1, 0x1}], 0xd8, 0x400c000}, {&(0x7f00000039c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003d80)=[{&(0x7f0000003a40)="98dde2095f6633e9256fc1882c65809cfba08623cd144c1b6fa0f9a6dd67b1f65d4bc09a5af12658be3c3e0112796ef176115157b929fee8275353930f398c0fb3154eac42feec3cafc419e7958c282508152f86b47b521b2c58cfd1b1b949fd70f06e2a0435e59bcc7c6d7af8a478c1515b22b1e4a5d5714ea9b35e763fccbd8731f3b29a760806e42aa1ecbe433baba782276d219d0b5f2fa47070c4faf0de8812a09c98070b2c3fbcb32c6c8419afdecc1f8a9b5384844035825a2237e8169a7d2bfd6358ffd1f9a894b0174ec94cf1792ee0e73ad7dafb02a300be9a72593219380f07a4c9652644d790512a69961ddc6e2ed60fc5c174", 0xf9}, {&(0x7f0000003b40)="7f1cbaca", 0x4}, {&(0x7f0000003b80)="2b7f3415a31b775e5f272a266a991ad99c35558512303bbfbca514a87052d10662ab7edb5fc01b4b7bb3a0924422c30b671bed32028435f279916fb5ca5eeef73d032b5a4ac95be433ec61f06880801e9384e1cedb770aaf7434725d134fdd3d87bb2235d3d46d81a274068e992ad3b3b4dfed", 0x73}, {&(0x7f0000003c00)="34a8a01022d461f4e67951f320bdf2dc806cb1f1ee89217d626de89532249d62b742ad41e90376ebc53b77be38fe9675ab122f3f", 0x34}, {&(0x7f0000003c40)="6ba246a8669d4d785c8821d345ff4f352059a4db625bca1f9961b7a35c586e1f3ad0f6b4374660b20243f9fc", 0x2c}, {&(0x7f0000003c80)="5b7509a3134714dc02dd5def42a86977137107694972d4030d042a9546d17cfaf7c04cb913893668e0ad25087754ec6a159e2e21d149c5a160b8da40834d6a5ad466dc6a811ecd0bc3a5f8611afd5e17310b3013f155b6fa7f407ca76066e2f5f6d26d10ecece39f4f65dc87c22bce75d8a572b51dcad182fe06079ee8334823a2a9fc3262185e009de44801c49d7a71fc61d8ddb04b7dc3aa883681ee430d7b48526d408f871e734e39df788cf3e4de11354dd0e55c8aa34bd9e6f0c5a8c00584fdc3ae8c158337417523899e6706c6287f909f10cd51a744ec7ae990d86afe11dde6b4a0b799d5c852ad4224ee50b37a48da991af636", 0xf7}], 0x6, &(0x7f0000004640)=[@cred={0x20, 0x1, 0x2, r32, r33, r34}, @cred={0x20, 0x1, 0x2, r35, r36, r37}, @cred={0x20, 0x1, 0x2, r38, r39, r40}, @cred={0x20, 0x1, 0x2, r41, r42, r43}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r44, r45, r46}, @cred={0x20, 0x1, 0x2, r47, r48, r49}], 0xf8, 0x4040}], 0x7, 0x40000) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000000), 0x4) 15:13:58 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0x7, 0x8000fffffffe) 15:13:58 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x1b2) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000240)=0x20, 0x4) dup2(0xffffffffffffff9c, 0xffffffffffffff9c) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001300), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000000)=@get={0x1, &(0x7f0000000080)=""/136}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) 15:13:58 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0xc65, 0x8000fffffffe) 15:13:58 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x13, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:13:58 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") socket(0xa, 0x1, 0x0) 15:13:58 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x33) 15:13:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000300)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYPTR64, @ANYRES32=r2, @ANYRESOCT=r0, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYPTR, @ANYPTR64, @ANYRESOCT=r2, @ANYPTR, @ANYRES32=r2, @ANYRES64=r2, @ANYRES16, @ANYRES32=r2]], @ANYRESHEX=r1, @ANYRES32=r0]) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x101000, 0x0) socket$inet6(0xa, 0xe, 0x3ff) close(r3) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000040)) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x186}]}) 15:13:58 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x2, &(0x7f00000000c0)="3a61813c63ad7f6d754ec7ffacbedd9a8dcea523b04caadcad667566442faba8081810509b934edc3b398693df7c4e540cc979c04e56127adf059f771088536b78c21986e1eac5fe7287dc3dc0126cea5642fe8c45db84f73a9ad862c1757613174f965ce14df71e10cf5a057e80c678023be099267b7db17806537ab29fae6fd2ecfc2e2d090785dd6547bee941cc4c20758cddb84ce910f88e0008ccca6fb228a2a1070ad63c745174158fc8edcb4f9ad94a9a2278a58c13731f59ee1541277bf4341b2b178981a27ad2021060dd71a900f32fecf534a2457122163186c932550a91542e7080a167d72a3395b51a") fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(r0, 0x29, 0xd0, &(0x7f0000000080), 0x4) 15:13:58 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x6, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:13:58 executing program 3: r0 = socket$inet6(0xa, 0x80006, 0xfffffffffffffffe) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x8030ae7c, 0xa07001) 15:13:58 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0x9bf3ffffffffffff, 0x8000fffffffe) 15:13:58 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0xffffffffffffffff, &(0x7f0000000180)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000040)={0x9}, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) 15:13:58 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4, 0xfdfdffff00000000}) 15:13:58 executing program 1: r0 = memfd_create(&(0x7f0000000000)='ppp1&\x00', 0x5) fallocate(r0, 0x3, 0x0, 0x80000001) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'os2.', '\x00'}, &(0x7f00000000c0)=""/4096, 0x1000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000010c0)="609893d6440be395cd7e5663a7c85c8d", 0x10) 15:13:58 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x2000009, 0x0) r2 = add_key(&(0x7f0000000340)='blacklist\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000003c0)="8370b01fa1df39a420e55c8a515ff75b2290a0", 0x13, 0xffffffffffffffff) keyctl$clear(0x7, r2) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") socketpair(0x1d, 0x803, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000240)="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") write(r3, &(0x7f0000000140)="9375f8070cd96537d78757eeb07183d7cedce4e1e5801629c50cf28ca36ff8797caeeb12c92459b0f04e3c6ffd59bc039f8212fb339b2f5c71103626c0e60489b4fb9228f41eb171cdfb8e5d26f5cfd9d6a4cac98a46780a7fa92ed3d3795b1c7e8c134c1da4bc11bd41b2dd92a0e2843d60ad94d8a2f0af5b39d79193d9517540c78a7377370963ce908a33b8643695fc576e3418ffb82b389cfeba286e4bd8d4", 0xa1) r4 = gettid() move_pages(r4, 0x4, &(0x7f0000000000)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil], &(0x7f0000000040)=[0x3], &(0x7f00000000c0)=[0x0, 0x0], 0x6) 15:13:58 executing program 0: ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000000)=0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000080)={0x9}) r1 = socket$inet6(0xa, 0x4, 0x0) socket$inet6(0xa, 0xa, 0x80b) ioctl(r1, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r2 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 15:13:58 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f00000000c0)=0x7c, 0x4e) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="98a7c7b9b2a19113d5cfa310a8d422ccac51e8fd08586b2d5aac231d9c0f353029ef51ee9c897c375e87efd6f8ae558c721ffb4854bd478f60fa164cd26dbdefb5ca2afee67bc356ed071a6a388337249a3e531b59baff263fe098be54b3e895c47e74ebdf17a1c19ab5c721ff6adeb0a4dca807be376b01b6336424019cbca47fa3677db9d019050066ab6680ac538bd0ea074de7ef55bab24e043bd00839b5fd905f928d4539086515df5136be4fe83a7cfe80ad6be118ac3ef95a5276061b4769f9f40312210268e4d94f9a922d457e693d12f9d82354857df798e85024aa9dc903e3a287e1283f924245f2d7a8816b00b72adedb53"], 0x8) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000000)=@nfc, 0x10, &(0x7f0000000080), 0x0, &(0x7f0000000100)=""/128, 0x80}, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002ff0), 0x0, &(0x7f0000000180)}, 0x0) 15:13:58 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0x6000000, 0x8000fffffffe) 15:13:58 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) syz_open_dev$vcsn(&(0x7f00000004c0)='/dev/vcs#\x00', 0x2, 0x268000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000003940)={'vcan0\x00', 0x0}) r4 = getuid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000003980)={{{@in6=@dev, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f0000003a80)=0xe8) sendmsg$nl_xfrm(r2, &(0x7f0000003d00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x810}, 0xc, &(0x7f0000003cc0)={&(0x7f0000003ac0)=@expire={0x1e0, 0x18, 0x300, 0x70bd29, 0x25dfdbfc, {{{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x4e23, 0x9, 0x4e21, 0x6, 0xa, 0xa0, 0x20, 0x62, r3, r4}, {@in6=@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x4d5, 0x6c}, @in6=@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, {0x8, 0x6, 0x1f, 0x200, 0x4, 0x1, 0x3, 0x1}, {0xd4ae, 0x1000, 0x6c, 0xfff}, {0x7, 0x7, 0x7fff}, 0x70bd28, 0x3506, 0x0, 0x2, 0x81, 0x1}, 0xfff}, [@policy={0xac, 0x7, {{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x4e24, 0x20, 0x4e20, 0x81, 0xa, 0xa0, 0x80, 0x0, 0x0, r5}, {0x3f, 0x1, 0xc790, 0x9, 0x6, 0x4, 0x2, 0x180000000}, {0x3, 0x3f, 0xffffffffffffffc1, 0xfffffffffffffff9}, 0x0, 0x6e6bc0, 0x0, 0x1, 0x2, 0x1}}, @tfcpad={0x8, 0x16, 0x8000}, @srcaddr={0x14, 0xd}, @lastused={0xc, 0xf, 0x3f}, @lastused={0xc, 0xf, 0x7}, @proto={0x8, 0x19, 0xff}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x4040}, 0x40000) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000500)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) getpeername(r1, &(0x7f0000000100)=@ll={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x80) getresuid(&(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000200)) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2=0xe0000002, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x4e21, 0x9f, 0x4e20, 0x15, 0x4adc6846c9e9edb8, 0x80, 0x80, 0x2b, r6, r7}, {0x5, 0x1, 0x2edc, 0x1, 0xd4aa, 0x3ff, 0x10000, 0x3}, {0x7, 0xba10, 0x1, 0x82}, 0x1, 0x6e6bbd, 0x0, 0x1, 0x0, 0x3}, {{@in=@multicast1=0xe0000001, 0x4d6, 0x33}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x17}, 0x3500, 0x1, 0x2, 0x7fe00000000000, 0xffffffff, 0x7ff, 0x5}}, 0xe8) 15:13:58 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x7, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:13:58 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@generic={0x3, 0x8001, 0xd2cf}) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100003}, 0xc, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="40010000100013070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x4}, 0x1}, 0x0) 15:13:58 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x1, &(0x7f00000002c0)='p\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x8030ae7c, 0xa07001) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib={0x1b, 0x7f, 0x10001, {"82078efebe20015df565da8f833ee1e1"}, 0xffff, 0x7, 0x9}}}, 0x90) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f00000001c0)={0x1, 0x7953, 0x800, 0x95c3}) 15:13:58 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0x10000000, 0x8000fffffffe) 15:13:58 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x40, 0x0) ioctl$EVIOCSABS2F(r3, 0x401845ef, &(0x7f0000000180)={0x2, 0x5, 0xff, 0xffffffffffffffff, 0x81, 0x80000001}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0xc2002, 0x0) ioctl$TIOCMBIC(r4, 0x5417, &(0x7f0000000100)) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) 15:13:58 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x10, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:13:58 executing program 5: seccomp(0x3, 0x20000, &(0x7f0000000080)={0x2ab, &(0x7f00000000c0)}) 15:13:58 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4, 0x80ffff}) 15:13:59 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3d37, 0x280401) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x3000, 0x6, 0x3, 0x8, 0x0, [{0xfe, 0x7, 0x200, [], 0x80}, {0x6, 0x6, 0x4, [], 0x1000}, {0x5, 0x8001, 0x9, [], 0xe5}, {0x5, 0x1, 0xfffffffffffffe01, [], 0x3}, {0x9, 0x401, 0xc441, [], 0x7}, {0x9, 0x8, 0x10000, [], 0xfffffffffffff000}, {0x2, 0xfff, 0x7, [], 0x100000000}, {0x7, 0x1000, 0x4, [], 0x401}, {0x8001, 0x8, 0x7, [], 0x1}, {0x3, 0x6, 0x3}, {0x20, 0x4, 0x4931, [], 0x81}, {0x6, 0x3ff, 0x8, [], 0x4}, {0x2756, 0x2, 0x8b5, [], 0x2000000000000000}, {0x905, 0x1, 0xf92, [], 0x8}, {0x9, 0x7, 0x7, [], 0x5}, {0x6, 0x9, 0x9, [], 0x7f}, {0x1, 0x1, 0x1, [], 0xffffffff80000001}, {0x20, 0xbb7e, 0x9, [], 0xffffffffffff8000}, {0x9, 0x4, 0x0, [], 0x10000}, {0xffe0000000000000, 0x2, 0x0, [], 0x4}, {0x20, 0x8, 0x10001, [], 0x1}, {0x7f, 0x200, 0x10000, [], 0x2}, {0x3f, 0x1, 0x7fffffff, [], 0x4}, {0x3, 0xc02d, 0x38e06613, [], 0x7}]}}) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r2 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 15:13:59 executing program 5: pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000000000/0x3000)=nil, 0x3000}, &(0x7f0000001080)=0x10) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000001000/0x2000)=nil, 0x2000}, &(0x7f00000000c0)=0x10) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000000)) 15:13:59 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0xfeffffff, 0x8000fffffffe) 15:13:59 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0xd, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:13:59 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = dup3(r1, r1, 0x80000) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=0x0, &(0x7f0000000100)=0x4) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000140)={r4, 0xfffffffffffffffc, 0x3, [0x7fff, 0x5, 0x7ff]}, 0xe) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) 15:13:59 executing program 1: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040)=0xfffffffffffffc01, 0x4) unlink(&(0x7f0000000080)='./file0\x00') close(r0) 15:13:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x11dc) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = dup2(r1, r0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0xa0dc, 0x1, 0x4, 0x20, 0x0}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000007c0)={r5, 0x1000, "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"}, &(0x7f0000000140)=0x1008) getsockopt$sock_int(r2, 0x1, 0x23, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f00000002c0)={{0x9, 0x3, 0x7ff, 0xffffffffffffffff, 'syz0\x00', 0x3}, 0x0, [0x6, 0x5, 0x9, 0xa0, 0x1, 0x4, 0x25, 0x400, 0x2, 0x5, 0x2, 0x1, 0x80000001, 0x800, 0x4, 0x10001, 0x80, 0x1, 0x10001, 0x6, 0x40000000000000, 0x8, 0x3f, 0xfffffffffffffff9, 0x7, 0x7, 0x0, 0x4, 0x100, 0x7, 0x36, 0x7, 0xecc2, 0x3dd3, 0x28, 0x9, 0x8, 0x9f, 0x8, 0x80000000, 0x20, 0xeab, 0x9, 0x8000, 0x10000, 0x4, 0x6c2, 0x1, 0x3, 0x3, 0x9, 0x4, 0xa21, 0x0, 0x5, 0x1f, 0x8, 0x2, 0x4, 0xffffffff, 0x1f, 0x401, 0x4c43f4b4, 0x11, 0x3f, 0x40, 0x3, 0x3f, 0x5, 0x580b, 0x6, 0xffffffffffff0000, 0x3, 0x400, 0x70fd, 0x8, 0x5, 0xd70, 0x401, 0x6, 0x16bf, 0xfffffffffffffffb, 0x5, 0x1873, 0xffff, 0x9, 0x40, 0xfffffffffffffff8, 0x7, 0xfff, 0xfff, 0x8, 0xffff, 0x7, 0x7, 0x0, 0x4, 0x3, 0x4, 0x1, 0x80000001, 0x3, 0x7fff, 0xa3d5, 0x48, 0x8, 0xfffffffffffffffa, 0xffffffff, 0x8, 0x9, 0x3e, 0x1, 0x9, 0x401, 0x9, 0x0, 0x5, 0x3, 0x7fffffff, 0xffffffff, 0x8001, 0x7, 0x6, 0x69017326, 0x1d4, 0xfffffffffffffff7, 0xf2, 0x8], {r3, r4+10000000}}) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r6, 0x8030ae7c, 0xa07001) setsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000000)=0x20, 0x4) 15:13:59 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r2 = getuid() r3 = getegid() write$FUSE_ENTRY(r1, &(0x7f0000000040)={0x90, 0xfffffffffffffff5, 0x1, {0x2, 0x0, 0x0, 0xfff, 0x2, 0x1, {0x0, 0x401, 0xa284, 0x6, 0x5099, 0x7, 0x2, 0x9e64, 0x2bf896aa, 0x100, 0xfffffffffffffffc, r2, r3, 0x0, 0x4}}}, 0x90) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r4 = socket(0x40000000002, 0x3, 0x39) sendto$unix(r4, &(0x7f0000000cc0), 0xe0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) ioctl$sock_bt(r4, 0x2000002541b, &(0x7f0000000180)) recvmsg$kcm(r4, &(0x7f0000000740)={&(0x7f0000000340)=@vsock={0x0, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000000640)=""/242, 0xf2}, 0x0) 15:13:59 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000)=0x2, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 15:13:59 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x12, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:13:59 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0x2000000, 0x8000fffffffe) 15:13:59 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4, 0x80ffff00000000}) 15:13:59 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x2000, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000580)={@remote, @remote, 0x0}, &(0x7f00000005c0)=0xc) sendto$packet(r3, &(0x7f0000000100)="d1e2747044730741a28b562138558ccc12f4feec1dccb26b8a892b1155e1682ede75e3472a71bcfd0ebb5691336165c2bc0a82f52f97c955e440cb372293b785a7af225380f8a8be85f4239e0595fd62ceeb105fd53f9c06780c90f8814eeff9e0db913c97a9a5b258dc5123a5b835a4e10c152abd601c812def43d42eadb04e2340e79b12fad0e59bc887c41ff2073963f841560cfdb3e9dab4fe015369d71622284a18b1a172dcf217d04593b9bcb8456d35a3b78c", 0xb6, 0x400c040, &(0x7f0000000600)={0x11, 0xfd, r4, 0x1, 0x5, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1a}}, 0x14) 15:13:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0000063fc900000005000001000004007bb919ba000000b5928fbd0065750ede825e45a90f3d09876e6d07d4e191a1f98937700700952333bb937dee28d4b2921ea4c8faa02a6b0bc6082b9a916a0dc38b518cdfff0f0900bb98b7559414d05501b53517cdf52762943393158959003b2cbdae69c720e6ff0000000000710e13"], 0x7e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x67, 0x0, 0x10000}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x20000, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000100)={0x0, 0x0, @ioapic}) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000002000)={0x41cb, 0xffffffffffffffff}) 15:13:59 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) r3 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x7, 0x40000) getdents(r3, &(0x7f0000000100)=""/208, 0xd0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) 15:13:59 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0xd, 0x8000fffffffe) 15:13:59 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x800) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95)=0x9e, 0x3) sendmmsg(r2, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000400)=[{0x10, 0x84, 0x6}], 0x10}}], 0x1, 0x0) close(r2) close(r1) 15:13:59 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x14, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:13:59 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@rand_addr=0x9, @in=@multicast2=0xe0000002, 0x4e23, 0x7, 0x4e22, 0xb12, 0x0, 0xa0, 0xa0, 0x16, r3, r4}, {0x32d, 0x100, 0x16, 0x7f, 0x6, 0x0, 0x4, 0xfffffffffffffcea}, {0x72, 0x8001, 0xffffffffffffffe1, 0x3ef5}, 0x9, 0x6e6bb8, 0x3, 0x1, 0x0, 0x3}, {{@in, 0x4d4, 0x6c}, 0x2, @in=@broadcast=0xffffffff, 0x3500, 0x5, 0x2, 0x0, 0x6, 0x5}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r5 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0xcaf, 0x80) ioctl$KDSKBLED(r5, 0x4b65, 0x84cd) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) 15:13:59 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000180)=""/64) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000080)={0xe, 0x1}, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r2 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) getsockopt$inet6_dccp_buf(r2, 0x21, 0x8f, &(0x7f0000000100)=""/2, &(0x7f0000000140)=0x2) 15:13:59 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4, 0x0, 0xfdfdffff00000000}) 15:13:59 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x8, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:13:59 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000200)=""/145, &(0x7f0000000040)=0x152) r2 = memfd_create(&(0x7f0000000080)='nv\x00', 0x3) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000000c0)={0x78, 0xa0000, 0x6, 'queue1\x00', 0x6}) socket$inet6(0xa, 0x80003, 0x9) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000180)={0x65be22311018830d, @rand_addr=0x80000000, 0x4e24, 0x3, 'lc\x00', 0x10, 0x7fffffff, 0x58}, 0x2c) 15:13:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socketpair(0x0, 0x4, 0x1081, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x8030ae7c, 0xa06fff) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x101400, 0x0) 15:13:59 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0x400000000000000, 0x8000fffffffe) 15:13:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2, 0x8) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x7ff) r2 = syz_open_pts(r0, 0x1) ioctl$TIOCGPGRP(r2, 0x5441, &(0x7f0000000500)) 15:14:00 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getpeername(r0, &(0x7f0000000100)=@in, &(0x7f0000000180)=0x80) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) 15:14:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000002c0)="66b9800000c00f326635008000000f3066b9024d564b66b80f0c000066ba000000000f30640f220466b8008000000f23d00f21f86635000000040f23f866b860d4a8810f23c80f21f86635000050000f23f83e3ef9160f01592d0f01c9806d7f00", 0x61}], 0x1, 0x0, &(0x7f0000000340), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$inet(0x2, 0x4, 0x936, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e21, @multicast2=0xe0000002}}}, &(0x7f0000000140)=0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000180)={r4, 0xffff, 0x100000001}, 0x8) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup2(r1, r3) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0xf, 0x8001, 0x4, 0x7f, 0x22, r5, 0xff}, 0x2c) 15:14:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000001400)=@alg, 0x80, &(0x7f00000026c0)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x33f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0x1, 0x0, &(0x7f0000002e40)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x14, 0x42, 0x105}, 0x14}, 0x1}, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x40000, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f00000000c0)) 15:14:00 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0xffffffff00000000, 0x8000fffffffe) 15:14:00 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0xb, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:14:00 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = dup2(r0, r2) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x1) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) 15:14:00 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4, 0x0, 0x80ffff}) 15:14:00 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0x8000000, 0x8000fffffffe) 15:14:00 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x9, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:14:00 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000340)=0x41d4, 0x4) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, &(0x7f0000000080)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000200)={{{@in=@dev, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000300)=0xe8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x8}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000400)={r4, 0x4ee172b3, 0x5, 0x1, 0x6, 0x27be7e20}, &(0x7f0000000440)=0x14) r5 = getpgid(0x0) sendmsg$nl_netfilter(r1, &(0x7f0000001580)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000001540)={&(0x7f0000001600)=ANY=[@ANYBLOB="f41100000b0000082bbd7000000400000200000608005e00", @ANYRES32=r2, @ANYBLOB="0800b30096e4fbbfba17f67bd393ad309d452be7841e71ce44235cc724aba130ab2899807fe396b653a4ff1804477d8760ddcf69eea14e4684606a8c95fb7880de3ce476ce5ad0b3dbc9bd675d45540697dbeab54f481db63733e9f1761161567a1b4d6458870bb288ac9435db150fe1705feaf5df21c4211b88816efb1d6ab383dcd9f5e01912ff00b743df0310980c399a12ef7431f725dfc595e31178ac403278b67ce31240", @ANYRES32=r3, @ANYBLOB="6f69bc6eb9d69b6e9a279ab4e17af7517f5f99d4e8f4e6a9d9af51dc6a837d9647ee2b3eb9a341d20d2515729394691661750699cf00d0796c3d119a67b341ffd302b08bbda3414d189eb690f8046585d6d876589d1ec2bfc1a69ad0032c44b35874cdd1b7caad056ca078a331c79c8c1df7f5e952b955b308a0947cfec0d9959d254a050d88df29e4879a2d24cb353293b4861a680c1cb6cd64fb24e59d422403f2d2db7eea077ab540bf521737d9e1ba5d6a372718427e1944a21d5d8f3e1af4109c31926566f32691b5e0e58706e35785889280badf7c1011000c006500000800000000000008000400", @ANYRES32=r5, @ANYBLOB="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"], 0x11f4}, 0x1, 0x0, 0x0, 0x841}, 0x0) 15:14:00 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x8000000000) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x8030ae7c, 0xa07001) 15:14:00 executing program 7: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$inet6(0xa, 0x3, 0x87) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r2, &(0x7f00000000c0)={0xa}, 0x1c) 15:14:00 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0xc, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:14:00 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0x4, 0x8000fffffffe) 15:14:00 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x10002) ioctl(r0, 0x8912, &(0x7f00000000c0)="025c020000000000000070") r1 = socket(0xa, 0x1, 0x0) finit_module(r1, &(0x7f0000000000)='ip_vti0\x00', 0x1) socket(0x0, 0xa, 0x8) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 15:14:00 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000040)) r3 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x7, 0x40) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f0000000140)=0x4) 15:14:00 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x11, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:14:00 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x40040, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000600)={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, {}, 0x8, {0x2, 0x0, @rand_addr}, "0000000500000000723000"}) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, {0x0, @link_local={0x1, 0x80, 0xc2}}, 0x8, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}) 15:14:01 executing program 1: pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000200)={0x2, 0x400000000000003, 0x1, 0x0, 0x13, 0x0, 0x0, 0x4, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_lifetime={0x4, 0x4, 0x400300}, @sadb_address={0x3, 0x6, 0xff, 0xa0, 0x0, @in={0x2, 0x4e22, @rand_addr=0x7}}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e24}]}, 0x98}, 0x1}, 0x0) clock_gettime(0x0, &(0x7f0000000040)) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) fcntl$setpipe(r0, 0x408, 0x0) dup2(r0, r2) 15:14:01 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0x5, 0x8000fffffffe) 15:14:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4, 0x0, 0xffff8000}) 15:14:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8910, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x6c, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x8030ae7c, 0x3) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 15:14:01 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:14:01 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x7f, 0x10000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f0000000100)={0x1, 0x2, 'client0\x00', 0xffffffff80000000, "50f4d8e1215f080b", "88aeb39c33c58f2fb6311dd49055ad440f1a107b62d42ffde658ce41c2225bfb", 0x2, 0x4}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000480)={0x0, 0xe9, "15021aa13b7d7ba4f0a2f669486cb279e8776d3b7316daf7147e6acaf2e89651dae2a2c952fc0f7b710474ee45bccba19fbe2e5b23e524d68195445a3abc0610761ee3ee17ad40c30d2d22779bddaae78d091f50a969e002138203397edeb4f546edf95c8d0ca2364eab77f1546d92f64d70d346b2b058efa42b7720eb9feb31ef2384e292a66952b465c8ab3c80391aab290797f334ebaf4b0614e897b3d3b16a16aef2b10ce2c1bed259e9c7ff2e5f1e10bf4878d8541ce7dc8322780d3bd31052b157932eb85aff2243e5414d8ca3d359cb059c192fd75ffa3ef75a88b7142dc67f55bc4cb753a7"}, &(0x7f0000000580)=0xf1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000005c0)={r5, 0x2c}, 0x8) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r4, r6) 15:14:01 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) socketpair$inet6(0xa, 0x0, 0x7, &(0x7f0000000000)) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 15:14:01 executing program 5: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000040)=""/186) syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x100) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000100)={0x2000000004, 0x3, 0x0, 0x1}) 15:14:01 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000500)='/dev/input/event#\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) fcntl$setownex(r0, 0xf, &(0x7f00000001c0)={0x0, r1}) r2 = dup(r0) read(r0, &(0x7f00000000c0)=""/234, 0xea) ioctl$TIOCSBRK(r2, 0x40044591) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @host=0x2}, 0x10) 15:14:01 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:14:01 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0x200000000000000, 0x8000fffffffe) 15:14:01 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) pkey_alloc(0x0, 0x3) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000180)) getsockopt$netlink(r2, 0x10e, 0x3, &(0x7f0000000100)=""/19, &(0x7f0000000140)=0x13) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) r3 = request_key(&(0x7f00000001c0)='cifs.idmap\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000240)='em1posix_acl_access@\x00', 0xfffffffffffffffe) keyctl$get_security(0x11, r3, &(0x7f00000003c0)=""/199, 0xc7) accept4$inet6(r1, 0x0, &(0x7f0000000040), 0x80000) 15:14:01 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0x500000000000000, 0x8000fffffffe) 15:14:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4, 0x0, 0x80ffff00000000}) 15:14:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socket$inet6(0xa, 0x7, 0x56) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x8030ae7c, 0xa07001) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000100)={'ip6gretap0\x00', {0x2, 0x4e24, @multicast2=0xe0000002}}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x200000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000080)='ip6gretap0\x00') 15:14:01 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:14:02 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000001140)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x1, 0x80, 0x2}, {}], 0x30) r1 = syz_open_dev$adsp(&(0x7f0000001080)='/dev/adsp#\x00', 0x6, 0x400) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/rtc0\x00', 0x101040, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001100)='/dev/sequencer\x00', 0x50000, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000001200)={r2, r3, 0xa77, 0x0, &(0x7f0000001180)="d09e87f089a7a6e2edb27982a07c56206f1b5eb458fd99291e710e3fab7823221bc1d675bdefa64432a6d25be32877efeb75800b1ed68c4959ac2ac17efbb271bf6ba276a364133b9851a55529408108439f4bd404b1da07156617d05b", 0x8, 0x81, 0x6, 0x22, 0xff, 0x4, 0x4, "1bdac505e62c96469423520b6fc2dcb2d47363dd79fcfcad7ab134d7e590094c8d6911654a2dd301c78dd8ef4d7c9a46445f4294ca26f22eca46e5a974d9c2f726781f185ecb51ed2150933cae011d98f387d4b932db519683aa38bdae23a794ddcb05768118316a16c31bdefd1cc07824eb998c4aef59fc64bef3dc626d62705feed3a119b83cb929ba6399e2110c5dc3e351"}) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000080)=""/4096) 15:14:02 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x4, &(0x7f0000000100)="af5a7d70a1c886c1138eeb4659bb5e6a9e0ad61dc47b6a63478eabc339635cae5c7327371a427c564bf59a1c8cdcee62de348c50f6c083a35757a4f59b2b37c18d105282c547be3cab605144d8fc7dceb6a1af617ea3fdf2dda70cc9c2fb3a92f6f227fd0be4639344bb35b15c75bdd1ea7b1432ad390f2b4b8e7376b6086ac8da4f0e24109ea767cc7e84df4b33d03caa171c3977a20f44fa6befdbaf87f86b41a02509a6ccac5744c47d339248ca998c23e964d776d624d92d2f00c1") ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$inet(0x2, 0xe, 0x56a9, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000003c0)={{{@in, @in6=@remote}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f00000001c0)=0xe8) r2 = socket$inet6(0xa, 0x1000000000003, 0x89) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r2, &(0x7f00000000c0)={0xa}, 0x1c) 15:14:02 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0x20000000000000a, 0x1, 0x0) r2 = getpgrp(0x0) sched_getattr(r2, &(0x7f00000001c0), 0x30, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000080)=0x8) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) getpeername$unix(r1, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e) 15:14:02 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:14:02 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0x800000000000000, 0x8000fffffffe) 15:14:02 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4, 0x0, 0x1000000000000}) 15:14:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2a, 0x3, 0x0, {0x2, 0x9, 0x0, '/dev/kvm\x00'}}, 0x2a) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0x8030ae7c, 0xa07001) 15:14:02 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0x1b, 0x3, 0xe43d) fcntl$setstatus(r1, 0x4, 0x2000) sendto$inet6(r1, &(0x7f0000000280), 0xfe09, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 15:14:02 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x4, 0x87) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000500)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}}}, &(0x7f0000000640)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@loopback={0x0, 0x1}, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x4e20, 0x2, 0x4e23, 0x4, 0xa, 0xa0, 0x80, 0x21, r2, r3}, {0x6, 0xfffffffffffffff8, 0x7, 0x80, 0x1, 0x32, 0xc2, 0x8000}, {0x9, 0x1f, 0x4, 0x4}, 0x2, 0x6e6bb6, 0x2, 0x0, 0x3, 0x3}, {{@in=@rand_addr=0xcc6c, 0x4d4}, 0x2, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x3505, 0x6, 0x3, 0xffffffffffffffc0, 0x7, 0x2}}, 0xe8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x200000, 0x0) ioctl$TIOCLINUX6(r5, 0x541c, &(0x7f0000000140)={0x6, 0x100}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) signalfd(r1, &(0x7f0000000040)={0x6}, 0x8) 15:14:02 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0xfffff39b, 0x8000fffffffe) 15:14:02 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x7, &(0x7f0000000080)="025cc83d6d345f8f76200e") ioctl$sock_ifreq(r0, 0x8000000008b0f, &(0x7f00000000c0)={'ip6gre0\x00', @ifru_map={0x20}}) clone(0x0, &(0x7f0000000400), &(0x7f00000000c0), &(0x7f0000000000), &(0x7f0000000100)) 15:14:02 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:14:02 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x8001, 0x8}, 'port0\x00', 0x2, 0x0, 0x6fba, 0x54b3, 0x2, 0x9, 0x1, 0x0, 0x2, 0x400}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2000, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080), &(0x7f0000000100)=0x14) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r3 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 15:14:02 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x7fffffff, 0x100) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000000c0)=""/21, &(0x7f0000000100)=0x15) r1 = open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) r2 = add_key(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000240)="f75acd5ba7071c475d9c4b6123fb2d58093789506114bcd31b5ee414fd6cb20611d25498be6de7c6c627191753855534b4ea08045603e8538cd9b43fe2c1971b1afc56cc7a138a371e5325c923fc681855a412b42b0c08fb9cb49bc09c1ac952b2c3f64749b3cb04bd094721dedab984e25feb61a8620f77f255e699c50e3e82dcd7", 0x82, 0xfffffffffffffffb) r3 = add_key(&(0x7f0000000300)='asymmetric\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000380)="5574815c02bc0d932113ca65a99124b1d7cb190b064d27e2956239008122b791e9892fd556b0370796246304019afa0b21778d0ef999937a523751bed947b1d138a5615f2743c75560e36fcfa0a292cd68c163", 0x53, 0xfffffffffffffffa) r4 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000480)="803a77ed232edabf5e7f93981809fd9a7ebf9a3296ebfabb16a1292c98f32e43c86f0498d6237b16237afbb699e48a426d3b97b5afad737cd59348d84e8a592f138462f5facb88aae368d2e4fda561ad3180f532e5ba76166e8ac92f3dc87b7b123d70433cd8d4bdb2d60b2304ffd038627fe9b043441d41710ff7c1334a360cc6e71b39ae8f709f12e4b28b6efefcf6c950e1332ceeaa3b7ee93df73c12300ca362d4e747dd7a142955f4cb62", 0xad, 0xfffffffffffffffa) keyctl$dh_compute(0x17, &(0x7f0000000540)={r2, r3, r4}, &(0x7f0000000580)=""/44, 0x2c, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000140)) ftruncate(r1, 0x7ffe) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x20) getsockopt$inet6_udp_int(r0, 0x11, 0x6f, &(0x7f00000005c0), &(0x7f0000000600)=0x4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x802, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000700)={'ifb0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000080}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@getqdisc={0x34, 0x26, 0xb01, 0x70bd25, 0x25dfdbfb, {0x0, r6, {0xb, 0xffff}, {0xffff, 0xe}, {0xb}}, [{0x4, 0xa}, {0x4, 0xa}, {0x4, 0xa}, {0x4, 0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x48005) sendfile(r5, r1, &(0x7f0000335ff8), 0xffffffff) close(r5) 15:14:02 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0x40000000, 0x8000fffffffe) 15:14:02 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4, 0x0, 0xfdfdffff}) 15:14:02 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540), 0x2}, 0x20) 15:14:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") io_setup(0xffffffffffff0001, &(0x7f0000000000)=0x0) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380)='/dev/audio\x00', 0x200, 0x0) r4 = memfd_create(&(0x7f0000000500)='$nodev!$bdevmime_type\x00', 0x3) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vcs\x00', 0x44042, 0x0) io_submit(r1, 0x6, &(0x7f00000007c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0xf, 0x7, r0, &(0x7f0000000080)="1736365486d5aef3f342d72ad1a4f0d0247ebf98063791", 0x17, 0x3}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0xff, r0, &(0x7f0000000140)="cabace40a8fd1ecaa460999724edacd81f05b13e6e380f6fb24b6e9b007aed56193ba290a941252475470dfdc14d8ba1b808641c51a3cf664073c124d86bea450bb3376ab524b5d5028fc238fa76381243947afb35e74cd2a4dc568aea0527c3c385fface4deb112bb83b91d5ac53dc729f83c6f31761fdaf0dc4749c84556b5115be78024238f4c3e2e8c315ec9c8500eaee4325752e201db4cb44dd2", 0x9d, 0x1, 0x0, 0x0, r2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x6, r0, &(0x7f00000002c0)="c9b1ef942591c63538ad654b130bc29c81051b2fe222d5e1eecd7cad13ea469efc400c0179dc24a81007af48399fc7ef8db4b3dd24d5498dc7338ed93e16df5dbf28eb4af4977f5e438ab7261fdc74e310d3c6f88e40d39d80422523be9fbe15d36716c71aa2b0242e09964e359654f5ec5b7236ef674bcf588742ea240bca792a86398367c5e68ecac270de229f", 0x8e, 0xc6a, 0x0, 0x1, r3}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x100000000, r0, &(0x7f0000000400)="846040bc2ee87bbfac9f7dcfa81098feb8f64d63c468e2e27724a9f47f0638e59cf9b97e5291f81a679a7ea304aa0959928c6d439b5ecb96a6f5bdf1bb56846d50a37dac40c93a6487ff3914f8f37f2d0963bb6cf4f5798bd0569496d94187c3daff9bd42da901817f633f7fe61bb5c970becf9f288e9f30d52bac32a6e6817a2f2310628e89a99ef04bde9c71af5f8e94480058eb8d6aa33351398d24fcb1d8f2e04461f090ae7421a00d03e2f41748d013769ddb882c7931646acb493d3af4d5139ba91509bb", 0xc7, 0x8, 0x0, 0x1, r4}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0xf, 0x3ff, r0, &(0x7f0000000580)="95f9fe134a5cce4bf7fb667ad0cedcbda9d6d1d9e7420e78e936bc74ff034b2512f3839b8088c64522d59e2510badd56be7b3d261bd2e8582860df5b214fa63e1297ddda3a70b927a2a35711", 0x4c, 0x3f, 0x0, 0x1, r5}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x8, 0x6, r0, &(0x7f0000000680)="9d7200b693da4ac0a30aab02089e4b00fef157f03f8410de89f9c983567cd75d355138be721fee270fa2c1004e894193d819cb7bcce5d1e673dbf23566bc9133f5162275aa594e734ff500dae4521991cdbdaa015b1f31e7795d278093d154a7aa8fe6df068ae2a51a33063aa3e3a1b00211d6b0310a8d293cf33eff39dc5aa83a61b440afd409dfdd80f2701a47a10f52c34326c062b31e5d82390c154eaaa0f26737a9224153f31c808e505c672b4112ac1022a0316f84f89df501369f863dce8cd8da116543f8a468c15dd362f469f8dbd531671f376e188eff42d0ee49f7f26406db", 0xe4, 0x80000000, 0x0, 0x1, r0}]) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r7, 0x8030ae7c, 0xa07001) 15:14:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f00000000c0)=0x8, 0x4) listen(r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) accept(r0, &(0x7f0000000300)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, &(0x7f0000000240)=0xff89) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)) shutdown(r1, 0x4eecf4a61cb4b628) 15:14:02 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000380)="025cc83d6d345f8f76207085ceae90866f902aa5f6e7a866d58cd5f8be14398ed9ed2564d23c427066e57d0f6571695807fa6e0ac1dee1098c897e214577a69f00f477e5") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)="2f7001000100000000006e65742f697076342f76732f73796e635f7065727369737402076f64650023f8fe63de1ceb3301000000ec641a5e8bd0fb4ecbdacdfd4a09759ee36ad5dcc5ebcc497a38754c46bd9a268aa5440d6f6558f13f1711b3a1b07922a124fd7db28bbf8366efde6efd", 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000100)=[{0x1, 0x0, [0x80, 0x3f, 0x100000001, 0x1, 0x100000000, 0x2, 0x8, 0x0, 0x3, 0x9, 0x1f, 0x400, 0xffffffffffff0000, 0x0, 0x200000000000000, 0x7]}], r3, 0x1, 0x1, 0x48}}, 0x20) 15:14:02 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = dup2(r0, r0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x110}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r3, 0x100, 0x70bd29, 0x25dfdbfc, {0xa}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x7fffffff, 0x100) 15:14:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) write$cgroup_int(r1, &(0x7f0000000040)=0x10000, 0x12) 15:14:02 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540), 0x100000000000000}, 0x20) 15:14:02 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0xb000000, 0x8000fffffffe) 15:14:02 executing program 1: mkdir(&(0x7f0000000100)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) setrlimit(0x8, &(0x7f0000000540)={0x3, 0x320}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x591001, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000240)=""/216, 0x102000, 0x1000, 0x101}, 0x18) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)={0xaa}) fstat(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000380)='./control/file0\x00', r2, r3) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000440)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f0000000080)='./control/file0\x00', 0x0) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) fchown(r4, 0x0, 0x0) rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000140)='./file0\x00') getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000200", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000340)=0x18) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x8000, 0x0) close(r0) 15:14:02 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4, 0x0, 0xfffffdfd}) 15:14:02 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0xf, 0x8000fffffffe) 15:14:02 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x5, 0xff, 0x8}) 15:14:02 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540), 0x200000000000000}, 0x20) 15:14:02 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x2) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000100)={0x0, 0xff}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000180)={r5, 0x101, 0x20}, &(0x7f00000001c0)=0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000200)=0x800000, 0x4) getsockname$packet(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000002}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000002e000000008a3d52c801156d666e3d583dc9bbea080049babfb3f2802240b9e9646e3e881131a32d72669eea509f170b62da9f584d99e36258c7c935359e4eaf7c76524124898061dfa5909c6dd8027cf5e7a67735009d948378c660110bb48662cf54818ceb0396ad0000000000000000000000", @ANYRES32=r6, @ANYBLOB="f3ff0600f3fffbff0000e8ff08000b000800000008000b0001f8ffff"], 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x20000000) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) 15:14:02 executing program 3: clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) futex(&(0x7f00000000c0)=0x2, 0xd, 0x0, &(0x7f0000000140)={r0, r1+30000000}, &(0x7f0000000180), 0x1) r2 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000080)=0xfffffffffffffd0a) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000000)={0x2c, 0x24, 0x1, 0x15, 0x3, 0xfff, 0x5, 0xb7}) fcntl$getownex(r3, 0x10, &(0x7f0000000200)) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) mq_timedreceive(r2, &(0x7f0000000240)=""/44, 0x2c, 0x80000000, &(0x7f00000002c0)={0x77359400}) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r6, 0x8030ae7c, 0xa07001) 15:14:02 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540), 0x1000000}, 0x20) 15:14:02 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0xfffffffffffff39b, 0x8000fffffffe) 15:14:02 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) getpeername$unix(r1, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e) rt_sigprocmask(0x2, &(0x7f0000000240)={0x1dd6}, &(0x7f0000000280), 0x8) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x100, 0x0) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f00000001c0)={{0x1, 0x1000}, {0x8001, 0x8}, 0x3, 0x2, 0x6}) [ 599.772893] QAT: Invalid ioctl [ 599.794443] QAT: Invalid ioctl [ 599.825463] QAT: Invalid ioctl [ 599.829463] QAT: Invalid ioctl 15:14:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rtc0\x00', 0x40000, 0x0) getpeername$packet(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000380)=0x14) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast2}}, &(0x7f0000000240)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000280)={@empty, 0x31, r2}) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000000c0), 0x1}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 15:14:03 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x7, &(0x7f00000003c0)="025cc83d6d345f8f762070f817a9787e54dc740d413dfa2b63903d2054d815e26eee7f996e44b7737e46ec1537e8b397cbaf1baae42200d005649c78a3e40c7e28e51188252841570e97819dc88ba9c2f3cf24ecc0037fd787ac367b8e88745f7f85c79038c91cac2f5317d7a2350ba1be800a82bae4cce29f2fe464573bd87a53f70d7ab99db5c346f512f671821822c171ac7f66d818717a5a87d631cf5ee4faca7ec4f491c6ef68b81ee656b42422dffadb4ffe71b4a82e92311b764653448cce9a3c28e157e5dc3a22b0e9c3b5058fd550e0f125c7b696560eb3684a53") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x2, 0x0, 0x2, 0x80000}, {}, {0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x3502, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) 15:14:03 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4, 0x0, 0x100000000000000}) 15:14:03 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540), 0x2000000}, 0x20) 15:14:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x200, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000080)={0x40}, 0x4) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x8030ae7c, 0xa07001) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr}, &(0x7f0000000100)=0xc) rt_sigpending(&(0x7f0000000200), 0x8) bind$rds(r3, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) getresuid(&(0x7f0000000140)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, [], 0x18}, @in, 0x4e21, 0xfffffffffffffff7, 0x4e21, 0x0, 0xa, 0xa0, 0x80, 0x0, r4, r5}, {0x0, 0xff, 0x20, 0x9, 0x7, 0x5, 0x9, 0xfffffffffffffffa}, {0x2, 0x8000, 0x1, 0x2}, 0x2, 0x6e6bbe, 0x3, 0x0, 0x0, 0x2}, {{@in6=@dev={0xfe, 0x80, [], 0x12}, 0x4d6, 0x3c}, 0xa, @in6, 0x0, 0x0, 0x2, 0x4, 0x80, 0x5}}, 0xe8) 15:14:03 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0xf00000000000000, 0x8000fffffffe) 15:14:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000100000000000000000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x34}, 0x1}, 0x0) 15:14:03 executing program 0: r0 = socket$inet6(0xa, 0x9, 0x101) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 15:14:03 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0x650c000000000000, 0x8000fffffffe) 15:14:03 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x48) 15:14:03 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = fcntl$dupfd(r1, 0x0, r0) recvfrom$inet6(r2, &(0x7f0000000480)=""/120, 0x78, 0x40000000, &(0x7f0000000500)={0xa, 0x4e21, 0x0, @loopback={0x0, 0x1}, 0x5}, 0x1c) ioctl$KVM_SMI(r2, 0xaeb7) socket$nl_xfrm(0x10, 0x3, 0x6) pkey_alloc(0x0, 0x1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, r3}, {}, {0x2, 0x0, 0x0, 0x3a7ce9a3}, 0x0, 0x0, 0x80000000001}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x200000000000000, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000440)='/dev/audio\x00', 0x200000, 0x0) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000540)={0x3, r4, 0x1}) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x8}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={r5, @in={{0x2, 0x4e20, @broadcast=0xffffffff}}, 0x9e, 0x8001, 0x100, 0x9, 0x2}, &(0x7f0000000200)=0x98) 15:14:03 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fgetxattr(r0, &(0x7f0000000000)=@known='system.posix_acl_access\x00', &(0x7f0000000300)=""/216, 0xd8) syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="aa196e403baaffffffffffff86dd60d8652b00140600c06751808ebfb99e6a9082ed000002000000000000000000000000000000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f00000002c0)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x210000, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f00000001c0), &(0x7f0000000280)=0x4) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x80, 0x0) write$P9_ROPEN(r2, &(0x7f0000000080)={0x18, 0x71, 0x2, {{0xb2, 0x0, 0x7}, 0xfa4a}}, 0x18) syz_emit_ethernet(0x62d, &(0x7f0000000400)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0xe6dc, 0x6, "f62dda", 0x5f7, 0xbf, 0x96, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, @mcast1={0xff, 0x1, [], 0x1}, {[@fragment={0x4, 0x0, 0x0, 0xffffffff, 0x0, 0x8, 0x64}, @fragment={0x3c, 0x0, 0x80, 0x2, 0x0, 0x9, 0x67}, @srh={0xbf, 0x14, 0x4, 0xa, 0x3, 0x28, 0x3, [@empty, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @loopback={0x0, 0x1}, @dev={0xfe, 0x80, [], 0x1f}, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, @mcast1={0xff, 0x1, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @remote={0xfe, 0x80, [], 0xbb}]}, @srh={0x3f, 0x12, 0x4, 0x9, 0xcca, 0x20, 0x80, [@empty, @empty, @empty, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, @mcast1={0xff, 0x1, [], 0x1}, @mcast1={0xff, 0x1, [], 0x1}, @empty, @dev={0xfe, 0x80, [], 0x11}, @remote={0xfe, 0x80, [], 0xbb}]}, @hopopts={0x2f, 0x0, [], [@pad1={0x0, 0x1}]}, @dstopts={0x7e, 0x5, [], [@calipso={0x7, 0x18, {0x5, 0x4, 0x1, 0x8, [0xffffffffffff9fb6, 0x8]}}, @ra={0x5, 0x2, 0x1000}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x0, 0xc, 0x0, 0x8, 0x0, [@mcast1={0xff, 0x1, [], 0x1}, @loopback={0x0, 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}]}], @icmpv6=@time_exceed={0x3, 0x0, 0x0, 0x4, [], {0x2, 0x6, "eebd2a", 0x7aa, 0x11, 0x7, @empty, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, [@srh={0x7b, 0xc, 0x4, 0x6, 0xba, 0x10, 0x100, [@loopback={0x0, 0x1}, @mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, @remote={0xfe, 0x80, [], 0xbb}, @remote={0xfe, 0x80, [], 0xbb}, @empty]}, @routing={0x21, 0x6, 0x1, 0x81, 0x0, [@dev={0xfe, 0x80, [], 0xe}, @local={0xfe, 0x80, [], 0xaa}, @mcast2={0xff, 0x2, [], 0x1}]}, @fragment={0x3b, 0x0, 0x9, 0x81, 0x0, 0x9, 0x66}, @fragment={0x17, 0x0, 0x5, 0x1, 0x0, 0x8, 0x66}, @srh={0x8, 0xe, 0x4, 0x7, 0x1f, 0x40, 0x1, [@local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, @mcast1={0xff, 0x1, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @loopback={0x0, 0x1}, @remote={0xfe, 0x80, [], 0xbb}, @mcast1={0xff, 0x1, [], 0x1}]}, @dstopts={0x62, 0x29, [], [@jumbo={0xc2, 0x4, 0x5}, @jumbo={0xc2, 0x4, 0x6}, @pad1={0x0, 0x1}, @generic={0x40322050, 0x96, "0614f9492d643768b86e68b9ed7051d848940de70786f5f15a75137d46d26f5a135d16ceb1335f664a826d328aff2a1c0187007e6797c9a1c855b5108bf7f879ed5acb0913a1d094990ad2acc14ca3ef2ce6e9e6304642fa5f802df8b79c68ca5fba47181503c232fe700dca0d354139ed8ef14dadf91b15a79923b77ae28174472470d59786ff18ac2898c603d02cc753120024f9cd"}, @enc_lim={0x4, 0x1, 0x90e5}, @generic={0x7, 0xa0, "e8a65a3942e889ef795b54851e467bc2c6acc8a2949c43c3b9515562dd3ea335932c427cd5a18c9dbf2bb06e7b8730a77df017f703b0557c84a90f1028fa87fd056cf95f6136766d2c923c8ba91784b368e29a65ac77d395d8e5ab37d032240f097500d4d8494b57c84bf0af27940c8fb4e37666eca763f0c00f31a9f4e53c98c5e020567be945865e14bb0728b2ae87274b9838468aaa0697a1b21a086ab764"}]}, @routing={0x2c, 0x8, 0x3, 0x0, 0x0, [@dev={0xfe, 0x80, [], 0xe}, @mcast2={0xff, 0x2, [], 0x1}, @mcast1={0xff, 0x1, [], 0x1}, @remote={0xfe, 0x80, [], 0xbb}]}, @hopopts={0x0, 0x4, [], [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x1ff, 0x4, 0x80000000000000, 0xc0, [0x3, 0x80000001]}}]}], "7e0a02e18304d4892734e2cd4d2a18f508cae8b545a3fc1dc3bdc95f75daa7dc66855172993b9c710ba44f7bda5350ef0d78a2c1dc033cc4742c1f28151481f16d446c69feac67bd7be31ba7c1cb8250db0cac1d0dfbb157fef9c86aa11955392805b5d8ed681edae8cd6eabaa1c90233f08bee2cb8132720c549a94f26ab52d5a89c6a2e5e9c5d30f1b455780433cd79f11ca4609d1373f59bd5df5e136a2ad95c491f56a302cd948e23d80cd2c69958a5d6d8bf2591fabb9094bafd86f4dfcfbde2695e2c2212ac08ff7bfec13d77ece4f476c061f35"}}}}}}}, &(0x7f00000000c0)={0x1, 0x2, [0xa36, 0x470, 0xd2b, 0x97b]}) 15:14:03 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4, 0x0, 0x1000000}) 15:14:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x8000b, 0x6) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x2, 0x20}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r2, 0x3}, &(0x7f0000000100)=0x8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r4, 0x8030ae7c, 0xa07001) 15:14:03 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x7, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xb69, 0x2081) write$eventfd(r1, &(0x7f00000000c0), 0x3c3) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x80000000, 0xb8) init_module(&(0x7f0000000200)='/dev/vcsa#\x00', 0xb, &(0x7f0000000240)='securityeth1&trusted\'md5sum\\$/\x00') write$eventfd(r1, &(0x7f0000000140), 0x2f3) r2 = request_key(&(0x7f0000000040)='cifs.idmap\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000180)='/dev/vcsa#\x00', 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000340)={0x4, 0x0, [{0x0, 0x0, 0xff}, {0x48c}, {}, {0x214, 0x0, 0x2}]}) accept4$inet(r1, &(0x7f00000002c0)={0x0, 0x0, @local}, &(0x7f0000000300)=0x10, 0x800) keyctl$restrict_keyring(0x1d, r2, &(0x7f00000001c0)='trusted\x00', 0x0) 15:14:03 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0x10000000000000, 0x8000fffffffe) 15:14:03 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20000460) 15:14:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000100000000000000000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x34}, 0x1}, 0x0) 15:14:03 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000080)={0x80000001, 0x909a}) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 15:14:03 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4, 0x0, 0x0, 0xffffffffffffffff, [0x80ffff00000000]}) 15:14:03 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0x7000000, 0x8000fffffffe) 15:14:03 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) read(r0, &(0x7f0000000040)=""/31, 0x189) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) 15:14:03 executing program 5: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20000003) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x66, &(0x7f0000000000)=0xc00, 0x4) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = accept4(r1, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000440)={0x1d, r4}, 0x10) dup3(r2, r3, 0x0) recvmmsg(r2, &(0x7f0000001e00)=[{{&(0x7f0000001c80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @local}}}, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001dc0)=""/37, 0x25}}], 0x1, 0x0, 0x0) fadvise64(r1, 0x0, 0x100000000, 0x4) 15:14:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000100000000000000000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x34}, 0x1}, 0x0) 15:14:04 executing program 3: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0xb, 0x1) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = semget(0x1, 0x7, 0x400) semctl$SEM_INFO(r2, 0x0, 0x13, &(0x7f00000002c0)=""/224) prctl$setfpexc(0xc, 0x80080) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80800) ioctl$KVM_GET_REGS(r4, 0x8090ae81, &(0x7f0000000100)) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r5, 0x8030ae7c, 0xa07001) 15:14:04 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000100000000000000000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x34}, 0x1}, 0x0) 15:14:04 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:14:04 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0x4000000, 0x8000fffffffe) 15:14:04 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) socket$inet6(0xa, 0x801, 0x6) 15:14:04 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4, 0x0, 0x0, 0xffffffffffffffff, [0x100000000000000]}) 15:14:04 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="2400000052001f001515f407000904ff0a00072207000100ffffffff0800e5ff00000006", 0x24) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000240), 0x2) r1 = open(&(0x7f0000000000)='./file0\x00', 0xa7e14062baf5c7ea, 0x20) r2 = fcntl$getown(r0, 0x9) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000100)={{0xa, 0x2, 0x3, 0x69e}, 0x6, 0x104, 0x3, r2, 0x8, 0x20, 'syz1\x00', &(0x7f0000000080)=["24402a73797374656d25242362646576ef00", '\\selinux\x00', '\x00', '@cgroup)\x00', '*}\x00', "2f4075736572405b21707070309c73656c696e75783a6264657676626f786e657430242c656d3000", 'nodev),-/em1GPL\x00', 'usereth0\x00'], 0x69, [], [0x401, 0x5, 0x1ff, 0x5]}) 15:14:04 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000100000000000000000000000000", @ANYRES32, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x34}, 0x1}, 0x0) 15:14:04 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) ioctl(r5, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="010000eaa078b20000197897c03c4032154b3f000000001c000000000000000000000000000000000000"]) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x8000000000001a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1013, r7, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x20}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000005c0)=ANY=[@ANYRES32=r8, @ANYBLOB="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"], &(0x7f0000000240)=0xe2) r9 = socket$inet6(0xa, 0x3, 0x87) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r10, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r9, &(0x7f00000000c0)={0xa}, 0x1c) 15:14:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="025c7431d773c6a3226e0c28b9b9fdeeaa5f67013006ab623f35488c2354213010ac13e1793b2fc2bd9dd9336b11b100000000") r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x82400, 0x0) uselib(&(0x7f0000000080)='./file0\x00') ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x600181, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000000c0)="65660f1bdbf2af0f01caf0187300f6ce92670fc71dc60000000f09ba2000ed0f35f30fc24e9717", 0x27}], 0x1, 0x50, &(0x7f0000000140)=[@cr4={0x1, 0x406002}, @flags={0x3, 0x50802}], 0x2) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x8030ae7c, 0x800a47007) 15:14:04 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000001040)="025cc83d6d345f8f762070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x20080a3, 0x1b, 0x1, 0xffffffffffffffff}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x200, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000100)=""/239, &(0x7f0000000200)=""/97, &(0x7f0000001080)=""/4096, 0x6000}) r4 = dup3(r1, r2, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000000c0)={0x101000000, 0xa, 0x0, 0xffffffffffffffff, 0x4000}) 15:14:04 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x42e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:14:04 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0xa, 0x8000fffffffe) 15:14:04 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000100000000000000000000000000", @ANYRES32, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x34}, 0x1}, 0x0) 15:14:04 executing program 0: r0 = socket$inet6(0xa, 0xa, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) socketpair$inet6(0xa, 0x5, 0x9, &(0x7f0000000000)) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) ptrace$peekuser(0x3, r2, 0x4) [ 601.672518] x86/PAT: syz-executor7:8032 map pfn RAM range req write-combining for [mem 0x191a30000-0x191a33fff], got write-back 15:14:04 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000100000000000000000000000000", @ANYRES32, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x34}, 0x1}, 0x0) 15:14:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x8030ae7c, 0xa07001) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x80, 0x0) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000080)) 15:14:04 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x404000, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)) 15:14:04 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0xfeffffff00000000, 0x8000fffffffe) 15:14:04 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x800) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000200)) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000100)) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000), 0x4) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup3(r2, r0, 0x80000) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000000140)=""/1) getsockopt$inet6_dccp_int(r3, 0x21, 0x10, &(0x7f0000000040), &(0x7f0000000080)=0x4) 15:14:05 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4, 0x0, 0x0, 0xffffffffffffffff, [0xfdfdffff]}) 15:14:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000100000000000000000000000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x34}, 0x1}, 0x0) [ 601.897126] x86/PAT: syz-executor7:8073 map pfn RAM range req write-combining for [mem 0x191a30000-0x191a33fff], got write-back 15:14:05 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x1, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e23, 0xffffffff869fcc17, @empty, 0x5}}, 0x0, 0xfffffffffffffffd, 0x1, 0xe2d, 0x80}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0xffffffff, 0x30}, &(0x7f0000000480)=0xc) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000540)={r1, 0xe5, 0x8, 0x3, 0x401, 0xffff, 0x80000000, 0x20, {r2, @in={{0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x2, 0x7fff, 0x2c, 0x20, 0x6}}, &(0x7f00000004c0)=0xb0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000200)="e0ee2c539feec49f400eb62dda7d30e6a8a7d4630111168cc3c4b1e8e1a8c9fc8482cd588677db8a4c3b16c5715ed6a77c4aa27e7073d7da61cb78c459b86295e92cef85e5a183ee7a1c1569614ea26f9373c3ab756108827c7fc574dd19bc88042efecdf8c379d4f1c881b9b91a6c2c810b5c4881ac71fc7a6a79eb050aabf2a918fd", &(0x7f00000002c0)="a99e30b616698cda75779e9caa9a3a17892b8501d0c215437b94d51c79ef3b7c88ddd31c70a15d7d00a24b3801e32049fc1ee0a7f95690c44659ad02b62f27c448643f0b270afb72e8cbf77bcf7794628d74fa8a791f8a62fe0927ed1f8421f43bbb1afbfbd2258deadc51f6ce6fe7caa74d460b485fadd1b829f1a580ac1c11461e72f18f"}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) get_thread_area(&(0x7f00000006c0)={0x1, 0x100000, 0x400, 0x4, 0x20000, 0x4, 0x9, 0x6, 0x80, 0x9}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r3, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000600)={0x80, 0x0, 'client0\x00', 0x4, "951687f14a76bc3a", "40bb3a5ef9b8cecf87b4d5f43f02457dfb4f90b30ef9b5ce181b33bc1b58f50c", 0x2, 0xa419}) 15:14:05 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000004, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BLKTRACETEARDOWN(r0, 0x2271, 0xa07000) syslog(0xa, 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x57c0, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r2, 0x7706, &(0x7f0000000080)) 15:14:05 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000100000000000000000000000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x34}, 0x1}, 0x0) 15:14:05 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0x600000000000000, 0x8000fffffffe) 15:14:05 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3c) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000040)=""/25) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="841d", 0x2}], 0x1, &(0x7f0000000840)}, 0xc100) socket$pppoe(0x18, 0x1, 0x0) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="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", 0xfe}], 0x1, &(0x7f0000000280)}, 0x0) 15:14:05 executing program 0: r0 = socket$inet6(0xa, 0x9, 0xfffffffffffffffe) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 15:14:05 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x34, 0x3e5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x401}, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={0x0, 0xc000}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000200)={r1, @in6={{0xa, 0x4e22, 0x531, @dev={0xfe, 0x80, [], 0x10}, 0xd9b}}}, 0x84) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000040)={{0x23f, 0x5000}, {0xfffffffffffffff7, 0xffff}, 0x5, 0x3, 0x7}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:14:05 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_pts(0xffffffffffffff9c, 0x10000) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f0000000040)={0xfcd, 0x4d, 0x5}) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xfffffffffffffecb) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x66) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) 15:14:05 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000100000000000000000000000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x34}, 0x1}, 0x0) 15:14:05 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4, 0x0, 0x0, 0xffffffffffffffff, [0xfffffdfd]}) 15:14:05 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x80, 0x1) getpeername$packet(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000a80)=0x14) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000ac0)={r1, 0x1, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x7, &(0x7f0000000100)="025cc83d02000000762070") r3 = socket$inet6(0xa, 0xffffffffffffffff, 0x100000001) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r3, &(0x7f00000000c0)={0xa}, 0x1c) 15:14:05 executing program 5: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000100000000000000000000000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x34}, 0x1}, 0x0) 15:14:05 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='/dev/sequencer\x00', 0xffffffffffffff9c}, 0x10) fcntl$getownex(r0, 0x10, &(0x7f0000000640)={0x0, 0x0}) write$cgroup_pid(r1, &(0x7f0000000680)=r2, 0x12) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer\x00', 0x80000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000540)=0xc) mq_notify(r3, &(0x7f0000000580)={0x0, 0xa, 0x0, @tid=r4}) r5 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x6, 0x800) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r5, &(0x7f0000000200)="ca075ef844ae13d0e7d3a1fe25efca11afb4e59cfb1a3ec0cffb2f73be26b9b0422fb04c0f8f5e0d60fcf3e81824866ae18674b62e5b2a70fdffe8fc0dd102f5d04fa6d26a5f7b3f7f146447ab49051bd2800d9c0e8890567a712a067334becdcd871e44f05f81b8d0b7b2bcac5850693a291b134b39b77cc66ef22bf2eac6b7def687331509408c3b5484d7277cb3b36a5bb058829fa2ae6ac803fbbe960ee29bba2ee053cf9644a3258595dc31ab", &(0x7f00000002c0)="a62cc989ee73e2b0ba57fc93693b2e778382064a03929c74d59b4e5e1819dfe14f9f358e8a9aa9a9129f3aa8b4b54c47e3c1c393fad23427987676502237be557b55e4c7585b743618b40994362e938d0a7275896c6e472f8ebf43105ebaf07ef957020ddac49bc1324a5e39c13ab6516bee4396b3e80e4883d124b2c06c36ab91bf635b08442c257b30af04711993d3905e3019e48db6ea748dc2f2980e1f77779e8675537ca794", 0x3}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) eventfd(0x8) recvfrom(r5, &(0x7f0000000380)=""/188, 0xbc, 0x12000, &(0x7f0000000100)=@pptp={0x18, 0x2}, 0x80) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r6, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r6, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:14:05 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0x700000000000000, 0x8000fffffffe) 15:14:05 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000080)={0x3, 0x0, [{0xbbd, 0x0, 0x1ff}, {0xd35, 0x0, 0x4}, {0x100000001, 0x0, 0x1f}]}) r2 = socket(0xa, 0x1, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f00000001c0)={0x1, 0x0, [{0x40000001, 0xfff, 0x2, 0x5ab, 0x7, 0x7, 0x7}]}) capset(&(0x7f0000000140)={0x39980732, r3}, &(0x7f0000000180)={0x1, 0x7, 0x5, 0x5, 0xedc, 0x401}) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 15:14:05 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000100000000000000000000000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x34}, 0x1}, 0x0) 15:14:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) ioctl(r5, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="010000eaa078b20000197897c03c4032154b3f000000001c000000000000000000000000000000000000"]) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x8000000000001a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1013, r7, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x20}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000005c0)=ANY=[@ANYRES32=r8, @ANYBLOB="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"], &(0x7f0000000240)=0xe2) r9 = socket$inet6(0xa, 0x3, 0x87) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r10, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r9, &(0x7f00000000c0)={0xa}, 0x1c) 15:14:05 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) gettid() connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$netlink(r2, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfc, 0x40}, 0xc) 15:14:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x6, 0x40000) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000000c0), 0x4) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000100)="208bae92b8441450ec893c51b9bebcb93847c43759fdd38eac3ff37d7b26a03f63904d69b204901e42f1cc75c03de31efc32fb398397177d708652d639f98bd285515936605dbc19a74c7c40ee6eab033d1632896cab958b32e8150fc411e7a01e79164cb4ad9993bde5c503ef93266ce87765fa330ed4fcc4ef03040d77a8ac583820416df921fd880ad59b6eb351ff0a7755b7b3a68f192b3e7e2d2c7b7b5b473f05819b9cdc9680494954f40522cd8c3a00bea872ac8f6f243989294de1a333b0d19bceb1a234a93a24398d90e8a0936ec23584450670529c0c400bd0977cb3a08a65fb921c480ee3a5", 0xeb}, {&(0x7f0000000200)="d97d988aca05a09a8dee1d151d51fee8bb8009324641670a07c5dff721675f0e65ad1d76dcd588c1a4a7a56ed2d584765df9572ac561033d777bc943eb71a7aabd9961e760f79beb5f4bfafcf275b108f9f16a6301f31835fff63bc6f84a9d1550e3977c4d58ac4f78ddeac78f2bb2f6b35c53871284b2b644b165a0674788c344ec578d95971fa1ab33145f", 0x8c}, {&(0x7f00000002c0)="4467de", 0x3}, {&(0x7f0000000300)="ce66d643bf18e25673b48d384de2df38a136e94e507d15d27aebf3e0316266ae59dac78d27b06fa87b40211f3561104c0ec85751d685df51752bfd0ca2c1ac560d", 0x41}], 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x100000000000002) 15:14:05 executing program 4: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffff9c}) r1 = perf_event_open$cgroup(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x9, 0x1, 0x2073, 0x0, 0xffffffffffffffe0, 0x1, 0xb, 0x0, 0x400, 0xffffffff, 0x6, 0x0, 0x20, 0x100000001, 0x9, 0x0, 0x81, 0x3, 0xfffffffffffffc01, 0x3, 0x0, 0x3, 0x3, 0x2, 0x100000001, 0x2, 0x1ff, 0x800000, 0x400, 0x3, 0x7f4c, 0x40, 0x3a, 0x8, 0xffff, 0x0, 0xffffffff, 0x1, @perf_config_ext={0xffffffffffffffe1, 0xfffffffffffffffc}, 0x401, 0x20, 0x80, 0x0, 0x4, 0x1f, 0x3f}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0xc) getresuid(&(0x7f0000000140), &(0x7f0000000280), &(0x7f00000002c0)=0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000300)=0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)={0x9e0, 0x11, 0x7, 0xa00, 0x70bd2b, 0x25dfdbfd, {0x7, 0x0, 0xa}, [@generic="318f1b18f073e0a80791251fd15c6913c9ee49eaebd42a59c0937a263477b240fbbe259c73d8cbe5e1965d87b291ede63e54729e4666230b00bcb37e20041797bc47d926d56fe3348923637b353754fb7d20d7b6bd1ad1c06c73174197effce8c96dc4286dafce0a58cf2157d62fec0b3ea8733609d5fb847bbbfe020691554feb403115ebd688ecbc673824334ecfe0e5e7ec772e89188e6fe33d568a6969411b142769a35cf4dfa987be86b52ea228b101f141fe3a133becf2c204fe0ef99e6c", @nested={0x2e8, 0xf, [@generic="dd5598bbe4b640c96956eb37a7ae3ed9080a80cbdf82d07541eefec89c01f53a6ea3abbcc34598d2d4ee65cf1fc490074407317991023bedebd3dcf982c8c454cbb228ebda10716bb725026a42b03a38be0c051dc916352dabaf68252bf5bb139cabc8d477b914a0f257a0244156cd753cbb252314d2e27c11bbf0907a48ec423d63147652acc5d27ed87dbdf925e595c594701635347242a501b085a87abc9b12bba2bd55ff1955e8d00ad74f84f59d8786335d25d27b049439eee01231a67290c884ed5e0ab7a9b3724cdb6864fb71533e01df08e7bf6a4ed4b8cbd5b54bb9944b7926c314d18a281e56b6a1046b055a9ce6e0ba", @typed={0x8, 0x4b, @u32=0x8}, @generic="ff3163cd1c4a928ff84e689219753563d6dbd72dd26f3679fa8d0ea1cf1567c725c107e879c117cdb66c0467303f034373da28bf9ad624dbccb5d0720df9ad98649837", @typed={0x4, 0x45}, @typed={0x4, 0x2d}, @typed={0x8, 0x76, @ipv4=@rand_addr=0x2}, @generic="e128c3e0c4a3623a7cd30282038e43d7144c11fae77e3aaf0d07ab1de0f879500c0f2445056dc4b6455e80844f1e44b7f22ea73a047f1e5e17d05a711923a1f013c5fb9e7b7a9b8c2eb3b6ec6eac0ca72f756c72b29770c26bb745ef9cc6afc776a860403437318d1896a6d5ffccdf31a8a8397effdf9e7d841f95243fecf6e2a891344394873c3e3af729af86c35b413447a725882e989fe509ac061a3af217eaa1cce28331474fa3a4364ff730739ce0e9551b4bc35306b7ebfda55d37e4980b385783dc4d2bab45", @generic="5574f2ba95d267b545651b27f9ae1211ce8fb9ce80079719b62e96f5aaa75f0d80d51800995dc5c8e2011133c6bf86d2af7d2dbd537abebc2922f96931d66c51256c7a4d6c8ce586255c763729e2a32246939588df45c6a2fc226b2582e9012ee6a54d440235faff5677d97bdb47c8c3348a5703c4f84c71503aadc90d7ff58566d5363e9bdb997357901a8ee4ced7f7423c224863559880449513817d5c47c0388909ec2b8b1eb2edfa09af659654a0fae562a4c519be6fb37222437e35a53d9f", @typed={0x8, 0x87, @ipv4=@multicast1=0xe0000001}]}, @nested={0x378, 0x63, [@generic="03322dd9d4e9bf38c0ac83e06e8f2aec3bdafac1ef809fb3f3a1c6dae2c85e030a2da1db6fb6d25aa8f079e4855f1a97add853ca9c2542c5c07a4d567cb22217dc752a4f840c4e02dee7064b784a974b1afcb23f3d37575be9683275cec19ba3ba2fe4a2fc398060bd1ffcd3bb42e47d310b732a48a422bd2ad3aa8c70d058614d1c100d4ebd70d71706a3818cdd2a3a347cab4652d14b5109e8124ee661bc4720e6adcb06490717ead351f7a19f9ef6797d856dc3a46cc6449e18665ebb5d16b9ca9762e751db8686133695744f80ff7f442189297928b8b1d916fc50d02420b2b14f0de61aa3bf3f9d54d36d53c3eed1d03913d9a6bf", @typed={0x4, 0x88}, @generic="313e253f23905734da576467c69de51ec38685e888232b41afc4611dc8f39168c57f6b92244a6f1461c83da187b2c17094f6be518a990a18c8f4a2d3eb124bf44bab052002ae94fea23a51af7b5a33fc8b2688f4f6d1a7175acec892699f57768d2e88ce85481bcbea0d5ef6c0e7cf9fa196b845562b352a3e1e31a9dd51e2cb09fa97b0e4697df42615be7d7515bf20608bff90e587aa18a59459d1292653a55f52216a09817014ae43bd5853ac6d51d9f98444a727cbb65dc9c1f0e3ae5cda15cad94191", @typed={0x9c, 0x8a, @binary="6f1b0ef27c5b164ba36ba5c60b8a585fcd06f5db4bf74f279bf92e8c97d6a94f2d1643614d20dfa4fe9c9bdeb9085f0d94977f8876670c405a1e6c1fdbafbd747a488886e5f0b41fec78e944f92ddefb0f8ed5b3ae49f49cbe6bcd2d89e608c065cd37ea632e84143a60e406e766ae34f1465a28e459a20ba280f8fa571a6d7e276503c91639cc993e83dd552f1cbbc3e73577d7403641"}, @typed={0xc, 0x15, @u64=0x45}, @generic="178c989b568671fc3ea9be3bb09444d5cc0afca7ed070dcebb11fe3be52f163df133a7c59acb6e626ae79631fff5b0f0af558469648bfcbb3c899c7f5031b051fded3cf5a8a6d13ab7a4407be30d9adbfacd640df701fcd3f4adec1e7c75a4462ed69eff423775e0ae76bf8f7f598651801f17eb18ddd6a968b51844c2acb3964781a7f993e1dec03901673a02ecbed51d7c2108a15e75255132afe5e732c523fa25b5ce062c8b43fa8d7e1dfb3470b49f319a726e735597ade8a4d1037f6d144f6fbadb13a48ac70002220b57b7f272e50a9af7df8e250f75dde128c2cd23a5e9de8cd0bf895893be4af65afd", @typed={0x8, 0x27, @u32=0x3}, @typed={0xc, 0x62, @u64=0x2}, @typed={0x8, 0x47, @ipv4=@multicast1=0xe0000001}]}, @typed={0x8, 0x10, @fd=r1}, @nested={0xbc, 0x77, [@generic="67a1b2746209b8da78f287d7cd0621a8ebcac2bdf67de9d92ccf38f9758aa1cd1c104484b2f632dbae2021", @typed={0xc, 0x7d, @u64=0x9}, @generic="0aeaf6f8d6817f0c4de7cfb7a68214fd9928df7c966a6987288d052d5c08c5fe5f57159e35a613aaf68e346c80b0f187ba09c2ee5e2b90d7bb1ca69107455d0c408b3bb04d290e2280df891cfd5201bac9d51242574fea5c664af072711e9800540062003437301183d3703cd8b6e7869d7de8ed8ab5768f33907e2eb9457d66"]}, @typed={0x4, 0x5a}, @typed={0xa8, 0x13, @binary="792504940cc0f8605a64cc0fbb67b0af435db78e44ea9c9a745326865921db29c90d13c48e6416be7216888e256b86f2616b86b4e5c9954b58cfb4f3469b6f09f47271fdba9c76256e4c85c95e3723ad0c8c36b099bf9549847251e96f2d069eb22ed9da0a790522232595894adcb6f6da3a66170f37944475089dfa93d1a0b0f3c91b4600fabe7567154e850390ccea24442aad1b845c8e15460e5822d098b72a82f4"}, @nested={0x130, 0x26, [@typed={0x4, 0x92}, @typed={0x4, 0x3c}, @typed={0xc, 0x91, @u64}, @typed={0x8, 0x52, @uid=r2}, @typed={0x8, 0x5d, @pid=r3}, @generic="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", @typed={0x8, 0x1a, @ipv4=@multicast1=0xe0000001}, @typed={0x4, 0x58}]}, @typed={0x8, 0x22, @u32=0x10001}]}, 0x9e0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r4, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:14:05 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000100000000000000000000000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x34}, 0x1}, 0x0) 15:14:05 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0xc00000000000000, 0x8000fffffffe) 15:14:05 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000100000000000000000000000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x34}, 0x1}, 0x0) 15:14:05 executing program 7: r0 = socket$inet6(0xa, 0x1000000000006, 0x4) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) ioctl(r0, 0x5, &(0x7f0000000140)="168c4961da0469091079d42377fd18ee686bbacd7297cb38541a1c2d34896cd4cde2a0d8c6797cdfb1c3309574cd0487eb50ac02319b9b7fc03cba87abe120cc24fccb835db421eb139f92e707f31a71faf3faaabfa779c4700162ca4b9c03e5") r2 = syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0xffffffffffffff39, 0x101040) ioctl$RTC_WIE_ON(r2, 0x700f) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x20053, r4, 0x80000000) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xf4, 0xfffffffffffffffe) 15:14:05 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000040)={@broadcast, @rand_addr, @loopback}, &(0x7f0000000080)=0xc) [ 602.602708] x86/PAT: syz-executor3:8157 map pfn RAM range req write-combining for [mem 0x19a5a0000-0x19a5a3fff], got write-back 15:14:05 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4, 0x0, 0x0, 0xffffffffffffffff, [0xffff8000]}) 15:14:05 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) inotify_init1(0x800) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x13f, 0x5}}, 0x20) 15:14:05 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x98, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1140e3177ac95500000000000000000000000000000000001106000000001c000600000089000000000000000000000000000000be8a90302a203643cc77719776ddeb0752a3bf819e22fce5b8f6df69cb0cca188837711d331894686bde0f9c929007a80be89d8f325dd1ea2ae379411f1a854b7e2e93b96595ca5da7d2a9b6d61307336e7f66b259aa65baf65b4caf546cdd67f50a140ade54", @ANYPTR=&(0x7f00000001c0)=ANY=[], @ANYPTR=&(0x7f0000000040)=ANY=[], @ANYBLOB="000000000000000011634840000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000a0b59808369c4a8757436a0a975afd4e87552b54164a163b8f7f48c56bb1e076e9a8702cc6687cdddebc73b5608067e2d459d1135b4a2763a118147031b2e2a7bcc289f85e4c4ba92295ab31edb74a3f1978ea22dc09d81a132a1e748fc45d44b6b7328478fd3a7f97cb230afdfa13afedebc66dee7de37bf2fc912c9fa57049f1bba49eaa63084f", @ANYPTR=&(0x7f00000000c0)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYBLOB='L\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0xfdfd, &(0x7f0000000800)}) r1 = shmget(0x1, 0x3000, 0x54000020, &(0x7f0000ffc000/0x3000)=nil) shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x800001ffc) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8, 0x400100) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r2, &(0x7f00000000c0)="314f4fa6dd93aac36c620d236bb01de29abcebfe509eb33f0291f4d74c8c0ec7cce9499674b70b9ad47edb2b91867959c533e0f3321e50db81ebeb609cc112cdd1e8216c90460ebcdeee4adfedc20bf69904e024020fd26133d39fa99c0c034daa88163c03222bdf11f063c8ca7403e0e570b36d949b4b4adeb08ad25ea594e4c2af638350e8dbfe492432c976062cd5c3814afd", &(0x7f00000001c0)=""/116}, 0x18) 15:14:05 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0xe00, 0x8000fffffffe) 15:14:05 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000100000000000000000000000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x34}, 0x1}, 0x0) [ 602.757866] binder: 8198:8200 unknown command 400769041 15:14:06 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x12, 0x218000) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000080)={0x1, [0x0]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:14:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) ioctl(r5, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="010000eaa078b20000197897c03c4032154b3f000000001c000000000000000000000000000000000000"]) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x8000000000001a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1013, r7, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x20}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000005c0)=ANY=[@ANYRES32=r8, @ANYBLOB="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"], &(0x7f0000000240)=0xe2) r9 = socket$inet6(0xa, 0x3, 0x87) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r10, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r9, &(0x7f00000000c0)={0xa}, 0x1c) [ 602.805562] binder: 8198:8200 ioctl c0306201 20000180 returned -22 15:14:06 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x80800, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r3, 0x4040ae70, &(0x7f0000000100)={0x7, 0x2454, 0x7, 0x102}) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) 15:14:06 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000100000000000000000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x34}, 0x1}, 0x0) [ 602.863055] binder: 8198:8200 unknown command 400769041 15:14:06 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0x9bf3, 0x8000fffffffe) 15:14:06 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x7fffffff) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") recvmsg(r0, &(0x7f0000000080)={&(0x7f0000000100)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast2}}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)=""/125, 0x7d}, {&(0x7f0000000200)=""/121, 0x79}], 0x2, &(0x7f0000000280)=""/4096, 0x1000, 0x1}, 0x2103) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 602.904547] binder: 8198:8200 ioctl c0306201 20000180 returned -22 15:14:06 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4, 0x0, 0x0, 0xffffffffffffffff, [0x1000000000000]}) 15:14:06 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000200)={@mcast1={0xff, 0x1, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff}, 0x2a) r4 = socket$inet6(0xa, 0x3, 0x87) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r4, &(0x7f00000000c0)={0xa}, 0x1c) getpeername(r0, &(0x7f0000000100)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @local}}}, &(0x7f0000000040)=0x80) 15:14:06 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000340)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080), 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001cc0)=[{{&(0x7f00000001c0)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000240)=""/19, 0x13}], 0x1, &(0x7f0000000900)=""/222, 0xde}}, {{&(0x7f0000000a00)=@nfc, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1, &(0x7f0000001bc0)=""/199, 0xc7}}], 0x2, 0x0, 0x0) 15:14:06 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$TCXONC(r1, 0x540a, 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x10, 0x7f, 0x1, 0x1, r1, 0xfffffffffffffffd}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) 15:14:06 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000100000000000000000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x34}, 0x1}, 0x0) 15:14:06 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0x3, 0x8000fffffffe) 15:14:06 executing program 0: socket$inet6(0xa, 0x1, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 15:14:06 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x480, 0x0) ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f0000000100)) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) 15:14:06 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x9, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x22, r0}, 0xb9) fcntl$getownex(r0, 0x10, &(0x7f0000000100)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x704, 0x2, 0x1, 0x1ff, 0x9}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:14:06 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000100000000000000000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x34}, 0x1}, 0x0) [ 603.206418] x86/PAT: syz-executor3:8217 map pfn RAM range req write-combining for [mem 0x1966a0000-0x1966a3fff], got write-back 15:14:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001800)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xffffffffffffffff) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x7b, 0x0, [0x40000020]}) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f0000000040)}}, 0x18) 15:14:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) ioctl(r5, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="010000eaa078b20000197897c03c4032154b3f000000001c000000000000000000000000000000000000"]) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x8000000000001a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1013, r7, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x20}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000005c0)=ANY=[@ANYRES32=r8, @ANYBLOB="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"], &(0x7f0000000240)=0xe2) r9 = socket$inet6(0xa, 0x3, 0x87) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r10, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r9, &(0x7f00000000c0)={0xa}, 0x1c) 15:14:06 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0x40030000000000, 0x8000fffffffe) 15:14:06 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x99, 0x10000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x6}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000180)={0x9, 0x8000, 0xe15e, 0x7fff, r4}, &(0x7f00000001c0)=0x10) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) 15:14:06 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4, 0x0, 0x0, 0xffffffffffffffff, [0xfdfdffff00000000]}) 15:14:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000100000000000000000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x34}, 0x1}, 0x0) 15:14:06 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x4b, 0x80, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000040), &(0x7f00000001c0)}, 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000080), &(0x7f0000000680)="256a71dcabc0d9ebd7dae742ca1a01c5729fe919380366d2e8c5d906edbec6397f60f8714b507e66dc8f8939a4a5b08fb25c42d3f6e300454e51969cdd195bfea741a8f60db7747217d68c1bff2483e4204a06cdf5ce2600a1e923267e350cc62a164469860f4019afab792104834f081d5fa61f6999739374b800bb00e903805b587bb66a6e923590b4cf8aa8c360733832f62c95bbe11e6dd950b09e6c3121f743abc1fc756f5502382d720a4b79052de501e05e73048133c9e48d218dac571137eeeb971bd017f60779893648be973e62a7c189ad3d05499f67d5c1220fe5cc8bab406c74c0fa557c95eee39d90d6265d9cefa28f434415b02fdf056a1bf15c2e28294b5b428c8004539e2841cfdfdc69f4e82f247f9be941143d74801d8e1fcf9f66ad7140ced3f2f7a4f938013f44a5ece878b0940bd73cbc36376c55"}, 0x8) 15:14:06 executing program 5: r0 = socket$inet6_sctp(0xa, 0x200000000000005, 0x84) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x18, &(0x7f0000000180)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@multicast1=0xe0000001}}, {{@in=@rand_addr}, 0x0, @in=@loopback=0x7f000001}}, 0xe8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x4, &(0x7f0000000140)=ANY=[@ANYRES64=r0], &(0x7f0000000080)=0x1) sendto$inet6(r0, &(0x7f00000000c0)="be6534875defd25f16e2bee175c432e29bb573026d205f98d2ecb85417925c92f398208a546c622c301ad5033fcd380128efa44b48c870ee9ac977ad6f5c6ac3a769e981a88ba4d3fd00e2c9a27ec799fe91c480184ab309abacccb1f6b69a12baf5fe5361bda18fea9e0f879504", 0x6e, 0x1, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x8001}, 0x1c) 15:14:06 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = dup2(r0, r0) ioctl$KDSKBLED(r1, 0x4b65, 0xa384) r2 = socket(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000080)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000000)) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 15:14:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000100000000000000000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x34}, 0x1}, 0x0) 15:14:06 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0x650c, 0x8000fffffffe) 15:14:06 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x400000, 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) getsockopt$netlink(r1, 0x10e, 0x7, &(0x7f0000000200)=""/133, &(0x7f0000000080)=0x85) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:14:06 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x9, &(0x7f0000000100)="f8b3f8e594ea06c584afc885c12847bb219d4e25f0d4bf2fbeb90a251d8db94ca3819d59b7a00308fd764bb15a04d62302a6b08e72a37c5d582822719acc3859d1ee3eb1e304770ce42fb7c02ca2499c442adf0d5ebb649d0daa211698d49e3de91c3cf4f18e021feea0de6966ce70d7d735c9a7f483048d5ac8") ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x111740, 0x0) ioctl$TIOCSTI(r3, 0x5412, 0x200) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) 15:14:06 executing program 5: stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0x8000) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'dh\x00', 0x0, 0x7fffffff}, 0x2c) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f00000000c0)={0x1e, 0x26, 0x4, 0x10, 0x2, 0x7, 0x0, 0x48, 0x1}) 15:14:06 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4, 0x0, 0x0, 0xffffffffffffffff, [0x1000000]}) 15:14:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000100000000000000000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x34}, 0x1}, 0x0) 15:14:06 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) rseq(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xaf59a07fa40c4c0a, 0x9, 0x0, 0x7f}, 0x4}, 0x20, 0x0, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 603.738243] x86/PAT: syz-executor3:8304 map pfn RAM range req write-combining for [mem 0x192560000-0x192563fff], got write-back 15:14:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) ioctl(r5, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="010000eaa078b20000197897c03c4032154b3f000000001c000000000000000000000000000000000000"]) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x8000000000001a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1013, r7, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x20}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000005c0)=ANY=[@ANYRES32=r8, @ANYBLOB="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"], &(0x7f0000000240)=0xe2) r9 = socket$inet6(0xa, 0x3, 0x87) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r10, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) 15:14:07 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0x1000000000000000, 0x8000fffffffe) 15:14:07 executing program 4: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000200)=0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2a000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8778, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x1}, 0x0, 0x80000000, 0x800, 0x0, 0xfffffffffffffffc, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x408000, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f0000000040)='./file0\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:14:07 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x40000000000001, 0x0, 0x0, 0x0, 0x6}, 0x2c) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x400, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x8) 15:14:07 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x8000000) ioctl(r0, 0x8911, &(0x7f0000000280)="025cc8ed31345f8f762070") r1 = socket$inet6(0xa, 0x5, 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) 15:14:07 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f000000f000)=@abs={0x1, 0x0, 0x1}, 0x6e) bind$unix(r4, &(0x7f0000000040)=@abs={0x1}, 0x6e) r5 = syz_open_procfs(0x0, &(0x7f0000a92ff7)='net/unix\x00') sendfile(r2, r5, &(0x7f0000000340)=0x102, 0x800009) r6 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r6, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) futex(&(0x7f0000000100), 0x4, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x2, 0x2) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000080)={0xfffffffffffffe01, 0x7}, 0x4) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000000)={'ifb0\x00', 0x1f}) 15:14:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000100000000000000000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x34}, 0x1}, 0x0) 15:14:07 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4, 0x0, 0x0, 0xffffffffffffffff, [0x80ffff]}) 15:14:07 executing program 5: mlock2(&(0x7f0000034000/0x3000)=nil, 0x3000, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x7, 0x140) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getegid() write$P9_RGETATTR(r0, &(0x7f0000000140)={0xa0, 0x19, 0x2, {0x2000, {0x44, 0x4, 0x2}, 0x100, r1, r2, 0x41, 0x7, 0x7, 0x101, 0x6, 0x67ee, 0x20, 0x8, 0x7, 0x1, 0xffffffff7fffffff, 0x0, 0x6, 0x5, 0x4}}, 0xa0) getresgid(&(0x7f0000001f80), &(0x7f0000000000), &(0x7f0000002000)) 15:14:07 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0x9000000, 0x8000fffffffe) 15:14:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000100000000000000000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x34}, 0x1}, 0x0) 15:14:07 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000200)="78fbe9b5ef1f3b0e22d3f1e090125f7302d7b0360b4b2343efc7dfb56f447a2cadc758ca2a8be868d168b5bd9da8b2a6458e3198ed8900b9bb0706faaaa600ac460ae2cd95a72ceda77b7cb02a00b32f7c480e648c094d826258c4993090c6ab009cc1ed82fcc5ae3f4a2f30545b6f0c82eae19e0d287c87dee64b64354916cd"}, 0x20) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x100000000000ffff, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000540)=""/176) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x3f, 0x200000) 15:14:07 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f0000000040)=0xe8) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@ipv4={[], [0xff, 0xff]}, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, 0x7ff, 0x4, 0x1f, 0x100, 0x9f64, 0x40, r2}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x10000001}, 0xc0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) connect(r3, &(0x7f00000003c0)=@nl=@kern={0x10, 0x0, 0x0, 0x20000080}, 0x80) 15:14:07 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x1) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 604.242691] x86/PAT: syz-executor3:8366 map pfn RAM range req write-combining for [mem 0x18aae0000-0x18aae3fff], got write-back 15:14:07 executing program 5: r0 = socket$inet(0x10, 0x3, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@dev, @broadcast}, &(0x7f0000000040)=0xc) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000240)="2400000029000724251b6ba0bc0c0e2420200a000900000000cf7fffffffffffff00ff7e", 0x24}], 0x1}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0xfffffffffffffffc, 0x20000) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x4}) 15:14:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000100000000000000000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x34}, 0x1}, 0x0) 15:14:07 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000040)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000100)=0x80, 0x80800) setsockopt$inet6_dccp_int(r1, 0x21, 0xa, &(0x7f0000000140)=0xad6, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:14:07 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0xffff8000]}) 15:14:07 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0xb00, 0x8000fffffffe) 15:14:07 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x8000f, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0x1ff, 0x4, 0x3, 0x100000000}, 0x8) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) 15:14:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) ioctl(r5, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="010000eaa078b20000197897c03c4032154b3f000000001c000000000000000000000000000000000000"]) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x8000000000001a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1013, r7, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x20}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000005c0)=ANY=[@ANYRES32=r8, @ANYBLOB="da000000263182900c056e318db2678e1861337237d8516a5f85d4b7218ad1f2e302dd1e9de4cca32463d9088b731736e134c8a5a8977c000cab0b2502626a206bd4d32669c52cc54d8aaff28d6972b4c25e124745fe75549d9c0c5120bf4674a649b169afee81ff57c14b31bff5b5ccbac37aba8e3398bb40da7824f62dfa0b38f61edf58a39d13b2b675bff0fecdf08d7bde4ca5c319221b86fab9f72b952b8e161adb695c93ba5deaf8910d9994187d7881362c5c0d466ed198d200369f6bac75341077182cdc149b1505a1df17cebbe1064017ec29a5e0c887460a496bf7939d764ee5c472a302559bfd77734f7561ea75fd8c7077ece2cacb245d73873584cdcab4329e41d4c6000858d6f4d03ef8727bc110d89e44f3dd953875eb6f0fe1aee54cab7b11444a7068be7373d46f0a222911d4ebadfcbc8129a2ffd4b2f17c65f5f315490eef59d9996e37e5dedffbc49387c8e14022a676e4596be031ab88cde2268328c59dd221a83ed5fcd96e70d72ed36cbeed2c49ec964c79bcecd3db6b3f21e36a4129a38d3a88e1001737de3bfa709ca47526023255c2f7832c80f5bfe8d5764b438ceb8e6bea19af43c4779a48d8005b34774c38f825a12d1f916fea5ff4f2bfe999dbbdc8b5d9cd61cae839d4bf0cb825790000000000000000000000"], &(0x7f0000000240)=0xe2) r9 = socket$inet6(0xa, 0x3, 0x87) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r10, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 15:14:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000100000000000000000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x34}, 0x1}, 0x0) 15:14:07 executing program 5: r0 = getpid() ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x3, &(0x7f0000000000)=""/127) r1 = socket(0x10, 0x3, 0xfffffffffffffffd) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x1, &(0x7f0000000080)=""/92) write(r1, &(0x7f0000000100)="2400000052001f0014f9f407002c04000a00071008000100ffffffff0800000000000000", 0x24) 15:14:07 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0xd, 0x10, 0x80, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) socket$inet6(0xa, 0x807, 0xc0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000080)=r3) 15:14:07 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000100)={'veth0_to_bond\x00', 0x8000}) r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x3, 0x400) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000180)=0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) lgetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000200)=""/147, 0x93) 15:14:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000100000000000000000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x34}, 0x1}, 0x0) 15:14:07 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0x600, 0x8000fffffffe) 15:14:07 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000100)={0xfff, 0x1, 0x0, [{0x5, 0x380000000000, 0x20, 0x9, 0x6e, 0x800}]}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) fcntl$addseals(r0, 0x409, 0x8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) 15:14:07 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) dup2(r0, r0) ioctl$int_in(r0, 0x8000008004500b, &(0x7f00000001c0)) [ 604.698127] x86/PAT: syz-executor3:8432 map pfn RAM range req write-combining for [mem 0x1979c0000-0x1979c3fff], got write-back 15:14:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000100000000000000000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x34}, 0x1}, 0x0) 15:14:07 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0xfdfdffff00000000]}) 15:14:07 executing program 5: r0 = socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl(r0, 0x8912, &(0x7f0000000380)="023d6d345f8f7620701d65709be95b5c05815fe15ad1f83bfb43036317d8cf3f3b8cdaef07ad4f764525e02f1207801e8892bcca2bae6a8a3c0d3e083ae646f62b7b0634584897665cc79622faa6201e9a20bb0f461e253f995b5713a0c38b012f59ed9900000000000000cd8b612cd38e7f9d9879d82860fe2c2efa90b203c32a48b7911548c8917e5bdb559516c2335d805570b76b26e02219533c24f41b0338d806d0efc81de0dca4f9e450e068299d8edca75b2bdc65b449614412299ae07c0000000000000000000000fb76eab2dbdb426c2a518890dd21dcdd03a3582b88651b59599ce91fa1bb5426887d55a00af6ae88cc18d4a870c95257aed4fdfc8cfef02625511ed05a4f6e360b18000000000000000000000000") fdatasync(r0) r1 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=ANY=[@ANYBLOB="0d00000000001c4a0090700000000000020000000000000000000000000000000000c1c56865b4e6a9ad9536"]}) 15:14:07 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0xc00, 0x8000fffffffe) 15:14:08 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt(r0, 0x7, 0x1, &(0x7f0000000100)=""/175, &(0x7f0000000040)=0xaf) r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) iopl(0x4) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) r3 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0xb6c, 0x107000) ioctl$TIOCLINUX2(r3, 0x541c, &(0x7f0000000200)={0x2, 0x6, 0x1, 0x3, 0x2, 0x3}) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) 15:14:08 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_GET_MSRS(r1, 0x40045567, &(0x7f0000000380)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000040)="aa22db2e4bd9df00323ee733678ecf17024030f01b8776d056b672d43ae8519ad5358edfe9145fe70ad8b28603b70d184104858ff69015becd2daada45128c290b83a3f14bb947d2de4216963928ace7c09906bf7d2e0e99d92e6b96447694712bdb6fb2985661559d62821a8b0b7772faa07c57f89271123c150a9c34cb6a", &(0x7f0000000100)=""/98}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:14:08 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x20000, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x280301, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 15:14:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) ioctl(r5, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="010000eaa078b20000197897c03c4032154b3f000000001c000000000000000000000000000000000000"]) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x8000000000001a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1013, r7, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x20}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000005c0)=ANY=[@ANYRES32=r8, @ANYBLOB="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"], &(0x7f0000000240)=0xe2) socket$inet6(0xa, 0x3, 0x87) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r9, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) 15:14:08 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x87) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x80000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0x80) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) bind$packet(r2, &(0x7f0000001980)={0x11, 0x1b, r5, 0x1, 0x3, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x14) r6 = add_key(&(0x7f0000001a80)='logon\x00', &(0x7f0000001ac0)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000001a00)='id_legacy\x00', &(0x7f0000001a40)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, r6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f0000001940)={0xa, 0x0, 0x0, @empty, 0xffffffffffff8001}, 0x1c) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000019c0)) recvmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000100)=""/4, 0x4}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000000200)=""/40, 0x28}, {&(0x7f00000013c0)=""/105, 0x69}, {&(0x7f0000001440)=""/150, 0x96}, {&(0x7f0000001500)=""/217, 0xd9}, {&(0x7f0000001600)=""/237, 0xed}, {&(0x7f0000001700)=""/160, 0xa0}], 0x9, &(0x7f0000001880)=""/131, 0x83, 0x6}, 0x40000100) 15:14:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000100000000000000000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x34}, 0x1}, 0x0) 15:14:08 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$unix(0x1, 0xa, 0x0) r2 = socket$unix(0x1, 0x400040000000001, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r2, 0x0) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='coredump_filter\x00') sendfile(r1, r3, &(0x7f0000000000), 0x800000bf) 15:14:08 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0x500, 0x8000fffffffe) 15:14:08 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000240)="c465aba7dde6a7354d1e2087e5f4cc9adb04dc35b50af3843b53b28260b1651671b6e3a1c9f43ad95bb8cc33675705e16763b3414adf24ec99f1b33d9fccbf3b0df54139f317f692bd42584ad5adc4961c429cbed0e79adaac1a00afefca30aad68e7cca005c738180f334676bdcbacc9090dc9835d866b67fff1b7dcd0dd3548fc0a585782e479b339588efbac3ee217c0da241ebc50077d735d4644877ed0be26357afa7d2d8b86df9f7c9", &(0x7f0000000200), 0x2}, 0x20) 15:14:08 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000ee4000)='oom_adj\x00') writev(r0, &(0x7f0000b97000)=[{&(0x7f0000eeb000)='15', 0x2}], 0x1) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000100)={0x4, 0x9, 0x3f, 'queue0\x00', 0xffffffff}) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000)=0x200, 0xff65) sendfile(r0, r0, &(0x7f00000003c0), 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e20, @broadcast=0xffffffff}}, [0x0, 0x1, 0x5, 0x1, 0x3f, 0xffffffff9c98af07, 0x6, 0x4, 0x33c, 0x3, 0x7ff, 0x4, 0x9, 0x3, 0x101]}, &(0x7f0000000040)=0x100) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x8, 0x8008, 0x2, 0x80000000, r1}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f00000001c0)=""/130, &(0x7f00000000c0)=0x82) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000380)={0x1, 0x4, 0x9, 0x80, 0xeb}, 0x14) dup2(r0, r0) 15:14:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000100000000000000000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x34}, 0x1}, 0x0) [ 605.198421] Unknown ioctl 19586 [ 605.203262] Unknown ioctl 19584 [ 605.212922] Unknown ioctl 44706 15:14:08 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0x34000, 0x8000fffffffe) 15:14:08 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x80000, 0x0) clock_gettime(0x6, &(0x7f0000000040)) ioctl(r0, 0x4, &(0x7f00000000c0)="025cc83d6d345f8f762070") socket(0x5, 0x0, 0xa1) 15:14:08 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x1000000]}) 15:14:08 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x40, 0x0) write$P9_RLERROR(r1, &(0x7f0000000140)={0x14, 0x7, 0x1, {0xb, '/dev/mixer\x00'}}, 0x14) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)={&(0x7f0000000200)='./file0\x00', 0x0, 0x8}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x40, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x1, 0x1, 0xf896, 0x7fffffff, 0x7, 0x8001, 0xb0, 0xffffffffffff9a29, 0x5, 0x7, 0x7, 0x4}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000280)={0x36, 0xe, 0xc, 0x8, 0x4, 0x5, 0x3, 0x5c, 0x1}) [ 605.250010] x86/PAT: syz-executor3:8494 map pfn RAM range req write-combining for [mem 0x189d90000-0x189d93fff], got write-back [ 605.269700] Unknown ioctl 19586 [ 605.281193] Unknown ioctl 19584 [ 605.287841] Unknown ioctl 44706 15:14:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000100000000000000000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x34}, 0x1}, 0x0) 15:14:08 executing program 5: r0 = socket$inet6(0xa, 0x0, 0xffffffffffffffff) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000780), &(0x7f00000007c0)=0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r1, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x398, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000100)={{{@in=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000080)={@loopback={0x0, 0x1}, r2}, 0x14) syncfs(r0) fremovexattr(r0, &(0x7f0000000200)=@known='user.syz\x00') sendmsg$unix(r1, &(0x7f0000000740)={&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000400)="186c184e6a72a73a0b00af0e3031c7e291dedbb90eda023ac4051a050839bf35f6af6bcce322ce256a78839d675f2507096d8ee43c9803270993d771735730ec78bf6519d06225eb746ccf51c64474e46a914583c72f7ceaf14571acb6ce071c04b6ce117f9f1d53d0269064427770e90f114fd1a66b2fd54b98824e6a136d11e602e2d2ecbab0b18d32ab384a0d773110bb0d1df6", 0x95}, {&(0x7f00000004c0)="8526c686e335f4914b3406aa9994e8148486271f582a9f92064109edb876bdc604ba61a5251d87e3959dc9062c0b070cddb5411136a7de8045cf6760fec7c893bd4d5f94aa44cf138c8848519f8c4bb6c1ff34dcc021b5f81d506fb62f412821a20a2b5dc236668a17988387a4bebbf755857bd206d1f655179167c669f827ec8e69500a5026ba4d3993622715f2cb", 0x8f}, {&(0x7f0000000580)="d4fbdb54ba138628dd459efa608f3b7c3c58c74f0946fb76c9da6d895ebc09b75991a5b53d9bfdea0f4848c38f26776801cc56f7ce91e478be225e3ab4b04720f86c9db841088105f5b3d98b0e695eb4355236e517a88cbb801e26a4aa00080a298dcc5365f010c9a106d2d0bfb885bc257902f8181e12932f37962183d26ba3d58e497246c8b75b686264503b04", 0x8e}, {&(0x7f0000000640)="aaa120a555b178836258987fffacc66351c11ca79f2d663ec7b4ee30153e9ecb49456c7a86c243f189a4548d671b66f360a24bcad34bc9d5b6963cd51af179aac3c08b890b7974a92397482c35a590bc8c7f8ba219e78b395e6666acc6d4e8a56585dfeb26b8f1e2f5d10743abad16414e8e3cf54963a024d331ec8dc4b07cd217371d3f54f500ba7f6dd81763e9ddb3e396711578ae968779053d3c92d7ed0208cd4ef4ba603016572796b23537608269b1da8629957475579adc6d15b6ea0c251272a6f1003d78b5607fbdaedd8ec82cb8ef9d443db096", 0xd8}], 0x4, 0x0, 0x0, 0x40}, 0x40084) r3 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000000300)={0x3, 0x70, 0xfffffffffffff64c, 0xfffffffffffffffa, 0x0, 0x7fffffff, 0x0, 0x7, 0x20080, 0x4, 0x1, 0x3, 0xd2e2, 0xfffffffffffffff7, 0x5, 0x7, 0x110, 0x6, 0x3ff, 0x0, 0x100, 0x2, 0x0, 0x9, 0xfffffffffffffc01, 0xc2, 0x5, 0x9, 0x4, 0xff, 0xc2a1, 0x6, 0x401, 0xfffffffffffffc01, 0x72, 0x3, 0x800, 0xb68, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f00000000c0), 0x3}, 0x6400, 0x0, 0x4, 0x7, 0x0, 0x1, 0x7fffffff}, r3, 0x9, r1, 0x2) 15:14:08 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r1 = memfd_create(&(0x7f0000000040)='\x00', 0x1) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x101, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) 15:14:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) ioctl(r5, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="010000eaa078b20000197897c03c4032154b3f000000001c000000000000000000000000000000000000"]) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x8000000000001a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1013, r7, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x20}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000005c0)=ANY=[@ANYRES32=r8, @ANYBLOB="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"], &(0x7f0000000240)=0xe2) socket$inet6(0xa, 0x3, 0x87) socket$nl_xfrm(0x10, 0x3, 0x6) 15:14:08 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0x1000000, 0x8000fffffffe) 15:14:08 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000100)={0x0, 0x7b, "70aa2b6ed04226027b064a44bb2ccb4d55c8c31782bb456c916f1d163003eee3d9fbaab6652bbd5325f6d1234bf45068b24e40c3b6f88133ee938711dca0bfdbeb71c0ce9cb521106596d1fd8c754cf1678208f639e89e1e36aa3796382b931a79bc968026648a253be8073db2f78fdd891d9c4059e7bcfd9bc930"}, &(0x7f0000000040)=0x83) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000001c0)=@assoc_id=r3, 0x4) ioctl$TIOCNOTTY(r2, 0x5422) 15:14:08 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0xb33a) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 15:14:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000100000000000000000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x34}, 0x1}, 0x0) 15:14:08 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:14:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x12) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000100400", @ANYRES32=r1, @ANYBLOB="0000000000000000080011000000000004001400"], 0x3}, 0x1}, 0x0) 15:14:08 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0xfffffdfd]}) 15:14:08 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0x3000800, 0x8000fffffffe) 15:14:08 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x10000000000003, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@local={0xac, 0x14, 0x14, 0xaa}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x20, 0x0, 0x0, 0xa, 0x2}, {0x0, 0x0, 0x0, 0xfffffffffffff143, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2d}, 0xa, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) 15:14:08 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cipher_null)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000016c0)=[{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f00000017c0)="01e6", 0x2}], 0x1, &(0x7f0000000100)}], 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) recvmsg(r1, &(0x7f0000000000)={&(0x7f0000000040)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000002840)=""/4096, 0x139f}], 0x1, &(0x7f0000fb3fa9)=""/87, 0xfffffffffffffce7}, 0x0) 15:14:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000100000000000000000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x34}, 0x1}, 0x0) [ 605.701296] x86/PAT: syz-executor3:8552 map pfn RAM range req write-combining for [mem 0x195eb0000-0x195eb3fff], got write-back 15:14:08 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000200)="13457900de3dc19cb23faacbe80ec7007d40e1291e2c8f46ee37159538927481b2b90d217c0dc10a07ce2c58e008634309d6afe49349a6cf99ab6c3d0d6ade08860ce6cb543790d80b3bff0de4566fe88b1985a9e317cf48760c5bb9973cb04cc83348de08aa0d84ff6ff8d88010fb86119e03ed665621236cd3ca0cec0afe5aa257f3086a8c1697facdb1dea0dc282d4ec1962d2125f96f01f60ee73fba32ccf64d1d57200b8057fd64e3043af3ce3b862d8ad18eb9dd9e9f3750ec2bab8d7acce7db24bf101b0070d33134f4cd473c13d3", &(0x7f00000001c0), 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:14:08 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket(0xf, 0x40000000000001, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000000200)=0x3) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000100)={r2, 0x96, "01b630c74772c306664506dd27d8e7c01fc03bd69c9848b13123e5b71f255c8fe40af6b410e3b9dfbd8e8068c068aa453da16e714a965d86873af5e863dea09bd0d047724934b0b292b4f71895c2b28ddd92fffa568f313883cec75219e908013e9a399ee16e3d76002a40f22ee7e60caf99754b177743b8042ddc3cd4849f87647dfd802fc0c505b57fbd17d5635021b8f341b734a6"}, &(0x7f00000001c0)=0x9e) 15:14:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000100000000000000000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x34}, 0x1}, 0x0) 15:14:09 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0x6, 0x8000fffffffe) 15:14:09 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) ioctl(r5, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="010000eaa078b20000197897c03c4032154b3f000000001c000000000000000000000000000000000000"]) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x8000000000001a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1013, r7, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x20}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000005c0)=ANY=[@ANYRES32=r8, @ANYBLOB="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"], &(0x7f0000000240)=0xe2) socket$inet6(0xa, 0x3, 0x87) 15:14:09 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000200)={'filter\x00', 0x0, 0x3, 0xb, [], 0x6, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/11}, &(0x7f0000000140)=0x78) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:14:09 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000100)=0xc) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) 15:14:09 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x100000000000000]}) 15:14:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000100000000000000000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x34}, 0x1}, 0x0) 15:14:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket(0xa, 0x20000000001, 0x0) listen(r1, 0x0) dup3(r1, r0, 0x80000) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r2, &(0x7f0000000800)=[{&(0x7f0000000500)=""/164, 0x19a}, {&(0x7f0000000000)=""/248, 0xf8}], 0x2, 0x0) 15:14:09 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x258200, 0x0) fallocate(r0, 0x0, 0x8, 0x1) r1 = socket$inet6(0xa, 0x3, 0x9) ioctl(r1, 0x2, &(0x7f0000000080)="025cc83d6d345f8f762070") r2 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0xe5, "e7862f6249f23cba4c492c4d4bf832a4c70bd7374132d26a113564e692d7e64f47a611761cdf0896d0a1575c93c33b4003141d699c8a5ad6e4874cd3fee7bba3a6d734117839f2d1ab2b100a7690837abb765586e185457cdc67ff0cdc3c14351f31bc66df77136e42b7c8ea1a188424dddb08041dc937833d1ebaa9a78e496499ead1c7ade6b9db067b67da44920c4b8c95218d64597410c19444c0ce4bb7e3e12eda3e8b1a41301d57f791932116a135003714b84ba44d51cd9372f5b5b19354555ec290ea9f4c185113f366170bdb2bcf6b7a4b31e6d3d7866a67bba20c61d047535645"}, &(0x7f00000001c0)=0xed) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000200)={r3, @in={{0x2, 0x4e22, @multicast1=0xe0000001}}, 0x20, 0x5}, 0x90) 15:14:09 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x10, 0x7d, 0x3, 0x4, 0xffffffffffffffff, 0xffff}, 0xfd59) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0xffffffffffffffff, 0x6402) 15:14:09 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0x100000000000000, 0x8000fffffffe) 15:14:09 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x1}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa}, 0x1c) 15:14:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000100000000000000000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x34}, 0x1}, 0x0) 15:14:09 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgrp(0x0) r2 = syz_open_procfs(r1, &(0x7f0000000080)='ns\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x4000000000001, 0x10, 0x7, 0x1, 0x1, r2}, 0x2c) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x310820, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r3, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000300)={0x200000000002, 0x0, @pic={0x7, 0x1a2, 0x2, 0x6, 0x6e, 0x4, 0x8, 0x8001, 0x9, 0x9, 0x7, 0x7, 0x2, 0xb5b, 0x2, 0x1000}}) 15:14:09 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) dup(r0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x85, 0x80) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000180)={{0xbc, 0x5}, 'port1\x00', 0x19, 0x10000, 0x8, 0x4, 0x8, 0xffffffffffff51d4, 0xffffffff, 0x0, 0x1, 0x2}) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.mem_exclusive\x00', 0x2, 0x0) pwritev(r2, &(0x7f0000000140)=[{&(0x7f00000004c0)='3', 0x1}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, @mcast2={0xff, 0x2, [], 0x1}, 0x2, 0x9c, 0x3, 0x0, 0x763ebd4a, 0x800000, r3}) 15:14:09 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x8000000000000000, 0x20000) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000180)) r2 = socket$inet6(0xa, 0x3, 0x87) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000200)={0x6, 0x0, [{0xc0010ffe, 0x0, 0x8}, {0xfff, 0x0, 0x8}, {0x2d6, 0x0, 0xe0e}, {0x0, 0x0, 0x7ff}, {0x21c, 0x0, 0x9}, {0x9ae, 0x0, 0x14fb}]}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) getsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f0000000040)={@mcast2, 0x0}, &(0x7f0000000100)=0x14) write$binfmt_misc(r0, &(0x7f00000001c0)={'syz0', "b5090bd23d873cfa"}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r4}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2e}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r2, &(0x7f00000000c0)={0xa}, 0x1c) 15:14:09 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0x650c0000, 0x8000fffffffe) 15:14:09 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 606.261641] x86/PAT: syz-executor3:8632 map pfn RAM range req write-combining for [mem 0x1979d0000-0x1979d3fff], got write-back 15:14:09 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) ioctl(r5, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="010000eaa078b20000197897c03c4032154b3f000000001c000000000000000000000000000000000000"]) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x8000000000001a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1013, r7, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x20}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000005c0)=ANY=[@ANYRES32=r8, @ANYBLOB="da000000263182900c056e318db2678e1861337237d8516a5f85d4b7218ad1f2e302dd1e9de4cca32463d9088b731736e134c8a5a8977c000cab0b2502626a206bd4d32669c52cc54d8aaff28d6972b4c25e124745fe75549d9c0c5120bf4674a649b169afee81ff57c14b31bff5b5ccbac37aba8e3398bb40da7824f62dfa0b38f61edf58a39d13b2b675bff0fecdf08d7bde4ca5c319221b86fab9f72b952b8e161adb695c93ba5deaf8910d9994187d7881362c5c0d466ed198d200369f6bac75341077182cdc149b1505a1df17cebbe1064017ec29a5e0c887460a496bf7939d764ee5c472a302559bfd77734f7561ea75fd8c7077ece2cacb245d73873584cdcab4329e41d4c6000858d6f4d03ef8727bc110d89e44f3dd953875eb6f0fe1aee54cab7b11444a7068be7373d46f0a222911d4ebadfcbc8129a2ffd4b2f17c65f5f315490eef59d9996e37e5dedffbc49387c8e14022a676e4596be031ab88cde2268328c59dd221a83ed5fcd96e70d72ed36cbeed2c49ec964c79bcecd3db6b3f21e36a4129a38d3a88e1001737de3bfa709ca47526023255c2f7832c80f5bfe8d5764b438ceb8e6bea19af43c4779a48d8005b34774c38f825a12d1f916fea5ff4f2bfe999dbbdc8b5d9cd61cae839d4bf0cb825790000000000000000000000"], &(0x7f0000000240)=0xe2) 15:14:09 executing program 5: msgrcv(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b16bd5530720a1f2876e67a121e20e4c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1008, 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1, 0x200001) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x100000000, 0x30}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x200, 0x0, 0xfb, r1}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0x2}, 0x1) 15:14:09 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) poll(&(0x7f0000000040)=[{r0, 0x1}, {r0, 0x8000}], 0x2, 0xc3) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffffb, 0x8000) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000140)=""/76) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) 15:14:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000100000000000000000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x34}, 0x1}, 0x0) 15:14:09 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x80ffff00000000]}) 15:14:09 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x3e, 0x103000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000200)="3e7cdd3f758d3a7e5cf550d2b46b7dce28c6e05df306d22fda62fd1cbd3f7bf651c747d8b383e64600e6fb6ef216266d454b2ea12814991b6de171bfcb4e2f6b729ed0ca69d869e6e847b27954545c1323611683394a06454f93a80cae645b04e9d0207e975005c7fe0563c30345da42914199574b17fdf1567649e1b9f2763eece24dfc13b9196638705de95753ef449ccfb41bf483901c9c403ffe3da58607cc3ca7b5f7e3832cd29683c6bbdb443d3a06ad55a452659e40109a0bd6fcc809ed670d6006be4e6fcdf3e397ff5aec758804d0a028f3c5285ab980f3705fd8d15c4fd224f3ac65bc15f43f427020b2", &(0x7f0000000300)="ad9525257c5d34269045731f655fd160c50ed1f35c54e51e1e7aabce99f71f98512606bdf15174275c9c203a19384c6d372818afe277a76662c53364f20433267f99483e71dadea207894570313a2e90d2ece6a2b8f6fdd8fb5b6f7c97aef09c6d2fb7d4444eddf29495d93a73b6efc2c260614548a4a50556e483e4f7ca08ab7d1d6dc81a8bf80c29aac4b9e8af9335eead1d1100f8a0d56bdf2b59344a8e37088d67f6c541ea750c21b60818d11fa9eac8da3d951cb5d44d0a4fe30bca28fb50d8d7f6ce6d103a2fc3101e08c89619b64777243dee9ce931ffa9dcdb6fd9d4539a4b4a75aa", 0x2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f0000000140)="a0c3f82c2823762e0f7c451906b6d8a9f7b14151cd29fb3b5a297adec84d4039dd7f1b3c4c89e03afe454b82d06eff6efbe4ea559c7efcb20942c5875ad9", &(0x7f0000000400)="e2223ee834ac8670dc46450eaa3f87598e806486ed6d79ada4440fc3abd343674945b841deb6a220546717787e070372a2c25fed1cd0f356d0f1af618cdf08979cdbe056f4de638fd632aa1b6681462baa7a889fbd2c08d2f6405fac2a312885750a652cf581bf6d022544da6c487c5ab8b33e10b4f81bcf6f27fc966c159df2c656f84a5ad7b30d938f212f45123213b89c53195cbb224fae0463dbe3bdc3f657e0b3cd2a146f8acd7dd2f9f725ba790c0673939ce15faf015a9dca3c6548adc08edd25b6", 0x1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:14:09 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0x900, 0x8000fffffffe) 15:14:09 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x40000, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x10000) 15:14:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000100000000000000000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x34}, 0x1}, 0x0) 15:14:09 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000180)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000000)=0x3, 0x4) sendmsg$rds(r1, &(0x7f00001c3000)={&(0x7f0000014000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)=""/11, 0xb}], 0x1, &(0x7f0000000280)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000400)=""/209, 0xd1}, &(0x7f0000000140)=[{&(0x7f0000000500)=""/156, 0x9c}], 0x1, 0x22}}], 0x48}, 0x0) 15:14:09 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) socket(0xf, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)=',', 0x1}], 0x1, &(0x7f0000000040)}, 0xc100) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, &(0x7f0000000040)) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001180)="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", 0x2c1}], 0x1, &(0x7f0000000080)}, 0x8000) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001480)="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", 0x2d7}], 0x1, &(0x7f0000001780)}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000040), &(0x7f00000001c0)}, 0x16) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) ioctl$TCSBRK(r1, 0x5409, 0x2) 15:14:09 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0xe, 0x8000fffffffe) [ 606.605982] rdma_op 0000000032939668 conn xmit_rdma (null) 15:14:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000100000000000000000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x34}, 0x1}, 0x0) 15:14:09 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000000)) 15:14:09 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000001}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, 0x81806) socket$inet6(0xa, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0x1) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000240)=0x300, 0x20000102000007) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f0000000140)={0x0, 0x0, 0x4, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'syz_tun\x00'}) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x40, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200), 0x0, 0x1009}}, 0x20) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) [ 606.670149] x86/PAT: syz-executor3:8694 map pfn RAM range req write-combining for [mem 0x193250000-0x193253fff], got write-back 15:14:09 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x1000000000000]}) 15:14:10 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x301200, 0x0) getpeername$netlink(r1, &(0x7f0000000080), &(0x7f0000000100)=0xc) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r2 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 15:14:10 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='GPLvboxnet0nodev!\x00', 0xffffffffffffff9c}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xd, 0x315, 0x100000000, 0x8, 0x16, r0, 0x7}, 0x2c) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000140)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, 'teql0\x00'}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:14:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000100000000000000000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x34}, 0x1}, 0x0) 15:14:10 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0x900000000000000, 0x8000fffffffe) 15:14:10 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x8000000000) ioctl(r0, 0x8912, &(0x7f0000000280)="025c093d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getrusage(0xffffffffffffffff, &(0x7f0000000100)) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) 15:14:10 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) ioctl(r5, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="010000eaa078b20000197897c03c4032154b3f000000001c000000000000000000000000000000000000"]) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x8000000000001a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1013, r7, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x20}, &(0x7f0000000100)=0x8) 15:14:10 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x80ffff]}) 15:14:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000100000000000000000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x34}, 0x1}, 0x0) 15:14:10 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0xe000000, 0x8000fffffffe) 15:14:10 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) r1 = semget(0x3, 0x0, 0x204) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000200)=""/191) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:14:10 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) fcntl$notify(r1, 0x402, 0x2) 15:14:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x2}, 0x1}, 0x0) 15:14:10 executing program 5: r0 = memfd_create(&(0x7f00003ce000)='}\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x4d) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'ip6tnl0\x00', 0x1}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002640)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000002680)={@dev={0xfe, 0x80, [], 0x11}, @empty, @empty, 0x7, 0xfffffffffffff31e, 0x7, 0x400, 0x3ff, 0x4010020, r1}) mincore(&(0x7f0000001000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/6) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x1, 0x2, 0x9, 0x401, 0x4}, 0x14) 15:14:10 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0xffff0000, 0x8000fffffffe) 15:14:10 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x7ff, 0x0) ioctl$RTC_VL_CLR(r1, 0x7014) 15:14:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x2}, 0x1}, 0x0) [ 607.225192] x86/PAT: syz-executor3:8754 map pfn RAM range req write-combining for [mem 0x18b420000-0x18b423fff], got write-back 15:14:10 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x5, 0x4) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 15:14:10 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100, 0x0) write$P9_RWSTAT(r3, &(0x7f0000000100)={0x7, 0x7f, 0x1}, 0x7) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) 15:14:10 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='user\x00'}, 0x10) bind$netlink(r2, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfe, 0x7005000}, 0xc) socket(0xa, 0x20000000001, 0x0) listen(r1, 0x5) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x400, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000240)=0x9, 0x4) preadv(r3, &(0x7f0000000800)=[{&(0x7f0000000500)=""/164, 0x19a}, {&(0x7f0000000000)=""/248, 0xf8}], 0x2, 0x0) 15:14:10 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0xb, 0x8000fffffffe) 15:14:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x2}, 0x1}, 0x0) 15:14:10 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) ioctl(r5, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="010000eaa078b20000197897c03c4032154b3f000000001c000000000000000000000000000000000000"]) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x8000000000001a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1013, r7, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:14:10 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0xfdfdffff]}) 15:14:10 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:14:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x3}, 0x1}, 0x0) 15:14:10 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x101) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) 15:14:10 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="169ad2c0b44919dbdd89da5d9820d9801a583c316072dd4e599ae3644e8e216d"}) 15:14:10 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0x100000, 0x8000fffffffe) 15:14:10 executing program 4: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$getenv(0x4201, r0, 0x964c, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:14:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x3}, 0x1}, 0x0) 15:14:10 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RCREATE(r1, &(0x7f0000000140)={0x18, 0x73, 0x2, {{0x4, 0x1, 0x2}, 0x5}}, 0x18) r2 = socket$inet6(0xa, 0x3, 0x87) socket$nl_xfrm(0x10, 0x3, 0x6) write$P9_RSYMLINK(r1, &(0x7f0000000200)={0x14, 0x11, 0x1, {0x92, 0x4, 0x5}}, 0x14) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) write$vnet(r1, &(0x7f0000000440)={0x1, {&(0x7f0000000040)=""/49, 0x31, &(0x7f0000000500)=""/196, 0x1, 0x3}}, 0x68) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000004c0)="6dff5400cfadedee6dd021a500", 0xb6) connect$inet6(r2, &(0x7f00000000c0)={0xa}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000700)=ANY=[@ANYPTR64=&(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES16=r0]], &(0x7f00000006c0)=0x1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={0x0, 0x3f}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000400)={0x6, 0x6, 0xea16f34de39f5533, 0x401, 0xffff, 0x1d2, 0x966, 0x8, r3}, 0x20) [ 607.647473] x86/PAT: syz-executor3:8815 map pfn RAM range req write-combining for [mem 0x1c87e0000-0x1c87e3fff], got write-back 15:14:10 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x7) 15:14:10 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, {0xa}}, 0x5c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x19199b64, @mcast2={0xff, 0x2, [], 0x1}, 0x2}, 0x1c) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0xb0001, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000240)={0x0, 0x6}) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000400)) recvfrom$inet(r1, &(0x7f0000000100)=""/227, 0xe3, 0x100, &(0x7f0000000200)={0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x34, r2, 0x300, 0x70bd2c, 0x25dfdbfd, {0x6}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gre0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) 15:14:10 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x4, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000040), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)=0x0) getpriority(0x2, r1) 15:14:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x3}, 0x1}, 0x0) 15:14:10 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0xf000000, 0x8000fffffffe) 15:14:11 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x401) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) 15:14:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) ioctl(r5, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="010000eaa078b20000197897c03c4032154b3f000000001c000000000000000000000000000000000000"]) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x8000000000001a}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:14:11 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0xffff8000]}) 15:14:11 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") listen(r2, 0x0) sendto$inet6(r1, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000000240)="f1", 0x1, 0x480d0, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:14:11 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000100001000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x3}, 0x1}, 0x0) 15:14:11 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0xd000000, 0x8000fffffffe) 15:14:11 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x9}, 0x1c) sendmsg$key(r1, &(0x7f0000000040)={0x20480, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="0200150007000000fe80000000000000050000000000000000ac1414aa0000000000000000000000000000000000"], 0x38}, 0x1}, 0x0) 15:14:11 executing program 0: r0 = socket$inet6(0xa, 0x80005, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 608.001369] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 15:14:11 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) r3 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x9, 0x80880) ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f0000000100)={0xad, ""/173}) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) ioctl$KDGETLED(r3, 0x4b31, &(0x7f0000000240)) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f00000001c0)={0x7b, 0x0, [0xa68e, 0x80000001, 0xfffffffffffffff8, 0xd1]}) 15:14:11 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000100001000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x3}, 0x1}, 0x0) 15:14:11 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0x5000000, 0x8000fffffffe) 15:14:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) ioctl(r5, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="010000eaa078b20000197897c03c4032154b3f000000001c000000000000000000000000000000000000"]) openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:14:11 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x80ffff00000000]}) 15:14:11 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000100001000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x3}, 0x1}, 0x0) 15:14:11 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0xb, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) getsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000100)=0x4) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) 15:14:11 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xfffffffffffffff7, 0x4) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) fcntl$notify(r0, 0x402, 0x8) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) syz_open_procfs$namespace(r2, &(0x7f0000000100)='ns/net\x00') 15:14:11 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = mq_open(&(0x7f0000000000)='/\x00', 0x800, 0x130, &(0x7f0000000140)={0xffffffffffff586b, 0x3, 0x3, 0x5dc6, 0x2, 0x8, 0x2, 0x1}) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x2000, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000340)={0x69, 0x8, 0x2, 'queue0\x00', 0x100}) unshare(0x8000400) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f00000000c0)=0x14, 0x4) syz_open_dev$sndmidi(&(0x7f0000000300)='/dev/snd/midiC#D#\x00', 0x5, 0x40000) getsockname(r3, &(0x7f0000000040)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, &(0x7f0000000100)=0x32) getsockname(r4, &(0x7f0000000200)=@hci, &(0x7f00000002c0)=0x80) ioctl$FICLONE(r4, 0x40049409, r4) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f00000001c0)) 15:14:11 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000080), &(0x7f0000000040)}, 0x20) r1 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0xfffffffffffffffe, 0x400) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000200)={@remote, @local}, &(0x7f0000000240)=0xc) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f0000000540), 0x80000000000002}, 0x20) 15:14:11 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0xa00000000000000, 0x8000fffffffe) 15:14:11 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x80, 0x0) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f0000000100)=0x4) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$inet6(0xa, 0x3, 0x87) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r2, &(0x7f00000000c0)={0xa}, 0x1c) 15:14:11 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001000010000000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x3}, 0x1}, 0x0) 15:14:11 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000540)={'filter\x00', 0x7, 0x4, 0x480, 0x0, 0x118, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f00000002c0), {[{{@uncond, 0xf0, 0x118}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast1=0xe0000001, @rand_addr=0xfff}}}, {{@arp={@multicast1=0xe0000001, @rand_addr=0x2f, 0xff, 0xffffffff, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff, 0xff]}, @mac=@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], {[0xff, 0xff, 0x0, 0xff, 0xff, 0xff]}, 0x1, 0x100, 0x10001, 0xed1f, 0x401, 0x4, 'team_slave_1\x00', 'lo\x00', {0xff}, {0xff}, 0x0, 0x80}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote={0xac, 0x14, 0x14, 0xbb}, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xffffffff}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4d0) r3 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x6, 0x0) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{}]}) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040)=0xe06, 0x4) 15:14:11 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x1000000000000]}) 15:14:11 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") listen(r2, 0x0) sendto$inet6(r1, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000000240)="f1", 0x1, 0x480d0, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:14:11 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001000010000000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x3}, 0x1}, 0x0) 15:14:11 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0xe00000000000000, 0x8000fffffffe) 15:14:11 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x9, 0x840) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl(r0, 0x40000000008912, &(0x7f0000000140)="025cc83d6d345f8f762070") r2 = socket$inet6(0xa, 0x3, 0x87) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) getsockname$inet(r1, &(0x7f0000000280)={0x0, 0x0, @local}, &(0x7f00000003c0)=0x10) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f00000001c0)) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r2, &(0x7f00000000c0)={0xa}, 0x1c) getpeername$packet(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x14) pread64(r1, &(0x7f0000000200)=""/111, 0x6f, 0x0) 15:14:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) ioctl(r5, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="010000eaa078b20000197897c03c4032154b3f000000001c000000000000000000000000000000000000"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:14:11 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001000010000000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x3}, 0x1}, 0x0) 15:14:11 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000000)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 15:14:11 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x3, 0x8, 0x7, 0x2, 0x1a, r0, 0x1}, 0x2c) 15:14:11 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0x300000000000000, 0x8000fffffffe) 15:14:11 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x86) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x7}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000140)={r3, 0x16b}, &(0x7f0000000180)=0x8) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x10}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) [ 608.778482] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 15:14:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001000010000000000000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x3}, 0x1}, 0x0) 15:14:12 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000040)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x2, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x0, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000200)={0x8, 0x120, 0xfa00, {0x2, {0x7fffffff, 0x9, "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", 0xbd, 0x9, 0x100000000, 0xdd3, 0x1000, 0x8001, 0x9, 0x1}, r3}}, 0x128) 15:14:12 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0xffff000000000000, 0x8000fffffffe) 15:14:12 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) munlockall() setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) r3 = epoll_create(0x92) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000180)={0x80000000}) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x101000, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000140)) write$P9_RWRITE(r4, &(0x7f0000000100)={0xb, 0x77, 0x2}, 0xb) 15:14:12 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x80ffff]}) 15:14:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001000010000000000000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x3}, 0x1}, 0x0) 15:14:12 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") listen(r2, 0x0) sendto$inet6(r1, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000000240)="f1", 0x1, 0x480d0, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:14:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) ioctl(r5, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:14:12 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0xf39b, 0x8000fffffffe) 15:14:12 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f0000000100)={0x1, 0x5, [{0xf100000000000, 0x0, 0x9}]}) 15:14:12 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff}, 0x2c) readahead(r0, 0x9, 0x100000000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000200)={0x5, {{0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1, 0x1, [{{0x2, 0x4e21, @multicast1=0xe0000001}}]}, 0x110) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x80, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000080)=0x100, &(0x7f0000000100)=0x4) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000340)) 15:14:12 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x80, 0x0) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f00000001c0)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000100)={@dev, 0x0}, &(0x7f0000000040)=0x5) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000180)={@mcast2={0xff, 0x2, [], 0x1}, r4}, 0x14) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) 15:14:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001000010000000000000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x3}, 0x1}, 0x0) 15:14:12 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x1000000]}) 15:14:12 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f0000000000)=@buf={0xbf, &(0x7f0000000100)="f20938f4b29ac1ad12befa41a623b4c5ba555da254affd7c2147a5053e4537a3024ab868ff73017a55d6e879671d8f3d3c92b0a71e8a9405521cf97a87337c88905d6f220aa3c8734bc32ad842fbe73c291d470c541be09ef7c635aa3457ffe088045e5a99f100721775c7c7133fa967b89a097d1301554e27865bc5f56f19fed119ccb6a43032932f9128da3aca4f8bb5acf5cd0bad9398d1bce47ac89960b69a06ff436d864b95290f5af07d867328003c842d032ffe62560a6d07696df4"}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x12400, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}, &(0x7f0000000200)=0x10) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000240)={0x3b, 0x15, 0x7, 0x19, 0xb, 0x80000001, 0x5, 0x15b}) 15:14:12 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f0000000380)="e510883117afae00c16d529fb862a608a7b5953fd309cfecf01d9600a4ef7d3a7ffffacc7e4ecc8be35a190c79f092eb9c7a14feb0b3cfeb22dc49ccce9f9bea1d544965145524ba56c836bb062a8724fc629e5110b8daf1b9aa22af4ee33929d85a90393c93160aafda755d3e0ea0de1234a99f74bca70263430f1f3159d98082efab907be8d8ae64ab854e321cacee3588eb68cf6863"}, 0x20) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x4, 0x800) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000080)={0x1f, 0x5, 0x4, 0x1000, 0x100000000, 0x7f}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xd0, r2, 0xa06, 0x70bd2a, 0x25dfdbfe, {0xa}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback={0x0, 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback={0x0, 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x95df}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x20}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:14:12 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x20000, 0x0) write$P9_RVERSION(r3, &(0x7f0000000100)={0x13, 0x65, 0xffff, 0x10000, 0x6, '9P2000'}, 0x13) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) 15:14:12 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0x8, 0x8000fffffffe) 15:14:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000100001000000000000000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x3}, 0x1}, 0x0) 15:14:12 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000200)="aadee2b402188901e54218f78f9feb9284ba3e80c677db73ae32c6f5545034a2c06dfdffffffa45f846af46560b079468a490ac95e78b3e33eb32d2d82b8f1a1053fa89d054429762080070708bac60792ae866c5e30be914420e0009e24487418d5dddaf467507d36445a597c74ace95181ce2add746a068b92281149dba99d80027d2bb5ca20b09923b1d927e345", &(0x7f00000001c0), 0x1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:14:12 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) [ 609.427435] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 15:14:12 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) 15:14:12 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") listen(r2, 0x0) sendto$inet6(r1, &(0x7f00000001c0), 0x3db, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000000240)="f1", 0x1, 0x480d0, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:14:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) ioctl(r5, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:14:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000100001000000000000000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x3}, 0x1}, 0x0) 15:14:12 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x200001, 0x0) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000080)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:14:12 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 15:14:12 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1=0xe0000001, @in=@loopback=0x7f000001, 0x4e23, 0x0, 0x4e20, 0x5, 0xa, 0xa0, 0x20, 0xff, r2, r3}, {0x3, 0xffff, 0x2, 0x9, 0x6, 0x1, 0x401, 0x2}, {0x40, 0xcd, 0x1f, 0x5}, 0x5, 0x6e6bc0, 0x2, 0x0, 0x1}, {{@in=@multicast2=0xe0000002, 0x4d3, 0xff}, 0xa, @in=@loopback=0x7f000001, 0x34ff, 0x3, 0x0, 0x1000, 0xffff, 0xfffffffffffffffd, 0x2}}, 0xe8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) 15:14:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000100001000000000000000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x3}, 0x1}, 0x0) 15:14:12 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0xfffffdfd]}) 15:14:12 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0x300080000000000, 0x8000fffffffe) 15:14:13 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x82, 0x0) r1 = fcntl$getown(r0, 0x9) write$cgroup_pid(r0, &(0x7f0000000080)=r1, 0x12) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0xffffffffffffe, &(0x7f00000002c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000200)={0x1, 0x73af, 0x7ff, 0x6d, 0x9, 0xfffffffffffffffe, 0x5, 0x2}, &(0x7f0000000240)={0x7f, 0x5, 0x3f, 0x9, 0x5, 0x10001, 0x3, 0xfff}, &(0x7f0000000280)={0x81, 0x8, 0x60000000000000, 0x10001, 0x2a2, 0xb016, 0x1, 0x73}, &(0x7f0000000300)={r2, r3+10000000}, &(0x7f0000000380)={&(0x7f0000000340)={0x8001}, 0x8}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x200000, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) sched_setattr(r1, &(0x7f0000000140)={0x30, 0x6, 0x1, 0x6, 0x5, 0xffffffff, 0x5, 0x9}, 0x0) 15:14:13 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000040)='team_slave_0\x00') r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x1014}, 0x374e9eab7a0c506) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000180)=""/176) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000080), &(0x7f0000000140)=0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) 15:14:13 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001"}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000100000000000000000000000000", @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x2}, 0x1}, 0x0) 15:14:13 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0x8000000000000000, 0x8000fffffffe) [ 609.914997] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 15:14:13 executing program 4: r0 = gettid() perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3}, r0, 0x0, 0xffffffffffffffff, 0x0) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=""/127, 0x7f) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:14:13 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001"}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000100000000000000000000000000", @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x2}, 0x1}, 0x0) 15:14:13 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) r3 = syz_open_dev$adsp(&(0x7f00000013c0)='/dev/adsp#\x00', 0xc40b, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="01634040010000000000000003000000000000000000000001000000000000000000000040000000000000001000000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="852a747000000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB], @ANYBLOB="010000000000000003000000000000001300000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000300000000000000"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x008\x00\x00\x00\x00\x00\x00\x00']], 0x1000, 0x0, &(0x7f00000003c0)="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"}) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) 15:14:13 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="025cc83d6d345f8f762070") syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') clone(0x0, &(0x7f0000000180), &(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000300)) ioctl(0xffffffffffffffff, 0x2000c0884123, &(0x7f0000000080)) 15:14:13 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0x4000, 0x8000fffffffe) 15:14:13 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @broadcast, 0x0}, &(0x7f0000000080)=0xc) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0x13}, 0x36, r2}) getresuid(&(0x7f0000000140)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@local={0xfe, 0x80, [], 0xaa}, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x4e22, 0x81, 0x4e20, 0x0, 0xa, 0x20, 0x20, 0x7f, r2, r3}, {0x2, 0x3ac, 0x7fffffff, 0xfffffffffffffbff, 0x100, 0xff, 0x7ff, 0x5}, {0x3, 0x9, 0x4, 0x3}, 0x80000001, 0x6e6bbb, 0x2, 0x0, 0x2, 0x3}, {{@in=@local={0xac, 0x14, 0x14, 0xaa}, 0x4d5, 0x3b}, 0x2, @in6=@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x1e}}, 0x3504, 0x1, 0x3, 0x7ff, 0x3, 0x2}}, 0xe8) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000300)={0x0, 0x1, 0x100000000, 0x2}) 15:14:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) ioctl(r5, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:14:13 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x5, 0x1}, 0x2c) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x3, 0x2200) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000080)={0x7ff, 0x8, 0x32, 0x950, 0x6, 0x80000001}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:14:13 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001"}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000100000000000000000000000000", @ANYBLOB="000000000000000014001400626f6e64070000000000000000000000"], 0x2}, 0x1}, 0x0) 15:14:13 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x100000000000000]}) 15:14:13 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x40000, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='selfproccpuset\x00'}, 0x10) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x2, r3, 0x1}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x4}, 0x1c) 15:14:13 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0xf00, 0x8000fffffffe) 15:14:13 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001"}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000100000000000000000000000000", @ANYBLOB], 0x2}, 0x1}, 0x0) 15:14:13 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0xf, 0x100000000080, 0x4000000001, 0x1}, 0x2c) accept4$unix(r0, 0x0, &(0x7f00000000c0), 0x0) sysfs$2(0x2, 0x20, &(0x7f0000000540)=""/4096) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000100)="d619cbc42f4d395f8652b355db31e076211d7d8e0e4f9c16f1ef5a75dea85b040000000000000062aeed150f8b8016e304fd1c7be0d216894bee67860cca2721b9e7485c69cac55515db950e3160e3e020449125b4e201d392a24c1f7f6d9563a915df1c4f8c7963f0a0cddc680ffc", &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000000), &(0x7f0000000040)="e94b5eb5737fa5893eebe63ad89ac0fe777c655510bfa8850f7b3eb98a43a2a2935e4045daaeb276d9ea75710ad81aed"}, 0x20) 15:14:13 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x18, 0xd19, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x4}, @RTA_ENCAP={0x8, 0x16, @nested={0x4}}]}, 0x2c}, 0x1}, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYBLOB="0500000005000bdbab1fd410ebd40bd4ae8f5fce38645a423319248d09098743490c161cde839517bf7dbe10e04f3303da1ec00ec020382c6075076e4cf917084799458c"]) r3 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000080)={0x3ff, 0x1010000, 0xe45, 0x6, 0x400, 0x7, 0x800004, 0x9, 0xffffffffffffffff, 0x6}) 15:14:13 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x6, 0x400000) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) 15:14:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) ioctl(r5, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="010000eaa078b20000197897c03c4032154b3f000000001c000000000000000000000000000000000000"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:14:13 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0xc, 0x8000fffffffe) 15:14:13 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0xfdfdffff00000000]}) [ 610.503997] netlink: 'syz-executor0': attribute type 21 has an invalid length. [ 610.593205] netlink: 'syz-executor0': attribute type 21 has an invalid length. 15:14:13 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001"}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000100000000000000000000000000", @ANYBLOB], 0x2}, 0x1}, 0x0) 15:14:13 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x14, 0x800) r3 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x2, 0x20000) getsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000100), &(0x7f0000000140)=0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) syz_open_pts(r3, 0x200) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000240)={{0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, {0xa, 0x4e20, 0x8, @empty, 0x8}, 0x5, [0x8001, 0x10001, 0x9, 0xfffffffffffffff8, 0x0, 0x7, 0xd2, 0x3]}, 0x5c) 15:14:13 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x20, &(0x7f0000000280)="0200000000000000762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) 15:14:13 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0xd00000000000000, 0x8000fffffffe) 15:14:13 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000002c0)='/dev/input/event#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x400) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111, 0xb}}, 0x20) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)) r2 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x3, 0x452040) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000040)={0x8, 0x1, 0x1, 0x7fff, 0x0, 0x100}) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000840)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000a00400047002000070020000000000e870020000a0010000d0030000d0030000d0030000d0030000d003000004000000aab3a81a5a902eec581d4ab8538308cceb074e94cb8f9417", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000580180010000000000000000000000000000000000000000000000009000737268000000000000000000000000000000000000000000000000000001a100ff00ea000000ff020000000000000000000000000001fe8000000000000000000000000000bb00000000000000000000ffffe0000002ffffffffffffffffffffffff00000000ffffffffffffffffffffffff000000ffffffffff00000000ffffff0000000000081044110000000028004e4651554555450000000000000000000000000000000000000000000000faff0000000000000000000000000000000000000000000100000000000000000000ffff0000000400000000000000ffffffffff00000000ff00000000000000ffffffff0000000073797a6b616c6c65723100000000000076657468305f746f5f62726964676500000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000003c00020110000000000000000000000000000000c800f000000000000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002001600100000000000000000000000000000000000000000000000030007564706c69746500000000000000000000000000000000000000000000004e244e214e244e2302000000000000002800736574000000000000000000000000000000000000000000000000000002070000b80000000040005443504f5054535452495000000000000000000000000000000000000000040000000100000004000000ffffffff0900000005000000ffff0000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x500) 15:14:13 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xd, 0x8004001, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 15:14:13 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001"}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000100000000000000000000000000", @ANYBLOB], 0x2}, 0x1}, 0x0) 15:14:13 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000040)="b55b189f7c22dd42d74cc67aea03692cbfa2ddc304ffcf9c81c4f9c52312caf440c4acafb9ec001f97eb0fbe0858969634fbe039d2584dc1729bf8f6c192be7f33dd0fd3fd6c5f5f0f66dabc3520ba625c9a4eda1c7c9d9d804df129345dda22f9622e9688446cd01dde3b40ddd7d031da848b", &(0x7f0000000540)}, 0x20) 15:14:13 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x6, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0xfffffffffffffffc, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x9}, 0x111) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0x2}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) open(&(0x7f0000000040)='./file0\x00', 0xc000, 0x8) accept$inet6(r0, 0x0, &(0x7f0000000000)) 15:14:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$inet6(0xa, 0x1, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="010000eaa078b20000197897c03c4032154b3f000000001c000000000000000000000000000000000000"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:14:13 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0xffffffffffff0700, 0x8000fffffffe) 15:14:14 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0xfdfdffff]}) 15:14:14 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001"}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000100000000000000000000000000", @ANYBLOB="000000000000000014001400626f"], 0x2}, 0x1}, 0x0) 15:14:14 executing program 4: getitimer(0x1, &(0x7f0000000040)) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)={&(0x7f0000000140)='./file0\x00'}, 0x10) pread64(r0, &(0x7f0000000340)=""/45, 0x2d, 0x39) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/audio\x00', 0x200, 0x0) r3 = fcntl$getown(r0, 0x9) waitid(0x1, r3, &(0x7f0000000200), 0x80000002, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000080)=0xff) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={r4, 0x3, 0x10}, 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) 15:14:14 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0xc000000, 0x8000fffffffe) 15:14:14 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001"}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000100000000000000000000000000", @ANYBLOB="000000000000000014001400626f"], 0x2}, 0x1}, 0x0) 15:14:14 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x10000007fff, &(0x7f0000000040)="025cc83dbc60ac2df70c61") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) 15:14:14 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8, 0x501000) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000080)={0x18, 0x1, 0x0, {0x7fffffff}}, 0x18) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 15:14:14 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x2f84) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="7461740fff000000000000000000000000000000000000000000000000000000020000000000000068c2000000000000000000000000000000000000000000000000000000000000"], 0x48) close(r2) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)="2e2f6367726f75702e63707500eac5bea7af575a45fddd5af3a7709295a69e7bc5fd0592bf2a4dc8ace908be8842141ca2a714ed0163d4afd8ac48123d4869e05556a93347d6a7430e03a5f2beb186f16bacf2e4dcdcf3b9ff1d99165ce38d996e7798fe471d9a0d81acd08788fcc9892a2487efcde7a649614b14ba1c18", 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000000)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) sendfile(r4, r4, &(0x7f00000000c0), 0x5) close(r1) 15:14:14 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$inet6(0xa, 0x1, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="010000eaa078b20000197897c03c4032154b3f000000001c000000000000000000000000000000000000"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15:14:14 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3}) r4 = eventfd(0x1c6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r4, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0xffff8000]}) 15:14:14 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) ioctl(r0, 0xbaa, &(0x7f0000000080)="357e13f0ed63fb65bb4cb24469a96b8fc2743de4dde2cd188f507b1448ebb472c6cff52e2682e108f26d") bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000000), &(0x7f0000000540)}, 0x20) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000000140)={0x8, 0xdd, 0x4, 0x100, 0x3, 0x800006}) 15:14:14 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001"}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000100000000000000000000000000", @ANYBLOB="000000000000000014001400626f"], 0x2}, 0x1}, 0x0) 15:14:14 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0x9bf3ffff, 0x8000fffffffe) 15:14:14 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x40000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000100)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) 15:14:14 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0x700, 0x8000fffffffe) 15:14:14 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x80, 0x1, 0x1}, 0x360) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000140), &(0x7f00000001c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r1, &(0x7f00000002c0)="0ac571aed3ad0cb9fc2d92c4b34dac6b23cabae3f4e42d5c9cc9586e728d9b426c2e5345ace2ced5d68f14aaf504f40100000000000000eb1b3ea4cb8285f12fd981e682442ffb687df52076b7c887ecd233815261606d86919cdc76d6815ade3c9b1bb02d56abc219c4feeff710476f2b37e4637d41c0344e3f3c02b7eef483923c76"}, 0x10) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000540)={0x800, 0x0, 0x3, 0xfffffffffffffffb, 0x100, 0xfff, 0x3, 0x7fffffff, 0x1, 0x6, 0x800}) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000200)={{0x2b, @multicast2=0xe0000002, 0x4e23, 0x4, 'ovf\x00', 0x1, 0x1, 0x66}, {@multicast1=0xe0000001, 0x4e23, 0x4, 0x5, 0x3, 0x10001}}, 0x44) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000600)=ANY=[@ANYBLOB="01f60100118006e3c17225a197a900005820"]) openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0, 0xb7) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000001e40)={'\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001e80)={'team0\x00', r3}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000080), &(0x7f0000000540), 0x3}, 0xfffffffffffffc4c) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffff9c, 0x84, 0x1e, &(0x7f0000000080), &(0x7f0000000100)=0x4) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) rmdir(&(0x7f0000000580)='./file0\x00') ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000480)={'veth1_to_bridge\x00', 0x100}) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f00000003c0)={0x1, {0x2, 0x4e22, @broadcast=0xffffffff}, {0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x4e20, @multicast1=0xe0000001}, 0x40, 0x9, 0x2, 0x2, 0x10001, &(0x7f0000000380)='bridge0\x00', 0x80, 0x2, 0xffffffff}) 15:14:14 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={"76657468300000000000000000000001"}) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000100000000000000000000000000", @ANYBLOB="000000000000000014001400626f6e640700000000"], 0x2}, 0x1}, 0x0) 15:14:14 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f0000000100)={0xa}, 0x1c) 15:14:14 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = getpgrp(0xffffffffffffffff) ptrace$setregs(0xffffffffffffffff, r1, 0x80000000, &(0x7f0000000100)="5601ee26f4037d0063a10627482dcc89302201010d7bcde79c9d7b4ed3fac803dceed24c98abc2f22ec8d322bc4bcf5de065ef4126125b3679a30cb3ea82ecaba450de3c037fc3aa715b67d667caa3626aa3406333ddfc917ce397bf3e4bf4fce0f158f4ea6136baf0978a5cdb24deae7dfb83e8c609692dc262dc0b57138c1fc6d6894c5786ee4d23b4b7ed87573097c15b8df76ceed92d5873ed37464a5d5aa2012121443ec3bb5dc583a7c4e62e432df37386aeb8c4c705eb8461763df2f6e1a7ad441096cc1e0e4496ec7e6d0d644a1813cad34f6b163b1dafd1daf819b1435d5f74546ceaec") ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r2 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 611.419753] ================================================================== [ 611.427539] BUG: KASAN: use-after-free in irq_bypass_register_consumer+0x51e/0x550 [ 611.435263] Write of size 8 at addr ffff8801b1b94668 by task syz-executor2/9276 [ 611.442706] [ 611.444344] CPU: 1 PID: 9276 Comm: syz-executor2 Not tainted 4.18.0-rc4+ #143 [ 611.451616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 611.460969] Call Trace: [ 611.463569] dump_stack+0x1c9/0x2b4 15:14:14 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) 15:14:14 executing program 0: r0 = socket$inet6(0xa, 0x1, 0xfffffffffffffffc) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = socket(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x24013, r0, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 611.467212] ? dump_stack_print_info.cold.2+0x52/0x52 [ 611.472412] ? printk+0xa7/0xcf [ 611.475704] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 611.480502] ? irq_bypass_register_consumer+0x51e/0x550 [ 611.485877] print_address_description+0x6c/0x20b [ 611.490736] ? irq_bypass_register_consumer+0x51e/0x550 [ 611.496116] kasan_report.cold.7+0x242/0x2fe [ 611.500547] __asan_report_store8_noabort+0x17/0x20 [ 611.505584] irq_bypass_register_consumer+0x51e/0x550 [ 611.510793] ? __disconnect+0x1b0/0x1b0 [ 611.514782] ? trace_hardirqs_on_caller+0x421/0x5c0 15:14:14 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1000) r2 = dup(r1) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r2, r3, &(0x7f0000d83ff8)=0xd00, 0x8000fffffffe) [ 611.519813] kvm_irqfd+0x198e/0x1ef0 [ 611.523537] ? check_same_owner+0x340/0x340 [ 611.527865] ? do_raw_spin_unlock+0xa7/0x2f0 [ 611.532288] ? kvm_eventfd_init+0x2c0/0x2c0 [ 611.536620] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 611.542251] ? futex_wait_queue_me+0x553/0x830 [ 611.546828] ? __lock_acquire+0x7fc/0x5020 [ 611.551058] ? refill_pi_state_cache.part.8+0x320/0x320 [ 611.556521] ? lock_downgrade+0x8f0/0x8f0 [ 611.560686] ? lock_release+0xa30/0xa30 [ 611.564653] ? check_same_owner+0x340/0x340 [ 611.568965] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 611.574161] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 611.579700] ? _copy_from_user+0xdf/0x150 [ 611.583849] kvm_vm_ioctl+0xf80/0x1d80 [ 611.587723] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 611.592812] ? futex_wake+0x304/0x760 [ 611.596611] ? __perf_event_task_sched_in+0x24f/0xbb0 [ 611.601790] ? kvm_set_memory_region+0x50/0x50 [ 611.606379] ? lock_downgrade+0x8f0/0x8f0 [ 611.610525] ? finish_task_switch+0x18a/0x870 [ 611.615013] ? do_futex+0x249/0x27d0 [ 611.618722] ? kasan_check_read+0x11/0x20 [ 611.622861] ? graph_lock+0x170/0x170 [ 611.626654] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 611.631235] ? compat_start_thread+0x80/0x80 [ 611.635640] ? _raw_spin_unlock_irq+0x27/0x70 [ 611.640136] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 611.645158] ? find_held_lock+0x36/0x1c0 [ 611.649218] ? lock_downgrade+0x8f0/0x8f0 [ 611.653369] ? kasan_check_read+0x11/0x20 [ 611.657505] ? rcu_is_watching+0x8c/0x150 [ 611.661670] ? __fget+0x414/0x670 [ 611.665119] ? expand_files.part.8+0x9c0/0x9c0 [ 611.669693] ? __fd_install+0x2db/0x880 [ 611.673667] ? kvm_set_memory_region+0x50/0x50 [ 611.678239] do_vfs_ioctl+0x1de/0x1720 [ 611.682117] ? ioctl_preallocate+0x300/0x300 [ 611.686512] ? __fget_light+0x2f7/0x440 [ 611.690473] ? __schedule+0x1ed0/0x1ed0 [ 611.694444] ? fget_raw+0x20/0x20 [ 611.697883] ? get_unused_fd_flags+0x122/0x1a0 [ 611.702452] ? __alloc_fd+0x710/0x710 [ 611.706244] ? __x64_sys_futex+0x47f/0x6a0 [ 611.710472] ? exit_to_usermode_loop+0x8c/0x370 [ 611.715133] ? do_futex+0x27d0/0x27d0 [ 611.718922] ? security_file_ioctl+0x94/0xc0 [ 611.723321] ksys_ioctl+0xa9/0xd0 [ 611.726766] __x64_sys_ioctl+0x73/0xb0 [ 611.730649] do_syscall_64+0x1b9/0x820 [ 611.734524] ? finish_task_switch+0x1d3/0x870 [ 611.739011] ? syscall_return_slowpath+0x5e0/0x5e0 [ 611.743933] ? syscall_return_slowpath+0x31d/0x5e0 [ 611.748856] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 611.754221] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 611.759058] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 611.764234] RIP: 0033:0x455a79 [ 611.767405] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 611.786742] RSP: 002b:00007fe64c120c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 611.794628] RAX: ffffffffffffffda RBX: 00007fe64c1216d4 RCX: 0000000000455a79 [ 611.801891] RDX: 0000000020000180 RSI: 000000004020ae76 RDI: 000000000000001a [ 611.809167] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 611.816430] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 611.823692] R13: 00000000004bdb85 R14: 00000000004cc5a0 R15: 0000000000000000 [ 611.830962] [ 611.832575] Allocated by task 9276: [ 611.836192] save_stack+0x43/0xd0 [ 611.839646] kasan_kmalloc+0xc4/0xe0 [ 611.843346] kmem_cache_alloc_trace+0x152/0x780 [ 611.848000] kvm_irqfd+0x18f/0x1ef0 [ 611.851628] kvm_vm_ioctl+0xf80/0x1d80 [ 611.855500] do_vfs_ioctl+0x1de/0x1720 [ 611.859373] ksys_ioctl+0xa9/0xd0 [ 611.862812] __x64_sys_ioctl+0x73/0xb0 [ 611.866715] do_syscall_64+0x1b9/0x820 [ 611.870593] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 611.875765] [ 611.877377] Freed by task 31888: [ 611.880734] save_stack+0x43/0xd0 [ 611.884173] __kasan_slab_free+0x11a/0x170 [ 611.888397] kasan_slab_free+0xe/0x10 [ 611.892187] kfree+0xd9/0x260 [ 611.895278] irqfd_shutdown+0x144/0x1c0 [ 611.899238] process_one_work+0xc73/0x1ba0 [ 611.903459] worker_thread+0x189/0x13c0 [ 611.907417] kthread+0x345/0x410 [ 611.910768] ret_from_fork+0x3a/0x50 [ 611.914463] [ 611.916090] The buggy address belongs to the object at ffff8801b1b94500 [ 611.916090] which belongs to the cache kmalloc-512 of size 512 [ 611.928736] The buggy address is located 360 bytes inside of [ 611.928736] 512-byte region [ffff8801b1b94500, ffff8801b1b94700) [ 611.940600] The buggy address belongs to the page: [ 611.945532] page:ffffea0006c6e500 count:1 mapcount:0 mapping:ffff8801da800940 index:0x0 [ 611.953660] flags: 0x2fffc0000000100(slab) [ 611.957883] raw: 02fffc0000000100 ffffea000726a148 ffffea0006c5b7c8 ffff8801da800940 [ 611.965750] raw: 0000000000000000 ffff8801b1b94000 0000000100000006 0000000000000000 [ 611.973617] page dumped because: kasan: bad access detected [ 611.979305] [ 611.980912] Memory state around the buggy address: [ 611.985826] ffff8801b1b94500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 611.993258] ffff8801b1b94580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 612.000687] >ffff8801b1b94600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 612.008032] ^ [ 612.014768] ffff8801b1b94680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 612.022113] ffff8801b1b94700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 612.029450] ================================================================== [ 612.036788] Disabling lock debugging due to kernel taint [ 612.042632] Kernel panic - not syncing: panic_on_warn set ... [ 612.042632] [ 612.049993] CPU: 1 PID: 9276 Comm: syz-executor2 Tainted: G B 4.18.0-rc4+ #143 [ 612.058637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 612.067969] Call Trace: [ 612.070543] dump_stack+0x1c9/0x2b4 [ 612.074156] ? dump_stack_print_info.cold.2+0x52/0x52 [ 612.079334] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 612.084253] panic+0x238/0x4e7 [ 612.087437] ? add_taint.cold.5+0x16/0x16 [ 612.091753] ? do_raw_spin_unlock+0xa7/0x2f0 [ 612.096154] ? do_raw_spin_unlock+0xa7/0x2f0 [ 612.100547] ? irq_bypass_register_consumer+0x51e/0x550 [ 612.105895] kasan_end_report+0x47/0x4f [ 612.109856] kasan_report.cold.7+0x76/0x2fe [ 612.114177] __asan_report_store8_noabort+0x17/0x20 [ 612.119175] irq_bypass_register_consumer+0x51e/0x550 [ 612.124351] ? __disconnect+0x1b0/0x1b0 [ 612.128316] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 612.133319] kvm_irqfd+0x198e/0x1ef0 [ 612.137019] ? check_same_owner+0x340/0x340 [ 612.141329] ? do_raw_spin_unlock+0xa7/0x2f0 [ 612.145732] ? kvm_eventfd_init+0x2c0/0x2c0 [ 612.150037] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 612.155559] ? futex_wait_queue_me+0x553/0x830 [ 612.160124] ? __lock_acquire+0x7fc/0x5020 [ 612.164343] ? refill_pi_state_cache.part.8+0x320/0x320 [ 612.169699] ? lock_downgrade+0x8f0/0x8f0 [ 612.173828] ? lock_release+0xa30/0xa30 [ 612.177782] ? check_same_owner+0x340/0x340 [ 612.182086] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 612.187276] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 612.192797] ? _copy_from_user+0xdf/0x150 [ 612.196930] kvm_vm_ioctl+0xf80/0x1d80 [ 612.200799] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 612.205884] ? futex_wake+0x304/0x760 [ 612.209678] ? __perf_event_task_sched_in+0x24f/0xbb0 [ 612.214851] ? kvm_set_memory_region+0x50/0x50 [ 612.219432] ? lock_downgrade+0x8f0/0x8f0 [ 612.223567] ? finish_task_switch+0x18a/0x870 [ 612.228047] ? do_futex+0x249/0x27d0 [ 612.231742] ? kasan_check_read+0x11/0x20 [ 612.235872] ? graph_lock+0x170/0x170 [ 612.239655] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 612.244220] ? compat_start_thread+0x80/0x80 [ 612.248621] ? _raw_spin_unlock_irq+0x27/0x70 [ 612.253100] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 612.258102] ? find_held_lock+0x36/0x1c0 [ 612.262499] ? lock_downgrade+0x8f0/0x8f0 [ 612.266635] ? kasan_check_read+0x11/0x20 [ 612.270765] ? rcu_is_watching+0x8c/0x150 [ 612.274909] ? __fget+0x414/0x670 [ 612.278348] ? expand_files.part.8+0x9c0/0x9c0 [ 612.282923] ? __fd_install+0x2db/0x880 [ 612.286882] ? kvm_set_memory_region+0x50/0x50 [ 612.291446] do_vfs_ioctl+0x1de/0x1720 [ 612.295318] ? ioctl_preallocate+0x300/0x300 [ 612.299712] ? __fget_light+0x2f7/0x440 [ 612.303671] ? __schedule+0x1ed0/0x1ed0 [ 612.307627] ? fget_raw+0x20/0x20 [ 612.311063] ? get_unused_fd_flags+0x122/0x1a0 [ 612.315629] ? __alloc_fd+0x710/0x710 [ 612.319433] ? __x64_sys_futex+0x47f/0x6a0 [ 612.323659] ? exit_to_usermode_loop+0x8c/0x370 [ 612.328318] ? do_futex+0x27d0/0x27d0 [ 612.332104] ? security_file_ioctl+0x94/0xc0 [ 612.336502] ksys_ioctl+0xa9/0xd0 [ 612.339938] __x64_sys_ioctl+0x73/0xb0 [ 612.343809] do_syscall_64+0x1b9/0x820 [ 612.347682] ? finish_task_switch+0x1d3/0x870 [ 612.352160] ? syscall_return_slowpath+0x5e0/0x5e0 [ 612.357090] ? syscall_return_slowpath+0x31d/0x5e0 [ 612.362012] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 612.367361] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 612.372191] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 612.377362] RIP: 0033:0x455a79 [ 612.380529] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 612.399721] RSP: 002b:00007fe64c120c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 612.407411] RAX: ffffffffffffffda RBX: 00007fe64c1216d4 RCX: 0000000000455a79 [ 612.414671] RDX: 0000000020000180 RSI: 000000004020ae76 RDI: 000000000000001a [ 612.422014] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 612.429266] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 612.436518] R13: 00000000004bdb85 R14: 00000000004cc5a0 R15: 0000000000000000 [ 612.444229] Dumping ftrace buffer: [ 612.447744] (ftrace buffer empty) [ 612.451431] Kernel Offset: disabled [ 612.455041] Rebooting in 86400 seconds..