01c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:13 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:13 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:13 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="2321213a0f0df805000000ef33408b93e8b647dc86c66e073f092a97ce0b70cf4aa009ff688a9fc6f7ffe5e95f67a891394ce80800c84af285c61a3656f27ffe16ccdf581f01fd7c810b3cd731cd284e96576f865e5300f16187ff87f620a99b535456a2b05a87fb85e441883ad2cb62d0ed4b47de834aadecdd8861a0c980980ec3fe2601e43d026efa090fb5c220fb4011132975cecbe07a1d881461e70fc34b5eb0729c9707aaddb10f5f8693220bf6f8b8ba344a747a5a02a9a96f6f3d4400"], 0xc1) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:13 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="2321213a0f0df805000000ef33408b93e8b647dc86c66e073f092a97ce0b70cf4aa009ff688a9fc6f7ffe5e95f67a891394ce80800c84af285c61a3656f27ffe16ccdf581f01fd7c810b3cd731cd284e96576f865e5300f16187ff87f620a99b535456a2b05a87fb85e441883ad2cb62d0ed4b47de834aadecdd8861a0c980980ec3fe2601e43d026efa090fb5c220fb4011132975cecbe07a1d881461e70fc34b5eb0729c9707aaddb10f5f8693220bf6f8b8ba344a747a5a02a9a96f6f3d4400"], 0xc1) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:13 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="2321213a0f0df805000000ef33408b93e8b647dc86c66e073f092a97ce0b70cf4aa009ff688a9fc6f7ffe5e95f67a891394ce80800c84af285c61a3656f27ffe16ccdf581f01fd7c810b3cd731cd284e96576f865e5300f16187ff87f620a99b535456a2b05a87fb85e441883ad2cb62d0ed4b47de834aadecdd8861a0c980980ec3fe2601e43d026efa090fb5c220fb4011132975cecbe07a1d881461e70fc34b5eb0729c9707aaddb10f5f8693220bf6f8b8ba344a747a5a02a9a96f6f3d4400"], 0xc1) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:14 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x122) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:14 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x122) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:14 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x122) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 190.167272] *** Guest State *** 03:08:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 190.196214] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 190.252512] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 03:08:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:14 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x152) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) [ 190.305771] CR3 = 0x00000000fffbc000 [ 190.317657] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 190.343228] RFLAGS=0x00000002 DR7 = 0x0000000000000400 03:08:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 190.377537] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 03:08:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:14 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x152) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) [ 190.424066] CS: sel=0x0000, attr=0x0009b, limit=0x0000ffff, base=0x0000000000000000 [ 190.452342] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 190.509202] SS: sel=0x0000, attr=0x00081, limit=0x0000ffff, base=0x0000000000000000 [ 190.549828] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 190.587135] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 190.602207] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 190.610680] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 190.627080] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 190.650868] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 190.665042] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 190.674977] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 190.681547] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 190.689047] Interruptibility = 00000000 ActivityState = 00000000 [ 190.695829] *** Host State *** [ 190.699068] RIP = 0xffffffff8116f8ef RSP = 0xffff88809636f9b0 [ 190.705691] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 190.712579] FSBase=00007f5592f43700 GSBase=ffff8880aeb00000 TRBase=fffffe0000034000 [ 190.720709] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 190.726630] CR0=0000000080050033 CR3=000000009906e000 CR4=00000000001426e0 [ 190.733960] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff866018a0 [ 190.740889] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 190.747013] *** Control State *** [ 190.750711] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000ea [ 190.757419] EntryControls=0000d1ff ExitControls=002fefff [ 190.763049] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 190.770128] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 190.776849] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 190.783512] reason=80000021 qualification=0000000000000000 [ 190.789852] IDTVectoring: info=00000000 errcode=00000000 [ 190.795452] TSC Offset = 0xffffff9744d4b66e 03:08:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:08:15 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x152) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) [ 190.799858] EPT pointer = 0x0000000091cfc01e [ 190.804435] Virtual processor ID = 0x0001 03:08:15 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="2321213a0f0df805000000ef33408b93e8b647dc86c66e073f092a97ce0b70cf4aa009ff688a9fc6f7ffe5e95f67a891394ce80800c84af285c61a3656f27ffe16ccdf581f01fd7c810b3cd731cd284e96576f865e5300f16187ff87f620a99b535456a2b05a87fb85e441883ad2cb62d0ed4b47de834aadecdd8861a0c980980ec3fe2601e43d026efa090fb5c220fb4011132975cecbe07a1d881461e70fc34b5eb0729c9707aaddb10f5f8693220bf6f8b8ba344a747a5a02a9a96f6f3d44008a7f70c9136c3286483d77bbe933c78f3b29e45c94781df4f5e35fa47f14f9ce01515881f49eed0b270000000000000000000000000000db02f5628bbab69da896873fa7253f8c3217d456326bae01afac6dd5f447ae19687617f02fb0d94ccfbdd2907731079025c279ce4f17d807f09e4504d925ff91254c729a1b2f9f42b6a80a6a9df9d3180bfb725172ebc2565f506aa43c55926f5313729c5d1c0f9da847b776d546b6b9f5d0"], 0x16a) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:08:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:15 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x16a) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:08:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:15 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x16a) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:15 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x16a) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:15 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="2321213a0f0df805000000ef33408b93e8b647dc86c66e073f092a97ce0b70cf4aa009ff688a9fc6f7ffe5e95f67a891394ce80800c84af285c61a3656f27ffe16ccdf581f01fd7c810b3cd731cd284e96576f865e5300f16187ff87f620a99b535456a2b05a87fb85e441883ad2cb62d0ed4b47de834aadecdd8861a0c980980ec3fe2601e43d026efa090fb5c220fb4011132975cecbe07a1d881461e70fc34b5eb0729c9707aaddb10f5f8693220bf6f8b8ba344a747a5a02a9a96f6f3d44008a7f70c9136c3286483d77bbe933c78f3b29e45c94781df4f5e35fa47f14f9ce01515881f49eed0b270000000000000000000000000000db02f5628bbab69da896873fa7253f8c3217d456326bae01afac6dd5f447ae19687617f02fb0d94ccfbdd2907731079025c279ce4f17d807f09e4504d925ff91254c729a1b2f9f42b6a80a6a9df9d3180bfb725172ebc2565f506aa43c55926f5313729c5d1c0f9da847b776d546b6b9f5d05f27100f65da07da5e283808"], 0x176) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:15 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x16a) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:15 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x176) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:15 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x176) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:16 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r0, 0xae80, 0x0) 03:08:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:08:16 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x17c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:08:16 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r0, 0xae80, 0x0) 03:08:16 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x17c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:08:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:16 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r0, 0xae80, 0x0) 03:08:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:08:17 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x17c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:17 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:08:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:08:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:17 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:08:17 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x17f) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:08:17 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:08:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:17 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x17f) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:17 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x17f) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:17 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r0, 0xae80, 0x0) 03:08:17 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r0, 0xae80, 0x0) 03:08:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:17 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x181) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:18 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r0, 0xae80, 0x0) 03:08:18 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r0, 0xae80, 0x0) 03:08:18 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:08:18 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:08:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:18 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x181) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:18 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:08:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:18 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x181) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:18 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r0, 0xae80, 0x0) 03:08:18 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:08:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:18 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:08:18 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:08:18 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r0, 0xae80, 0x0) 03:08:18 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="2321213a0f0df805000000ef33408b93e8b647dc86c66e073f092a97ce0b70cf4aa009ff688a9fc6f7ffe5e95f67a891394ce80800c84af285c61a3656f27ffe16ccdf581f01fd7c810b3cd731cd284e96576f865e5300f16187ff87f620a99b535456a2b05a87fb85e441883ad2cb62d0ed4b47de834aadecdd8861a0c980980ec3fe2601e43d026efa090fb5c220fb4011132975cecbe07a1d881461e70fc34b5eb0729c9707aaddb10f5f8693220bf6f8b8ba344a747a5a02a9a96f6f3d44008a7f70c9136c3286483d77bbe933c78f3b29e45c94781df4f5e35fa47f14f9ce01515881f49eed0b270000000000000000000000000000db02f5628bbab69da896873fa7253f8c3217d456326bae01afac6dd5f447ae19687617f02fb0d94ccfbdd2907731079025c279ce4f17d807f09e4504d925ff91254c729a1b2f9f42b6a80a6a9df9d3180bfb725172ebc2565f506aa43c55926f5313729c5d1c0f9da847b776d546b6b9f5d05f27100f65da07da5e283808792032d8079f05c901837d59"], 0x10094) write$binfmt_script(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:18 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="2321213a0f0df805000000ef33408b93e8b647dc86c66e073f092a97ce0b70cf4aa009ff688a9fc6f7ffe5e95f67a891394ce80800c84af285c61a3656f27ffe16ccdf581f01fd7c810b3cd731cd284e96576f865e5300f16187ff87f620a99b535456a2b05a87fb85e441883ad2cb62d0ed4b47de834aadecdd8861a0c980980ec3fe2601e43d026efa090fb5c220fb4011132975cecbe07a1d881461e70fc34b5eb0729c9707aaddb10f5f8693220bf6f8b8ba344a747a5a02a9a96f6f3d44008a7f70c9136c3286483d77bbe933c78f3b29e45c94781df4f5e35fa47f14f9ce01515881f49eed0b270000000000000000000000000000db02f5628bbab69da896873fa7253f8c3217d456326bae01afac6dd5f447ae19687617f02fb0d94ccfbdd2907731079025c279ce4f17d807f09e4504d925ff91254c729a1b2f9f42b6a80a6a9df9d3180bfb725172ebc2565f506aa43c55926f5313729c5d1c0f9da847b776d546b6b9f5d05f27100f65da07da5e283808792032d8079f05c901837d59"], 0x10094) write$binfmt_script(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:18 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:08:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:18 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:08:18 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x10094) write$binfmt_script(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:18 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:08:18 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x10094) write$binfmt_script(r0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:18 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:08:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:08:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:19 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="2321213a0f0df805000000ef33408b93e8b647dc86c66e073f092a97ce0b70cf4aa009ff688a9fc6f7ffe5e95f67a891394ce80800c84af285c61a3656f27ffe16ccdf581f01fd7c810b3cd731cd284e96576f865e5300f16187ff87f620a99b535456a2b05a87fb85e441883ad2cb62d0ed4b47de834aadecdd8861a0c980980ec3fe2601e43d026efa090fb5c220fb4011132975cecbe07a1d881461e70fc34b5eb0729c9707aaddb10f5f8693220bf6f8b8ba344a747a5a02a9a96f6f3d44008a7f70c9136c3286483d77bbe933c78f3b29e45c94781df4f5e35fa47f14f9ce01515881f49eed0b270000000000000000000000000000db02f5628bbab69da896873fa7253f8c3217d456326bae01afac6dd5f447ae19687617f02fb0d94ccfbdd2907731079025c279ce4f17d807f09e4504d925ff91254c729a1b2f9f42b6a80a6a9df9d3180bfb725172ebc2565f506aa43c55926f5313729c5d1c0f9da847b776d546b6b9f5d05f27100f65da07da5e283808792032d8079f05c901837d59"], 0x10094) write$binfmt_script(r0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:08:19 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:08:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:19 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:08:19 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x10094) write$binfmt_script(r0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:08:19 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:08:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:19 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:08:19 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="2321213a0f0df805000000ef33408b93e8b647dc86c66e073f092a97ce0b70cf4aa009ff688a9fc6f7ffe5e95f67a891394ce80800c84af285c61a3656f27ffe16ccdf581f01fd7c810b3cd731cd284e96576f865e5300f16187ff87f620a99b535456a2b05a87fb85e441883ad2cb62d0ed4b47de834aadecdd8861a0c980980ec3fe2601e43d026efa090fb5c220fb4011132975cecbe07a1d881461e70fc34b5eb0729c9707aaddb10f5f8693220bf6f8b8ba344a747a5a02a9a96f6f3d44008a7f70c9136c3286483d77bbe933c78f3b29e45c94781df4f5e35fa47f14f9ce01515881f49eed0b270000000000000000000000000000db02f5628bbab69da896873fa7253f8c3217d456326bae01afac6dd5f447ae19687617f02fb0d94ccfbdd2907731079025c279ce4f17d807f09e4504d925ff91254c729a1b2f9f42b6a80a6a9df9d3180bfb725172ebc2565f506aa43c55926f5313729c5d1c0f9da847b776d546b6b9f5d05f27100f65da07da5e283808792032d8079f05c901837d59"], 0x10094) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[], 0x0) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:19 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r0, 0xae80, 0x0) 03:08:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:19 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:08:19 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x10094) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[], 0x0) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:19 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r0, 0xae80, 0x0) 03:08:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:19 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x10094) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[], 0x0) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:19 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r0, 0xae80, 0x0) 03:08:19 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:08:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:19 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x10094) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:20 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:08:20 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x10094) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:20 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:08:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:20 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x10094) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:20 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="2321213a0f0df805000000ef33408b93e8b647dc86c66e073f092a97ce0b70cf4aa009ff688a9fc6f7ffe5e95f67a891394ce80800c84af285c61a3656f27ffe16ccdf581f01fd7c810b3cd731cd284e96576f865e5300f16187ff87f620a99b535456a2b05a87fb85e441883ad2cb62d0ed4b47de834aadecdd8861a0c980980ec3fe2601e43d026efa090fb5c220fb4011132975cecbe07a1d881461e70fc34b5eb0729c9707aaddb10f5f8693220bf6f8b8ba344a747a5a02a9a96f6f3d44008a7f70c9136c3286483d77bbe933c78f3b29e45c94781df4f5e35fa47f14f9ce01515881f49eed0b270000000000000000000000000000db02f5628bbab69da896873fa7253f8c3217d456326bae01afac6dd5f447ae19687617f02fb0d94ccfbdd2907731079025c279ce4f17d807f09e4504d925ff91254c729a1b2f9f42b6a80a6a9df9d3180bfb725172ebc2565f506aa43c55926f5313729c5d1c0f9da847b776d546b6b9f5d05f27100f65da07da5e283808792032d8079f05c901837d59"], 0x10094) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, 0x0, 0x0) close(r0) 03:08:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 196.142021] *** Guest State *** 03:08:20 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x10094) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, 0x0, 0x0) close(r0) [ 196.181768] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 03:08:20 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:08:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 196.255256] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 03:08:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 196.316402] CR3 = 0x00000000fffbc000 [ 196.328712] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 196.381648] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 196.411722] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 196.454210] CS: sel=0x0000, attr=0x0009b, limit=0x0000ffff, base=0x0000000000000000 [ 196.479440] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 196.496417] SS: sel=0x0000, attr=0x00081, limit=0x0000ffff, base=0x0000000000000000 [ 196.504584] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 196.513781] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 196.521990] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 196.529973] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 196.538436] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 196.546449] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 196.554910] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 196.563418] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 196.569811] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 196.577368] Interruptibility = 00000000 ActivityState = 00000000 [ 196.583649] *** Host State *** [ 196.586830] RIP = 0xffffffff8116f8ef RSP = 0xffff888094aaf9b0 [ 196.592838] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 196.599376] FSBase=00007f0a384ab700 GSBase=ffff8880aeb00000 TRBase=fffffe0000003000 [ 196.607198] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 196.613096] CR0=0000000080050033 CR3=0000000092adb000 CR4=00000000001426e0 [ 196.620136] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff866018a0 [ 196.626796] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 196.632864] *** Control State *** [ 196.636308] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000ea [ 196.643008] EntryControls=0000d1ff ExitControls=002fefff [ 196.648490] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 03:08:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:20 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x10094) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, 0x0, 0x0) close(r0) 03:08:20 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:08:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:08:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 196.655453] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 196.662126] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 196.668685] reason=80000021 qualification=0000000000000000 [ 196.675016] IDTVectoring: info=00000000 errcode=00000000 [ 196.681135] TSC Offset = 0xffffff9403ad2d36 [ 196.685452] EPT pointer = 0x00000000a873401e [ 196.689840] Virtual processor ID = 0x0001 03:08:21 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="2321213a0f0df805000000ef33408b93e8b647dc86c66e073f092a97ce0b70cf4aa009ff688a9fc6f7ffe5e95f67a891394ce80800c84af285c61a3656f27ffe16ccdf581f01fd7c810b3cd731cd284e96576f865e5300f16187ff87f620a99b535456a2b05a87fb85e441883ad2cb62d0ed4b47de834aadecdd8861a0c980980ec3fe2601e43d026efa090fb5c220fb4011132975cecbe07a1d881461e70fc34b5eb0729c9707aaddb10f5f8693220bf6f8b8ba344a747a5a02a9a96f6f3d44008a7f70c9136c3286483d77bbe933c78f3b29e45c94781df4f5e35fa47f14f9ce01515881f49eed0b270000000000000000000000000000db02f5628bbab69da896873fa7253f8c3217d456326bae01afac6dd5f447ae19687617f02fb0d94ccfbdd2907731079025c279ce4f17d807f09e4504d925ff91254c729a1b2f9f42b6a80a6a9df9d3180bfb725172ebc2565f506aa43c55926f5313729c5d1c0f9da847b776d546b6b9f5d05f27100f65da07da5e283808792032d8079f05c901837d59"], 0x10094) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(0xffffffffffffffff) 03:08:21 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:08:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:08:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:21 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x10094) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(0xffffffffffffffff) 03:08:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:08:21 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x10094) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(0xffffffffffffffff) 03:08:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:08:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:08:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:08:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:08:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:22 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x10094) write$binfmt_script(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:08:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:08:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:08:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:08:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:08:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:08:23 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="2321213a0f0df805000000ef33408b93e8b647dc86c66e073f092a97ce0b70cf4aa009ff688a9fc6f7ffe5e95f67a891394ce80800c84af285c61a3656f27ffe16ccdf581f01fd7c810b3cd731cd284e96576f865e5300f16187ff87f620a99b535456a2b05a87fb85e441883ad2cb62d0ed4b47de834aadecdd8861a0c980980ec3fe2601e43d026efa090fb5c220fb4011132975cecbe07a1d881461e70fc34b5eb0729c9707aaddb10f5f8693220bf6f8b8ba344a747a5a02a9a96f6f3d4400"], 0xc1) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:08:24 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[], 0x0) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:24 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:24 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:24 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:24 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:24 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) close(r0) 03:08:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x1, @local, 'veth0_to_bond\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8937, &(0x7f0000000080)={'veth0_to_bond\x00', r3}) connect$pppoe(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x0, {0x0, @local, 'gre0\x00'}}, 0x1e) 03:08:25 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) close(r0) 03:08:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:25 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) close(r0) 03:08:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:25 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0) 03:08:25 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847") r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r1, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) close(r1) 03:08:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:25 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r1, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) close(r1) 03:08:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:25 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:25 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:08:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:25 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)) r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r1, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) close(r1) 03:08:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:26 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:26 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:08:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:26 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:08:26 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:08:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:26 executing program 1: bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(0xffffffffffffffff) 03:08:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:26 executing program 1: bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(0xffffffffffffffff) 03:08:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:26 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 03:08:26 executing program 1: bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(0xffffffffffffffff) 03:08:27 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2d}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0x21}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xb5, 0x0) 03:08:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(r1) 03:08:27 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:27 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2d}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0x21}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xb5, 0x0) 03:08:27 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 03:08:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(r1) 03:08:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:27 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 03:08:27 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2d}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0x21}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xb5, 0x0) 03:08:27 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(r1) 03:08:27 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 03:08:27 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2d}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0x21}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xb5, 0x0) 03:08:27 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(r1) 03:08:27 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 03:08:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:27 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2d}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0x21}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xb5, 0x0) 03:08:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(r1) 03:08:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:27 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:27 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 03:08:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(r1) 03:08:27 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:27 executing program 3: syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) 03:08:27 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2d}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0x21}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xb5, 0x0) 03:08:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(r1) 03:08:27 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:28 executing program 3: syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) 03:08:28 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2d}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0x21}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xb5, 0x0) 03:08:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(r1) 03:08:28 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:28 executing program 3: syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) 03:08:28 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2d}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0x21}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xb5, 0x0) 03:08:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(r1) 03:08:28 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) [ 204.052148] *** Guest State *** 03:08:28 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) 03:08:28 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2d}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0x21}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xb5, 0x0) [ 204.076110] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 204.145731] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 204.193471] CR3 = 0x00000000fffbc000 03:08:28 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2d}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0x21}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xb5, 0x0) 03:08:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(0xffffffffffffffff) 03:08:28 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) [ 204.215427] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 204.235534] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 204.242645] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 204.249332] CS: sel=0x0000, attr=0x0009b, limit=0x0000ffff, base=0x0000000000000000 [ 204.282057] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 204.304527] SS: sel=0x0000, attr=0x00081, limit=0x0000ffff, base=0x0000000000000000 [ 204.320225] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 204.333793] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 204.341844] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 204.354888] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 204.362955] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 204.371265] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 204.379244] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 204.387330] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 204.393812] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 204.401475] Interruptibility = 00000000 ActivityState = 00000000 [ 204.407703] *** Host State *** [ 204.410947] RIP = 0xffffffff8116f8ef RSP = 0xffff8880572a79b0 [ 204.416914] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 204.423636] FSBase=00007faf99e22700 GSBase=ffff8880aea00000 TRBase=fffffe0000003000 [ 204.431486] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 204.437384] CR0=0000000080050033 CR3=0000000097252000 CR4=00000000001426f0 [ 204.444431] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff866018a0 [ 204.451159] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 204.457250] *** Control State *** [ 204.460748] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000ea [ 204.467404] EntryControls=0000d1ff ExitControls=002fefff [ 204.473033] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 03:08:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:28 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) 03:08:28 executing program 2: mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2d}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0x21}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xb5, 0x0) 03:08:28 executing program 5: r0 = socket$inet6(0xa, 0x8000000000001, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(0xffffffffffffffff) 03:08:28 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) [ 204.479980] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 204.487161] VMExit: intr_info=00000000 errcode=00000000 ilen=00000002 [ 204.493898] reason=80000021 qualification=0000000000000000 [ 204.500257] IDTVectoring: info=00000000 errcode=00000000 [ 204.505702] TSC Offset = 0xffffff8fd1f3aa68 [ 204.510088] EPT pointer = 0x00000000a48eb01e [ 204.514503] Virtual processor ID = 0x0002 03:08:28 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) 03:08:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(0xffffffffffffffff) 03:08:28 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:28 executing program 2: mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2d}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0x21}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xb5, 0x0) 03:08:28 executing program 0: socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(r0) 03:08:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:29 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x1) 03:08:29 executing program 2: mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2d}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0x21}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xb5, 0x0) 03:08:29 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:29 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) 03:08:29 executing program 0: socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(r0) 03:08:29 executing program 5: mkdir(0x0, 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, &(0x7f00000002c0)={[{@mode={'mode'}}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2d}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0x21}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xb5, 0x0) 03:08:29 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x1) 03:08:29 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) 03:08:29 executing program 2: mkdir(0x0, 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2d}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0x21}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xb5, 0x0) 03:08:29 executing program 0: socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(r0) 03:08:29 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:29 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) 03:08:29 executing program 2: mkdir(0x0, 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2d}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0x21}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xb5, 0x0) 03:08:29 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:29 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(r0) 03:08:29 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f00000001c0)=[{0x0}, {0x0, 0x0, 0xffffffffffffff1b}], 0x8000, 0x0) 03:08:29 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x1) 03:08:29 executing program 3: r0 = syz_open_procfs(0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 03:08:29 executing program 5 (fault-call:11 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:29 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x1) 03:08:29 executing program 2: mkdir(0x0, 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2d}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0x21}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xb5, 0x0) 03:08:29 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(r0) 03:08:29 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:29 executing program 3: r0 = syz_open_procfs(0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) [ 205.436944] FAULT_INJECTION: forcing a failure. [ 205.436944] name failslab, interval 1, probability 0, space 0, times 1 [ 205.453902] CPU: 1 PID: 12185 Comm: syz-executor.5 Not tainted 4.14.173-syzkaller #0 [ 205.461815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 205.471192] Call Trace: [ 205.473790] dump_stack+0x13e/0x194 [ 205.477427] should_fail.cold+0x10a/0x14b [ 205.481582] should_failslab+0xd6/0x130 03:08:29 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(r0) 03:08:29 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:29 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x1) 03:08:29 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:29 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) [ 205.485565] kmem_cache_alloc+0x2b5/0x770 [ 205.489719] ? __lock_acquire+0x5f7/0x4620 [ 205.493957] mmu_topup_memory_caches+0x83/0x300 [ 205.498639] kvm_mmu_load+0x1e/0xd00 [ 205.502352] ? kvm_apic_accept_events+0x16f/0x3f0 [ 205.507197] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 205.511963] vcpu_enter_guest+0x2eb9/0x5240 [ 205.516295] ? save_trace+0x290/0x290 [ 205.520100] ? save_trace+0x290/0x290 [ 205.523906] ? emulator_read_emulated+0x40/0x40 [ 205.528585] ? lock_acquire+0x170/0x3f0 [ 205.532566] ? kvm_arch_vcpu_ioctl_run+0x143/0xfd0 [ 205.537505] ? kvm_arch_vcpu_ioctl_run+0x2fe/0xfd0 [ 205.542435] ? kvm_arch_vcpu_ioctl_run+0x181/0xfd0 [ 205.547364] kvm_arch_vcpu_ioctl_run+0x2fe/0xfd0 [ 205.552130] kvm_vcpu_ioctl+0x3df/0xc70 [ 205.556114] ? kvm_vcpu_block+0xb70/0xb70 [ 205.560266] ? trace_hardirqs_on+0x10/0x10 [ 205.564502] ? save_trace+0x290/0x290 [ 205.568297] ? SyS_write+0x1b7/0x210 [ 205.572014] ? kvm_vcpu_block+0xb70/0xb70 [ 205.576164] do_vfs_ioctl+0x75a/0xfe0 [ 205.579965] ? selinux_file_mprotect+0x5c0/0x5c0 [ 205.584729] ? ioctl_preallocate+0x1a0/0x1a0 [ 205.589450] ? security_file_ioctl+0x76/0xb0 [ 205.589462] ? security_file_ioctl+0x83/0xb0 [ 205.598317] SyS_ioctl+0x7f/0xb0 [ 205.598326] ? do_vfs_ioctl+0xfe0/0xfe0 [ 205.598340] do_syscall_64+0x1d5/0x640 03:08:29 executing program 5 (fault-call:11 fault-nth:1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:29 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:29 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, 0x0, &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2d}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0x21}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xb5, 0x0) 03:08:29 executing program 0: socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(r0) [ 205.598355] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 205.598364] RIP: 0033:0x45c679 [ 205.598369] RSP: 002b:00007fb8ae493c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 03:08:29 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:30 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, 0x0, &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2d}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0x21}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xb5, 0x0) [ 205.598380] RAX: ffffffffffffffda RBX: 00007fb8ae4946d4 RCX: 000000000045c679 [ 205.598385] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 205.598390] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 205.598395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 205.598401] R13: 00000000000003bf R14: 00000000004c62b5 R15: 0000000000000000 [ 205.786930] FAULT_INJECTION: forcing a failure. [ 205.786930] name failslab, interval 1, probability 0, space 0, times 0 [ 205.787038] CPU: 0 PID: 12222 Comm: syz-executor.5 Not tainted 4.14.173-syzkaller #0 [ 205.787044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 205.787048] Call Trace: [ 205.787063] dump_stack+0x13e/0x194 [ 205.787079] should_fail.cold+0x10a/0x14b [ 205.787094] should_failslab+0xd6/0x130 [ 205.787104] kmem_cache_alloc+0x2b5/0x770 [ 205.787116] ? __lock_acquire+0x5f7/0x4620 [ 205.787133] mmu_topup_memory_caches+0x83/0x300 [ 205.787146] kvm_mmu_load+0x1e/0xd00 [ 205.787155] ? kvm_apic_accept_events+0x16f/0x3f0 [ 205.787164] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 205.787175] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 205.787188] vcpu_enter_guest+0x2eb9/0x5240 [ 205.787198] ? retint_kernel+0x2d/0x2d [ 205.787213] ? emulator_read_emulated+0x40/0x40 [ 205.787222] ? lock_acquire+0x1ec/0x3f0 [ 205.787238] ? kvm_arch_vcpu_ioctl_run+0x2fe/0xfd0 [ 205.787247] ? kvm_arch_vcpu_ioctl_run+0x181/0xfd0 [ 205.787257] kvm_arch_vcpu_ioctl_run+0x2fe/0xfd0 [ 205.787272] kvm_vcpu_ioctl+0x3df/0xc70 [ 205.787284] ? kvm_vcpu_block+0xb70/0xb70 [ 205.787297] ? trace_hardirqs_on+0x10/0x10 [ 205.787311] ? save_trace+0x290/0x290 [ 205.787320] ? SyS_write+0x1b7/0x210 [ 205.787333] ? kvm_vcpu_block+0xb70/0xb70 [ 205.787345] do_vfs_ioctl+0x75a/0xfe0 [ 205.787356] ? selinux_file_mprotect+0x5c0/0x5c0 [ 205.787367] ? ioctl_preallocate+0x1a0/0x1a0 [ 205.787385] ? security_file_ioctl+0x76/0xb0 [ 205.787394] ? security_file_ioctl+0x83/0xb0 [ 205.787405] SyS_ioctl+0x7f/0xb0 [ 205.787413] ? do_vfs_ioctl+0xfe0/0xfe0 [ 205.787423] do_syscall_64+0x1d5/0x640 [ 205.787437] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 205.787444] RIP: 0033:0x45c679 [ 205.787448] RSP: 002b:00007fb8ae493c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 03:08:30 executing program 3: r0 = syz_open_procfs(0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 03:08:30 executing program 0: socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(r0) 03:08:30 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:30 executing program 5 (fault-call:11 fault-nth:2): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:30 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, 0x0, &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2d}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0x21}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xb5, 0x0) 03:08:30 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x1) [ 205.787458] RAX: ffffffffffffffda RBX: 00007fb8ae4946d4 RCX: 000000000045c679 [ 205.787463] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 205.787468] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 205.787472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 205.787477] R13: 00000000000003bf R14: 00000000004c62b5 R15: 0000000000000001 03:08:30 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) 03:08:30 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:30 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2d}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0x21}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xb5, 0x0) 03:08:30 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) 03:08:30 executing program 0: socket$netlink(0x10, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(r0) 03:08:30 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) 03:08:30 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) [ 206.248567] FAULT_INJECTION: forcing a failure. [ 206.248567] name failslab, interval 1, probability 0, space 0, times 0 03:08:30 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2d}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0x21}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xb5, 0x0) 03:08:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x0, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(r1) [ 206.299951] CPU: 0 PID: 12243 Comm: syz-executor.5 Not tainted 4.14.173-syzkaller #0 [ 206.307877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 206.317235] Call Trace: [ 206.319840] dump_stack+0x13e/0x194 [ 206.323495] should_fail.cold+0x10a/0x14b [ 206.323509] should_failslab+0xd6/0x130 [ 206.323519] kmem_cache_alloc+0x2b5/0x770 03:08:30 executing program 5 (fault-call:11 fault-nth:3): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:30 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) 03:08:30 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:30 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2d}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0x21}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xb5, 0x0) 03:08:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x0, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(r1) [ 206.323531] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 206.323546] mmu_topup_memory_caches+0x83/0x300 [ 206.323560] kvm_mmu_load+0x1e/0xd00 [ 206.323570] ? kvm_cpu_has_injectable_intr+0xaf/0x180 [ 206.323580] ? __sanitizer_cov_trace_pc+0x4a/0x50 03:08:30 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x0, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(r1) 03:08:30 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2d}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0x21}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xb5, 0x0) [ 206.323593] vcpu_enter_guest+0x2eb9/0x5240 [ 206.323604] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 206.323613] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 206.323630] ? emulator_read_emulated+0x40/0x40 [ 206.323651] ? kvm_arch_vcpu_ioctl_run+0x2fe/0xfd0 [ 206.323662] kvm_arch_vcpu_ioctl_run+0x2fe/0xfd0 [ 206.323679] kvm_vcpu_ioctl+0x3df/0xc70 [ 206.323691] ? kvm_vcpu_block+0xb70/0xb70 [ 206.323703] ? retint_kernel+0x2d/0x2d [ 206.323715] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 206.323725] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 206.323737] ? save_trace+0x290/0x290 [ 206.323745] ? check_preemption_disabled+0x35/0x240 [ 206.323754] ? retint_kernel+0x2d/0x2d [ 206.323767] ? kvm_vcpu_block+0xb70/0xb70 [ 206.323779] do_vfs_ioctl+0x75a/0xfe0 [ 206.323791] ? selinux_file_mprotect+0x5c0/0x5c0 [ 206.323802] ? ioctl_preallocate+0x1a0/0x1a0 [ 206.323822] ? security_file_ioctl+0x76/0xb0 [ 206.323844] ? security_file_ioctl+0x83/0xb0 [ 206.323857] SyS_ioctl+0x7f/0xb0 [ 206.323869] ? do_vfs_ioctl+0xfe0/0xfe0 [ 206.323882] do_syscall_64+0x1d5/0x640 [ 206.323898] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 206.323906] RIP: 0033:0x45c679 [ 206.323911] RSP: 002b:00007fb8ae493c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 206.323922] RAX: ffffffffffffffda RBX: 00007fb8ae4946d4 RCX: 000000000045c679 [ 206.323927] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 206.323932] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 206.323937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 206.323942] R13: 00000000000003bf R14: 00000000004c62b5 R15: 0000000000000002 [ 206.632547] FAULT_INJECTION: forcing a failure. [ 206.632547] name failslab, interval 1, probability 0, space 0, times 0 [ 206.632594] CPU: 0 PID: 12290 Comm: syz-executor.5 Not tainted 4.14.173-syzkaller #0 [ 206.632601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 206.632605] Call Trace: [ 206.632621] dump_stack+0x13e/0x194 [ 206.632637] should_fail.cold+0x10a/0x14b [ 206.632652] should_failslab+0xd6/0x130 [ 206.632663] kmem_cache_alloc+0x2b5/0x770 [ 206.632675] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 206.632686] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 206.632703] mmu_topup_memory_caches+0x83/0x300 [ 206.632716] kvm_mmu_load+0x1e/0xd00 [ 206.632728] ? vcpu_enter_guest+0x2eb1/0x5240 [ 206.632741] vcpu_enter_guest+0x2eb9/0x5240 [ 206.632750] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 206.632760] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 206.632776] ? emulator_read_emulated+0x40/0x40 [ 206.632786] ? lock_acquire+0x170/0x3f0 [ 206.632796] ? kvm_arch_vcpu_ioctl_run+0x143/0xfd0 [ 206.632812] ? kvm_arch_vcpu_ioctl_run+0x2fe/0xfd0 [ 206.632821] ? kvm_arch_vcpu_ioctl_run+0x181/0xfd0 [ 206.632830] kvm_arch_vcpu_ioctl_run+0x2fe/0xfd0 [ 206.632846] kvm_vcpu_ioctl+0x3df/0xc70 [ 206.632857] ? kvm_vcpu_block+0xb70/0xb70 [ 206.632867] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 206.632880] ? check_preemption_disabled+0x35/0x240 [ 206.632889] ? retint_kernel+0x2d/0x2d [ 206.632901] ? kvm_vcpu_block+0xb70/0xb70 [ 206.632915] ? kvm_vcpu_block+0xb70/0xb70 [ 206.632927] do_vfs_ioctl+0x75a/0xfe0 [ 206.632937] ? selinux_file_mprotect+0x5c0/0x5c0 [ 206.632949] ? ioctl_preallocate+0x1a0/0x1a0 [ 206.632968] ? security_file_ioctl+0x76/0xb0 [ 206.632977] ? security_file_ioctl+0x83/0xb0 [ 206.632989] SyS_ioctl+0x7f/0xb0 [ 206.632997] ? do_vfs_ioctl+0xfe0/0xfe0 [ 206.633009] do_syscall_64+0x1d5/0x640 [ 206.633024] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 206.633032] RIP: 0033:0x45c679 [ 206.633037] RSP: 002b:00007fb8ae493c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 206.633047] RAX: ffffffffffffffda RBX: 00007fb8ae4946d4 RCX: 000000000045c679 03:08:31 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) 03:08:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, 0x0) r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(r1) 03:08:31 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:31 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2d}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0x21}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xb5, 0x0) 03:08:31 executing program 5 (fault-call:11 fault-nth:4): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:31 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) [ 206.633052] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 206.633058] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 206.633063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 206.633068] R13: 00000000000003bf R14: 00000000004c62b5 R15: 0000000000000003 03:08:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, 0x0) r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(r1) 03:08:31 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2d}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0x21}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xb5, 0x0) 03:08:31 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x1) 03:08:31 executing program 3: syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) 03:08:31 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:31 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x1) 03:08:31 executing program 3: syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) [ 207.202211] FAULT_INJECTION: forcing a failure. [ 207.202211] name failslab, interval 1, probability 0, space 0, times 0 03:08:31 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2d}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0x21}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xb5, 0x0) 03:08:31 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) [ 207.266857] CPU: 1 PID: 12319 Comm: syz-executor.5 Not tainted 4.14.173-syzkaller #0 [ 207.274783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 207.284139] Call Trace: [ 207.286743] dump_stack+0x13e/0x194 [ 207.290386] should_fail.cold+0x10a/0x14b [ 207.294548] should_failslab+0xd6/0x130 [ 207.298531] kmem_cache_alloc+0x2b5/0x770 [ 207.302690] ? __lock_acquire+0x5f7/0x4620 [ 207.306941] mmu_topup_memory_caches+0x83/0x300 [ 207.311619] kvm_mmu_load+0x1e/0xd00 03:08:31 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) [ 207.315332] ? kvm_apic_accept_events+0x16f/0x3f0 [ 207.320177] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 207.324943] vcpu_enter_guest+0x2eb9/0x5240 [ 207.329269] ? save_trace+0x290/0x290 [ 207.333075] ? save_trace+0x290/0x290 [ 207.336879] ? emulator_read_emulated+0x40/0x40 [ 207.341553] ? lock_acquire+0x170/0x3f0 [ 207.345534] ? kvm_arch_vcpu_ioctl_run+0x143/0xfd0 [ 207.350471] ? kvm_arch_vcpu_ioctl_run+0x2fe/0xfd0 [ 207.355402] ? kvm_arch_vcpu_ioctl_run+0x181/0xfd0 [ 207.360341] kvm_arch_vcpu_ioctl_run+0x2fe/0xfd0 [ 207.365108] kvm_vcpu_ioctl+0x3df/0xc70 [ 207.369104] ? kvm_vcpu_block+0xb70/0xb70 [ 207.373258] ? trace_hardirqs_on+0x10/0x10 [ 207.377499] ? __lock_is_held+0xad/0x140 [ 207.381574] ? save_trace+0x290/0x290 [ 207.385376] ? SyS_write+0x1b7/0x210 [ 207.389100] ? kvm_vcpu_block+0xb70/0xb70 [ 207.393273] do_vfs_ioctl+0x75a/0xfe0 [ 207.393288] ? selinux_file_mprotect+0x5c0/0x5c0 [ 207.401872] ? ioctl_preallocate+0x1a0/0x1a0 [ 207.401892] ? security_file_ioctl+0x76/0xb0 [ 207.410690] ? security_file_ioctl+0x83/0xb0 [ 207.415110] SyS_ioctl+0x7f/0xb0 [ 207.418476] ? do_vfs_ioctl+0xfe0/0xfe0 [ 207.422450] do_syscall_64+0x1d5/0x640 [ 207.426331] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 207.431519] RIP: 0033:0x45c679 [ 207.434737] RSP: 002b:00007fb8ae493c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 207.442431] RAX: ffffffffffffffda RBX: 00007fb8ae4946d4 RCX: 000000000045c679 [ 207.449686] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 207.456943] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 207.464196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 207.471465] R13: 00000000000003bf R14: 00000000004c62b5 R15: 0000000000000004 03:08:31 executing program 5 (fault-call:11 fault-nth:5): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:31 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, 0x0) r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(r1) 03:08:31 executing program 3: syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) 03:08:31 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x1) 03:08:31 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2d}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0x21}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xb5, 0x0) 03:08:31 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 03:08:31 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x1) 03:08:31 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[], 0x0) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)) r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(r1) [ 207.713011] FAULT_INJECTION: forcing a failure. [ 207.713011] name failslab, interval 1, probability 0, space 0, times 0 [ 207.735659] CPU: 1 PID: 12365 Comm: syz-executor.5 Not tainted 4.14.173-syzkaller #0 [ 207.743570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 207.752923] Call Trace: [ 207.755615] dump_stack+0x13e/0x194 [ 207.759244] should_fail.cold+0x10a/0x14b [ 207.763389] should_failslab+0xd6/0x130 [ 207.767359] kmem_cache_alloc+0x2b5/0x770 [ 207.771503] ? vcpu_enter_guest+0x2141/0x5240 [ 207.776001] mmu_topup_memory_caches+0x83/0x300 [ 207.780763] kvm_mmu_load+0x1e/0xd00 [ 207.784604] ? kvm_apic_accept_events+0x16f/0x3f0 [ 207.789439] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 207.794195] ? vcpu_enter_guest+0x1f32/0x5240 [ 207.798700] vcpu_enter_guest+0x2eb9/0x5240 [ 207.803044] ? emulator_read_emulated+0x40/0x40 [ 207.803058] ? lock_acquire+0x170/0x3f0 03:08:32 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 03:08:32 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2d}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0x21}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xb5, 0x0) [ 207.811700] ? kvm_arch_vcpu_ioctl_run+0x143/0xfd0 [ 207.811715] ? kvm_arch_vcpu_ioctl_run+0x2fe/0xfd0 [ 207.821649] ? kvm_arch_vcpu_ioctl_run+0x181/0xfd0 [ 207.826585] kvm_arch_vcpu_ioctl_run+0x2fe/0xfd0 [ 207.831348] kvm_vcpu_ioctl+0x3df/0xc70 [ 207.835325] ? kvm_vcpu_block+0xb70/0xb70 [ 207.839476] ? trace_hardirqs_on+0x10/0x10 [ 207.843708] ? __lock_is_held+0xad/0x140 [ 207.847773] ? save_trace+0x290/0x290 [ 207.851605] ? SyS_write+0x1b7/0x210 [ 207.851620] ? kvm_vcpu_block+0xb70/0xb70 [ 207.851633] do_vfs_ioctl+0x75a/0xfe0 [ 207.851645] ? selinux_file_mprotect+0x5c0/0x5c0 03:08:32 executing program 5 (fault-call:11 fault-nth:6): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:32 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[], 0x0) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)) r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(r1) [ 207.851657] ? ioctl_preallocate+0x1a0/0x1a0 [ 207.851676] ? security_file_ioctl+0x76/0xb0 [ 207.851685] ? security_file_ioctl+0x83/0xb0 [ 207.851697] SyS_ioctl+0x7f/0xb0 [ 207.851705] ? do_vfs_ioctl+0xfe0/0xfe0 [ 207.851719] do_syscall_64+0x1d5/0x640 03:08:32 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[], 0x0) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:32 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, 0x0, 0x0, 0x0) 03:08:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)) r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(r1) [ 207.851736] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 207.851744] RIP: 0033:0x45c679 03:08:32 executing program 5 (fault-call:11 fault-nth:7): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 207.851749] RSP: 002b:00007fb8ae493c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 207.851759] RAX: ffffffffffffffda RBX: 00007fb8ae4946d4 RCX: 000000000045c679 [ 207.851765] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 207.851770] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 207.851775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 207.851781] R13: 00000000000003bf R14: 00000000004c62b5 R15: 0000000000000005 [ 208.099385] FAULT_INJECTION: forcing a failure. [ 208.099385] name failslab, interval 1, probability 0, space 0, times 0 [ 208.099398] CPU: 1 PID: 12397 Comm: syz-executor.5 Not tainted 4.14.173-syzkaller #0 [ 208.099403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 208.099407] Call Trace: [ 208.099421] dump_stack+0x13e/0x194 [ 208.099437] should_fail.cold+0x10a/0x14b [ 208.099450] should_failslab+0xd6/0x130 [ 208.099460] kmem_cache_alloc+0x2b5/0x770 [ 208.099472] ? __lock_acquire+0x5f7/0x4620 [ 208.099488] mmu_topup_memory_caches+0x83/0x300 [ 208.099500] kvm_mmu_load+0x1e/0xd00 [ 208.099510] ? kvm_apic_accept_events+0x16f/0x3f0 [ 208.099519] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 208.099532] vcpu_enter_guest+0x2eb9/0x5240 [ 208.099542] ? save_trace+0x290/0x290 [ 208.099550] ? save_trace+0x290/0x290 [ 208.099562] ? emulator_read_emulated+0x40/0x40 [ 208.099571] ? lock_acquire+0x170/0x3f0 [ 208.099579] ? kvm_arch_vcpu_ioctl_run+0x143/0xfd0 [ 208.099593] ? kvm_arch_vcpu_ioctl_run+0x2fe/0xfd0 [ 208.099600] ? kvm_arch_vcpu_ioctl_run+0x181/0xfd0 [ 208.099609] kvm_arch_vcpu_ioctl_run+0x2fe/0xfd0 [ 208.099624] kvm_vcpu_ioctl+0x3df/0xc70 [ 208.099634] ? kvm_vcpu_block+0xb70/0xb70 [ 208.099646] ? trace_hardirqs_on+0x10/0x10 [ 208.099655] ? __lock_is_held+0xad/0x140 [ 208.099666] ? save_trace+0x290/0x290 [ 208.099674] ? SyS_write+0x1b7/0x210 [ 208.099685] ? kvm_vcpu_block+0xb70/0xb70 [ 208.099696] do_vfs_ioctl+0x75a/0xfe0 [ 208.099706] ? selinux_file_mprotect+0x5c0/0x5c0 [ 208.099718] ? ioctl_preallocate+0x1a0/0x1a0 [ 208.099735] ? security_file_ioctl+0x76/0xb0 [ 208.099744] ? security_file_ioctl+0x83/0xb0 [ 208.099754] SyS_ioctl+0x7f/0xb0 [ 208.099761] ? do_vfs_ioctl+0xfe0/0xfe0 [ 208.099771] do_syscall_64+0x1d5/0x640 [ 208.099785] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 208.099792] RIP: 0033:0x45c679 [ 208.099796] RSP: 002b:00007fb8ae493c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 208.099806] RAX: ffffffffffffffda RBX: 00007fb8ae4946d4 RCX: 000000000045c679 [ 208.099811] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 208.099817] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 208.099822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 208.099827] R13: 00000000000003bf R14: 00000000004c62b5 R15: 0000000000000006 [ 208.222716] FAULT_INJECTION: forcing a failure. [ 208.222716] name failslab, interval 1, probability 0, space 0, times 0 [ 208.222728] CPU: 1 PID: 12412 Comm: syz-executor.5 Not tainted 4.14.173-syzkaller #0 [ 208.222735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 208.222738] Call Trace: [ 208.222754] dump_stack+0x13e/0x194 [ 208.222770] should_fail.cold+0x10a/0x14b [ 208.222796] should_failslab+0xd6/0x130 [ 208.222806] kmem_cache_alloc+0x2b5/0x770 [ 208.222818] ? __lock_acquire+0x5f7/0x4620 [ 208.222834] mmu_topup_memory_caches+0x83/0x300 [ 208.222847] kvm_mmu_load+0x1e/0xd00 [ 208.222863] ? kvm_apic_accept_events+0x16f/0x3f0 [ 208.222873] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 208.222888] vcpu_enter_guest+0x2eb9/0x5240 [ 208.222898] ? save_trace+0x290/0x290 [ 208.222907] ? save_trace+0x290/0x290 [ 208.222926] ? emulator_read_emulated+0x40/0x40 [ 208.222936] ? lock_acquire+0x170/0x3f0 [ 208.222946] ? kvm_arch_vcpu_ioctl_run+0x143/0xfd0 [ 208.222961] ? kvm_arch_vcpu_ioctl_run+0x2fe/0xfd0 [ 208.222970] ? kvm_arch_vcpu_ioctl_run+0x181/0xfd0 [ 208.222979] kvm_arch_vcpu_ioctl_run+0x2fe/0xfd0 [ 208.222994] kvm_vcpu_ioctl+0x3df/0xc70 [ 208.223005] ? kvm_vcpu_block+0xb70/0xb70 [ 208.223018] ? trace_hardirqs_on+0x10/0x10 [ 208.223026] ? __lock_is_held+0xad/0x140 [ 208.223038] ? save_trace+0x290/0x290 [ 208.223046] ? SyS_write+0x1b7/0x210 [ 208.223059] ? kvm_vcpu_block+0xb70/0xb70 [ 208.223070] do_vfs_ioctl+0x75a/0xfe0 [ 208.223080] ? selinux_file_mprotect+0x5c0/0x5c0 [ 208.223091] ? ioctl_preallocate+0x1a0/0x1a0 [ 208.223110] ? security_file_ioctl+0x76/0xb0 [ 208.223119] ? security_file_ioctl+0x83/0xb0 [ 208.223131] SyS_ioctl+0x7f/0xb0 [ 208.223139] ? do_vfs_ioctl+0xfe0/0xfe0 [ 208.223151] do_syscall_64+0x1d5/0x640 [ 208.223166] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 208.223173] RIP: 0033:0x45c679 [ 208.223178] RSP: 002b:00007fb8ae493c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 208.223188] RAX: ffffffffffffffda RBX: 00007fb8ae4946d4 RCX: 000000000045c679 03:08:32 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x1) 03:08:32 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(r1) 03:08:32 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, 0x0, 0x0, 0x0) 03:08:32 executing program 5 (fault-call:11 fault-nth:8): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:32 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) [ 208.223193] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 208.223198] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 208.223203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 208.223208] R13: 00000000000003bf R14: 00000000004c62b5 R15: 0000000000000007 03:08:33 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x1) 03:08:33 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, 0x0, 0x0, 0x0) 03:08:33 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) 03:08:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(r1) 03:08:33 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:33 executing program 4: r0 = syz_open_procfs(0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x1) [ 208.871764] FAULT_INJECTION: forcing a failure. [ 208.871764] name failslab, interval 1, probability 0, space 0, times 0 03:08:33 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0) 03:08:33 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(r1) 03:08:33 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) [ 208.989982] CPU: 0 PID: 12426 Comm: syz-executor.5 Not tainted 4.14.173-syzkaller #0 [ 208.997910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 209.007271] Call Trace: [ 209.009874] dump_stack+0x13e/0x194 [ 209.013516] should_fail.cold+0x10a/0x14b [ 209.017673] should_failslab+0xd6/0x130 [ 209.021653] kmem_cache_alloc+0x2b5/0x770 [ 209.025820] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 209.030853] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 209.030869] mmu_topup_memory_caches+0x83/0x300 [ 209.030880] ? retint_kernel+0x2d/0x2d 03:08:33 executing program 5 (fault-call:11 fault-nth:9): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:33 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0) 03:08:33 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, 0x0, 0x0) close(r0) 03:08:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847") r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(r1) [ 209.030891] kvm_mmu_load+0x1e/0xd00 [ 209.030906] ? vcpu_enter_guest+0x1d1d/0x5240 03:08:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847") r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(r1) 03:08:33 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}], 0x3, 0x0) 03:08:33 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, 0x0, 0x0) close(r0) [ 209.030918] vcpu_enter_guest+0x2eb9/0x5240 [ 209.030929] ? save_trace+0x290/0x290 [ 209.030945] ? emulator_read_emulated+0x40/0x40 [ 209.030956] ? lock_acquire+0x170/0x3f0 [ 209.030966] ? kvm_arch_vcpu_ioctl_run+0x143/0xfd0 [ 209.030981] ? kvm_arch_vcpu_ioctl_run+0x2fe/0xfd0 [ 209.030989] ? kvm_arch_vcpu_ioctl_run+0x181/0xfd0 [ 209.030999] kvm_arch_vcpu_ioctl_run+0x2fe/0xfd0 [ 209.031016] kvm_vcpu_ioctl+0x3df/0xc70 [ 209.031027] ? kvm_vcpu_block+0xb70/0xb70 [ 209.031039] ? trace_hardirqs_on+0x10/0x10 [ 209.031049] ? mark_held_locks+0xa6/0xf0 [ 209.031059] ? retint_kernel+0x2d/0x2d [ 209.031068] ? save_trace+0x290/0x290 [ 209.031078] ? trace_hardirqs_on_caller+0x3f6/0x590 [ 209.031088] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 209.031100] ? kvm_vcpu_block+0xb70/0xb70 [ 209.031113] do_vfs_ioctl+0x75a/0xfe0 [ 209.031124] ? selinux_file_mprotect+0x5c0/0x5c0 [ 209.031133] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 209.031144] ? ioctl_preallocate+0x1a0/0x1a0 [ 209.031154] ? check_preemption_disabled+0x35/0x240 [ 209.031163] ? retint_kernel+0x2d/0x2d [ 209.031180] ? security_file_ioctl+0x76/0xb0 [ 209.031189] ? __fget_light+0x199/0x1f0 [ 209.031197] ? security_file_ioctl+0x83/0xb0 [ 209.031207] SyS_ioctl+0x7f/0xb0 [ 209.031216] ? do_vfs_ioctl+0xfe0/0xfe0 [ 209.031225] do_syscall_64+0x1d5/0x640 [ 209.031239] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 209.031246] RIP: 0033:0x45c679 [ 209.031251] RSP: 002b:00007fb8ae493c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 209.031261] RAX: ffffffffffffffda RBX: 00007fb8ae4946d4 RCX: 000000000045c679 [ 209.031267] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 209.031272] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 209.031278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 209.031283] R13: 00000000000003bf R14: 00000000004c62b5 R15: 0000000000000008 [ 209.243332] FAULT_INJECTION: forcing a failure. [ 209.243332] name failslab, interval 1, probability 0, space 0, times 0 [ 209.243344] CPU: 1 PID: 12473 Comm: syz-executor.5 Not tainted 4.14.173-syzkaller #0 [ 209.243350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 209.243354] Call Trace: [ 209.243371] dump_stack+0x13e/0x194 [ 209.243387] should_fail.cold+0x10a/0x14b [ 209.243402] should_failslab+0xd6/0x130 [ 209.243412] kmem_cache_alloc+0x2b5/0x770 [ 209.243425] ? __lock_acquire+0x5f7/0x4620 [ 209.243442] mmu_topup_memory_caches+0x83/0x300 [ 209.243454] kvm_mmu_load+0x1e/0xd00 [ 209.243464] ? kvm_apic_accept_events+0x16f/0x3f0 [ 209.243473] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 209.243488] vcpu_enter_guest+0x2eb9/0x5240 [ 209.243499] ? save_trace+0x290/0x290 [ 209.243508] ? save_trace+0x290/0x290 [ 209.243522] ? emulator_read_emulated+0x40/0x40 [ 209.243533] ? lock_acquire+0x170/0x3f0 [ 209.243542] ? kvm_arch_vcpu_ioctl_run+0x143/0xfd0 [ 209.243557] ? kvm_arch_vcpu_ioctl_run+0x2fe/0xfd0 [ 209.243564] ? kvm_arch_vcpu_ioctl_run+0x181/0xfd0 [ 209.243574] kvm_arch_vcpu_ioctl_run+0x2fe/0xfd0 [ 209.243589] kvm_vcpu_ioctl+0x3df/0xc70 [ 209.243600] ? kvm_vcpu_block+0xb70/0xb70 [ 209.243613] ? trace_hardirqs_on+0x10/0x10 [ 209.243622] ? __lock_is_held+0xad/0x140 [ 209.243634] ? save_trace+0x290/0x290 [ 209.243643] ? SyS_write+0x1b7/0x210 [ 209.243656] ? kvm_vcpu_block+0xb70/0xb70 [ 209.243668] do_vfs_ioctl+0x75a/0xfe0 [ 209.243679] ? selinux_file_mprotect+0x5c0/0x5c0 [ 209.243691] ? ioctl_preallocate+0x1a0/0x1a0 [ 209.243710] ? security_file_ioctl+0x76/0xb0 [ 209.243720] ? security_file_ioctl+0x83/0xb0 [ 209.243732] SyS_ioctl+0x7f/0xb0 [ 209.243741] ? do_vfs_ioctl+0xfe0/0xfe0 [ 209.243753] do_syscall_64+0x1d5/0x640 [ 209.243769] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 209.243777] RIP: 0033:0x45c679 [ 209.243783] RSP: 002b:00007fb8ae493c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 209.243793] RAX: ffffffffffffffda RBX: 00007fb8ae4946d4 RCX: 000000000045c679 [ 209.243798] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 03:08:33 executing program 4: r0 = syz_open_procfs(0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x1) 03:08:33 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, 0x0, 0x0) close(r0) 03:08:33 executing program 5 (fault-call:11 fault-nth:10): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:33 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}, {0x0}], 0x4, 0x0) 03:08:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847") r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(r1) 03:08:34 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) [ 209.243804] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 209.243809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 209.243815] R13: 00000000000003bf R14: 00000000004c62b5 R15: 0000000000000009 03:08:34 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}, {0x0}], 0x4, 0x0) 03:08:34 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(0xffffffffffffffff) 03:08:34 executing program 4: r0 = syz_open_procfs(0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x1) 03:08:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(r1) 03:08:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)) r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(r1) 03:08:34 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x1) [ 209.874485] FAULT_INJECTION: forcing a failure. [ 209.874485] name failslab, interval 1, probability 0, space 0, times 0 03:08:34 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(0xffffffffffffffff) 03:08:34 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) [ 209.964571] CPU: 0 PID: 12499 Comm: syz-executor.5 Not tainted 4.14.173-syzkaller #0 [ 209.972498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 209.981856] Call Trace: [ 209.984449] dump_stack+0x13e/0x194 [ 209.988108] should_fail.cold+0x10a/0x14b [ 209.988126] should_failslab+0xd6/0x130 [ 209.988137] kmem_cache_alloc+0x2b5/0x770 [ 209.988151] ? __lock_acquire+0x5f7/0x4620 [ 209.988166] mmu_topup_memory_caches+0x83/0x300 [ 209.988179] kvm_mmu_load+0x1e/0xd00 [ 209.988190] ? kvm_apic_accept_events+0x16f/0x3f0 [ 209.988201] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 209.988215] vcpu_enter_guest+0x2eb9/0x5240 [ 209.988226] ? save_trace+0x290/0x290 [ 209.988235] ? save_trace+0x290/0x290 [ 209.988248] ? emulator_read_emulated+0x40/0x40 [ 209.988258] ? lock_acquire+0x170/0x3f0 [ 209.988269] ? kvm_arch_vcpu_ioctl_run+0x143/0xfd0 [ 209.988283] ? kvm_arch_vcpu_ioctl_run+0x2fe/0xfd0 [ 209.988295] ? kvm_arch_vcpu_ioctl_run+0x181/0xfd0 [ 210.057990] kvm_arch_vcpu_ioctl_run+0x2fe/0xfd0 [ 210.058006] kvm_vcpu_ioctl+0x3df/0xc70 [ 210.066726] ? kvm_vcpu_block+0xb70/0xb70 [ 210.070989] ? trace_hardirqs_on+0x10/0x10 [ 210.075226] ? __lock_is_held+0xad/0x140 [ 210.079296] ? save_trace+0x290/0x290 [ 210.083094] ? SyS_write+0x1b7/0x210 [ 210.086812] ? kvm_vcpu_block+0xb70/0xb70 [ 210.090966] do_vfs_ioctl+0x75a/0xfe0 [ 210.094769] ? selinux_file_mprotect+0x5c0/0x5c0 [ 210.099540] ? ioctl_preallocate+0x1a0/0x1a0 [ 210.103960] ? security_file_ioctl+0x76/0xb0 [ 210.108367] ? security_file_ioctl+0x83/0xb0 [ 210.112779] SyS_ioctl+0x7f/0xb0 [ 210.116145] ? do_vfs_ioctl+0xfe0/0xfe0 [ 210.120119] do_syscall_64+0x1d5/0x640 [ 210.124015] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 210.129208] RIP: 0033:0x45c679 [ 210.132393] RSP: 002b:00007fb8ae493c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 210.140108] RAX: ffffffffffffffda RBX: 00007fb8ae4946d4 RCX: 000000000045c679 [ 210.147372] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 210.154625] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 210.161876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 210.169127] R13: 00000000000003bf R14: 00000000004c62b5 R15: 000000000000000a 03:08:34 executing program 5 (fault-call:11 fault-nth:11): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:34 executing program 3 (fault-call:4 fault-nth:0): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 03:08:34 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(0xffffffffffffffff) 03:08:34 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x1) 03:08:34 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}, {0x0}], 0x4, 0x0) 03:08:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(r1) 03:08:34 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x1) 03:08:34 executing program 3: prctl$PR_SET_THP_DISABLE(0x29, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0) r4 = socket$netlink(0x10, 0x3, 0x80000000004) write(r4, &(0x7f0000000040)="2900000014007f00ff000000040860eb01005e9725dede94d00500000e07fff10f7f25ffffff010000", 0x29) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r5, 0x0) ioctl$FS_IOC_GETFSLABEL(r5, 0x81009431, &(0x7f0000000200)) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000300)={'NETMAP\x00'}, &(0x7f0000000340)=0x1e) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r6, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x6]}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x7, 0x0, 0x9]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x6004c804}, 0x8080) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, &(0x7f0000000040)) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) r8 = dup3(r7, r0, 0x0) ioctl$TCXONC(r8, 0x540a, 0x0) ioctl$TCXONC(r8, 0x540a, 0x0) 03:08:34 executing program 1 (fault-call:5 fault-nth:0): r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a0") r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(r1) 03:08:34 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0) [ 210.370784] FAULT_INJECTION: forcing a failure. [ 210.370784] name failslab, interval 1, probability 0, space 0, times 0 [ 210.390942] FAULT_INJECTION: forcing a failure. [ 210.390942] name failslab, interval 1, probability 0, space 0, times 0 [ 210.398636] selinux_nlmsg_perm: 20 callbacks suppressed [ 210.398645] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=39 sclass=netlink_tcpdiag_socket pig=12557 comm=syz-executor.3 03:08:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6(0xa, 0x0, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(r1) [ 210.418837] CPU: 1 PID: 12545 Comm: syz-executor.5 Not tainted 4.14.173-syzkaller #0 [ 210.428021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 210.428025] Call Trace: [ 210.428043] dump_stack+0x13e/0x194 [ 210.428060] should_fail.cold+0x10a/0x14b [ 210.428075] should_failslab+0xd6/0x130 [ 210.428084] kmem_cache_alloc+0x2b5/0x770 [ 210.428097] ? __lock_acquire+0x5f7/0x4620 [ 210.428113] mmu_topup_memory_caches+0x83/0x300 [ 210.428125] kvm_mmu_load+0x1e/0xd00 [ 210.428134] ? kvm_apic_accept_events+0x16f/0x3f0 [ 210.428143] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 210.428158] vcpu_enter_guest+0x2eb9/0x5240 [ 210.428168] ? save_trace+0x290/0x290 [ 210.428177] ? save_trace+0x290/0x290 [ 210.428191] ? emulator_read_emulated+0x40/0x40 [ 210.428201] ? lock_acquire+0x170/0x3f0 [ 210.428211] ? kvm_arch_vcpu_ioctl_run+0x143/0xfd0 [ 210.428225] ? kvm_arch_vcpu_ioctl_run+0x2fe/0xfd0 [ 210.428234] ? kvm_arch_vcpu_ioctl_run+0x181/0xfd0 [ 210.428242] kvm_arch_vcpu_ioctl_run+0x2fe/0xfd0 [ 210.428257] kvm_vcpu_ioctl+0x3df/0xc70 [ 210.428268] ? kvm_vcpu_block+0xb70/0xb70 [ 210.428280] ? trace_hardirqs_on+0x10/0x10 [ 210.428288] ? __lock_is_held+0xad/0x140 [ 210.428300] ? save_trace+0x290/0x290 [ 210.428308] ? SyS_write+0x1b7/0x210 [ 210.428321] ? kvm_vcpu_block+0xb70/0xb70 [ 210.428333] do_vfs_ioctl+0x75a/0xfe0 [ 210.428344] ? selinux_file_mprotect+0x5c0/0x5c0 [ 210.428355] ? ioctl_preallocate+0x1a0/0x1a0 [ 210.428374] ? security_file_ioctl+0x76/0xb0 [ 210.428383] ? security_file_ioctl+0x83/0xb0 [ 210.428395] SyS_ioctl+0x7f/0xb0 [ 210.428403] ? do_vfs_ioctl+0xfe0/0xfe0 [ 210.428414] do_syscall_64+0x1d5/0x640 [ 210.428428] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 210.428436] RIP: 0033:0x45c679 [ 210.428441] RSP: 002b:00007fb8ae493c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 210.428458] RAX: ffffffffffffffda RBX: 00007fb8ae4946d4 RCX: 000000000045c679 [ 210.428464] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 210.428470] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 210.428475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 210.428480] R13: 00000000000003bf R14: 00000000004c62b5 R15: 000000000000000b [ 210.434531] CPU: 1 PID: 12556 Comm: syz-executor.1 Not tainted 4.14.173-syzkaller #0 [ 210.434544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 210.434547] Call Trace: [ 210.434563] dump_stack+0x13e/0x194 [ 210.434584] should_fail.cold+0x10a/0x14b [ 210.434601] should_failslab+0xd6/0x130 [ 210.434614] kmem_cache_alloc_node+0x55/0x7a0 [ 210.434624] ? lock_downgrade+0x6e0/0x6e0 [ 210.434635] ? save_trace+0x290/0x290 [ 210.434649] __alloc_skb+0x9a/0x4c0 [ 210.434659] ? skb_trim+0x160/0x160 [ 210.434668] ? skb_dequeue+0x129/0x180 [ 210.434681] _sctp_make_chunk+0x44/0x250 [ 210.434692] sctp_make_control+0x30/0x150 [ 210.434704] sctp_make_abort_user+0x7b/0x200 [ 210.434713] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 210.434722] ? sctp_make_abort_no_data+0x180/0x180 [ 210.434737] sctp_close+0x220/0x6d0 [ 210.434751] ? fsnotify+0x897/0x1110 [ 210.434760] ? sctp_init_sock+0x1210/0x1210 [ 210.434774] ? lock_acquire+0x170/0x3f0 [ 210.434783] ? ip_mc_drop_socket+0x16/0x220 [ 210.434793] inet_release+0xdf/0x1b0 [ 210.738984] inet6_release+0x4c/0x70 [ 210.738996] __sock_release+0xcd/0x2b0 [ 210.739004] ? __sock_release+0x2b0/0x2b0 [ 210.739010] sock_close+0x15/0x20 03:08:35 executing program 5 (fault-call:11 fault-nth:12): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:35 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0) 03:08:35 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x1) 03:08:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6(0xa, 0x0, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(r1) [ 210.739018] __fput+0x25f/0x790 [ 210.739030] task_work_run+0x113/0x190 [ 210.739042] exit_to_usermode_loop+0x1d6/0x220 [ 210.739051] do_syscall_64+0x4a3/0x640 [ 210.739064] entry_SYSCALL_64_after_hwframe+0x42/0xb7 03:08:35 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0) [ 210.739070] RIP: 0033:0x45c679 [ 210.739074] RSP: 002b:00007efd02334c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 210.739081] RAX: 0000000000000000 RBX: 00007efd023356d4 RCX: 000000000045c679 03:08:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6(0xa, 0x0, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(r1) [ 210.739085] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 210.739089] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 210.739092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 210.739096] R13: 0000000000000076 R14: 0000000000503f92 R15: 0000000000000000 [ 210.883093] FAULT_INJECTION: forcing a failure. [ 210.883093] name failslab, interval 1, probability 0, space 0, times 0 03:08:35 executing program 5 (fault-call:11 fault-nth:13): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 210.883105] CPU: 1 PID: 12581 Comm: syz-executor.5 Not tainted 4.14.173-syzkaller #0 [ 210.883111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 210.883115] Call Trace: [ 210.883128] dump_stack+0x13e/0x194 [ 210.883144] should_fail.cold+0x10a/0x14b [ 210.883160] should_failslab+0xd6/0x130 [ 210.883169] kmem_cache_alloc+0x2b5/0x770 [ 210.883182] ? __lock_acquire+0x5f7/0x4620 [ 210.883211] mmu_topup_memory_caches+0x83/0x300 [ 210.883224] kvm_mmu_load+0x1e/0xd00 [ 210.883233] ? kvm_apic_accept_events+0x16f/0x3f0 [ 210.883242] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 210.883257] vcpu_enter_guest+0x2eb9/0x5240 [ 210.883272] ? save_trace+0x290/0x290 [ 210.883279] ? save_trace+0x290/0x290 [ 210.883290] ? emulator_read_emulated+0x40/0x40 [ 210.883319] ? lock_acquire+0x170/0x3f0 [ 210.883329] ? kvm_arch_vcpu_ioctl_run+0x143/0xfd0 [ 210.883341] ? kvm_arch_vcpu_ioctl_run+0x2fe/0xfd0 [ 210.883348] ? kvm_arch_vcpu_ioctl_run+0x181/0xfd0 [ 210.883356] kvm_arch_vcpu_ioctl_run+0x2fe/0xfd0 [ 210.883372] kvm_vcpu_ioctl+0x3df/0xc70 [ 210.883380] ? kvm_vcpu_block+0xb70/0xb70 [ 210.883389] ? trace_hardirqs_on+0x10/0x10 [ 210.883397] ? __lock_is_held+0xad/0x140 [ 210.883409] ? save_trace+0x290/0x290 [ 210.883417] ? SyS_write+0x1b7/0x210 [ 210.883427] ? kvm_vcpu_block+0xb70/0xb70 [ 210.883436] do_vfs_ioctl+0x75a/0xfe0 [ 210.883446] ? selinux_file_mprotect+0x5c0/0x5c0 [ 210.883458] ? ioctl_preallocate+0x1a0/0x1a0 [ 210.883475] ? security_file_ioctl+0x76/0xb0 [ 210.883484] ? security_file_ioctl+0x83/0xb0 [ 210.883495] SyS_ioctl+0x7f/0xb0 [ 210.883504] ? do_vfs_ioctl+0xfe0/0xfe0 [ 210.883515] do_syscall_64+0x1d5/0x640 [ 210.883531] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 210.883538] RIP: 0033:0x45c679 [ 210.883543] RSP: 002b:00007fb8ae493c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 210.883553] RAX: ffffffffffffffda RBX: 00007fb8ae4946d4 RCX: 000000000045c679 [ 210.883559] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 210.883564] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 210.883570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 210.883575] R13: 00000000000003bf R14: 00000000004c62b5 R15: 000000000000000c [ 211.121743] FAULT_INJECTION: forcing a failure. [ 211.121743] name failslab, interval 1, probability 0, space 0, times 0 [ 211.121761] CPU: 0 PID: 12595 Comm: syz-executor.5 Not tainted 4.14.173-syzkaller #0 [ 211.121767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 211.121771] Call Trace: [ 211.121787] dump_stack+0x13e/0x194 [ 211.121804] should_fail.cold+0x10a/0x14b [ 211.121819] should_failslab+0xd6/0x130 [ 211.121829] kmem_cache_alloc+0x2b5/0x770 [ 211.121842] ? __lock_acquire+0x5f7/0x4620 [ 211.121860] mmu_topup_memory_caches+0x83/0x300 [ 211.121874] kvm_mmu_load+0x1e/0xd00 [ 211.121882] ? kvm_apic_accept_events+0x16f/0x3f0 [ 211.121891] ? kvm_lapic_enable_pv_eoi+0xc0/0xc0 [ 211.121905] vcpu_enter_guest+0x2eb9/0x5240 [ 211.121916] ? save_trace+0x290/0x290 [ 211.304199] ? save_trace+0x290/0x290 [ 211.304217] ? emulator_read_emulated+0x40/0x40 [ 211.312652] ? lock_acquire+0x170/0x3f0 [ 211.316607] ? kvm_arch_vcpu_ioctl_run+0x143/0xfd0 [ 211.321520] ? kvm_arch_vcpu_ioctl_run+0x2fe/0xfd0 [ 211.326426] ? kvm_arch_vcpu_ioctl_run+0x181/0xfd0 [ 211.331333] kvm_arch_vcpu_ioctl_run+0x2fe/0xfd0 [ 211.336076] kvm_vcpu_ioctl+0x3df/0xc70 [ 211.340037] ? kvm_vcpu_block+0xb70/0xb70 [ 211.344167] ? trace_hardirqs_on+0x10/0x10 [ 211.348433] ? __lock_is_held+0xad/0x140 [ 211.352485] ? save_trace+0x290/0x290 [ 211.356264] ? SyS_write+0x1b7/0x210 [ 211.359958] ? kvm_vcpu_block+0xb70/0xb70 [ 211.364088] do_vfs_ioctl+0x75a/0xfe0 [ 211.367868] ? selinux_file_mprotect+0x5c0/0x5c0 [ 211.372606] ? ioctl_preallocate+0x1a0/0x1a0 [ 211.376998] ? security_file_ioctl+0x76/0xb0 [ 211.381392] ? security_file_ioctl+0x83/0xb0 [ 211.385837] SyS_ioctl+0x7f/0xb0 [ 211.389183] ? do_vfs_ioctl+0xfe0/0xfe0 [ 211.393139] do_syscall_64+0x1d5/0x640 [ 211.397010] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 211.402181] RIP: 0033:0x45c679 [ 211.405353] RSP: 002b:00007fb8ae493c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 211.413042] RAX: ffffffffffffffda RBX: 00007fb8ae4946d4 RCX: 000000000045c679 [ 211.420291] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 211.427541] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 211.434832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 211.442207] R13: 00000000000003bf R14: 00000000004c62b5 R15: 000000000000000d 03:08:35 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup2(r3, r2) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x160) ioctl$BLKFLSBUF(r5, 0x1261, &(0x7f00000002c0)=0x5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = dup2(r7, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, 0x0) r9 = socket(0x10, 0x80000, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r9, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$sock_inet_SIOCADDRT(r9, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @remote}, {0x2, 0x4e21, @rand_addr=0x6}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x1e}) r10 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x82, &(0x7f00000001c0)={r11}, 0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r11, 0x6a}, 0x8) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r11, &(0x7f0000000200)=0x4) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f0000000200)={r11, 0x5}, &(0x7f0000000080)=0x8) r12 = dup3(r1, r0, 0x0) ioctl$TCXONC(r12, 0x540a, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000000c0)="c516f06b5b1d224b8f21e783afc5dfeaa5be89cb6c64ca9811194d43fe2eabb606689b958d5596da4c694d9d0b0d83dc0735ca3793439b8f9a6010ce010b2e0ab10b99688e36ea1758ec1ac80fd7688e7b148e08386bc611a74ec4cdf9ca5985be39868c030c69f8b339722419617d3c52f1035666fa12effcbdb40498c82b24aee0c298e5c5c7fccc001486ea5c675689db4cafc2f7cd18d4a42f638dc802a7104b865c118d547142409d0328ca47ff558701", 0xb3, r3}, 0x68) ioctl$TCXONC(r12, 0x540a, 0x0) 03:08:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6(0xa, 0x8000000000001, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(r1) 03:08:35 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {0x0}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0) 03:08:35 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x1) 03:08:35 executing program 1 (fault-call:5 fault-nth:1): r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) [ 211.466846] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=39 sclass=netlink_tcpdiag_socket pig=12561 comm=syz-executor.3 03:08:35 executing program 5 (fault-call:11 fault-nth:14): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6(0xa, 0x8000000000001, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(r1) 03:08:35 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {0x0}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0) [ 211.588548] FAULT_INJECTION: forcing a failure. [ 211.588548] name failslab, interval 1, probability 0, space 0, times 0 [ 211.616116] CPU: 1 PID: 12614 Comm: syz-executor.1 Not tainted 4.14.173-syzkaller #0 [ 211.624036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 211.633382] Call Trace: [ 211.635961] dump_stack+0x13e/0x194 [ 211.639576] should_fail.cold+0x10a/0x14b [ 211.643723] ? kfree_skb+0xb6/0x340 [ 211.647336] should_failslab+0xd6/0x130 [ 211.651293] kmem_cache_alloc_node_trace+0x59/0x7b0 [ 211.656294] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 211.661726] ? __alloc_skb+0x9a/0x4c0 [ 211.665529] __kmalloc_node_track_caller+0x38/0x70 [ 211.670453] __kmalloc_reserve.isra.0+0x35/0xd0 [ 211.675109] __alloc_skb+0xca/0x4c0 [ 211.678720] ? skb_trim+0x160/0x160 [ 211.682332] ? skb_dequeue+0x129/0x180 [ 211.686214] _sctp_make_chunk+0x44/0x250 [ 211.690269] sctp_make_control+0x30/0x150 [ 211.694403] sctp_make_abort_user+0x7b/0x200 [ 211.698796] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 211.703880] ? sctp_make_abort_no_data+0x180/0x180 [ 211.708795] sctp_close+0x220/0x6d0 [ 211.712411] ? fsnotify+0x897/0x1110 [ 211.716105] ? sctp_init_sock+0x1210/0x1210 [ 211.720410] ? lock_acquire+0x170/0x3f0 [ 211.724365] ? ip_mc_drop_socket+0x16/0x220 [ 211.728682] inet_release+0xdf/0x1b0 [ 211.732380] inet6_release+0x4c/0x70 [ 211.736078] __sock_release+0xcd/0x2b0 [ 211.739946] ? __sock_release+0x2b0/0x2b0 [ 211.744086] sock_close+0x15/0x20 [ 211.747519] __fput+0x25f/0x790 [ 211.750787] task_work_run+0x113/0x190 [ 211.754658] exit_to_usermode_loop+0x1d6/0x220 [ 211.759223] do_syscall_64+0x4a3/0x640 [ 211.763097] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 211.768267] RIP: 0033:0x45c679 [ 211.771436] RSP: 002b:00007efd02334c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 211.779137] RAX: 0000000000000000 RBX: 00007efd023356d4 RCX: 000000000045c679 03:08:36 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x1) 03:08:36 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) [ 211.786402] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 211.793658] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 211.800914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 211.808186] R13: 0000000000000076 R14: 0000000000503f92 R15: 0000000000000001 03:08:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6(0xa, 0x8000000000001, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(r1) 03:08:36 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x1) 03:08:36 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {0x0}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0) 03:08:36 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0x0, 0x7, 0x9, 0x9, 0x81, "d93f7a258efccfb8f4fc28c7ea8891425dd6b2", 0x2, 0x367}) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 03:08:36 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x1) 03:08:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(r1) 03:08:36 executing program 1 (fault-call:5 fault-nth:2): r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:36 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0) 03:08:36 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000040)={0x7ff, 0x4, 0x4}) ioctl$TCXONC(r2, 0x540a, 0x0) 03:08:36 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x1) 03:08:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(r1) 03:08:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0xd}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0), r3, 0x1f}}, 0x18) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r4, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:36 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) 03:08:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(r1) 03:08:36 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0) [ 212.216827] FAULT_INJECTION: forcing a failure. [ 212.216827] name failslab, interval 1, probability 0, space 0, times 0 03:08:36 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x63}) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000040)) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) [ 212.275467] CPU: 0 PID: 12670 Comm: syz-executor.1 Not tainted 4.14.173-syzkaller #0 [ 212.283393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 212.292749] Call Trace: [ 212.295350] dump_stack+0x13e/0x194 [ 212.298995] should_fail.cold+0x10a/0x14b [ 212.303159] should_failslab+0xd6/0x130 [ 212.307142] kmem_cache_alloc+0x44/0x770 [ 212.311233] ? __alloc_skb+0x3dc/0x4c0 [ 212.311245] ? skb_trim+0x160/0x160 [ 212.318844] sctp_chunkify+0x46/0x280 [ 212.318854] _sctp_make_chunk+0x13d/0x250 [ 212.326806] sctp_make_control+0x30/0x150 [ 212.326817] sctp_make_abort_user+0x7b/0x200 [ 212.335363] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 212.335373] ? sctp_make_abort_no_data+0x180/0x180 03:08:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(r1) [ 212.335388] sctp_close+0x220/0x6d0 03:08:36 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0) [ 212.335404] ? fsnotify+0x897/0x1110 [ 212.335413] ? sctp_init_sock+0x1210/0x1210 [ 212.335427] ? lock_acquire+0x170/0x3f0 [ 212.335437] ? ip_mc_drop_socket+0x16/0x220 [ 212.335448] inet_release+0xdf/0x1b0 [ 212.335459] inet6_release+0x4c/0x70 03:08:36 executing program 1 (fault-call:5 fault-nth:3): r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(r1) 03:08:36 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {0x0}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0) 03:08:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000140)=0x1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="c800f4b4c130d568a75e1bca4699d4380b10f506f43f4dae5422bdc24fef961811f342c697cdf1f0c8258a8249fcb7461106ba983203d13b68ee16521902e8d93df83371d13f988ad8e901a3c7599c03577c2748098c4a864aef438ef927089234a47fd33301e520e65ac56eec123ecf7ea87a88ddb419aec9acfb05aa823ddf99dcaa36c698922867312d03debcf75fd0862a232774e2491e6080c8a0647d0816c84bc501e487f82deb477c6af5448c010995509c19ccb9e76dc523180c84f34499c689c4a67985eeb81457133d03257bc5417a1ed1000000000000000000000000004a51f2aa5df7965b93f2623da0e1e8fee165796c116204f479a2c551d2330202000000d59dc955c853a7caa4af70ade3aadc439627302d90446d902dfb1b3ee352a3159589f65a390cf7e3fc7b0000703b3d524628efa6a3", @ANYRES16=r4, @ANYBLOB="91d5a0d2f0de706716484edf8dd7dc4eaca61a5cfd1beb8755bf3847b828d44b0e4c5666c499871b0a922b44c9765dec0d35bc6aa8a0f84028c033a619f952ec2a4b409e6c7d6e4b1a04f07edff2bb351d4889cd84de74ae1a80a2024f4855a6a72445d58fb5e757cd43d465b4b2149b40d56ff29e8edeaeb170032655d86e4ea34fa36f35f10e0337dd224ff6a27607f9856cbbbb8344714adf8164398ca7142c006c934291ce82ab12a6d98ff8812b05bc701d348de4803985458bf4b8805f91d27ff3f565191bdb1de252de5a375feb8ffb4b992198efc0e5f7f700a194bb1b5bb64ac5189a17644215f039043fe47da69ea809f55e0b7839355dae201a8539d197b81072b8c5cafc3603c5ec7f40ea01cc104a67dcaaddc0e044f96f8b1f07138a0c05a6bb0b375d028872bd0dd407c50d6363bf82bfc8d626ae45ee9510edb4cce6397d942fb9e58394af262338cf9934fbc5e9b16d097d12c58130faadaab12c8cf3825a465adcbf34e5459d735c1495cf2513b927d0d22353ed9c905b4c0e"], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x40) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcsa\x00', 0x200000, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000240)={0x0, 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000340)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_PID={0x8, 0x52, r6}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0xffffffffffffffff}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = dup2(r8, r7) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, 0x0) ioctl$VIDIOC_DQBUF(r9, 0xc0585611, &(0x7f00000003c0)={0x8, 0x2, 0x4, 0x10, 0xd0, {}, {0x3, 0xe, 0xf8, 0x7, 0x6, 0x20, "0d8854dd"}, 0x7, 0x1, @planes=&(0x7f0000000380)={0xf93b194, 0xed90, @userptr, 0x80000000}, 0x7, 0x0, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000004c0)="66430f380886783f776c66460f3880a2672300008f4878c0850e0000003eb9b50200000f32c441f8533c5e8fc96801890200000066b82b010f00d0dc7002c4624d3f77000f01ca", 0x47}], 0x1, 0x46, 0x0, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 212.335471] __sock_release+0xcd/0x2b0 [ 212.335482] ? __sock_release+0x2b0/0x2b0 [ 212.335490] sock_close+0x15/0x20 [ 212.335499] __fput+0x25f/0x790 03:08:36 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {0x0}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0) [ 212.335515] task_work_run+0x113/0x190 [ 212.335542] exit_to_usermode_loop+0x1d6/0x220 [ 212.335554] do_syscall_64+0x4a3/0x640 [ 212.335567] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 212.335575] RIP: 0033:0x45c679 03:08:36 executing program 1 (fault-call:5 fault-nth:4): r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) [ 212.335579] RSP: 002b:00007efd02334c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 212.335589] RAX: 0000000000000000 RBX: 00007efd023356d4 RCX: 000000000045c679 [ 212.335593] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 212.335598] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 212.335603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 212.335608] R13: 0000000000000076 R14: 0000000000503f92 R15: 0000000000000002 [ 212.594122] FAULT_INJECTION: forcing a failure. [ 212.594122] name failslab, interval 1, probability 0, space 0, times 0 [ 212.594134] CPU: 0 PID: 12703 Comm: syz-executor.1 Not tainted 4.14.173-syzkaller #0 [ 212.594140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 212.594144] Call Trace: [ 212.594160] dump_stack+0x13e/0x194 [ 212.594177] should_fail.cold+0x10a/0x14b [ 212.594192] should_failslab+0xd6/0x130 [ 212.594206] kmem_cache_alloc_node+0x55/0x7a0 [ 212.594216] ? depot_save_stack+0x10d/0x401 [ 212.594235] __alloc_skb+0x9a/0x4c0 [ 212.594246] ? skb_trim+0x160/0x160 [ 212.594254] ? sctp_make_control+0x30/0x150 [ 212.594262] ? sctp_make_abort_user+0x7b/0x200 [ 212.594270] ? sctp_close+0x220/0x6d0 [ 212.594278] ? inet_release+0xdf/0x1b0 [ 212.594286] ? inet6_release+0x4c/0x70 [ 212.594298] sctp_ulpevent_new.constprop.0+0x1f/0x90 [ 212.594308] sctp_ulpevent_make_assoc_change+0x584/0x760 [ 212.594318] ? sctp_outq_tail+0x460/0x630 [ 212.594329] sctp_do_sm+0x14bf/0x4a90 [ 212.594347] ? save_trace+0x290/0x290 [ 212.594359] ? sctp_do_8_2_transport_strike.isra.0+0x860/0x860 [ 212.594371] ? __lock_is_held+0xad/0x140 [ 212.594380] ? sctp_chunkify+0x46/0x280 [ 212.594389] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 212.594399] ? rcu_read_lock_sched_held+0x10a/0x130 [ 212.594408] ? kmem_cache_alloc+0x604/0x770 [ 212.594418] ? __alloc_skb+0x3dc/0x4c0 [ 212.594428] ? skb_trim+0x160/0x160 [ 212.594439] ? sctp_auth_send_cid+0xfd/0x130 [ 212.594454] ? sctp_make_abort_user+0x144/0x200 [ 212.594463] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 212.594476] sctp_primitive_ABORT+0x9b/0xc0 [ 212.594490] sctp_close+0x22e/0x6d0 [ 212.594505] ? fsnotify+0x897/0x1110 [ 212.594515] ? sctp_init_sock+0x1210/0x1210 [ 212.594529] ? lock_acquire+0x170/0x3f0 [ 212.594539] ? ip_mc_drop_socket+0x16/0x220 [ 212.594551] inet_release+0xdf/0x1b0 [ 212.594561] inet6_release+0x4c/0x70 [ 212.594572] __sock_release+0xcd/0x2b0 [ 212.594585] ? __sock_release+0x2b0/0x2b0 [ 212.594593] sock_close+0x15/0x20 [ 212.594602] __fput+0x25f/0x790 [ 212.594619] task_work_run+0x113/0x190 [ 212.594634] exit_to_usermode_loop+0x1d6/0x220 [ 212.594648] do_syscall_64+0x4a3/0x640 [ 212.594663] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 212.594670] RIP: 0033:0x45c679 [ 212.594676] RSP: 002b:00007efd02334c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 212.594686] RAX: 0000000000000000 RBX: 00007efd023356d4 RCX: 000000000045c679 [ 212.594691] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 212.594696] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 212.594702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 212.594707] R13: 0000000000000076 R14: 0000000000503f92 R15: 0000000000000003 [ 212.664721] FAULT_INJECTION: forcing a failure. [ 212.664721] name failslab, interval 1, probability 0, space 0, times 0 [ 212.664733] CPU: 0 PID: 12710 Comm: syz-executor.1 Not tainted 4.14.173-syzkaller #0 [ 212.664738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 212.664742] Call Trace: [ 212.664757] dump_stack+0x13e/0x194 [ 212.664774] should_fail.cold+0x10a/0x14b [ 212.664789] should_failslab+0xd6/0x130 [ 212.664802] kmem_cache_alloc_node+0x55/0x7a0 [ 212.664811] ? depot_save_stack+0x10d/0x401 [ 212.664829] __alloc_skb+0x9a/0x4c0 [ 212.664840] ? skb_trim+0x160/0x160 [ 212.664849] ? sctp_make_control+0x30/0x150 [ 212.664857] ? sctp_make_abort_user+0x7b/0x200 [ 212.664865] ? sctp_close+0x220/0x6d0 [ 212.664873] ? inet_release+0xdf/0x1b0 [ 212.664881] ? inet6_release+0x4c/0x70 [ 212.664893] sctp_ulpevent_new.constprop.0+0x1f/0x90 [ 212.664904] sctp_ulpevent_make_assoc_change+0x584/0x760 [ 212.664914] ? sctp_outq_tail+0x460/0x630 [ 212.664926] sctp_do_sm+0x14bf/0x4a90 [ 212.664945] ? save_trace+0x290/0x290 [ 212.664957] ? sctp_do_8_2_transport_strike.isra.0+0x860/0x860 [ 212.664970] ? __lock_is_held+0xad/0x140 [ 212.664980] ? sctp_chunkify+0x46/0x280 [ 212.664990] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 212.665001] ? rcu_read_lock_sched_held+0x10a/0x130 [ 212.665009] ? kmem_cache_alloc+0x604/0x770 [ 212.665019] ? __alloc_skb+0x3dc/0x4c0 [ 212.665030] ? skb_trim+0x160/0x160 [ 212.665042] ? sctp_auth_send_cid+0xfd/0x130 [ 212.665060] ? sctp_make_abort_user+0x144/0x200 [ 212.665069] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 212.665082] sctp_primitive_ABORT+0x9b/0xc0 [ 212.665095] sctp_close+0x22e/0x6d0 [ 212.665108] ? fsnotify+0x897/0x1110 [ 212.665118] ? sctp_init_sock+0x1210/0x1210 [ 212.665133] ? lock_acquire+0x170/0x3f0 [ 212.665142] ? ip_mc_drop_socket+0x16/0x220 [ 212.665153] inet_release+0xdf/0x1b0 [ 212.665163] inet6_release+0x4c/0x70 [ 212.665174] __sock_release+0xcd/0x2b0 [ 212.665186] ? __sock_release+0x2b0/0x2b0 [ 212.665195] sock_close+0x15/0x20 [ 212.665203] __fput+0x25f/0x790 [ 212.665220] task_work_run+0x113/0x190 [ 212.665236] exit_to_usermode_loop+0x1d6/0x220 [ 212.665249] do_syscall_64+0x4a3/0x640 [ 212.665264] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 212.665272] RIP: 0033:0x45c679 [ 212.665277] RSP: 002b:00007efd02334c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 03:08:37 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) 03:08:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(r1) 03:08:37 executing program 1 (fault-call:5 fault-nth:5): r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:37 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = dup2(r5, r4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, 0x0) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0xffff, 0x800, 0x1f, 0xf}}) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x181001, 0x0) ioctl$TCGETX(r7, 0x5432, &(0x7f0000000080)) ioctl$TCXONC(r2, 0x540a, 0x0) 03:08:37 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {0x0}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0) 03:08:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) ioctl$DRM_IOCTL_GET_MAP(r5, 0xc0286404, &(0x7f0000000140)={&(0x7f0000fef000/0x2000)=nil, 0xe6, 0x4, 0x8, &(0x7f0000058000/0x4000)=nil, 0x800}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r6, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 212.665287] RAX: 0000000000000000 RBX: 00007efd023356d4 RCX: 000000000045c679 [ 212.665292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 212.665298] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 212.665303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 212.665308] R13: 0000000000000076 R14: 0000000000503f92 R15: 0000000000000004 03:08:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(r1) 03:08:37 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) 03:08:37 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0) [ 213.419473] FAULT_INJECTION: forcing a failure. [ 213.419473] name failslab, interval 1, probability 0, space 0, times 0 [ 213.485946] CPU: 0 PID: 12731 Comm: syz-executor.1 Not tainted 4.14.173-syzkaller #0 [ 213.494005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 213.503362] Call Trace: [ 213.505956] dump_stack+0x13e/0x194 [ 213.509598] should_fail.cold+0x10a/0x14b [ 213.513751] should_failslab+0xd6/0x130 [ 213.517732] kmem_cache_alloc_node+0x288/0x7a0 [ 213.522341] __alloc_skb+0x9a/0x4c0 [ 213.522352] ? skb_trim+0x160/0x160 [ 213.522365] ? save_trace+0x290/0x290 03:08:37 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 03:08:37 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0) 03:08:37 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000500)={{}, {0x1, 0x2}, [{}], {}, [{}, {}, {}, {0x8, 0x2}, {0x8, 0x1, r4}, {0x8, 0x6, r4}], {}, {0x20, 0x1}}, 0x5c, 0x0) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x5, 0x0, 0x3, 0xfff, 0x101, 0x1ff, {0x4, 0x0, 0x8, 0x100, 0x4000000, 0x1a, 0xc8b, 0x41, 0x3, 0x0, 0x52ff, r3, r4, 0x9, 0x9}}}, 0x90) r5 = dup3(r1, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) [ 213.533391] sctp_packet_transmit+0x30c/0x2d70 [ 213.537997] ? sctp_packet_config+0x607/0x9f0 [ 213.538015] ? sctp_packet_config+0x9f0/0x9f0 [ 213.546979] ? sctp_packet_transmit_chunk+0x32/0x131 [ 213.552087] sctp_outq_flush+0xc54/0x2dd0 [ 213.556250] ? __sctp_outq_teardown+0xdf0/0xdf0 [ 213.560920] ? find_held_lock+0x2d/0x110 [ 213.564985] ? check_preemption_disabled+0x35/0x240 [ 213.569998] ? lock_downgrade+0x6e0/0x6e0 [ 213.574152] sctp_do_sm+0x372c/0x4a90 [ 213.577957] ? save_trace+0x290/0x290 [ 213.581758] ? sctp_do_8_2_transport_strike.isra.0+0x860/0x860 [ 213.587731] ? __lock_is_held+0xad/0x140 [ 213.591792] ? sctp_chunkify+0x46/0x280 [ 213.595788] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 213.595800] ? rcu_read_lock_sched_held+0x10a/0x130 [ 213.606268] ? kmem_cache_alloc+0x604/0x770 [ 213.606282] ? __alloc_skb+0x3dc/0x4c0 [ 213.614488] ? skb_trim+0x160/0x160 [ 213.614510] ? sctp_make_abort_user+0x144/0x200 [ 213.622882] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 213.622896] sctp_primitive_ABORT+0x9b/0xc0 [ 213.632315] sctp_close+0x22e/0x6d0 03:08:37 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) [ 213.635953] ? fsnotify+0x897/0x1110 [ 213.639680] ? sctp_init_sock+0x1210/0x1210 [ 213.644005] ? lock_acquire+0x170/0x3f0 [ 213.647978] ? ip_mc_drop_socket+0x16/0x220 [ 213.652303] inet_release+0xdf/0x1b0 [ 213.656104] inet6_release+0x4c/0x70 [ 213.659825] __sock_release+0xcd/0x2b0 [ 213.663721] ? __sock_release+0x2b0/0x2b0 [ 213.667865] sock_close+0x15/0x20 [ 213.671317] __fput+0x25f/0x790 [ 213.674602] task_work_run+0x113/0x190 [ 213.678498] exit_to_usermode_loop+0x1d6/0x220 [ 213.683105] do_syscall_64+0x4a3/0x640 03:08:37 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = dup2(r5, r4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)=0x0) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r9, 0xfffffffc) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x2000, 0x0) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r13 = dup2(r12, r11) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r13, 0xc08c5332, 0x0) r14 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r14, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r14, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r14, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r14, 0x0) r15 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r15, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r15, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r15, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r15, 0x0) r16 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001640)='/dev/sequencer\x00', 0x12800, 0x0) r17 = openat$zero(0xffffffffffffff9c, &(0x7f0000001740)='/dev/zero\x00', 0x201, 0x0) io_submit(r8, 0x6, &(0x7f00000017c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x9, r9, &(0x7f0000000180)="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", 0xfd, 0x80, 0x0, 0x1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2, 0x9, r2, &(0x7f00000002c0)="4c4301c686fe3dce53fc126443ca5532e8fa6d60b3a0725cd9a03fc0d66c5086b946d705ef01b9cb7bf2d21687f23687f99646fb06afcbe29031c9047298dba8f03dbfe2b8aaec7195c6b1e97d4d06bd9cc171b532c57fdcb1ea43668e99763648e966a521099144ec53261a41fcdf5566b8c91f76d1e9dfd56d8ae2eb85096daa20040e69868a8990371b33", 0x8c, 0x10000, 0x0, 0x2, r10}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x3, r5, &(0x7f0000000400)="c7a7a4d8262bf5d1a3baab5caee48776e84d6314fc107b9cc76655a2d949174679b39613a747303e39a6ade484dc48266c1d50c8a8b94cd40b82d26b2165aafaab61d056c4365188e19c5f6fb4546996522dfc603a41115d0fb337da93337389399b109a08330cab75e47674e30f7042019d1efaa0180e52c592b7784d9ab48f3c99b7f23b4ecd8d069b4d1ec8ee1fbc4fc3ddbd4ae21325efb7f1fc38ac2d743b46708c9fd84e897edb9518e6ea54deb414363c05f51c0a76977016a17aca59fddb4083da028cd36fe6ea717ed577969fe452b3d658d7a6785660574f9aeb9e67e18bf1e52e34296b", 0xe9, 0x5493, 0x0, 0x0, r13}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x7, r14, &(0x7f0000000540)="546e3264a124cfd6b20a91a48e01d556e60c79bd6cf2a9eb50c0d3e01dd4c5400fe32ef675458159b721e38d5adb08f6cc96fd3350d6cafd9b527dc74102e8495373fb20bc91217e2ac449c78bab5f0fa5e7081e4562adc485c32ff9dc1ba882a8220ed73e064a18ba551be05ccfe5a403e10f036baf67aec77cfbde8adbd57147d4e95f0cdbb8f1beb5e0c9", 0x8c, 0x401}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x1, 0x4, r15, &(0x7f0000000640)="84e0adba44c384f66b8d96a006060836242f7330be3adf471846d54a03ac0a2767ef9aa2301932ecc3732e751854ef5bc4c0258d13fd044dc2ee5faed18f0ec86e6ec08106a5d069278bde307f6105ad7518bc26afc857b2283027a95ae57ec9639c737ce5f2c958bbbca5e1e08b56a74c22067d84906fb11eeaa7b8f0296ab371abfab941235b5f16440c6db97e8cb0698249e66ef182a1f9223af7bbee87e50755c522184129bc89148cd1fc63e54a8caa488fe60c62071c6c948413b3b198186ffae5da564ed41eb772245ddd6d687d8771e0397483300940d9357e9853d9620514d8f1dcb2a9f8531d4ff5b331ed7c58ae1b621574d86392d8911d0eb79c6f1a71bcfa096e193edad66ded6e912128896ed0068d7ab90f9122999a72e07ee4b06970be6f32aa0685cde5b9f8721beef9c561a9445aa3e858fea8866d5369acb2b13ccb21f4ec1af40b26057f3636bc72d2dd758ba954d09f9a003403728d410c450514462acbfa66520a707d35a4e470fc1a4c30d10d3bce3a5b4ad08367dfd260816e973fa3f3210ab8e78c052765af34ced1f1cdf6a119a60b8ab2dd9cf4a144a8d7026fb60578020463c9624b2ef810c3e4f00c1a157360b24ed034cfc58ad088867130fec32ee7cbf5f474829ee2b241d4cde969e55a27f84123b466dff4bcce230dda4f4684fceb46315373636f0ca280eafb33e7e3ad776e615f5846913c4c20afba9ccea68e6ecde261adc43b0cfba7a10f2ead5247f7752fa476c3bf10a3948c31672b9faf59930b79efa4e5d27eefe1a2c575532182b39dfbeee913ff191686e375cf83ee5a507ae814ec214e1e2b4e70785aae55495a89d2bb17692d17a0f98214e1673fa0063c3a96bdb53d0340f38e4311d0b056b77ba49c937e132c347f1c9481694352af3a2b4728045f747f73e4019253d0dc47f655749626313b74a15af4828049256c906052b4b1c8f3712eb497e72d215ce9e292c6e8a175f5b5ae49c8d7bb54413da57880f2cb075518f5224ee86be7d7f460a8e62d989bf3642f2d00aef1c8e076ced41de829da2abfa6aed472817bb7d9ce175bc9289224e3a9a7854873b4aada53abec028e20235883b7d709622ba1227e7a791cbe21e752f6752de61f76a4d5e29722fd35a0491817bd3aa805d42df1e7e4dcf4b9bec45ba28a9a1892a31635e48b7747972e622e8b5f4607a7140c690817582e5dde48289967af52301c42b8ecaafb44863a33a51bb391a60400d912e6bb1f472625fb72729e94c9dfb66a4f2996929659dfbc718f2305ed7f12c9c003a3d8fad9402b957360fff69d79d55b7d2d11e76803a6c61df62b931c807e29df1da25ef9b7dc3a9cfaaffe3a3792d91e867737e5bcc22587bb859712169e11c10c5752534d76ec5899166ff323ce63fa870d9562666ce43126ce1954fd5293536ac8bf2dd2b22d2e5db34c7485df803c1a4554d9ec7715f0c4bdf8a925027a0e237177d216a69489817a05f02d21959601185bcefff5b43b605b880e17b8c889497716b904c357f26603bfa4f11b5f455b484c015b3eae56d6717ec5091177953cd10883e44e12e9282eed9616e1eecab5db943b5985ea38c81501992891725c626ebb5529cebfd682df30555e94e58cd65f051aa515dc153713e8ea616a074a1880a59573f6435504f288dcd96244a9178ff949f76c7906ecbaad4be7d35e2e39447b1480a4a04832d792d3bd87ba6476da579cfdf7cfc8e00b80ae90ee0d7dba1af54a11f142421b3ceeda64c5d83d09345bb2c7cce9d0592c6940cf6ac5b96f1e33c69ddb0e3f25a84f637969e3f3a61e79872044e0e2c644e16ed06fc1130302e7c9cfa2265fb99b784deb63a7f28f163d7f272f9cb7d769e5edc822813d7c2fb1f7c26324e13b0e4c50ee8d879ca731a1f1e4c36a06c7d8853b5ccbea76a02571df263fe755dc1fe4326fe46523823e6028a73dd1c9c13290193838606943d299b522ab7c6066ae34773efd740a7f5fa35b9f41e57d112be50583507bca69cb19c3de00b767b050a68b01974e93c26018d4f8a282a29c0c9a9ce9426a5b0145ecd7922006e1b53eebc98e9fbf082a7dcab54825c054d9d9dc93acd06e7583bd017d9770696e5da9eb3718e018a4105173d5078381654709bc00a425c87c15030d9cdd5d4049cf50c9e2152be8f2ca5786376d64f9046bb9c5cfe1a3490095051830635ae1da91c47e1800a98d478a3ae7a48cf529e1e450ad8eebfc25b349e26a8af5138736cd475c08bb2c1d094b12921864a7944bb0556349a382e1f165665f73a311f2c7ba134c0b1adc0705bcf4ff5d563b2fac12d5c90a35eaf28994f91176cf3bc65343c723be3acecf62829fa098aad7e7ddbbeebc4c300787bd829619a71ff7344b81d0cfd620e295d612b5cc75018c578ed82e15b09d792d8b64cae4fd230a8cabd08aa3b17ed80d1f369581465d7c58cef7b6d7135b00fc2177e5d3f38307fb43330a2f3a27925d44d588d7a7927385a18245944da1202b3125b6e7e7cc4ad98658d0e59662e8cee00b0f4c050957632c047c9cb0b674592136456c07dc0dac2bdcfd8c83579b07bfdbeda115283323c1e612730f070e2748628084f996ce38451ed32a1254c4392ee8a5943257dfe3e16237872c7381e58d277fd92ff372e6baf3ffb8ddb387768710deee7fb884f3b80c9b811c7adcf00a08a3bece007c9be8478b22b46edcdd81a0d27838a66cf29ebc29b4ebe1bb0c4c92339763fccfb923eb083fabdab7a32fef2388fe6b89fdfb24060b2ba10b5936fb8494f2b4e9e234adbd618594039cafcac4f38b3af4d34ddd61a3dbe9df4151f1d04ba4f1daddbe7d2c2e1611cf0a7b811a40733568850d6e180fb28aa25cc60fef4bb5a74ada36f128d095e5f0b3ed913d8adf8a4eec7592f26dced8cd44cf26f8e7df250f39196bf0462a50757d839f00fbb42c9c618605b8913953c5118a7cdd6a388592a2806bd2498bf020b23799d6558c7d1734804edbd3cf371d404f32f54271909829b2312c1a9d575c73b0e4aeb74693ec765173b9cf9980fd870c8c280f52da995e857c8bb482c608247b44f0484ac4295e7f38f51a0db0939027640a5c6e4c2ea2c0e519327018ffc5575e244bfb0a901a69784f52e32ebba908964e972b105d51b80f70112608a910162bfae2eb2ee395f40976c89670868c31a9db3bc3c7014817150120dda9b942c4f09268f57bd9b798ad3a785e1d998c8c119bc25f6b6ab406de3def309520796f7bdb644d42ffd8b36407d86d0e137b17b8763aade916f9bd0036a3eca6e5ed7b65a73e445b7ede30cf4203a12b4c97f46973f47ebc28df959034f3b8cbb00ae7135484fcab0b3324c5ff20ebac1b52d7ee80bd21d6579d8c50347136b805fd4c5e7ffa4bc9f4c52d2fcedcd012b07eaaf551b593534018524f003c263587bc63f92d3e3886fe5b4497ef9bbc90ee5086fbc9eade19fc6e7d5363086ed2eac278cdf83db44d301005f86d45a5f1fd8cedd738543f6ef14a0d69302c066aa443bae784ce4fb003165d53918d8c02f9b318b9e9c9e267c9ccdd7f2b2a36724d082d032214e22fba9f0441caed0299b505d5f788f665c434fca3a1ece65316c0c87cb099992ee96866d80ce969903bef5675f310ce183624338571c58c6c70abc346dcac0175a2bd64d71fa3128dcce836df4bb04b301f393d5b5cfd59157036c8190fa9e72ae741354daea0e77e5b28771ad65e0a2b468641254c969405db5f09e41579604770c3cd307ebd024a04fcd52344465e205a020d301e75f82d468f341dabf105e22fb5c61d0be03990ec461239406365c3ca287ec617e17b8bdc4326ea5c515667f64d7cbd5826323f8c123af46e0f6acd4c76e34231120b9c0265ad709b8e7ee72be443bec639c9ac03f2b0cfe3f7d7a9e90e8992e8071354942774f80802348e0bc54904d29939dbc903756c3860906010d17a851e733a05015e0d64f9438300f5de9e74f2f3d0140ec0c95eca47c5aa8c3a2175491e1072394c058270d5fbfcfccc193cfc395bfcf3fddc6c21176fc876ead479d84080bc460fac2772b4a6c609d6d2ea96d55c76aefdc3dab5d20952959c47138b9dd07d9ed597f3f63aac4c2b1f39a52c2503a2185777c15a4f26495e6a81cd6721a9a930f1773bcb828bba9f3933dc732217247add849d919f6fc10a0f4b5751fe990540f62d258ec46011cefd4c44c537cc27a62e1b146b1a732cbe93d9cdf1c95deb458a5f9973695a33c112a412100de21d4d800fa3c25121d227433793be035ffe34c056a9fd212f5da74453208283c3a442e5ad6fc2f2e14d8a7a439c68da080bc68c7c42657514de9120d672f364192c028d4ce49c4d82f1f140ec08a41ef93ab8527ab1e3999776ada2977406d7aa136bed65bf6c39b863c5c8a99968276fce4afc2be08f36f99e8316ef1543c6421a724ce4a4af68196afb067973d77c287337767a73744f00f2bbfb7554fdf52e0c6cf54a8a03c453e3705ea5aa6bb991744edb9d546e5bc4c906c241a07079af769167d1c2ec17b3aaf3dc948fdacc37885a42f7934778ca5702405cf9f7397df52db810048498f0a797102298da593ca787b013308dcb61e3ef8bc4578af31461e71bada3dfd289b536ce42c288093b29ad829eba94c7345187ee604374f8934b4546f9960d63e5f986260a6a02fe0fa0e869cf0ac0185ad79b07379bc39b1a941e0180ea51cf43615474620785ff011b91b0fee8731b35add635feb3416ecafd2d69225da8ba4280853735807c1a2c3f3adfe66ec1a0c8c4290fcd7c33a10239d2bf6964401f970a70fe9c0e887ecb43797fb1dee733680e49997a6b67a790373301d545bb3af98d2cdc70be720e6768597277ba60ffc04faf899ba1e3c7b685722a48bf6cdd243bb4db3c1ae0f135f5853e8e437692debc80c5c62a653642e6851d1dac6650cb5ff34a54e897c8b61bcac5ab063f31e41bc6d1b54ebddefc55ffff716d80b415bf4d70592b79349d44535f5679266a8c29ee69abb5e49f2db50731202f5a04893f60d345b2410dfed442736c875b6e74b4f7d26ad0a2ce26b6cf047d3b243345196b74d429652086601e7d9af454ac030473f9877315681c4e9ba153c03995ed5df10ec8bdb6a06dffbd83131f7ed818e9c5d858b7043fbf6f24e74fa961a2ee533e6cac36573badc9c54e02ced955fd282b47718f72a2aaced1c5644d2c6a255a4f35a21f8960e24989adb2b8de53b0a72fc45077961d21d355be31e3f418628618592303c8539600819e0ad7f5667ca851a4f180e0230ba74269e23eab8ffcd9c2fa399ea78da9795c009192fb6643865a689e52ddc5d42311144fafca9214557a6b7b21084f534a319c53e0c9457e1c828f11c9a428aa2fab24224290d9157f0583f986811c2787f8fec567a8245b8c7fbdcd3debbe022b8c5277f11f4b150cc4196b4529df76ad66e2340b07851734a52fcc5f1c79826e7bcc217ac6dd6239d3b6bc0f7c5091c9d0395be8876ee6754b51513cb649ecb346b61a218264d29e0fd0435ab613e0a8d8f4f110c2bb7a8a5a76086fd172d0ccca4639549d1db7529c8d4ff68e73bd3c7ecfadd8696118fb8f4ee8e38d545d0fb2ab0a5b7220d435de6444cd92c25c5bb33c2cf384bcdc8c96e5d556a4cb8d68c0ea024bf78c70eda6edb27afeab678427f347ca71149e46733d65a04637c4dd7b31454cccf4f37063cb271160452e2d9589cfb0ae8be2c3df150d5fe8bed5c6757a5cbfbdee", 0x1000, 0x7fff, 0x0, 0x3, r16}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x2, 0x9, r7, &(0x7f00000016c0)="2923263475add84fb5c01c4564a5fe5b4694babed6cdd24648e5520751a37f6ba1afa90698fbf069b6ec11ad47489104934ab41d2e26b23e758ff718c9717aa0e628dccaafac562f164407d5e5fe2f9f6e9058d2ef4a653a8d00a1212b4b2301655eabc259ddd290", 0x68, 0x81, 0x0, 0x2, r17}]) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r3, 0x7, r1, &(0x7f0000000100)={r6, r7, 0x6}) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) [ 213.687015] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 213.692217] RIP: 0033:0x45c679 [ 213.692223] RSP: 002b:00007efd02334c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 213.692233] RAX: 0000000000000000 RBX: 00007efd023356d4 RCX: 000000000045c679 [ 213.692239] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 213.692244] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 03:08:38 executing program 1 (fault-call:5 fault-nth:6): r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(r1) 03:08:38 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x3, 0x0) 03:08:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$HCIINQUIRY(r6, 0x800448f0, &(0x7f0000000180)={0x1, 0x3, "d5d6da", 0xc0, 0xdf}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 213.692248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 213.692252] R13: 0000000000000076 R14: 0000000000503f92 R15: 0000000000000005 [ 213.807754] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 03:08:38 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{0x0}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0) 03:08:38 executing program 1 (fault-call:5 fault-nth:7): r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(r1) [ 213.905264] FAULT_INJECTION: forcing a failure. [ 213.905264] name failslab, interval 1, probability 0, space 0, times 0 [ 213.905274] CPU: 0 PID: 12772 Comm: syz-executor.1 Not tainted 4.14.173-syzkaller #0 [ 213.905279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 03:08:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(r1) 03:08:38 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r1, 0x0) listen(r1, 0x0) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:38 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{0x0}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0) [ 213.905282] Call Trace: [ 213.905299] dump_stack+0x13e/0x194 [ 213.905314] should_fail.cold+0x10a/0x14b [ 213.905345] should_failslab+0xd6/0x130 [ 213.905355] kmem_cache_alloc_node_trace+0x292/0x7b0 [ 213.905366] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 213.905378] ? __alloc_skb+0x9a/0x4c0 [ 213.905389] __kmalloc_node_track_caller+0x38/0x70 [ 213.905400] __kmalloc_reserve.isra.0+0x35/0xd0 [ 213.905413] __alloc_skb+0xca/0x4c0 [ 213.905436] ? skb_trim+0x160/0x160 [ 213.905445] ? save_trace+0x290/0x290 [ 213.905461] sctp_packet_transmit+0x30c/0x2d70 [ 213.905472] ? sctp_packet_config+0x607/0x9f0 [ 213.905491] ? sctp_packet_config+0x9f0/0x9f0 [ 213.905505] ? sctp_packet_transmit_chunk+0x32/0x131 [ 213.905516] sctp_outq_flush+0xc54/0x2dd0 [ 213.905536] ? __sctp_outq_teardown+0xdf0/0xdf0 [ 213.905545] ? find_held_lock+0x2d/0x110 [ 213.905558] ? check_preemption_disabled+0x35/0x240 [ 213.905567] ? lock_downgrade+0x6e0/0x6e0 [ 213.905581] sctp_do_sm+0x372c/0x4a90 [ 213.905595] ? save_trace+0x290/0x290 [ 213.905605] ? sctp_do_8_2_transport_strike.isra.0+0x860/0x860 [ 213.905616] ? __lock_is_held+0xad/0x140 [ 213.905626] ? sctp_chunkify+0x46/0x280 [ 213.905635] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 213.905645] ? rcu_read_lock_sched_held+0x10a/0x130 [ 213.905678] ? kmem_cache_alloc+0x604/0x770 [ 213.905690] ? __alloc_skb+0x3dc/0x4c0 [ 213.905700] ? skb_trim+0x160/0x160 [ 213.905723] ? sctp_make_abort_user+0x144/0x200 [ 213.905734] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 213.905747] sctp_primitive_ABORT+0x9b/0xc0 [ 213.905760] sctp_close+0x22e/0x6d0 [ 213.905780] ? fsnotify+0x897/0x1110 [ 213.905791] ? sctp_init_sock+0x1210/0x1210 [ 213.905803] ? lock_acquire+0x170/0x3f0 [ 213.905812] ? ip_mc_drop_socket+0x16/0x220 [ 213.905828] inet_release+0xdf/0x1b0 [ 213.905839] inet6_release+0x4c/0x70 [ 213.905852] __sock_release+0xcd/0x2b0 [ 213.905865] ? __sock_release+0x2b0/0x2b0 [ 213.905874] sock_close+0x15/0x20 [ 213.905882] __fput+0x25f/0x790 [ 213.905899] task_work_run+0x113/0x190 [ 213.905915] exit_to_usermode_loop+0x1d6/0x220 [ 213.905928] do_syscall_64+0x4a3/0x640 [ 213.905943] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 213.905951] RIP: 0033:0x45c679 [ 213.905956] RSP: 002b:00007efd02334c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 213.905966] RAX: 0000000000000000 RBX: 00007efd023356d4 RCX: 000000000045c679 [ 213.905970] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 03:08:38 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) [ 213.905975] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 213.905981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 213.905986] R13: 0000000000000076 R14: 0000000000503f92 R15: 0000000000000006 [ 214.459294] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 03:08:38 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000000000000004000000000000000b1a81e7ba7c86d6900000000000038000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000063af9705201ca2d96c1d04ab2f346b3ecd8ffbf23c857371000b2a4527be986455"], 0x1d800) close(r0) 03:08:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(r1) 03:08:38 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{0x0}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xef}], 0x4, 0x0) 03:08:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x48302, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000200)=0x1, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000180)={0xfffffff9, 0x7, 0x4, 0x100000, 0x101, {0x77359400}, {0x4, 0xc, 0x8, 0x7f, 0x5, 0x3, "4cb7fbd4"}, 0x400, 0x3, @offset=0x7ff, 0x8, 0x0, r0}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) socket$netlink(0x10, 0x3, 0x12) ioctl$VIDIOC_ENUMAUDOUT(r4, 0xc0345642, &(0x7f00000007c0)={0x20, "c73013b4a707a6e7b4a624d94d75a0f02bb0609605c8e0d09202f2ff74d91e82", 0x1, 0x1}) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x0, 0x0) sendmmsg(r7, &(0x7f0000000780)=[{{&(0x7f00000002c0)=@ethernet={0x306}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000340)="0f9b01f54d28109c50e9869bb181bd1bbdb45f92599320d3b107540c3544742fdada39952a9855ea9fa2e5c50a6d048a305741dba6c56cd21c69bf6fb0adf6b981b4cb9faec49b78fde0710550686aadd8ebf7e937fe0c225530138c1b91971de63dc196c131c74ad906f7e4ce1daa624358626ad6d55e7d9d43356c4c965894ad404dc23ec49bab3be2ee1059007b50ba74491f0f6ff5a83c9c976c307b2b623e1ccf2cbb8bdbd4b2a57396", 0xac}], 0x1, &(0x7f0000000440)=[{0xa0, 0x88, 0x9, "c70a580bdc2708cf45f7e0c62f8f909d5c9a3ba879d2ddc9a93c92e4eb8fc893412dc7167f45c1affe4d1611ef80d1d4fe1478d0811af09a488e2cfdd1c00f392a0d286eae990d2fc90f6721e5557ee734d06465b522538f3f89c7e61f2cdd7bf206401ad09f44eb2d84fa61b2ee8ea71b6ba1ab9ded0ce65ea68d2403bcb80ee67598704bdbcc72c62828a8621424"}, {0x48, 0x198, 0x30000, "f7335f1efb6398b07cd94bc5edddf9396dca78df88599fe8d46571ea4eddf7e9b5f3d15306b2b42b5c1494d9768d225d1a923e"}, {0x78, 0xe0, 0x8001, "518a8e102b5a85a293b3140cda87fbd206db85f69554cbbf3be60127f2a45347f2225c381af5e1dd0ab0a396adb568c352e4c0f6a0ffad8247ea6a58b39c93f57cd9b7b2763286e109fde40d0684e0f6f2b2ff28c11dd7e818f0f42ff548048e7d6751d7e3e0"}, {0x80, 0x101, 0xe22, "f8aa71ad58c05d49036b0ac5b5406893fa09d5bf9ce95321490dcf54b8a07d5e57c8856127d4e3320d6146d9d62ed2e03b85e186098db57d275c717fbed41d8dcae25a870369a3932b3e73ea1104e31ad77d9b1f33d5e6e41289f729b00c375721fa60a924a47e49c03368f7fcc359"}, {0x90, 0x102, 0x3, "feffa30d0793294485f14b5e808ef1c23d251ae32b9af9fc0ffa09422f9219c00cf5320a3c26e90cae6e8ff2ef2a0ca9ba1ad5be10ca7731327842dc183b6152e266ee735762170575b68d4d0d85db06d4ca84957edebf95a8457244485b3c7dd43a9fa0214f6bab423d3ddeede525eddd4b7cc0bd21418fc61e"}, {0x78, 0x107, 0x80000001, "f7196a250e068b99679bffff116ac6da4441cca885252842773a9db498f1b31229a33433e2e80a97ed2e78d7dfbbda86d2dd3efc55c68c8906859da0d0a1bc4efebdb777e8c6235d54c21389f67920860b1b72fdc628af0691a0129c197835089fd3e66311b7a320"}, {0x18, 0x19, 0x4, "d0f5981449"}, {0x38, 0x1fd, 0x3, "aa7d7cf28973b9ff65a81978f3367dc58222b8ecb9a8e15ba3f58a04e1f563616045f5dcc0"}], 0x338}}], 0x1, 0x4001) r8 = dup2(r6, r5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r8, 0x54a0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$HCIINQUIRY(r6, 0x800448f0, &(0x7f0000000180)={0x1, 0x3, "d5d6da", 0xc0, 0xdf}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:38 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = dup2(r5, r4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)=0x0) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r9, 0xfffffffc) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x2000, 0x0) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r13 = dup2(r12, r11) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r13, 0xc08c5332, 0x0) r14 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r14, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r14, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r14, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r14, 0x0) r15 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r15, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r15, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r15, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r15, 0x0) r16 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001640)='/dev/sequencer\x00', 0x12800, 0x0) r17 = openat$zero(0xffffffffffffff9c, &(0x7f0000001740)='/dev/zero\x00', 0x201, 0x0) io_submit(r8, 0x6, &(0x7f00000017c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x9, r9, &(0x7f0000000180)="add2a7e279b4a6816a42b7869200eb823b38bd56b7dc2b02155aa45343370c048aa2e67b8abdf869ce0316dcd34c16163b35001177257ac006bc0cb664558ddfd2b426a33ebbdf602e744ac3b3f8140192a868edb3b35e49462b38d2980ecfd6cebe62cf6a3b4503262fc5f47974a1c5978bb1aad4b93348c56dc11a310d3e6b7d11308843ca3e358a058ad1923f651a29e6bf0a8e89d971a7283888cdba8a276182835c172dbdf0ccf679b83282afe5ad515c1c63f697261793b736fe0742d266438c08ad7a58b8314297d73ef95bfb20283cd5070389469fc378f0636fc1189b92afaa2067dc90c0f37234ee0be76daa0157abea759f0a9a7a13843a", 0xfd, 0x80, 0x0, 0x1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2, 0x9, r2, &(0x7f00000002c0)="4c4301c686fe3dce53fc126443ca5532e8fa6d60b3a0725cd9a03fc0d66c5086b946d705ef01b9cb7bf2d21687f23687f99646fb06afcbe29031c9047298dba8f03dbfe2b8aaec7195c6b1e97d4d06bd9cc171b532c57fdcb1ea43668e99763648e966a521099144ec53261a41fcdf5566b8c91f76d1e9dfd56d8ae2eb85096daa20040e69868a8990371b33", 0x8c, 0x10000, 0x0, 0x2, r10}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x3, r5, &(0x7f0000000400)="c7a7a4d8262bf5d1a3baab5caee48776e84d6314fc107b9cc76655a2d949174679b39613a747303e39a6ade484dc48266c1d50c8a8b94cd40b82d26b2165aafaab61d056c4365188e19c5f6fb4546996522dfc603a41115d0fb337da93337389399b109a08330cab75e47674e30f7042019d1efaa0180e52c592b7784d9ab48f3c99b7f23b4ecd8d069b4d1ec8ee1fbc4fc3ddbd4ae21325efb7f1fc38ac2d743b46708c9fd84e897edb9518e6ea54deb414363c05f51c0a76977016a17aca59fddb4083da028cd36fe6ea717ed577969fe452b3d658d7a6785660574f9aeb9e67e18bf1e52e34296b", 0xe9, 0x5493, 0x0, 0x0, r13}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x7, r14, &(0x7f0000000540)="546e3264a124cfd6b20a91a48e01d556e60c79bd6cf2a9eb50c0d3e01dd4c5400fe32ef675458159b721e38d5adb08f6cc96fd3350d6cafd9b527dc74102e8495373fb20bc91217e2ac449c78bab5f0fa5e7081e4562adc485c32ff9dc1ba882a8220ed73e064a18ba551be05ccfe5a403e10f036baf67aec77cfbde8adbd57147d4e95f0cdbb8f1beb5e0c9", 0x8c, 0x401}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x1, 0x4, r15, &(0x7f0000000640)="84e0adba44c384f66b8d96a006060836242f7330be3adf471846d54a03ac0a2767ef9aa2301932ecc3732e751854ef5bc4c0258d13fd044dc2ee5faed18f0ec86e6ec08106a5d069278bde307f6105ad7518bc26afc857b2283027a95ae57ec9639c737ce5f2c958bbbca5e1e08b56a74c22067d84906fb11eeaa7b8f0296ab371abfab941235b5f16440c6db97e8cb0698249e66ef182a1f9223af7bbee87e50755c522184129bc89148cd1fc63e54a8caa488fe60c62071c6c948413b3b198186ffae5da564ed41eb772245ddd6d687d8771e0397483300940d9357e9853d9620514d8f1dcb2a9f8531d4ff5b331ed7c58ae1b621574d86392d8911d0eb79c6f1a71bcfa096e193edad66ded6e912128896ed0068d7ab90f9122999a72e07ee4b06970be6f32aa0685cde5b9f8721beef9c561a9445aa3e858fea8866d5369acb2b13ccb21f4ec1af40b26057f3636bc72d2dd758ba954d09f9a003403728d410c450514462acbfa66520a707d35a4e470fc1a4c30d10d3bce3a5b4ad08367dfd260816e973fa3f3210ab8e78c052765af34ced1f1cdf6a119a60b8ab2dd9cf4a144a8d7026fb60578020463c9624b2ef810c3e4f00c1a157360b24ed034cfc58ad088867130fec32ee7cbf5f474829ee2b241d4cde969e55a27f84123b466dff4bcce230dda4f4684fceb46315373636f0ca280eafb33e7e3ad776e615f5846913c4c20afba9ccea68e6ecde261adc43b0cfba7a10f2ead5247f7752fa476c3bf10a3948c31672b9faf59930b79efa4e5d27eefe1a2c575532182b39dfbeee913ff191686e375cf83ee5a507ae814ec214e1e2b4e70785aae55495a89d2bb17692d17a0f98214e1673fa0063c3a96bdb53d0340f38e4311d0b056b77ba49c937e132c347f1c9481694352af3a2b4728045f747f73e4019253d0dc47f655749626313b74a15af4828049256c906052b4b1c8f3712eb497e72d215ce9e292c6e8a175f5b5ae49c8d7bb54413da57880f2cb075518f5224ee86be7d7f460a8e62d989bf3642f2d00aef1c8e076ced41de829da2abfa6aed472817bb7d9ce175bc9289224e3a9a7854873b4aada53abec028e20235883b7d709622ba1227e7a791cbe21e752f6752de61f76a4d5e29722fd35a0491817bd3aa805d42df1e7e4dcf4b9bec45ba28a9a1892a31635e48b7747972e622e8b5f4607a7140c690817582e5dde48289967af52301c42b8ecaafb44863a33a51bb391a60400d912e6bb1f472625fb72729e94c9dfb66a4f2996929659dfbc718f2305ed7f12c9c003a3d8fad9402b957360fff69d79d55b7d2d11e76803a6c61df62b931c807e29df1da25ef9b7dc3a9cfaaffe3a3792d91e867737e5bcc22587bb859712169e11c10c5752534d76ec5899166ff323ce63fa870d9562666ce43126ce1954fd5293536ac8bf2dd2b22d2e5db34c7485df803c1a4554d9ec7715f0c4bdf8a925027a0e237177d216a69489817a05f02d21959601185bcefff5b43b605b880e17b8c889497716b904c357f26603bfa4f11b5f455b484c015b3eae56d6717ec5091177953cd10883e44e12e9282eed9616e1eecab5db943b5985ea38c81501992891725c626ebb5529cebfd682df30555e94e58cd65f051aa515dc153713e8ea616a074a1880a59573f6435504f288dcd96244a9178ff949f76c7906ecbaad4be7d35e2e39447b1480a4a04832d792d3bd87ba6476da579cfdf7cfc8e00b80ae90ee0d7dba1af54a11f142421b3ceeda64c5d83d09345bb2c7cce9d0592c6940cf6ac5b96f1e33c69ddb0e3f25a84f637969e3f3a61e79872044e0e2c644e16ed06fc1130302e7c9cfa2265fb99b784deb63a7f28f163d7f272f9cb7d769e5edc822813d7c2fb1f7c26324e13b0e4c50ee8d879ca731a1f1e4c36a06c7d8853b5ccbea76a02571df263fe755dc1fe4326fe46523823e6028a73dd1c9c13290193838606943d299b522ab7c6066ae34773efd740a7f5fa35b9f41e57d112be50583507bca69cb19c3de00b767b050a68b01974e93c26018d4f8a282a29c0c9a9ce9426a5b0145ecd7922006e1b53eebc98e9fbf082a7dcab54825c054d9d9dc93acd06e7583bd017d9770696e5da9eb3718e018a4105173d5078381654709bc00a425c87c15030d9cdd5d4049cf50c9e2152be8f2ca5786376d64f9046bb9c5cfe1a3490095051830635ae1da91c47e1800a98d478a3ae7a48cf529e1e450ad8eebfc25b349e26a8af5138736cd475c08bb2c1d094b12921864a7944bb0556349a382e1f165665f73a311f2c7ba134c0b1adc0705bcf4ff5d563b2fac12d5c90a35eaf28994f91176cf3bc65343c723be3acecf62829fa098aad7e7ddbbeebc4c300787bd829619a71ff7344b81d0cfd620e295d612b5cc75018c578ed82e15b09d792d8b64cae4fd230a8cabd08aa3b17ed80d1f369581465d7c58cef7b6d7135b00fc2177e5d3f38307fb43330a2f3a27925d44d588d7a7927385a18245944da1202b3125b6e7e7cc4ad98658d0e59662e8cee00b0f4c050957632c047c9cb0b674592136456c07dc0dac2bdcfd8c83579b07bfdbeda115283323c1e612730f070e2748628084f996ce38451ed32a1254c4392ee8a5943257dfe3e16237872c7381e58d277fd92ff372e6baf3ffb8ddb387768710deee7fb884f3b80c9b811c7adcf00a08a3bece007c9be8478b22b46edcdd81a0d27838a66cf29ebc29b4ebe1bb0c4c92339763fccfb923eb083fabdab7a32fef2388fe6b89fdfb24060b2ba10b5936fb8494f2b4e9e234adbd618594039cafcac4f38b3af4d34ddd61a3dbe9df4151f1d04ba4f1daddbe7d2c2e1611cf0a7b811a40733568850d6e180fb28aa25cc60fef4bb5a74ada36f128d095e5f0b3ed913d8adf8a4eec7592f26dced8cd44cf26f8e7df250f39196bf0462a50757d839f00fbb42c9c618605b8913953c5118a7cdd6a388592a2806bd2498bf020b23799d6558c7d1734804edbd3cf371d404f32f54271909829b2312c1a9d575c73b0e4aeb74693ec765173b9cf9980fd870c8c280f52da995e857c8bb482c608247b44f0484ac4295e7f38f51a0db0939027640a5c6e4c2ea2c0e519327018ffc5575e244bfb0a901a69784f52e32ebba908964e972b105d51b80f70112608a910162bfae2eb2ee395f40976c89670868c31a9db3bc3c7014817150120dda9b942c4f09268f57bd9b798ad3a785e1d998c8c119bc25f6b6ab406de3def309520796f7bdb644d42ffd8b36407d86d0e137b17b8763aade916f9bd0036a3eca6e5ed7b65a73e445b7ede30cf4203a12b4c97f46973f47ebc28df959034f3b8cbb00ae7135484fcab0b3324c5ff20ebac1b52d7ee80bd21d6579d8c50347136b805fd4c5e7ffa4bc9f4c52d2fcedcd012b07eaaf551b593534018524f003c263587bc63f92d3e3886fe5b4497ef9bbc90ee5086fbc9eade19fc6e7d5363086ed2eac278cdf83db44d301005f86d45a5f1fd8cedd738543f6ef14a0d69302c066aa443bae784ce4fb003165d53918d8c02f9b318b9e9c9e267c9ccdd7f2b2a36724d082d032214e22fba9f0441caed0299b505d5f788f665c434fca3a1ece65316c0c87cb099992ee96866d80ce969903bef5675f310ce183624338571c58c6c70abc346dcac0175a2bd64d71fa3128dcce836df4bb04b301f393d5b5cfd59157036c8190fa9e72ae741354daea0e77e5b28771ad65e0a2b468641254c969405db5f09e41579604770c3cd307ebd024a04fcd52344465e205a020d301e75f82d468f341dabf105e22fb5c61d0be03990ec461239406365c3ca287ec617e17b8bdc4326ea5c515667f64d7cbd5826323f8c123af46e0f6acd4c76e34231120b9c0265ad709b8e7ee72be443bec639c9ac03f2b0cfe3f7d7a9e90e8992e8071354942774f80802348e0bc54904d29939dbc903756c3860906010d17a851e733a05015e0d64f9438300f5de9e74f2f3d0140ec0c95eca47c5aa8c3a2175491e1072394c058270d5fbfcfccc193cfc395bfcf3fddc6c21176fc876ead479d84080bc460fac2772b4a6c609d6d2ea96d55c76aefdc3dab5d20952959c47138b9dd07d9ed597f3f63aac4c2b1f39a52c2503a2185777c15a4f26495e6a81cd6721a9a930f1773bcb828bba9f3933dc732217247add849d919f6fc10a0f4b5751fe990540f62d258ec46011cefd4c44c537cc27a62e1b146b1a732cbe93d9cdf1c95deb458a5f9973695a33c112a412100de21d4d800fa3c25121d227433793be035ffe34c056a9fd212f5da74453208283c3a442e5ad6fc2f2e14d8a7a439c68da080bc68c7c42657514de9120d672f364192c028d4ce49c4d82f1f140ec08a41ef93ab8527ab1e3999776ada2977406d7aa136bed65bf6c39b863c5c8a99968276fce4afc2be08f36f99e8316ef1543c6421a724ce4a4af68196afb067973d77c287337767a73744f00f2bbfb7554fdf52e0c6cf54a8a03c453e3705ea5aa6bb991744edb9d546e5bc4c906c241a07079af769167d1c2ec17b3aaf3dc948fdacc37885a42f7934778ca5702405cf9f7397df52db810048498f0a797102298da593ca787b013308dcb61e3ef8bc4578af31461e71bada3dfd289b536ce42c288093b29ad829eba94c7345187ee604374f8934b4546f9960d63e5f986260a6a02fe0fa0e869cf0ac0185ad79b07379bc39b1a941e0180ea51cf43615474620785ff011b91b0fee8731b35add635feb3416ecafd2d69225da8ba4280853735807c1a2c3f3adfe66ec1a0c8c4290fcd7c33a10239d2bf6964401f970a70fe9c0e887ecb43797fb1dee733680e49997a6b67a790373301d545bb3af98d2cdc70be720e6768597277ba60ffc04faf899ba1e3c7b685722a48bf6cdd243bb4db3c1ae0f135f5853e8e437692debc80c5c62a653642e6851d1dac6650cb5ff34a54e897c8b61bcac5ab063f31e41bc6d1b54ebddefc55ffff716d80b415bf4d70592b79349d44535f5679266a8c29ee69abb5e49f2db50731202f5a04893f60d345b2410dfed442736c875b6e74b4f7d26ad0a2ce26b6cf047d3b243345196b74d429652086601e7d9af454ac030473f9877315681c4e9ba153c03995ed5df10ec8bdb6a06dffbd83131f7ed818e9c5d858b7043fbf6f24e74fa961a2ee533e6cac36573badc9c54e02ced955fd282b47718f72a2aaced1c5644d2c6a255a4f35a21f8960e24989adb2b8de53b0a72fc45077961d21d355be31e3f418628618592303c8539600819e0ad7f5667ca851a4f180e0230ba74269e23eab8ffcd9c2fa399ea78da9795c009192fb6643865a689e52ddc5d42311144fafca9214557a6b7b21084f534a319c53e0c9457e1c828f11c9a428aa2fab24224290d9157f0583f986811c2787f8fec567a8245b8c7fbdcd3debbe022b8c5277f11f4b150cc4196b4529df76ad66e2340b07851734a52fcc5f1c79826e7bcc217ac6dd6239d3b6bc0f7c5091c9d0395be8876ee6754b51513cb649ecb346b61a218264d29e0fd0435ab613e0a8d8f4f110c2bb7a8a5a76086fd172d0ccca4639549d1db7529c8d4ff68e73bd3c7ecfadd8696118fb8f4ee8e38d545d0fb2ab0a5b7220d435de6444cd92c25c5bb33c2cf384bcdc8c96e5d556a4cb8d68c0ea024bf78c70eda6edb27afeab678427f347ca71149e46733d65a04637c4dd7b31454cccf4f37063cb271160452e2d9589cfb0ae8be2c3df150d5fe8bed5c6757a5cbfbdee", 0x1000, 0x7fff, 0x0, 0x3, r16}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x2, 0x9, r7, &(0x7f00000016c0)="2923263475add84fb5c01c4564a5fe5b4694babed6cdd24648e5520751a37f6ba1afa90698fbf069b6ec11ad47489104934ab41d2e26b23e758ff718c9717aa0e628dccaafac562f164407d5e5fe2f9f6e9058d2ef4a653a8d00a1212b4b2301655eabc259ddd290", 0x68, 0x81, 0x0, 0x2, r17}]) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r3, 0x7, r1, &(0x7f0000000100)={r6, r7, 0x6}) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 03:08:38 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) write$binfmt_script(r0, &(0x7f0000000900)=ANY=[@ANYRES16=r0, @ANYRESHEX, @ANYRESOCT=r0, @ANYBLOB="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", @ANYRES16=0x0, @ANYRES64=r3, @ANYBLOB="4dd15f1fe3e2793b52ba915c8e42931c7f7d1300d6", @ANYRESHEX], 0x105c) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(r1) 03:08:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, 0x0, 0x0) close(r1) [ 214.722633] audit: type=1400 audit(1583982518.975:48): avc: denied { create } for pid=12814 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_scsitransport_socket permissive=1 03:08:39 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = dup2(r5, r4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)=0x0) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r9, 0xfffffffc) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x2000, 0x0) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r13 = dup2(r12, r11) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r13, 0xc08c5332, 0x0) r14 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r14, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r14, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r14, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r14, 0x0) r15 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r15, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r15, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r15, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r15, 0x0) r16 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001640)='/dev/sequencer\x00', 0x12800, 0x0) r17 = openat$zero(0xffffffffffffff9c, &(0x7f0000001740)='/dev/zero\x00', 0x201, 0x0) io_submit(r8, 0x6, &(0x7f00000017c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x9, r9, &(0x7f0000000180)="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", 0xfd, 0x80, 0x0, 0x1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2, 0x9, r2, &(0x7f00000002c0)="4c4301c686fe3dce53fc126443ca5532e8fa6d60b3a0725cd9a03fc0d66c5086b946d705ef01b9cb7bf2d21687f23687f99646fb06afcbe29031c9047298dba8f03dbfe2b8aaec7195c6b1e97d4d06bd9cc171b532c57fdcb1ea43668e99763648e966a521099144ec53261a41fcdf5566b8c91f76d1e9dfd56d8ae2eb85096daa20040e69868a8990371b33", 0x8c, 0x10000, 0x0, 0x2, r10}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x3, r5, &(0x7f0000000400)="c7a7a4d8262bf5d1a3baab5caee48776e84d6314fc107b9cc76655a2d949174679b39613a747303e39a6ade484dc48266c1d50c8a8b94cd40b82d26b2165aafaab61d056c4365188e19c5f6fb4546996522dfc603a41115d0fb337da93337389399b109a08330cab75e47674e30f7042019d1efaa0180e52c592b7784d9ab48f3c99b7f23b4ecd8d069b4d1ec8ee1fbc4fc3ddbd4ae21325efb7f1fc38ac2d743b46708c9fd84e897edb9518e6ea54deb414363c05f51c0a76977016a17aca59fddb4083da028cd36fe6ea717ed577969fe452b3d658d7a6785660574f9aeb9e67e18bf1e52e34296b", 0xe9, 0x5493, 0x0, 0x0, r13}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x7, r14, &(0x7f0000000540)="546e3264a124cfd6b20a91a48e01d556e60c79bd6cf2a9eb50c0d3e01dd4c5400fe32ef675458159b721e38d5adb08f6cc96fd3350d6cafd9b527dc74102e8495373fb20bc91217e2ac449c78bab5f0fa5e7081e4562adc485c32ff9dc1ba882a8220ed73e064a18ba551be05ccfe5a403e10f036baf67aec77cfbde8adbd57147d4e95f0cdbb8f1beb5e0c9", 0x8c, 0x401}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x1, 0x4, r15, &(0x7f0000000640)="84e0adba44c384f66b8d96a006060836242f7330be3adf471846d54a03ac0a2767ef9aa2301932ecc3732e751854ef5bc4c0258d13fd044dc2ee5faed18f0ec86e6ec08106a5d069278bde307f6105ad7518bc26afc857b2283027a95ae57ec9639c737ce5f2c958bbbca5e1e08b56a74c22067d84906fb11eeaa7b8f0296ab371abfab941235b5f16440c6db97e8cb0698249e66ef182a1f9223af7bbee87e50755c522184129bc89148cd1fc63e54a8caa488fe60c62071c6c948413b3b198186ffae5da564ed41eb772245ddd6d687d8771e0397483300940d9357e9853d9620514d8f1dcb2a9f8531d4ff5b331ed7c58ae1b621574d86392d8911d0eb79c6f1a71bcfa096e193edad66ded6e912128896ed0068d7ab90f9122999a72e07ee4b06970be6f32aa0685cde5b9f8721beef9c561a9445aa3e858fea8866d5369acb2b13ccb21f4ec1af40b26057f3636bc72d2dd758ba954d09f9a003403728d410c450514462acbfa66520a707d35a4e470fc1a4c30d10d3bce3a5b4ad08367dfd260816e973fa3f3210ab8e78c052765af34ced1f1cdf6a119a60b8ab2dd9cf4a144a8d7026fb60578020463c9624b2ef810c3e4f00c1a157360b24ed034cfc58ad088867130fec32ee7cbf5f474829ee2b241d4cde969e55a27f84123b466dff4bcce230dda4f4684fceb46315373636f0ca280eafb33e7e3ad776e615f5846913c4c20afba9ccea68e6ecde261adc43b0cfba7a10f2ead5247f7752fa476c3bf10a3948c31672b9faf59930b79efa4e5d27eefe1a2c575532182b39dfbeee913ff191686e375cf83ee5a507ae814ec214e1e2b4e70785aae55495a89d2bb17692d17a0f98214e1673fa0063c3a96bdb53d0340f38e4311d0b056b77ba49c937e132c347f1c9481694352af3a2b4728045f747f73e4019253d0dc47f655749626313b74a15af4828049256c906052b4b1c8f3712eb497e72d215ce9e292c6e8a175f5b5ae49c8d7bb54413da57880f2cb075518f5224ee86be7d7f460a8e62d989bf3642f2d00aef1c8e076ced41de829da2abfa6aed472817bb7d9ce175bc9289224e3a9a7854873b4aada53abec028e20235883b7d709622ba1227e7a791cbe21e752f6752de61f76a4d5e29722fd35a0491817bd3aa805d42df1e7e4dcf4b9bec45ba28a9a1892a31635e48b7747972e622e8b5f4607a7140c690817582e5dde48289967af52301c42b8ecaafb44863a33a51bb391a60400d912e6bb1f472625fb72729e94c9dfb66a4f2996929659dfbc718f2305ed7f12c9c003a3d8fad9402b957360fff69d79d55b7d2d11e76803a6c61df62b931c807e29df1da25ef9b7dc3a9cfaaffe3a3792d91e867737e5bcc22587bb859712169e11c10c5752534d76ec5899166ff323ce63fa870d9562666ce43126ce1954fd5293536ac8bf2dd2b22d2e5db34c7485df803c1a4554d9ec7715f0c4bdf8a925027a0e237177d216a69489817a05f02d21959601185bcefff5b43b605b880e17b8c889497716b904c357f26603bfa4f11b5f455b484c015b3eae56d6717ec5091177953cd10883e44e12e9282eed9616e1eecab5db943b5985ea38c81501992891725c626ebb5529cebfd682df30555e94e58cd65f051aa515dc153713e8ea616a074a1880a59573f6435504f288dcd96244a9178ff949f76c7906ecbaad4be7d35e2e39447b1480a4a04832d792d3bd87ba6476da579cfdf7cfc8e00b80ae90ee0d7dba1af54a11f142421b3ceeda64c5d83d09345bb2c7cce9d0592c6940cf6ac5b96f1e33c69ddb0e3f25a84f637969e3f3a61e79872044e0e2c644e16ed06fc1130302e7c9cfa2265fb99b784deb63a7f28f163d7f272f9cb7d769e5edc822813d7c2fb1f7c26324e13b0e4c50ee8d879ca731a1f1e4c36a06c7d8853b5ccbea76a02571df263fe755dc1fe4326fe46523823e6028a73dd1c9c13290193838606943d299b522ab7c6066ae34773efd740a7f5fa35b9f41e57d112be50583507bca69cb19c3de00b767b050a68b01974e93c26018d4f8a282a29c0c9a9ce9426a5b0145ecd7922006e1b53eebc98e9fbf082a7dcab54825c054d9d9dc93acd06e7583bd017d9770696e5da9eb3718e018a4105173d5078381654709bc00a425c87c15030d9cdd5d4049cf50c9e2152be8f2ca5786376d64f9046bb9c5cfe1a3490095051830635ae1da91c47e1800a98d478a3ae7a48cf529e1e450ad8eebfc25b349e26a8af5138736cd475c08bb2c1d094b12921864a7944bb0556349a382e1f165665f73a311f2c7ba134c0b1adc0705bcf4ff5d563b2fac12d5c90a35eaf28994f91176cf3bc65343c723be3acecf62829fa098aad7e7ddbbeebc4c300787bd829619a71ff7344b81d0cfd620e295d612b5cc75018c578ed82e15b09d792d8b64cae4fd230a8cabd08aa3b17ed80d1f369581465d7c58cef7b6d7135b00fc2177e5d3f38307fb43330a2f3a27925d44d588d7a7927385a18245944da1202b3125b6e7e7cc4ad98658d0e59662e8cee00b0f4c050957632c047c9cb0b674592136456c07dc0dac2bdcfd8c83579b07bfdbeda115283323c1e612730f070e2748628084f996ce38451ed32a1254c4392ee8a5943257dfe3e16237872c7381e58d277fd92ff372e6baf3ffb8ddb387768710deee7fb884f3b80c9b811c7adcf00a08a3bece007c9be8478b22b46edcdd81a0d27838a66cf29ebc29b4ebe1bb0c4c92339763fccfb923eb083fabdab7a32fef2388fe6b89fdfb24060b2ba10b5936fb8494f2b4e9e234adbd618594039cafcac4f38b3af4d34ddd61a3dbe9df4151f1d04ba4f1daddbe7d2c2e1611cf0a7b811a40733568850d6e180fb28aa25cc60fef4bb5a74ada36f128d095e5f0b3ed913d8adf8a4eec7592f26dced8cd44cf26f8e7df250f39196bf0462a50757d839f00fbb42c9c618605b8913953c5118a7cdd6a388592a2806bd2498bf020b23799d6558c7d1734804edbd3cf371d404f32f54271909829b2312c1a9d575c73b0e4aeb74693ec765173b9cf9980fd870c8c280f52da995e857c8bb482c608247b44f0484ac4295e7f38f51a0db0939027640a5c6e4c2ea2c0e519327018ffc5575e244bfb0a901a69784f52e32ebba908964e972b105d51b80f70112608a910162bfae2eb2ee395f40976c89670868c31a9db3bc3c7014817150120dda9b942c4f09268f57bd9b798ad3a785e1d998c8c119bc25f6b6ab406de3def309520796f7bdb644d42ffd8b36407d86d0e137b17b8763aade916f9bd0036a3eca6e5ed7b65a73e445b7ede30cf4203a12b4c97f46973f47ebc28df959034f3b8cbb00ae7135484fcab0b3324c5ff20ebac1b52d7ee80bd21d6579d8c50347136b805fd4c5e7ffa4bc9f4c52d2fcedcd012b07eaaf551b593534018524f003c263587bc63f92d3e3886fe5b4497ef9bbc90ee5086fbc9eade19fc6e7d5363086ed2eac278cdf83db44d301005f86d45a5f1fd8cedd738543f6ef14a0d69302c066aa443bae784ce4fb003165d53918d8c02f9b318b9e9c9e267c9ccdd7f2b2a36724d082d032214e22fba9f0441caed0299b505d5f788f665c434fca3a1ece65316c0c87cb099992ee96866d80ce969903bef5675f310ce183624338571c58c6c70abc346dcac0175a2bd64d71fa3128dcce836df4bb04b301f393d5b5cfd59157036c8190fa9e72ae741354daea0e77e5b28771ad65e0a2b468641254c969405db5f09e41579604770c3cd307ebd024a04fcd52344465e205a020d301e75f82d468f341dabf105e22fb5c61d0be03990ec461239406365c3ca287ec617e17b8bdc4326ea5c515667f64d7cbd5826323f8c123af46e0f6acd4c76e34231120b9c0265ad709b8e7ee72be443bec639c9ac03f2b0cfe3f7d7a9e90e8992e8071354942774f80802348e0bc54904d29939dbc903756c3860906010d17a851e733a05015e0d64f9438300f5de9e74f2f3d0140ec0c95eca47c5aa8c3a2175491e1072394c058270d5fbfcfccc193cfc395bfcf3fddc6c21176fc876ead479d84080bc460fac2772b4a6c609d6d2ea96d55c76aefdc3dab5d20952959c47138b9dd07d9ed597f3f63aac4c2b1f39a52c2503a2185777c15a4f26495e6a81cd6721a9a930f1773bcb828bba9f3933dc732217247add849d919f6fc10a0f4b5751fe990540f62d258ec46011cefd4c44c537cc27a62e1b146b1a732cbe93d9cdf1c95deb458a5f9973695a33c112a412100de21d4d800fa3c25121d227433793be035ffe34c056a9fd212f5da74453208283c3a442e5ad6fc2f2e14d8a7a439c68da080bc68c7c42657514de9120d672f364192c028d4ce49c4d82f1f140ec08a41ef93ab8527ab1e3999776ada2977406d7aa136bed65bf6c39b863c5c8a99968276fce4afc2be08f36f99e8316ef1543c6421a724ce4a4af68196afb067973d77c287337767a73744f00f2bbfb7554fdf52e0c6cf54a8a03c453e3705ea5aa6bb991744edb9d546e5bc4c906c241a07079af769167d1c2ec17b3aaf3dc948fdacc37885a42f7934778ca5702405cf9f7397df52db810048498f0a797102298da593ca787b013308dcb61e3ef8bc4578af31461e71bada3dfd289b536ce42c288093b29ad829eba94c7345187ee604374f8934b4546f9960d63e5f986260a6a02fe0fa0e869cf0ac0185ad79b07379bc39b1a941e0180ea51cf43615474620785ff011b91b0fee8731b35add635feb3416ecafd2d69225da8ba4280853735807c1a2c3f3adfe66ec1a0c8c4290fcd7c33a10239d2bf6964401f970a70fe9c0e887ecb43797fb1dee733680e49997a6b67a790373301d545bb3af98d2cdc70be720e6768597277ba60ffc04faf899ba1e3c7b685722a48bf6cdd243bb4db3c1ae0f135f5853e8e437692debc80c5c62a653642e6851d1dac6650cb5ff34a54e897c8b61bcac5ab063f31e41bc6d1b54ebddefc55ffff716d80b415bf4d70592b79349d44535f5679266a8c29ee69abb5e49f2db50731202f5a04893f60d345b2410dfed442736c875b6e74b4f7d26ad0a2ce26b6cf047d3b243345196b74d429652086601e7d9af454ac030473f9877315681c4e9ba153c03995ed5df10ec8bdb6a06dffbd83131f7ed818e9c5d858b7043fbf6f24e74fa961a2ee533e6cac36573badc9c54e02ced955fd282b47718f72a2aaced1c5644d2c6a255a4f35a21f8960e24989adb2b8de53b0a72fc45077961d21d355be31e3f418628618592303c8539600819e0ad7f5667ca851a4f180e0230ba74269e23eab8ffcd9c2fa399ea78da9795c009192fb6643865a689e52ddc5d42311144fafca9214557a6b7b21084f534a319c53e0c9457e1c828f11c9a428aa2fab24224290d9157f0583f986811c2787f8fec567a8245b8c7fbdcd3debbe022b8c5277f11f4b150cc4196b4529df76ad66e2340b07851734a52fcc5f1c79826e7bcc217ac6dd6239d3b6bc0f7c5091c9d0395be8876ee6754b51513cb649ecb346b61a218264d29e0fd0435ab613e0a8d8f4f110c2bb7a8a5a76086fd172d0ccca4639549d1db7529c8d4ff68e73bd3c7ecfadd8696118fb8f4ee8e38d545d0fb2ab0a5b7220d435de6444cd92c25c5bb33c2cf384bcdc8c96e5d556a4cb8d68c0ea024bf78c70eda6edb27afeab678427f347ca71149e46733d65a04637c4dd7b31454cccf4f37063cb271160452e2d9589cfb0ae8be2c3df150d5fe8bed5c6757a5cbfbdee", 0x1000, 0x7fff, 0x0, 0x3, r16}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x2, 0x9, r7, &(0x7f00000016c0)="2923263475add84fb5c01c4564a5fe5b4694babed6cdd24648e5520751a37f6ba1afa90698fbf069b6ec11ad47489104934ab41d2e26b23e758ff718c9717aa0e628dccaafac562f164407d5e5fe2f9f6e9058d2ef4a653a8d00a1212b4b2301655eabc259ddd290", 0x68, 0x81, 0x0, 0x2, r17}]) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r3, 0x7, r1, &(0x7f0000000100)={r6, r7, 0x6}) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 03:08:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, 0x0, 0x0) close(r1) [ 214.784112] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 03:08:39 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = dup2(r5, r4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)=0x0) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r9, 0xfffffffc) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x2000, 0x0) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r13 = dup2(r12, r11) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r13, 0xc08c5332, 0x0) r14 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r14, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r14, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r14, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r14, 0x0) r15 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r15, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r15, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r15, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r15, 0x0) r16 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001640)='/dev/sequencer\x00', 0x12800, 0x0) r17 = openat$zero(0xffffffffffffff9c, &(0x7f0000001740)='/dev/zero\x00', 0x201, 0x0) io_submit(r8, 0x6, &(0x7f00000017c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x9, r9, &(0x7f0000000180)="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", 0xfd, 0x80, 0x0, 0x1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2, 0x9, r2, &(0x7f00000002c0)="4c4301c686fe3dce53fc126443ca5532e8fa6d60b3a0725cd9a03fc0d66c5086b946d705ef01b9cb7bf2d21687f23687f99646fb06afcbe29031c9047298dba8f03dbfe2b8aaec7195c6b1e97d4d06bd9cc171b532c57fdcb1ea43668e99763648e966a521099144ec53261a41fcdf5566b8c91f76d1e9dfd56d8ae2eb85096daa20040e69868a8990371b33", 0x8c, 0x10000, 0x0, 0x2, r10}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x3, r5, &(0x7f0000000400)="c7a7a4d8262bf5d1a3baab5caee48776e84d6314fc107b9cc76655a2d949174679b39613a747303e39a6ade484dc48266c1d50c8a8b94cd40b82d26b2165aafaab61d056c4365188e19c5f6fb4546996522dfc603a41115d0fb337da93337389399b109a08330cab75e47674e30f7042019d1efaa0180e52c592b7784d9ab48f3c99b7f23b4ecd8d069b4d1ec8ee1fbc4fc3ddbd4ae21325efb7f1fc38ac2d743b46708c9fd84e897edb9518e6ea54deb414363c05f51c0a76977016a17aca59fddb4083da028cd36fe6ea717ed577969fe452b3d658d7a6785660574f9aeb9e67e18bf1e52e34296b", 0xe9, 0x5493, 0x0, 0x0, r13}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x7, r14, &(0x7f0000000540)="546e3264a124cfd6b20a91a48e01d556e60c79bd6cf2a9eb50c0d3e01dd4c5400fe32ef675458159b721e38d5adb08f6cc96fd3350d6cafd9b527dc74102e8495373fb20bc91217e2ac449c78bab5f0fa5e7081e4562adc485c32ff9dc1ba882a8220ed73e064a18ba551be05ccfe5a403e10f036baf67aec77cfbde8adbd57147d4e95f0cdbb8f1beb5e0c9", 0x8c, 0x401}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x1, 0x4, r15, &(0x7f0000000640)="84e0adba44c384f66b8d96a006060836242f7330be3adf471846d54a03ac0a2767ef9aa2301932ecc3732e751854ef5bc4c0258d13fd044dc2ee5faed18f0ec86e6ec08106a5d069278bde307f6105ad7518bc26afc857b2283027a95ae57ec9639c737ce5f2c958bbbca5e1e08b56a74c22067d84906fb11eeaa7b8f0296ab371abfab941235b5f16440c6db97e8cb0698249e66ef182a1f9223af7bbee87e50755c522184129bc89148cd1fc63e54a8caa488fe60c62071c6c948413b3b198186ffae5da564ed41eb772245ddd6d687d8771e0397483300940d9357e9853d9620514d8f1dcb2a9f8531d4ff5b331ed7c58ae1b621574d86392d8911d0eb79c6f1a71bcfa096e193edad66ded6e912128896ed0068d7ab90f9122999a72e07ee4b06970be6f32aa0685cde5b9f8721beef9c561a9445aa3e858fea8866d5369acb2b13ccb21f4ec1af40b26057f3636bc72d2dd758ba954d09f9a003403728d410c450514462acbfa66520a707d35a4e470fc1a4c30d10d3bce3a5b4ad08367dfd260816e973fa3f3210ab8e78c052765af34ced1f1cdf6a119a60b8ab2dd9cf4a144a8d7026fb60578020463c9624b2ef810c3e4f00c1a157360b24ed034cfc58ad088867130fec32ee7cbf5f474829ee2b241d4cde969e55a27f84123b466dff4bcce230dda4f4684fceb46315373636f0ca280eafb33e7e3ad776e615f5846913c4c20afba9ccea68e6ecde261adc43b0cfba7a10f2ead5247f7752fa476c3bf10a3948c31672b9faf59930b79efa4e5d27eefe1a2c575532182b39dfbeee913ff191686e375cf83ee5a507ae814ec214e1e2b4e70785aae55495a89d2bb17692d17a0f98214e1673fa0063c3a96bdb53d0340f38e4311d0b056b77ba49c937e132c347f1c9481694352af3a2b4728045f747f73e4019253d0dc47f655749626313b74a15af4828049256c906052b4b1c8f3712eb497e72d215ce9e292c6e8a175f5b5ae49c8d7bb54413da57880f2cb075518f5224ee86be7d7f460a8e62d989bf3642f2d00aef1c8e076ced41de829da2abfa6aed472817bb7d9ce175bc9289224e3a9a7854873b4aada53abec028e20235883b7d709622ba1227e7a791cbe21e752f6752de61f76a4d5e29722fd35a0491817bd3aa805d42df1e7e4dcf4b9bec45ba28a9a1892a31635e48b7747972e622e8b5f4607a7140c690817582e5dde48289967af52301c42b8ecaafb44863a33a51bb391a60400d912e6bb1f472625fb72729e94c9dfb66a4f2996929659dfbc718f2305ed7f12c9c003a3d8fad9402b957360fff69d79d55b7d2d11e76803a6c61df62b931c807e29df1da25ef9b7dc3a9cfaaffe3a3792d91e867737e5bcc22587bb859712169e11c10c5752534d76ec5899166ff323ce63fa870d9562666ce43126ce1954fd5293536ac8bf2dd2b22d2e5db34c7485df803c1a4554d9ec7715f0c4bdf8a925027a0e237177d216a69489817a05f02d21959601185bcefff5b43b605b880e17b8c889497716b904c357f26603bfa4f11b5f455b484c015b3eae56d6717ec5091177953cd10883e44e12e9282eed9616e1eecab5db943b5985ea38c81501992891725c626ebb5529cebfd682df30555e94e58cd65f051aa515dc153713e8ea616a074a1880a59573f6435504f288dcd96244a9178ff949f76c7906ecbaad4be7d35e2e39447b1480a4a04832d792d3bd87ba6476da579cfdf7cfc8e00b80ae90ee0d7dba1af54a11f142421b3ceeda64c5d83d09345bb2c7cce9d0592c6940cf6ac5b96f1e33c69ddb0e3f25a84f637969e3f3a61e79872044e0e2c644e16ed06fc1130302e7c9cfa2265fb99b784deb63a7f28f163d7f272f9cb7d769e5edc822813d7c2fb1f7c26324e13b0e4c50ee8d879ca731a1f1e4c36a06c7d8853b5ccbea76a02571df263fe755dc1fe4326fe46523823e6028a73dd1c9c13290193838606943d299b522ab7c6066ae34773efd740a7f5fa35b9f41e57d112be50583507bca69cb19c3de00b767b050a68b01974e93c26018d4f8a282a29c0c9a9ce9426a5b0145ecd7922006e1b53eebc98e9fbf082a7dcab54825c054d9d9dc93acd06e7583bd017d9770696e5da9eb3718e018a4105173d5078381654709bc00a425c87c15030d9cdd5d4049cf50c9e2152be8f2ca5786376d64f9046bb9c5cfe1a3490095051830635ae1da91c47e1800a98d478a3ae7a48cf529e1e450ad8eebfc25b349e26a8af5138736cd475c08bb2c1d094b12921864a7944bb0556349a382e1f165665f73a311f2c7ba134c0b1adc0705bcf4ff5d563b2fac12d5c90a35eaf28994f91176cf3bc65343c723be3acecf62829fa098aad7e7ddbbeebc4c300787bd829619a71ff7344b81d0cfd620e295d612b5cc75018c578ed82e15b09d792d8b64cae4fd230a8cabd08aa3b17ed80d1f369581465d7c58cef7b6d7135b00fc2177e5d3f38307fb43330a2f3a27925d44d588d7a7927385a18245944da1202b3125b6e7e7cc4ad98658d0e59662e8cee00b0f4c050957632c047c9cb0b674592136456c07dc0dac2bdcfd8c83579b07bfdbeda115283323c1e612730f070e2748628084f996ce38451ed32a1254c4392ee8a5943257dfe3e16237872c7381e58d277fd92ff372e6baf3ffb8ddb387768710deee7fb884f3b80c9b811c7adcf00a08a3bece007c9be8478b22b46edcdd81a0d27838a66cf29ebc29b4ebe1bb0c4c92339763fccfb923eb083fabdab7a32fef2388fe6b89fdfb24060b2ba10b5936fb8494f2b4e9e234adbd618594039cafcac4f38b3af4d34ddd61a3dbe9df4151f1d04ba4f1daddbe7d2c2e1611cf0a7b811a40733568850d6e180fb28aa25cc60fef4bb5a74ada36f128d095e5f0b3ed913d8adf8a4eec7592f26dced8cd44cf26f8e7df250f39196bf0462a50757d839f00fbb42c9c618605b8913953c5118a7cdd6a388592a2806bd2498bf020b23799d6558c7d1734804edbd3cf371d404f32f54271909829b2312c1a9d575c73b0e4aeb74693ec765173b9cf9980fd870c8c280f52da995e857c8bb482c608247b44f0484ac4295e7f38f51a0db0939027640a5c6e4c2ea2c0e519327018ffc5575e244bfb0a901a69784f52e32ebba908964e972b105d51b80f70112608a910162bfae2eb2ee395f40976c89670868c31a9db3bc3c7014817150120dda9b942c4f09268f57bd9b798ad3a785e1d998c8c119bc25f6b6ab406de3def309520796f7bdb644d42ffd8b36407d86d0e137b17b8763aade916f9bd0036a3eca6e5ed7b65a73e445b7ede30cf4203a12b4c97f46973f47ebc28df959034f3b8cbb00ae7135484fcab0b3324c5ff20ebac1b52d7ee80bd21d6579d8c50347136b805fd4c5e7ffa4bc9f4c52d2fcedcd012b07eaaf551b593534018524f003c263587bc63f92d3e3886fe5b4497ef9bbc90ee5086fbc9eade19fc6e7d5363086ed2eac278cdf83db44d301005f86d45a5f1fd8cedd738543f6ef14a0d69302c066aa443bae784ce4fb003165d53918d8c02f9b318b9e9c9e267c9ccdd7f2b2a36724d082d032214e22fba9f0441caed0299b505d5f788f665c434fca3a1ece65316c0c87cb099992ee96866d80ce969903bef5675f310ce183624338571c58c6c70abc346dcac0175a2bd64d71fa3128dcce836df4bb04b301f393d5b5cfd59157036c8190fa9e72ae741354daea0e77e5b28771ad65e0a2b468641254c969405db5f09e41579604770c3cd307ebd024a04fcd52344465e205a020d301e75f82d468f341dabf105e22fb5c61d0be03990ec461239406365c3ca287ec617e17b8bdc4326ea5c515667f64d7cbd5826323f8c123af46e0f6acd4c76e34231120b9c0265ad709b8e7ee72be443bec639c9ac03f2b0cfe3f7d7a9e90e8992e8071354942774f80802348e0bc54904d29939dbc903756c3860906010d17a851e733a05015e0d64f9438300f5de9e74f2f3d0140ec0c95eca47c5aa8c3a2175491e1072394c058270d5fbfcfccc193cfc395bfcf3fddc6c21176fc876ead479d84080bc460fac2772b4a6c609d6d2ea96d55c76aefdc3dab5d20952959c47138b9dd07d9ed597f3f63aac4c2b1f39a52c2503a2185777c15a4f26495e6a81cd6721a9a930f1773bcb828bba9f3933dc732217247add849d919f6fc10a0f4b5751fe990540f62d258ec46011cefd4c44c537cc27a62e1b146b1a732cbe93d9cdf1c95deb458a5f9973695a33c112a412100de21d4d800fa3c25121d227433793be035ffe34c056a9fd212f5da74453208283c3a442e5ad6fc2f2e14d8a7a439c68da080bc68c7c42657514de9120d672f364192c028d4ce49c4d82f1f140ec08a41ef93ab8527ab1e3999776ada2977406d7aa136bed65bf6c39b863c5c8a99968276fce4afc2be08f36f99e8316ef1543c6421a724ce4a4af68196afb067973d77c287337767a73744f00f2bbfb7554fdf52e0c6cf54a8a03c453e3705ea5aa6bb991744edb9d546e5bc4c906c241a07079af769167d1c2ec17b3aaf3dc948fdacc37885a42f7934778ca5702405cf9f7397df52db810048498f0a797102298da593ca787b013308dcb61e3ef8bc4578af31461e71bada3dfd289b536ce42c288093b29ad829eba94c7345187ee604374f8934b4546f9960d63e5f986260a6a02fe0fa0e869cf0ac0185ad79b07379bc39b1a941e0180ea51cf43615474620785ff011b91b0fee8731b35add635feb3416ecafd2d69225da8ba4280853735807c1a2c3f3adfe66ec1a0c8c4290fcd7c33a10239d2bf6964401f970a70fe9c0e887ecb43797fb1dee733680e49997a6b67a790373301d545bb3af98d2cdc70be720e6768597277ba60ffc04faf899ba1e3c7b685722a48bf6cdd243bb4db3c1ae0f135f5853e8e437692debc80c5c62a653642e6851d1dac6650cb5ff34a54e897c8b61bcac5ab063f31e41bc6d1b54ebddefc55ffff716d80b415bf4d70592b79349d44535f5679266a8c29ee69abb5e49f2db50731202f5a04893f60d345b2410dfed442736c875b6e74b4f7d26ad0a2ce26b6cf047d3b243345196b74d429652086601e7d9af454ac030473f9877315681c4e9ba153c03995ed5df10ec8bdb6a06dffbd83131f7ed818e9c5d858b7043fbf6f24e74fa961a2ee533e6cac36573badc9c54e02ced955fd282b47718f72a2aaced1c5644d2c6a255a4f35a21f8960e24989adb2b8de53b0a72fc45077961d21d355be31e3f418628618592303c8539600819e0ad7f5667ca851a4f180e0230ba74269e23eab8ffcd9c2fa399ea78da9795c009192fb6643865a689e52ddc5d42311144fafca9214557a6b7b21084f534a319c53e0c9457e1c828f11c9a428aa2fab24224290d9157f0583f986811c2787f8fec567a8245b8c7fbdcd3debbe022b8c5277f11f4b150cc4196b4529df76ad66e2340b07851734a52fcc5f1c79826e7bcc217ac6dd6239d3b6bc0f7c5091c9d0395be8876ee6754b51513cb649ecb346b61a218264d29e0fd0435ab613e0a8d8f4f110c2bb7a8a5a76086fd172d0ccca4639549d1db7529c8d4ff68e73bd3c7ecfadd8696118fb8f4ee8e38d545d0fb2ab0a5b7220d435de6444cd92c25c5bb33c2cf384bcdc8c96e5d556a4cb8d68c0ea024bf78c70eda6edb27afeab678427f347ca71149e46733d65a04637c4dd7b31454cccf4f37063cb271160452e2d9589cfb0ae8be2c3df150d5fe8bed5c6757a5cbfbdee", 0x1000, 0x7fff, 0x0, 0x3, r16}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x2, 0x9, r7, &(0x7f00000016c0)="2923263475add84fb5c01c4564a5fe5b4694babed6cdd24648e5520751a37f6ba1afa90698fbf069b6ec11ad47489104934ab41d2e26b23e758ff718c9717aa0e628dccaafac562f164407d5e5fe2f9f6e9058d2ef4a653a8d00a1212b4b2301655eabc259ddd290", 0x68, 0x81, 0x0, 0x2, r17}]) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r3, 0x7, r1, &(0x7f0000000100)={r6, r7, 0x6}) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 03:08:39 executing program 1: r0 = open(&(0x7f0000000100)='./file0\x00', 0x42c02, 0x0) r1 = getpid() r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) accept4$nfc_llcp(r4, &(0x7f0000000240), &(0x7f00000001c0)=0x60, 0x80000) read$eventfd(r0, &(0x7f0000000180), 0x8) write$cgroup_pid(r0, &(0x7f0000000140)=r1, 0x12) r5 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r5, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1d800) close(r5) 03:08:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, 0x0, 0x0) close(r1) [ 214.874447] audit: type=1400 audit(1583982519.075:49): avc: denied { ioctl } for pid=12814 comm="syz-executor.5" path="socket:[62616]" dev="sockfs" ino=62616 ioctlcmd=0xae80 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_scsitransport_socket permissive=1 03:08:39 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000280)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = dup3(r2, r1, 0x0) r4 = dup(0xffffffffffffffff) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000003a80)={0x10001, 0x4, 0x4, 0x40, 0x19, {0x0, 0x7530}, {0x2, 0x0, 0x0, 0xee, 0xff, 0x6, "ec268949"}, 0x7ff, 0x4, @offset=0x7f, 0x4, 0x0, 0xffffffffffffffff}) ioctl$SIOCX25CALLACCPTAPPRV(r5, 0x89e8) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x84, r6, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_DOMAIN={0x16, 0x1, './cgroup.cpu/syz1\x00'}, @NLBL_MGMT_A_DOMAIN={0x16, 0x1, './cgroup.cpu/syz1\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={[], [], @remote}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x40001) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r6, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x80000001}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x27}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1f}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000200)={0x1, 'ipvlan0\x00', 0x1}, 0x18) 03:08:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) close(r1) [ 214.963117] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 214.991983] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 03:08:39 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r1, 0x0) listen(r1, 0x0) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:39 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = dup2(r5, r4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)=0x0) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r9, 0xfffffffc) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x2000, 0x0) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r13 = dup2(r12, r11) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r13, 0xc08c5332, 0x0) r14 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r14, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r14, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r14, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r14, 0x0) r15 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r15, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r15, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r15, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r15, 0x0) r16 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001640)='/dev/sequencer\x00', 0x12800, 0x0) r17 = openat$zero(0xffffffffffffff9c, &(0x7f0000001740)='/dev/zero\x00', 0x201, 0x0) io_submit(r8, 0x6, &(0x7f00000017c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x9, r9, &(0x7f0000000180)="add2a7e279b4a6816a42b7869200eb823b38bd56b7dc2b02155aa45343370c048aa2e67b8abdf869ce0316dcd34c16163b35001177257ac006bc0cb664558ddfd2b426a33ebbdf602e744ac3b3f8140192a868edb3b35e49462b38d2980ecfd6cebe62cf6a3b4503262fc5f47974a1c5978bb1aad4b93348c56dc11a310d3e6b7d11308843ca3e358a058ad1923f651a29e6bf0a8e89d971a7283888cdba8a276182835c172dbdf0ccf679b83282afe5ad515c1c63f697261793b736fe0742d266438c08ad7a58b8314297d73ef95bfb20283cd5070389469fc378f0636fc1189b92afaa2067dc90c0f37234ee0be76daa0157abea759f0a9a7a13843a", 0xfd, 0x80, 0x0, 0x1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2, 0x9, r2, &(0x7f00000002c0)="4c4301c686fe3dce53fc126443ca5532e8fa6d60b3a0725cd9a03fc0d66c5086b946d705ef01b9cb7bf2d21687f23687f99646fb06afcbe29031c9047298dba8f03dbfe2b8aaec7195c6b1e97d4d06bd9cc171b532c57fdcb1ea43668e99763648e966a521099144ec53261a41fcdf5566b8c91f76d1e9dfd56d8ae2eb85096daa20040e69868a8990371b33", 0x8c, 0x10000, 0x0, 0x2, r10}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x3, r5, &(0x7f0000000400)="c7a7a4d8262bf5d1a3baab5caee48776e84d6314fc107b9cc76655a2d949174679b39613a747303e39a6ade484dc48266c1d50c8a8b94cd40b82d26b2165aafaab61d056c4365188e19c5f6fb4546996522dfc603a41115d0fb337da93337389399b109a08330cab75e47674e30f7042019d1efaa0180e52c592b7784d9ab48f3c99b7f23b4ecd8d069b4d1ec8ee1fbc4fc3ddbd4ae21325efb7f1fc38ac2d743b46708c9fd84e897edb9518e6ea54deb414363c05f51c0a76977016a17aca59fddb4083da028cd36fe6ea717ed577969fe452b3d658d7a6785660574f9aeb9e67e18bf1e52e34296b", 0xe9, 0x5493, 0x0, 0x0, r13}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x7, r14, &(0x7f0000000540)="546e3264a124cfd6b20a91a48e01d556e60c79bd6cf2a9eb50c0d3e01dd4c5400fe32ef675458159b721e38d5adb08f6cc96fd3350d6cafd9b527dc74102e8495373fb20bc91217e2ac449c78bab5f0fa5e7081e4562adc485c32ff9dc1ba882a8220ed73e064a18ba551be05ccfe5a403e10f036baf67aec77cfbde8adbd57147d4e95f0cdbb8f1beb5e0c9", 0x8c, 0x401}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x1, 0x4, r15, &(0x7f0000000640)="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", 0x1000, 0x7fff, 0x0, 0x3, r16}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x2, 0x9, r7, &(0x7f00000016c0)="2923263475add84fb5c01c4564a5fe5b4694babed6cdd24648e5520751a37f6ba1afa90698fbf069b6ec11ad47489104934ab41d2e26b23e758ff718c9717aa0e628dccaafac562f164407d5e5fe2f9f6e9058d2ef4a653a8d00a1212b4b2301655eabc259ddd290", 0x68, 0x81, 0x0, 0x2, r17}]) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r3, 0x7, r1, &(0x7f0000000100)={r6, r7, 0x6}) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 03:08:39 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2201, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x300, 0x70bd2b, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x890}, 0x24000001) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}]}, 0x78) close(r0) 03:08:39 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000040)={'veth0_to_batadv\x00', {0x2, 0x4e21, @remote}}) r3 = dup3(r1, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$TCXONC(r3, 0x540a, 0x1) 03:08:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) close(r1) 03:08:39 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x42c02, 0x0) r1 = getpid() r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) accept4$nfc_llcp(r4, &(0x7f0000000240), &(0x7f00000001c0)=0x60, 0x80000) read$eventfd(r0, &(0x7f0000000180), 0x8) write$cgroup_pid(r0, &(0x7f0000000140)=r1, 0x12) r5 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r5, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1d800) close(r5) [ 215.173934] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 03:08:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r3 = getpgrp(0xffffffffffffffff) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) tgkill(r3, r4, 0x22) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x8}, 0x210}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @loopback}, {0x2, 0x0, 0x0, @dev}, r7}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f00000003c0)={0x7, 0x8, 0xfa00, {r7, 0x1}}, 0x10) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r10 = dup2(r9, r8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) r11 = dup(0xffffffffffffffff) r12 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080)='NLBL_MGMT\x00') r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r14 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r15 = dup2(r14, r13) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r15, 0xc08c5332, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r15, 0x84, 0x16, &(0x7f0000000400)={0x4, [0xd6, 0x0, 0x1, 0xce6]}, &(0x7f0000000440)=0xc) sendmsg$NLBL_MGMT_C_ADD(r11, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x84, r12, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_DOMAIN={0x16, 0x1, './cgroup.cpu/syz1\x00'}, @NLBL_MGMT_A_DOMAIN={0x16, 0x1, './cgroup.cpu/syz1\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={[], [], @remote}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x40001) sendmsg$NLBL_MGMT_C_PROTOCOLS(r10, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r12, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr="953a197105abd05b6460a3ff7f5ed2c3"}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040010}, 0x20000005) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) close(r1) 03:08:39 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x485000, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 03:08:39 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) socket$inet_udp(0x2, 0x2, 0x0) close(r0) 03:08:39 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = dup2(r5, r4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)=0x0) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r9, 0xfffffffc) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x2000, 0x0) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r13 = dup2(r12, r11) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r13, 0xc08c5332, 0x0) r14 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r14, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r14, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r14, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r14, 0x0) r15 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r15, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r15, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r15, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r15, 0x0) r16 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001640)='/dev/sequencer\x00', 0x12800, 0x0) r17 = openat$zero(0xffffffffffffff9c, &(0x7f0000001740)='/dev/zero\x00', 0x201, 0x0) io_submit(r8, 0x6, &(0x7f00000017c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x9, r9, &(0x7f0000000180)="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", 0xfd, 0x80, 0x0, 0x1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2, 0x9, r2, &(0x7f00000002c0)="4c4301c686fe3dce53fc126443ca5532e8fa6d60b3a0725cd9a03fc0d66c5086b946d705ef01b9cb7bf2d21687f23687f99646fb06afcbe29031c9047298dba8f03dbfe2b8aaec7195c6b1e97d4d06bd9cc171b532c57fdcb1ea43668e99763648e966a521099144ec53261a41fcdf5566b8c91f76d1e9dfd56d8ae2eb85096daa20040e69868a8990371b33", 0x8c, 0x10000, 0x0, 0x2, r10}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x3, r5, &(0x7f0000000400)="c7a7a4d8262bf5d1a3baab5caee48776e84d6314fc107b9cc76655a2d949174679b39613a747303e39a6ade484dc48266c1d50c8a8b94cd40b82d26b2165aafaab61d056c4365188e19c5f6fb4546996522dfc603a41115d0fb337da93337389399b109a08330cab75e47674e30f7042019d1efaa0180e52c592b7784d9ab48f3c99b7f23b4ecd8d069b4d1ec8ee1fbc4fc3ddbd4ae21325efb7f1fc38ac2d743b46708c9fd84e897edb9518e6ea54deb414363c05f51c0a76977016a17aca59fddb4083da028cd36fe6ea717ed577969fe452b3d658d7a6785660574f9aeb9e67e18bf1e52e34296b", 0xe9, 0x5493, 0x0, 0x0, r13}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x7, r14, &(0x7f0000000540)="546e3264a124cfd6b20a91a48e01d556e60c79bd6cf2a9eb50c0d3e01dd4c5400fe32ef675458159b721e38d5adb08f6cc96fd3350d6cafd9b527dc74102e8495373fb20bc91217e2ac449c78bab5f0fa5e7081e4562adc485c32ff9dc1ba882a8220ed73e064a18ba551be05ccfe5a403e10f036baf67aec77cfbde8adbd57147d4e95f0cdbb8f1beb5e0c9", 0x8c, 0x401}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x1, 0x4, r15, &(0x7f0000000640)="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", 0x1000, 0x7fff, 0x0, 0x3, r16}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x2, 0x9, r7, &(0x7f00000016c0)="2923263475add84fb5c01c4564a5fe5b4694babed6cdd24648e5520751a37f6ba1afa90698fbf069b6ec11ad47489104934ab41d2e26b23e758ff718c9717aa0e628dccaafac562f164407d5e5fe2f9f6e9058d2ef4a653a8d00a1212b4b2301655eabc259ddd290", 0x68, 0x81, 0x0, 0x2, r17}]) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r3, 0x7, r1, &(0x7f0000000100)={r6, r7, 0x6}) ioctl$TCXONC(r2, 0x540a, 0x0) 03:08:39 executing program 3: syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000080)) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffc, @mcast2, 0xffffffff}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r4, 0x80045700, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(r6, 0x10e, 0x4, &(0x7f00000001c0)=""/180, &(0x7f0000000280)=0xb4) setsockopt$sock_int(r5, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e20, 0x2, @mcast1, 0xd6c}, 0x1c) listen(r5, 0x0) r7 = dup3(r1, r5, 0x80000) ioctl$TCXONC(r7, 0x540a, 0x0) ioctl$TCXONC(r7, 0x540a, 0x0) 03:08:39 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x42c02, 0x0) r1 = getpid() r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) accept4$nfc_llcp(r4, &(0x7f0000000240), &(0x7f00000001c0)=0x60, 0x80000) read$eventfd(r0, &(0x7f0000000180), 0x8) write$cgroup_pid(r0, &(0x7f0000000140)=r1, 0x12) r5 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r5, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1d800) close(r5) 03:08:39 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$inet6_dccp_int(r1, 0x21, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(0xffffffffffffffff) [ 215.409548] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 215.433355] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 03:08:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(0xffffffffffffffff) 03:08:39 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x42c02, 0x0) r1 = getpid() r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) accept4$nfc_llcp(r4, &(0x7f0000000240), &(0x7f00000001c0)=0x60, 0x80000) read$eventfd(r0, &(0x7f0000000180), 0x8) write$cgroup_pid(r0, &(0x7f0000000140)=r1, 0x12) r5 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r5, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1d800) close(r5) [ 215.462539] audit: type=1400 audit(1583982519.715:50): avc: denied { getopt } for pid=12900 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 03:08:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) close(0xffffffffffffffff) 03:08:39 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = dup2(r5, r4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)=0x0) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r9, 0xfffffffc) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x2000, 0x0) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r13 = dup2(r12, r11) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r13, 0xc08c5332, 0x0) r14 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r14, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r14, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r14, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r14, 0x0) r15 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r15, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r15, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r15, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r15, 0x0) r16 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001640)='/dev/sequencer\x00', 0x12800, 0x0) r17 = openat$zero(0xffffffffffffff9c, &(0x7f0000001740)='/dev/zero\x00', 0x201, 0x0) io_submit(r8, 0x6, &(0x7f00000017c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x9, r9, &(0x7f0000000180)="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", 0xfd, 0x80, 0x0, 0x1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2, 0x9, r2, &(0x7f00000002c0)="4c4301c686fe3dce53fc126443ca5532e8fa6d60b3a0725cd9a03fc0d66c5086b946d705ef01b9cb7bf2d21687f23687f99646fb06afcbe29031c9047298dba8f03dbfe2b8aaec7195c6b1e97d4d06bd9cc171b532c57fdcb1ea43668e99763648e966a521099144ec53261a41fcdf5566b8c91f76d1e9dfd56d8ae2eb85096daa20040e69868a8990371b33", 0x8c, 0x10000, 0x0, 0x2, r10}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x3, r5, &(0x7f0000000400)="c7a7a4d8262bf5d1a3baab5caee48776e84d6314fc107b9cc76655a2d949174679b39613a747303e39a6ade484dc48266c1d50c8a8b94cd40b82d26b2165aafaab61d056c4365188e19c5f6fb4546996522dfc603a41115d0fb337da93337389399b109a08330cab75e47674e30f7042019d1efaa0180e52c592b7784d9ab48f3c99b7f23b4ecd8d069b4d1ec8ee1fbc4fc3ddbd4ae21325efb7f1fc38ac2d743b46708c9fd84e897edb9518e6ea54deb414363c05f51c0a76977016a17aca59fddb4083da028cd36fe6ea717ed577969fe452b3d658d7a6785660574f9aeb9e67e18bf1e52e34296b", 0xe9, 0x5493, 0x0, 0x0, r13}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x7, r14, &(0x7f0000000540)="546e3264a124cfd6b20a91a48e01d556e60c79bd6cf2a9eb50c0d3e01dd4c5400fe32ef675458159b721e38d5adb08f6cc96fd3350d6cafd9b527dc74102e8495373fb20bc91217e2ac449c78bab5f0fa5e7081e4562adc485c32ff9dc1ba882a8220ed73e064a18ba551be05ccfe5a403e10f036baf67aec77cfbde8adbd57147d4e95f0cdbb8f1beb5e0c9", 0x8c, 0x401}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x1, 0x4, r15, &(0x7f0000000640)="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", 0x1000, 0x7fff, 0x0, 0x3, r16}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x2, 0x9, r7, &(0x7f00000016c0)="2923263475add84fb5c01c4564a5fe5b4694babed6cdd24648e5520751a37f6ba1afa90698fbf069b6ec11ad47489104934ab41d2e26b23e758ff718c9717aa0e628dccaafac562f164407d5e5fe2f9f6e9058d2ef4a653a8d00a1212b4b2301655eabc259ddd290", 0x68, 0x81, 0x0, 0x2, r17}]) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r3, 0x7, r1, &(0x7f0000000100)={r6, r7, 0x6}) 03:08:39 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x42c02, 0x0) r1 = getpid() r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) accept4$nfc_llcp(r4, &(0x7f0000000240), &(0x7f00000001c0)=0x60, 0x80000) read$eventfd(r0, &(0x7f0000000180), 0x8) write$cgroup_pid(r0, &(0x7f0000000140)=r1, 0x12) r5 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r5, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c460000000000d23abe88778716a5000000000002213fa8a8533d562e00400000000000000000000000000000000000000000003800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008f3e04c344f5caa5f95364aa8552c5ec0ada8e04cfe1fd98773f058a26bcd826ddbf2858dc45955113913c9b2455eddff3b8db666533d45507906b7d2ee3d844a3de973c79573aab2ccbac7795182ea83f346d127e5e0bc6d632cd0b1e7d3c8bbb05dd8816c20c3f592dce491883d6f2f729447e352d2db595e13aa38710222097e75983b84535d8910e0680661d28fb72cdd997cc"], 0x1d800) 03:08:39 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) setsockopt$inet6_buf(r0, 0x29, 0x1c, &(0x7f0000000000)="f34373047beba0e6222ac63483c95b87a99f5184877b14ba17cfe41383fa859b28801099fe3fc6e07a86d57b871fa46c99788dc1fc0ef41c31e5c473d66cde5f21e43fd03caa1c8769d2c4c5362af0aecb5b65f5c9ebdafae41390c6b45fe4137d73687f1cc13a32edc68f4ad64c564f6cbef7f97c739024", 0x78) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x40, 0xfffffffffffffffd, 0x0, 0x0, 0x38, 0x0, 0x2}, [{0x0, 0x20000, 0x0, 0xfff}]}, 0x78) close(r0) 03:08:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = signalfd4(r0, &(0x7f0000000140)={[0x6]}, 0x8, 0x800) finit_module(r2, &(0x7f0000000180)='system!(&],vboxnet0\x00', 0x3) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r4, 0x40c, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x40000, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x100, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000002c0)="66b8ca008ee026460f01c866bad004ed66bad104ece17b66440fd55a00470f07c4e1d85dafbc23000066b86f000f00d8c4c17e129100300000", 0x39}], 0x1, 0x32, &(0x7f0000000340)=[@flags={0x3, 0x200}, @cstype0={0x4, 0x8}], 0x2) 03:08:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000140)=0x1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x40) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcsa\x00', 0x200000, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000240)={0x0, 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000340)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_PID={0x8, 0x52, r6}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0xffffffffffffffff}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = dup2(r8, r7) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, 0x0) ioctl$VIDIOC_DQBUF(r9, 0xc0585611, &(0x7f00000003c0)={0x8, 0x2, 0x4, 0x10, 0xd0, {}, {0x3, 0xe, 0xf8, 0x7, 0x6, 0x20, "0d8854dd"}, 0x7, 0x1, @planes=&(0x7f0000000380)={0xf93b194, 0xed90, @userptr, 0x80000000}, 0x7, 0x0, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000004c0)="66430f380886783f776c66460f3880a2672300008f4878c0850e0000003eb9b50200000f32c441f8533c5e8fc96801890200000066b82b010f00d0dc7002c4624d3f77000f01ca", 0x47}], 0x1, 0x46, 0x0, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 215.718291] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 03:08:40 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xfc0000, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0xd5}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}, 0x78) close(r0) 03:08:40 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x42c02, 0x0) r1 = getpid() r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) accept4$nfc_llcp(r4, &(0x7f0000000240), &(0x7f00000001c0)=0x60, 0x80000) read$eventfd(r0, &(0x7f0000000180), 0x8) write$cgroup_pid(r0, &(0x7f0000000140)=r1, 0x12) r5 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r5, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) 03:08:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)=0x0) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r8, 0xfffffffc) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x2000, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r12 = dup2(r11, r10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r12, 0xc08c5332, 0x0) r13 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r13, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r13, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r13, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r13, 0x0) r14 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r14, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r14, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r14, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r14, 0x0) r15 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001640)='/dev/sequencer\x00', 0x12800, 0x0) r16 = openat$zero(0xffffffffffffff9c, &(0x7f0000001740)='/dev/zero\x00', 0x201, 0x0) io_submit(r7, 0x6, &(0x7f00000017c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x9, r8, &(0x7f0000000180)="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", 0xfd, 0x80, 0x0, 0x1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2, 0x9, r2, &(0x7f00000002c0)="4c4301c686fe3dce53fc126443ca5532e8fa6d60b3a0725cd9a03fc0d66c5086b946d705ef01b9cb7bf2d21687f23687f99646fb06afcbe29031c9047298dba8f03dbfe2b8aaec7195c6b1e97d4d06bd9cc171b532c57fdcb1ea43668e99763648e966a521099144ec53261a41fcdf5566b8c91f76d1e9dfd56d8ae2eb85096daa20040e69868a8990371b33", 0x8c, 0x10000, 0x0, 0x2, r9}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x3, r4, &(0x7f0000000400)="c7a7a4d8262bf5d1a3baab5caee48776e84d6314fc107b9cc76655a2d949174679b39613a747303e39a6ade484dc48266c1d50c8a8b94cd40b82d26b2165aafaab61d056c4365188e19c5f6fb4546996522dfc603a41115d0fb337da93337389399b109a08330cab75e47674e30f7042019d1efaa0180e52c592b7784d9ab48f3c99b7f23b4ecd8d069b4d1ec8ee1fbc4fc3ddbd4ae21325efb7f1fc38ac2d743b46708c9fd84e897edb9518e6ea54deb414363c05f51c0a76977016a17aca59fddb4083da028cd36fe6ea717ed577969fe452b3d658d7a6785660574f9aeb9e67e18bf1e52e34296b", 0xe9, 0x5493, 0x0, 0x0, r12}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x7, r13, &(0x7f0000000540)="546e3264a124cfd6b20a91a48e01d556e60c79bd6cf2a9eb50c0d3e01dd4c5400fe32ef675458159b721e38d5adb08f6cc96fd3350d6cafd9b527dc74102e8495373fb20bc91217e2ac449c78bab5f0fa5e7081e4562adc485c32ff9dc1ba882a8220ed73e064a18ba551be05ccfe5a403e10f036baf67aec77cfbde8adbd57147d4e95f0cdbb8f1beb5e0c9", 0x8c, 0x401}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x1, 0x4, r14, &(0x7f0000000640)="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", 0x1000, 0x7fff, 0x0, 0x3, r15}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x2, 0x9, r6, &(0x7f00000016c0)="2923263475add84fb5c01c4564a5fe5b4694babed6cdd24648e5520751a37f6ba1afa90698fbf069b6ec11ad47489104934ab41d2e26b23e758ff718c9717aa0e628dccaafac562f164407d5e5fe2f9f6e9058d2ef4a653a8d00a1212b4b2301655eabc259ddd290", 0x68, 0x81, 0x0, 0x2, r16}]) 03:08:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:40 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000180)) getsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0xc45, 0x6f, 0x1, 0x5b3}]}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) ioctl$TCXONC(r3, 0x540a, 0x0) 03:08:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000140)=0x1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="c800f4b4c130d568a75e1bca4699d4380b10f506f43f4dae5422bdc24fef961811f342c697cdf1f0c8258a8249fcb7461106ba983203d13b68ee16521902e8d93df83371d13f988ad8e901a3c7599c03577c2748098c4a864aef438ef927089234a47fd33301e520e65ac56eec123ecf7ea87a88ddb419aec9acfb05aa823ddf99dcaa36c698922867312d03debcf75fd0862a232774e2491e6080c8a0647d0816c84bc501e487f82deb477c6af5448c010995509c19ccb9e76dc523180c84f34499c689c4a67985eeb81457133d03257bc5417a1ed1000000000000000000000000004a51f2aa5df7965b93f2623da0e1e8fee165796c116204f479a2c551d2330202000000d59dc955c853a7caa4af70ade3aadc439627302d90446d902dfb1b3ee352a3159589f65a390cf7e3fc7b0000703b3d524628efa6a3", @ANYRES16=r4, @ANYBLOB="91d5a0d2f0de706716484edf8dd7dc4eaca61a5cfd1beb8755bf3847b828d44b0e4c5666c499871b0a922b44c9765dec0d35bc6aa8a0f84028c033a619f952ec2a4b409e6c7d6e4b1a04f07edff2bb351d4889cd84de74ae1a80a2024f4855a6a72445d58fb5e757cd43d465b4b2149b40d56ff29e8edeaeb170032655d86e4ea34fa36f35f10e0337dd224ff6a27607f9856cbbbb8344714adf8164398ca7142c006c934291ce82ab12a6d98ff8812b05bc701d348de4803985458bf4b8805f91d27ff3f565191bdb1de252de5a375feb8ffb4b992198efc0e5f7f700a194bb1b5bb64ac5189a17644215f039043fe47da69ea809f55e0b7839355dae201a8539d197b81072b8c5cafc3603c5ec7f40ea01cc104a67dcaaddc0e044f96f8b1f07138a0c05a6bb0b375d028872bd0dd407c50d6363bf82bfc8d626ae45ee9510edb4cce6397d942fb9e58394af262338cf9934fbc5e9b16d097d12c58130faadaab12c8cf3825a465adcbf34e5459d735c1495cf2513b927d0d22353ed9c905b4c0e"], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x40) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcsa\x00', 0x200000, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000240)={0x0, 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000340)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r4, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_PID={0x8, 0x52, r6}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0xffffffffffffffff}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = dup2(r8, r7) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, 0x0) ioctl$VIDIOC_DQBUF(r9, 0xc0585611, &(0x7f00000003c0)={0x8, 0x2, 0x4, 0x10, 0xd0, {}, {0x3, 0xe, 0xf8, 0x7, 0x6, 0x20, "0d8854dd"}, 0x7, 0x1, @planes=&(0x7f0000000380)={0xf93b194, 0xed90, @userptr, 0x80000000}, 0x7, 0x0, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000004c0)="66430f380886783f776c66460f3880a2672300008f4878c0850e0000003eb9b50200000f32c441f8533c5e8fc96801890200000066b82b010f00d0dc7002c4624d3f77000f01ca", 0x47}], 0x1, 0x46, 0x0, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 216.208274] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 03:08:40 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xa, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x60}}, 0x0) sendto(r0, &(0x7f0000000000)="a908708a3400f2082edd8dae4fabf044193f2d93d1dc30c8a8ff4651009ec21ede27e1c0be2b0ac4779449a2cd5dbd687d888cda06586444895dfd0a6222a6c979695dc91fb7deeb3f143492dd417ff9fce8c0506593ff61c6b0cb5e1f7276ad214909c2e24432bd623465779f050b55e302d250dded7e9e3dd23d49b879519a796bfa19bff7", 0x86, 0x4000, &(0x7f0000000100)=@ll={0x11, 0x9, r5, 0x1, 0x9, 0x6, @multicast}, 0x80) close(r0) [ 216.283094] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 03:08:40 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x42c02, 0x0) r1 = getpid() r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) accept4$nfc_llcp(r4, &(0x7f0000000240), &(0x7f00000001c0)=0x60, 0x80000) read$eventfd(r0, &(0x7f0000000180), 0x8) write$cgroup_pid(r0, &(0x7f0000000140)=r1, 0x12) r5 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) 03:08:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r6, 0xfffffffc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x2000, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = dup2(r8, r7) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, 0x0) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r10, 0x0) r11 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r11, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r11, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r11, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001640)='/dev/sequencer\x00', 0x12800, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000001740)='/dev/zero\x00', 0x201, 0x0) 03:08:40 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000580)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000700000004000000e8030000e8000000d001000000000000000300000003000000030000040000000000000000000000ac141400e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000076657468305f766972745f7769666900636169663000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e8000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000013000000000000000000000000000000000000000000000000070040000000000000000000000000000000000000000000000000000000000000c000e80000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000300100000000000000000000000000000000000000000000000070004e464c4f47000000000000000000000000000000000000000000000000000000000000000000000000006257a0cae003f8f06206abac020c1d15961641453fd040c2322b20964ad82a07fc6efaaa66e8e12912a47af9aac0a369225ff6c3a2168e91470b4cc1edb6f200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff41615efc7a3a07fdecf71b76d5fc8aa798e31a383cb3f4fae336a851d9b591ccd2ef1d2d729ae85bf98b7d4a2090318cb76e4e7521d68d5c9d0828660a56d88b42ac4565fb58326fe5934487e68579da16e48622323bb852d512ae995af0abb91f6d724603945f9014a0fd6ab00ac03b9b76f20d54235744832a8f4ba7c5a3ee7878adf7cd195d26097667138241db2d839567668cf1cbe46999"], 0x1) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000080)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000700000004000000e8030000e8000000d001000000000000000300000003000000030000040000000000000000000000ac141400e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000076657468305f766972745f7769666900636169663000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000e8000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000013000000000000000000000000000000000000000000000000070040000000000000000000000000000000000000000000000000000000000000c000e80000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000300100000000000000000000000000000000000000000000000070004e464c4f47000000000000000000000000000000000000000000000000000000000000000000000000006257a0cae003f8f06206abac020c1d15961641453fd040c2322b20964ad82a07fc6efaaa66e8e12912a47af9aac0a369225ff6c3a2168e91470b4cc1edb6f200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) setsockopt$inet_mreqsrc(r4, 0x0, 0x25, &(0x7f00000004c0)={@empty, @multicast2, @dev={0xac, 0x14, 0x14, 0x3f}}, 0xc) ioctl$TCXONC(r2, 0x540a, 0x0) 03:08:40 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x80000000004) write(r1, &(0x7f0000000040)="2900000014007f00ff000000040860eb01005e9725dede94d00500000e07fff10f7f25ffffff010000", 0x29) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000002000000000000000200000113000b0063616c6c666f7277617264696e67000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x4040805) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r3, 0xc08c5336, &(0x7f0000000100)={0x1000, 0x0, 0x1, 'queue1\x00', 0x5}) r4 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000080000000000002000400000000000000000ff030000000000000000000000380000000000000000000000000000000000000000000000fd000000000000000000000000000000002edc00"/110], 0x1d800) close(r4) 03:08:40 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xa, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x60}}, 0x0) sendto(r0, &(0x7f0000000000)="a908708a3400f2082edd8dae4fabf044193f2d93d1dc30c8a8ff4651009ec21ede27e1c0be2b0ac4779449a2cd5dbd687d888cda06586444895dfd0a6222a6c979695dc91fb7deeb3f143492dd417ff9fce8c0506593ff61c6b0cb5e1f7276ad214909c2e24432bd623465779f050b55e302d250dded7e9e3dd23d49b879519a796bfa19bff7", 0x86, 0x4000, &(0x7f0000000100)=@ll={0x11, 0x9, r5, 0x1, 0x9, 0x6, @multicast}, 0x80) close(r0) 03:08:40 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x42c02, 0x0) r1 = getpid() r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) accept4$nfc_llcp(r4, &(0x7f0000000240), &(0x7f00000001c0)=0x60, 0x80000) read$eventfd(r0, &(0x7f0000000180), 0x8) write$cgroup_pid(r0, &(0x7f0000000140)=r1, 0x12) r5 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) [ 216.510194] arp_tables: arptables: counters copy to user failed while replacing table [ 216.523847] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. [ 216.541086] arp_tables: arptables: counters copy to user failed while replacing table 03:08:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r6, 0xfffffffc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x2000, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = dup2(r8, r7) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, 0x0) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r10, 0x0) r11 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r11, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r11, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r11, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001640)='/dev/sequencer\x00', 0x12800, 0x0) 03:08:40 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xa, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x60}}, 0x0) sendto(r0, &(0x7f0000000000)="a908708a3400f2082edd8dae4fabf044193f2d93d1dc30c8a8ff4651009ec21ede27e1c0be2b0ac4779449a2cd5dbd687d888cda06586444895dfd0a6222a6c979695dc91fb7deeb3f143492dd417ff9fce8c0506593ff61c6b0cb5e1f7276ad214909c2e24432bd623465779f050b55e302d250dded7e9e3dd23d49b879519a796bfa19bff7", 0x86, 0x4000, &(0x7f0000000100)=@ll={0x11, 0x9, r5, 0x1, 0x9, 0x6, @multicast}, 0x80) close(r0) 03:08:40 executing program 5: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0xfff, 0x8, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x2000, 0x0, 0x0, 0x9}, 0x0, 0xf, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r4, 0x40c, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:08:40 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x42c02, 0x0) r1 = getpid() r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) accept4$nfc_llcp(r4, &(0x7f0000000240), &(0x7f00000001c0)=0x60, 0x80000) read$eventfd(r0, &(0x7f0000000180), 0x8) write$cgroup_pid(r0, &(0x7f0000000140)=r1, 0x12) socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) [ 216.605366] arp_tables: arptables: counters copy to user failed while replacing table [ 216.634159] arp_tables: arptables: counters copy to user failed while replacing table 03:08:40 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f0000000000)={0xc029, 0x2}) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:41 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000100)='net/psched\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) getsockname$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x20) pwritev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="95f050971b6b4e58a1dddd8907bc67064f30138f631ff220eb90a69a4aedeb493274a1f60c6588abd84d1adae8dd6dd832b7b6413f0a7f17b671194b0edcd44225", 0x41}], 0x1, 0x6) r4 = dup3(r3, r2, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = dup2(r6, r5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0) ioctl$TCXONC(r7, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r7, 0x54a0) [ 216.697798] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 03:08:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r6, 0xfffffffc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x2000, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = dup2(r8, r7) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, 0x0) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r10, 0x0) r11 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r11, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r11, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r11, 0x0) 03:08:41 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x42c02, 0x0) r1 = getpid() r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) accept4$nfc_llcp(r4, &(0x7f0000000240), &(0x7f00000001c0)=0x60, 0x80000) read$eventfd(r0, &(0x7f0000000180), 0x8) write$cgroup_pid(r0, &(0x7f0000000140)=r1, 0x12) 03:08:41 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xa, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x60}}, 0x0) sendto(r0, &(0x7f0000000000)="a908708a3400f2082edd8dae4fabf044193f2d93d1dc30c8a8ff4651009ec21ede27e1c0be2b0ac4779449a2cd5dbd687d888cda06586444895dfd0a6222a6c979695dc91fb7deeb3f143492dd417ff9fce8c0506593ff61c6b0cb5e1f7276ad214909c2e24432bd623465779f050b55e302d250dded7e9e3dd23d49b879519a796bfa19bff7", 0x86, 0x4000, &(0x7f0000000100)=@ll={0x11, 0x9, r5, 0x1, 0x9, 0x6, @multicast}, 0x80) close(r0) [ 216.813909] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 03:08:41 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x42c02, 0x0) getpid() r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0) accept4$nfc_llcp(r3, &(0x7f0000000240), &(0x7f00000001c0)=0x60, 0x80000) read$eventfd(r0, &(0x7f0000000180), 0x8) 03:08:41 executing program 1: ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000240)=@hopopts={0x3a, 0x1b, [], [@ra={0x5, 0x2, 0x9}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x9ed4}, @generic={0xd, 0x37, "c965abd57633ee6b0a4731f50e158ca91422df79cab3861d2a4afde8982e3b70fd116c1daef6fbfe52feca97d16a092599a40422c646c7"}, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x7, 0x86, "28bcf3b8185f0d21b4fefef013c1358e8ce47d26e4e56ed5d73e7902b97153b12e81842cee7e1d58aa768a22595c32db799e99258d53788dc9ec78abf054672518958e8819badfd4d21698a6d66d017b91703382cd18981116060133decaf533a1e3346055e3166ad1a8929bcbebc55181e637f42491ec7a4cc5c3d8da75efdd655ae92c5c3c"}]}, 0xe0) 03:08:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r6, 0xfffffffc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x2000, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = dup2(r8, r7) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, 0x0) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r10, 0x0) r11 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r11, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r11, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:41 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xa, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x60}}, 0x0) sendto(r0, &(0x7f0000000000)="a908708a3400f2082edd8dae4fabf044193f2d93d1dc30c8a8ff4651009ec21ede27e1c0be2b0ac4779449a2cd5dbd687d888cda06586444895dfd0a6222a6c979695dc91fb7deeb3f143492dd417ff9fce8c0506593ff61c6b0cb5e1f7276ad214909c2e24432bd623465779f050b55e302d250dded7e9e3dd23d49b879519a796bfa19bff7", 0x86, 0x4000, &(0x7f0000000100)=@ll={0x11, 0x9, r5, 0x1, 0x9, 0x6, @multicast}, 0x80) 03:08:41 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x42c02, 0x0) getpid() r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) accept4$nfc_llcp(r2, &(0x7f0000000240), &(0x7f00000001c0)=0x60, 0x80000) 03:08:41 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) 03:08:41 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xa, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x60}}, 0x0) 03:08:41 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) [ 217.051073] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 03:08:41 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x42c02, 0x0) getpid() r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, r0) accept4$nfc_llcp(r2, &(0x7f0000000240), &(0x7f00000001c0)=0x60, 0x80000) 03:08:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r6, 0xfffffffc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x2000, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = dup2(r8, r7) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, 0x0) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r10, 0x0) r11 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r11, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x4, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = dup2(r5, r4) ioctl$KVM_SET_TSS_ADDR(r6, 0xae47, 0xd000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000140)={0x8, 0x3, 0x9, 0x0, 0x7, 0x8, 0x10, 0x12, 0xff, 0x7, 0xc2, 0x8, 0x0, 0xc11a, 0x80000000, 0x20, 0x66, 0x80, 0x7, [], 0x77, 0xfffffffffffffbff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = dup2(r8, r7) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r12 = dup2(r11, r10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r12, 0xc08c5332, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f00000002c0)) 03:08:41 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x42c02, 0x0) getpid() syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000001c0)=0x60, 0x80000) 03:08:41 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 03:08:41 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, 0x4a) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x109001, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup2(r3, r2) r5 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x3, 0x40002) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) bind$rds(r4, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) 03:08:41 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000100)=0x600004) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xe) 03:08:41 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xf, 0x1, {{0x80, 0x3, 0x1}, 0x5}}, 0x18) close(r0) 03:08:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r6, 0xfffffffc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x2000, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = dup2(r8, r7) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, 0x0) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r10, 0x0) r11 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:41 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x80000000004) write(r3, &(0x7f0000000040)="2900000014007f00ff000000040860eb01005e9725dede94d00500000e07fff10f7f25ffffff010000", 0x29) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x3, 0x8, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xfffffff9}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5e5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000084}, 0x800) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 03:08:41 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 03:08:41 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x42c02, 0x0) getpid() syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000001c0)=0x60, 0x80000) 03:08:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000140)=0x6, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:41 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000000)) [ 217.463560] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2051 sclass=netlink_tcpdiag_socket pig=13092 comm=syz-executor.3 03:08:41 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x42c02, 0x0) getpid() syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000001c0)=0x60, 0x80000) 03:08:41 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 03:08:41 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xc}) creat(&(0x7f0000000080)='./file0\x00', 0x40) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) pipe(&(0x7f0000000040)) 03:08:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r6, 0xfffffffc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x2000, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = dup2(r8, r7) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, 0x0) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r10, 0x0) r11 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:41 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x10000, @loopback, 0xfffffffe}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[], 0x0) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:41 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x42c02, 0x0) getpid() r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(0xffffffffffffffff, r0) accept4$nfc_llcp(r1, &(0x7f0000000240), &(0x7f00000001c0)=0x60, 0x80000) 03:08:41 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 03:08:42 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x42c02, 0x0) getpid() r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(0xffffffffffffffff, r0) accept4$nfc_llcp(r1, &(0x7f0000000240), &(0x7f00000001c0)=0x60, 0x80000) 03:08:42 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r6, 0xfffffffc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x2000, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = dup2(r8, r7) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, 0x0) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r10, 0x0) r11 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:42 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 03:08:42 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x7f}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]}, 0x78) close(r0) 03:08:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket(0x10, 0x80000, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @remote}, {0x2, 0x4e21, @rand_addr=0x6}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x1e}) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x82, &(0x7f00000001c0)={r6}, 0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r6, 0x6a}, 0x8) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r6, &(0x7f0000000200)=0x4) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000240)={r6, 0xaf}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000300)={0x3, 0x208, 0x400, 0x65, r7}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x40040, 0x0) ioctl$KVM_GET_DIRTY_LOG(r9, 0x4010ae42, &(0x7f0000000180)={0x1ff, 0x0, &(0x7f0000060000/0x4000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r10 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r10, 0x40c, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 03:08:42 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x42c02, 0x0) getpid() r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(0xffffffffffffffff, r0) accept4$nfc_llcp(r1, &(0x7f0000000240), &(0x7f00000001c0)=0x60, 0x80000) 03:08:42 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) r5 = socket(0x10, 0x80000, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @remote}, {0x2, 0x4e21, @rand_addr=0x6}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x1e}) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x82, &(0x7f00000001c0)={r7}, 0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r7, 0x6a}, 0x8) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r7, &(0x7f0000000200)=0x4) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r7, 0x9, 0x1}, &(0x7f0000000100)=0xc) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r1, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)) fcntl$getown(0xffffffffffffffff, 0x9) r8 = getpid() sched_setscheduler(r8, 0x5, &(0x7f0000000380)) r9 = getpid() sched_setscheduler(r9, 0x5, &(0x7f0000000380)) getpid() r10 = getpgrp(0x0) r11 = syz_open_procfs(r10, &(0x7f00000001c0)='attr/sockcreate\x00') r12 = syz_open_dev$tty20(0xc, 0x4, 0x0) r13 = dup3(r12, r11, 0x0) ioctl$TCXONC(r13, 0x540a, 0x0) ioctl$TCXONC(r13, 0x540a, 0x0) 03:08:42 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(0xffffffffffffffff, r1) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 03:08:42 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x42c02, 0x0) getpid() r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, 0xffffffffffffffff) accept4$nfc_llcp(r1, &(0x7f0000000240), &(0x7f00000001c0)=0x60, 0x80000) 03:08:42 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r6, 0xfffffffc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x2000, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = dup2(r8, r7) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, 0x0) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r10, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:42 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f0000000040)={0x7b, "329a0e86f9b9eaf1119a2f5e5fd70258bcd07b4b59ef364c17f5de4938fcbc354a43a962b8ec60a001477f82dc133d0b980de9d5d4c6e5a6776b274fca1d5f8b67d4bfa2ab4ea08cb859cb68cc6deebb61aa2d0a20ec600c4ef5c54b46143272996c1d2b62c37d56ab6ca6e00dad9505ea6749eb4f9f0f3408c21b"}) close(r0) 03:08:42 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x42c02, 0x0) getpid() r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, 0xffffffffffffffff) accept4$nfc_llcp(r1, &(0x7f0000000240), &(0x7f00000001c0)=0x60, 0x80000) 03:08:42 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(0xffffffffffffffff, r1) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 03:08:42 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x42c02, 0x0) getpid() r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, 0xffffffffffffffff) accept4$nfc_llcp(r1, &(0x7f0000000240), &(0x7f00000001c0)=0x60, 0x80000) 03:08:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) ioctl$PIO_CMAP(r4, 0x4b71, &(0x7f0000000140)={0x2, 0x8000, 0xfffffffffffffffb, 0x73ab65d, 0x6f3, 0x1}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x220040, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x48, 0x1, 0x9, 0x3, 0x0, 0x0, {0x2}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x2}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x20000001) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r7, 0x40c, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 03:08:42 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) dup(r1) dup(r0) close(r0) 03:08:42 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(0xffffffffffffffff, r1) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 03:08:42 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r6, 0xfffffffc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x2000, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = dup2(r8, r7) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, 0x0) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r10, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:42 executing program 4: open(&(0x7f0000000100)='./file0\x00', 0x42c02, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, r0) accept4$nfc_llcp(r2, &(0x7f0000000240), &(0x7f00000001c0)=0x60, 0x80000) 03:08:42 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x4, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f0000000100)={0x0, 0x0, [], {0x0, @bt={0x2, 0x3f, 0x0, 0x3, 0xffffffffffffff00, 0x8, 0x5, 0x5, 0x800, 0x1000100, 0x5, 0x3, 0xd07, 0x1, 0x0, 0x25, {0x2, 0x8}, 0x9, 0x9}}}) close(r0) 03:08:42 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, 0xffffffffffffffff) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 03:08:42 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r6, 0xfffffffc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x2000, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = dup2(r8, r7) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, 0x0) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r10, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:42 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) accept4$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @multicast1}, &(0x7f00000002c0)=0x10, 0x800) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty, 0xfff}, 0x1c) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) r3 = syz_open_procfs(r2, &(0x7f00000001c0)='environ\x00') r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x65cb68003ebf0bc) 03:08:42 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, r0) accept4$nfc_llcp(r2, &(0x7f0000000240), &(0x7f00000001c0)=0x60, 0x80000) 03:08:42 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, 0xffffffffffffffff) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 03:08:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x800e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 218.529529] audit: type=1400 audit(1583982522.775:51): avc: denied { create } for pid=13206 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_rdma_socket permissive=1 03:08:42 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) fcntl$setflags(r3, 0x2, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 03:08:42 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, 0xffffffffffffffff) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 03:08:42 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(0xffffffffffffffff, r0) accept4$nfc_llcp(r1, &(0x7f0000000240), &(0x7f00000001c0)=0x60, 0x80000) 03:08:42 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r6, 0xfffffffc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x2000, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = dup2(r8, r7) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, 0x0) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r11 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r11, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:43 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0) r4 = openat(r3, &(0x7f0000000280)='./file0\x00', 0x440000, 0x8) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="c800f4b4c130d568a75e1bca4699d4380b10f506f43f4dae5422bdc24fef961811f342c697cdf1f0c8258a8249fcb7461106ba983203d13b68ee16521902e8d93df83371d13f988ad8e901a3c7599c03577c2748098c4a864aef438ef927089234a47fd33301e520e65ac56eec123ecf7ea87a88ddb419aec9acfb05aa823ddf99dcaa36c698922867312d03debcf75fd0862a232774e2491e6080c8a0647d0816c84bc501e487f82deb477c6af5448c010995509c19ccb9e76dc523180c84f34499c689c4a67985eeb81457133d03257bc5417a1ed1000000000000000000000000004a51f2aa5df7965b93f2623da0e1e8fee165796c116204f479a2c551d2330202000000d59dc955c853a7caa4af70ade3aadc439627302d90446d902dfb1b3ee352a3159589f65a390cf7e3fc7b0000703b3d524628efa6a3", @ANYRES16=r5, @ANYBLOB="91d5a0d2f0de706716484edf8dd7dc4eaca61a5cfd1beb8755bf3847b828d44b0e4c5666c499871b0a922b44c9765dec0d35bc6aa8a0f84028c033a619f952ec2a4b409e6c7d6e4b1a04f07edff2bb351d4889cd84de74ae1a80a2024f4855a6a72445d58fb5e757cd43d465b4b2149b40d56ff29e8edeaeb170032655d86e4ea34fa36f35f10e0337dd224ff6a27607f9856cbbbb8344714adf8164398ca7142c006c934291ce82ab12a6d98ff8812b05bc701d348de4803985458bf4b8805f91d27ff3f565191bdb1de252de5a375feb8ffb4b992198efc0e5f7f700a194bb1b5bb64ac5189a17644215f039043fe47da69ea809f55e0b7839355dae201a8539d197b81072b8c5cafc3603c5ec7f40ea01cc104a67dcaaddc0e044f96f8b1f07138a0c05a6bb0b375d028872bd0dd407c50d6363bf82bfc8d626ae45ee9510edb4cce6397d942fb9e58394af262338cf9934fbc5e9b16d097d12c58130faadaab12c8cf3825a465adcbf34e5459d735c1495cf2513b927d0d22353ed9c905b4c0e"], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x40) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000300)={@ipv4={[], [], @remote}, 0x0}, &(0x7f0000000340)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xa, 0xa}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x60}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, r5, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @random="e963e629c9c9"}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x3e}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x401, 0x2}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0xffffffffffffffff}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008010}, 0x4000) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) r10 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x6, 0x200) ioctl$VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f0000000100)={0x5, @raw_data="15f234d92b06627ce46ae32c7b2c1a288e70c40ab2685770449a21c07c2dc9348df0ac3ba3477723f0b940e921b7bb64d5e2ea42da9cde3f9d55b742331c5cc6742770e5ff574e7c7efcb903024e662eedfaac829094e2ad34bb68246f91f2c0dfe6e144caaf11de30d5940ecff57a4ed2b48e5c78ec89dec17e3fd84c2c67944afc1074e92c11e1151ab8a83db011b7fb9df8246ee77f997cebfc75847b22367345c54631976e2268b5eb7347ef1c7e4dcd5d8774e8f303e3369894b3975523486e03ecab167533"}) close(r0) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000000000)) 03:08:43 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0x4}}, 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$TCXONC(r2, 0x540a, 0x0) 03:08:43 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 03:08:43 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(0xffffffffffffffff, r0) accept4$nfc_llcp(r1, &(0x7f0000000240), &(0x7f00000001c0)=0x60, 0x80000) 03:08:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r6, 0xfffffffc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x2000, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = dup2(r8, r7) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, 0x0) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r11 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r11, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:43 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 03:08:43 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(0xffffffffffffffff, r0) accept4$nfc_llcp(r1, &(0x7f0000000240), &(0x7f00000001c0)=0x60, 0x80000) 03:08:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000200)="26430f01c5c7442400e3900000c744240201a00000c7442406000000000f011424420f01f8fff1410f013a66b836010f00d866baf80cb8f41ea081ef66bafc0cb800f0ffffef4f0fc728c463d5685a8000b960020000b807000000ba000000000f30", 0x62}], 0x1, 0x8, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r6, 0x40c, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 03:08:43 executing program 3: syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = dup3(r0, r1, 0x80000) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) r4 = socket(0x10, 0x80000, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @remote}, {0x2, 0x4e21, @rand_addr=0x6}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x1e}) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x82, &(0x7f00000001c0)={r6}, 0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r6, 0x6a}, 0x8) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r6, &(0x7f0000000200)=0x4) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000100)={r6, 0xe5, "2e9b170d727476e258c745db20fa82606b15612a1e86675e988f920a726943448a27bbceb53967045b6728f53a804430b52981d7855099b2373a62cb03381938e7e4aebc3d532901b953d80197c2e2493af029abc80ea119c70dc2b975cd8b91da51e552b29e6401b822c98277a0a9992402b93cbd739c6732237574c92f53f27096bb1242b23158bf7c8a8b0fe55a3ef2cd383493693fe912c0b04f347e46dba729be91abc50e37555e2a8b9619e3d89fb6f197d6d40dc52b30a08246cc5a9850f2499d4cdb601c0e81b7500f489fb9d9af28cbcb6ed3dcf13eff43d173818052e06f147c"}, &(0x7f0000000200)=0xed) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000240)={r7, 0x1000}, 0x8) 03:08:43 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x2, 0x8, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x11}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=0x7, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x5, 0x2}, 0x0, 0x0, &(0x7f0000000240)={0x0, 0xb, 0xfffffff9}, &(0x7f0000000280)=0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0xe839}}, 0x10) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r6, 0xfffffffc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x2000, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = dup2(r8, r7) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, 0x0) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r11 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r11, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:43 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 03:08:43 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, 0xffffffffffffffff) accept4$nfc_llcp(r1, &(0x7f0000000240), &(0x7f00000001c0)=0x60, 0x80000) 03:08:43 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 03:08:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r6, 0xfffffffc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x2000, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = dup2(r8, r7) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, 0x0) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r10, 0x0) r11 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r11, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:43 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x2b) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="124fa5f71073cb3e7b13364400d77cf071c8b90427920d65d28fa6ee93bd8ea9bc801ba6bc4b9c65baff7acdd3473505bb8c2a1358d94f310e6e14306e19e698db9e932b2042816eca34e7ad9335cf48943fdf1813fea198862a8a6fa7e000c482a9e18b25edf95797913ef9ff7620ee5feb2deaf41690c52f9065b0e7d7ccea00426f60dc239a001e29833cb07e9fad4d6f7baf02e847aa53ea6aa5d78900d8"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000014c0)=@newtfilter={0x8b8, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xf}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x888, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @mcast2}, @TCA_RSVP_PINFO={0x20, 0x4, {{}, {}, 0x0, 0x0, 0xee}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x0, 0xffe0}}, @TCA_RSVP_POLICE={0x848, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0xee}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x73}}}, @TCA_POLICE_RATE={0x404}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xa4]}]}]}}]}, 0x8b8}}, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000080)=0x0) ptrace$cont(0x1f, r8, 0xa6, 0x800) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r10 = syz_open_dev$tty20(0xc, 0x4, 0x0) r11 = dup3(r10, r9, 0x0) ioctl$TCXONC(r11, 0x540a, 0x0) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r14 = dup2(r13, r12) prctl$PR_GET_TSC(0x19, &(0x7f00000000c0)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r14, 0xc08c5332, 0x0) setsockopt$packet_rx_ring(r14, 0x107, 0x5, &(0x7f0000000040)=@req={0x3, 0xe9, 0x20, 0x3e}, 0x10) ioctl$TCXONC(r11, 0x540a, 0x0) 03:08:43 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000000080)={0x0, 0xffffffff, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x990a97, 0x4, [], @p_u8=&(0x7f0000000000)=0x1}}) ioctl$KVM_ASSIGN_SET_INTX_MASK(r4, 0x4040aea4, &(0x7f0000000100)={0x10001, 0x1, 0x9, 0x2, 0x8}) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:43 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, 0xffffffffffffffff) accept4$nfc_llcp(r1, &(0x7f0000000240), &(0x7f00000001c0)=0x60, 0x80000) 03:08:43 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) [ 219.254229] device veth2 entered promiscuous mode 03:08:43 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, 0xffffffffffffffff) accept4$nfc_llcp(r1, &(0x7f0000000240), &(0x7f00000001c0)=0x60, 0x80000) 03:08:43 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r6, 0xfffffffc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x2000, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = dup2(r8, r7) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, 0x0) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) listen(r10, 0x0) r11 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r11, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:43 executing program 0: socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, r0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 03:08:43 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) fallocate(r0, 0xd, 0x0, 0x2) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = dup2(r7, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r5, 0x40206417, &(0x7f0000000040)={0x9, 0x2, 0xbe4a, 0xfffffff9, 0x10, 0x9}) 03:08:43 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r1, r0) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000001c0)=0x60, 0x80000) 03:08:43 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, r0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 03:08:43 executing program 1: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c, 0x80800) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000080)=0x200, 0x4) r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r1, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r1, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r1) 03:08:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r6, 0xfffffffc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x2000, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = dup2(r8, r7) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, 0x0) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) listen(r10, 0x0) r11 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r11, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:43 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r1, r0) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000001c0)=0x60, 0x80000) 03:08:43 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) r6 = shmget(0x2, 0x1000, 0x10, &(0x7f0000fff000/0x1000)=nil) shmat(r6, &(0x7f0000ffd000/0x3000)=nil, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) write$selinux_access(r5, &(0x7f0000000040)={'system_u:object_r:ldconfig_cache_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023', 0x20, 0x8001}, 0x69) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 03:08:43 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(0xffffffffffffffff, r0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 03:08:43 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r1, r0) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000001c0)=0x60, 0x80000) 03:08:43 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000000000000000000070552c5718b212ce69dd94ee06a497ea7e1a4000000000000000000000000000000000380000000000000000000000000000000000000000000000da97e89400000000000000a0f6b01200"/133], 0x1d800) close(r0) 03:08:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r6, 0xfffffffc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x2000, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = dup2(r8, r7) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, 0x0) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) listen(r10, 0x0) r11 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r11, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:43 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(0xffffffffffffffff, r0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 03:08:43 executing program 3: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/netstat\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 03:08:44 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, r0) accept4$nfc_llcp(r2, 0x0, &(0x7f00000001c0), 0x80000) 03:08:44 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(0xffffffffffffffff, r0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 03:08:44 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000000)=""/188) 03:08:44 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, r0) accept4$nfc_llcp(r2, 0x0, 0x0, 0x80000) 03:08:44 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r6, 0xfffffffc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x2000, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = dup2(r8, r7) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, 0x0) r10 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r10, 0x0) r11 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r11, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:44 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 03:08:44 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, r0) accept4$nfc_llcp(r2, 0x0, 0x0, 0x0) 03:08:44 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000000)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = accept(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000080)=0x80) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x9, 0x3, 0x268, 0xe8, 0xe8, 0xe8, 0xe8, 0xe8, 0x1d0, 0x1d0, 0x1d0, 0x1d0, 0x1d0, 0x3, &(0x7f0000000180), {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xe}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@ip={@loopback, @multicast2, 0xffff00, 0xff, 'team_slave_0\x00', 'bond_slave_0\x00', {0xff}, {0xff}, 0x16, 0x2, 0x35}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x3, 0x3, 0x2, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@empty, 'veth1_vlan\x00', {0xfffffffffffffffd}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) 03:08:44 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 03:08:44 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r6, 0xfffffffc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x2000, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = dup2(r8, r7) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, 0x0) r10 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r10, 0x0) r11 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r11, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:44 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000000000000000000070552c5718b212ce69dd94ee06a497ea7e1a4000000000000000000000000000000000380000000000000000000000000000000000000000000000da97e89400000000000000a0f6b01200"/133], 0x1d800) close(r0) 03:08:44 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup2(r0, 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 03:08:44 executing program 4: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c, 0x80800) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000080)=0x200, 0x4) r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r1, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r1, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r1) 03:08:44 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x80}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x80000000004) write(r1, &(0x7f0000000040)="2900000014007f00ff000000040860eb01005e9725dede94d00500000e07fff10f7f25ffffff010000", 0x29) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xfff, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x48d0}, 0x1) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) ioprio_set$pid(0x2, 0xffffffffffffffff, 0xfffffffffffff001) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:44 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r1, r0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 03:08:44 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r1, r0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 03:08:44 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r6, 0xfffffffc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x2000, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = dup2(r8, r7) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, 0x0) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) listen(r10, 0x0) r11 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r11, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:44 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r6, 0xfffffffc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x2000, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = dup2(r8, r7) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, 0x0) r10 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r10, 0x0) r11 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r11, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:44 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x0) write$binfmt_elf64(r0, &(0x7f0000000900)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x40}, [{0x0, 0x0, 0x6e6, 0x0, 0x0, 0x0, 0xfa2}], "", [[], [], [], [], []]}, 0x578) close(r0) 03:08:44 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r1, r0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 03:08:44 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='schedstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$netlink(0x10, 0x3, 0x80000000004) write(r5, &(0x7f0000000040)="2900000014007f00ff000000040860eb01005e9725dede94d00500000e07fff10f7f25ffffff010000", 0x29) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)={&(0x7f0000000080)={0x38, r7, 0xc0d58860b4c77945, 0x0, 0x0, {{}, {0x0, 0x6}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'macvtap0\x00'}}}}}, 0x38}}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r7, 0x20, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24006891}, 0x4000000) r8 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r8, 0xc0045540, &(0x7f0000000040)=0x2) 03:08:44 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, r0) getsockname$packet(r2, 0x0, &(0x7f00000002c0)) 03:08:44 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r6, 0xfffffffc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x2000, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = dup2(r8, r7) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:44 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) sched_setattr(r1, &(0x7f0000000000)={0x38, 0x3, 0x2, 0x0, 0x5, 0xffffffff, 0x6, 0x8, 0x2, 0x5}, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x4}}, 0x40) close(r0) 03:08:44 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r6, 0xfffffffc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x2000, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = dup2(r8, r7) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, 0x0) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) listen(r10, 0x0) r11 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r11, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 220.537504] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=43 sclass=netlink_tcpdiag_socket pig=13440 comm=syz-executor.3 03:08:44 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, r0) getsockname$packet(r2, 0x0, 0x0) 03:08:44 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x93f8}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) [ 220.617988] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=43 sclass=netlink_tcpdiag_socket pig=13451 comm=syz-executor.3 03:08:44 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r6, 0xfffffffc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x2000, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = dup2(r8, r7) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, 0x0) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) listen(r10, 0x0) r11 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r11, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:44 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r6, 0xfffffffc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x2000, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = dup2(r8, r7) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:45 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r6, 0xfffffffc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x2000, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = dup2(r8, r7) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, 0x0) r10 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r10, 0x0) r11 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r11, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:45 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r3, &(0x7f00000008c0)={&(0x7f0000000040)={0xa, 0x4e24, 0x2bb012f9, @ipv4={[], [], @loopback}, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="1ea633c49cf4f95a1c910638afabac6994aaa71c85977b6343bb0dad22321fd02d0b9dc1425542a9e5a05d904d222e58801ebb0a131bbc59a11f06d759cd75f6d3c9bf8ee530e5a374880e709b68c71962d8a7548ad22761a8ca1c773433b2d11a4f5c24d8b800f940dc98ae6b01cfc099403185221c6583beabab812fdf50184546039bf88e2ad4d13484480574c0f902ad8d86a2a69ae11f8666d87d2dc55d80cacee3f00cd5ed29b98d5de284d1dbe6dd000e", 0xb4}, {&(0x7f0000000140)="6708a9cf3389abfba2fe04f8f928c369988708b5d5580df02e5aaf82fccf050ef975f790880f9b8f06da4c2ad6898b1d4f0b795bcd4d35a3ee4b9d5883850576a64cb7a6a6", 0x45}, {&(0x7f00000001c0)="c3e69ce671cfd9477619519f10e71149698cdb1924e66e3f89758e308d905446cacc9942cfa4", 0x26}, {&(0x7f0000000200)="8db80af4e7da35f184ea79edd5b5aa7be891", 0x12}, {&(0x7f0000000240)="818713cb422b2e5233a4a8d75994110d0e0cd348709daec9e2f23e5294d0d6ead69cda48c7bc546d7afa986df1ef5b23fb8569a004afeaa8eb305f03a36d4bef8cf76bec8195f241603b7a83f2d5af5d7d5413e66d2ef68bd697f1edb8cebe", 0x5f}], 0x5, &(0x7f0000000340)=[@rthdrdstopts={{0x28, 0x29, 0x37, {0xc, 0x1, [], [@enc_lim={0x4, 0x1, 0x1}, @padn={0x1, 0x1, [0x0]}, @jumbo]}}}, @hopopts_2292={{0x138, 0x29, 0x36, {0x2b, 0x23, [], [@calipso={0x7, 0x18, {0x2, 0x4, 0xac, 0x81, [0x80000000, 0x3]}}, @ra={0x5, 0x2, 0x3}, @enc_lim={0x4, 0x1, 0x9}, @hao={0xc9, 0x10, @empty}, @jumbo={0xc2, 0x4, 0x8}, @jumbo={0xc2, 0x4, 0x40}, @generic={0xff, 0xc8, "9538ccb016823e7a4b325e4329caefccdab3742497ddd82336e065ef11824dd138c7ebb0340f98e4b490d69e993c4372fffd3c7e8eafd03bd15948666b1b5b4d9b22d1912b321f7a1abaffc887232582b4483cb6c81b751ec321601423222ee96a623daf73c22b7a7b3539a3c33d0fcf58cd7f81973f3184efe342ece9de3e537b9e118d43cbb2743ec6f240eb9416006134ba6d1de5788aa78ca90dfdbadd9a8aca2e7dd27428dca5fc1426707a0c79fb286926597f3a0d2cf43ff6549caf898fbf5256abbd6388"}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x10, {0x3, 0x2, 0x3f, 0x9, [0x2]}}]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x2f, 0x0, [], [@ra={0x5, 0x2, 0x6}]}}}, @tclass={{0x14, 0x29, 0x43, 0x78}}, @dstopts={{0x258, 0x29, 0x37, {0x89, 0x47, [], [@pad1, @jumbo={0xc2, 0x4, 0x1000}, @jumbo={0xc2, 0x4, 0x8}, @pad1, @calipso={0x7, 0x20, {0x0, 0x6, 0x7f, 0x0, [0x6, 0x52e, 0x3d49]}}, @pad1, @generic={0xb1, 0xf9, "a1626a4867b060dcad92b23a03880cd80e94891c65a8e2d484bb27d5a8696f07351a7ebcd39e3f043f2d70dc295ac5d0dc8b01110434f1395c993b7f887a4a4ef9dd4e0693a01ba8e24cb29dffe55dd3c8610ccac7be883796fc6cf65e7086ebc334509cee2b9ba7ea667da8419c933cf531b0bab5d5dedcb1a691362e9bd83d89a6bc997954c5f619aecca149d11240c233c702c98061baf1ed0aa078ebe34ddb155e6837257490f5d34b5bb46b32bb592c5f1ee884bcd24221913910a37ea9501191f37205095685722d443646a6962325f234058de106ed66cba2557fe6c24a7947cd373a71ef53da8015bcb5e3cd5393535d6b659c414f"}, @generic={0x4, 0xd0, "5f1e45bf657b8675e28cadd6815d3d938b433e986fa7bdd7165f89c693d603187caef4a5cc3543ed2ac383bc0d741986897394caef31e168cf2efa4a909d7f5caeb5ae38f26a2402bca96b7347742b7e5e91c103976a3fb4e526bfb29a3c64eb83999ddd241025f453f24908192f01b21ee3af6a56edf422ca0fe931f07e535c576a5073dc15ea01fee090fc996b4b4bffb52038ceb3f78933287d246ec853aa80f4b8b6e60c6c4b983040853f8a7827198d8a9c2e29655f250bd3ac8f6ed950a0d1b607aa9192b98d1fbc1b033e2050"}, @calipso={0x7, 0x30, {0x0, 0xa, 0x20, 0x7fff, [0x2, 0x7fffffff, 0xfffffffffffffffa, 0x7, 0x7]}}, @ra={0x5, 0x2, 0xdded}]}}}, @dstopts_2292={{0x80, 0x29, 0x4, {0xff, 0xc, [], [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @calipso={0x7, 0x50, {0x1, 0x12, 0x5, 0x2, [0x4, 0x2, 0x5, 0x9, 0x6, 0x35995205, 0x4a0b, 0x7f, 0x10000]}}]}}}, @rthdr_2292={{0xa8, 0x29, 0x39, {0x2c, 0x12, 0x0, 0xfd, 0x0, [@loopback, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev={0xfe, 0x80, [], 0x25}, @loopback, @loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @loopback, @loopback]}}}, @tclass={{0x14, 0x29, 0x43, 0x74c}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x545}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}], 0x560}, 0x800) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x50, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x20}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r4, 0x0) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000940), &(0x7f0000000980)=0x4) r5 = socket$netlink(0x10, 0x3, 0x80000000004) write(r5, &(0x7f0000000040)="2900000014007f00ff000000040860eb01005e9725dede94d00500000e07fff10f7f25ffffff010000", 0x29) sendmsg$NFT_BATCH(r5, &(0x7f0000000b80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b40)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000140a010200000000000000000a0000080900010073797a300000000038000000080a010100000000000000000c0000030c00034000000000000000050c00064000000000000000020c00064000000000000000022c000000000a03000000000000000000000000090c00044000000000000000050900010073797a3100000000f0000000050a010100000000000000000200000308000a40000000020900030073797a30000000003c0004800800014000000002080002403c365fb9140003007465616d300000000000000000000000140003006e6574706369300000000000000000000900010073797a30000000000900010073797a31000000000900010073793a3100000000340004801400030068733c7230000000000000000000000000080002404d579b79140003006e657464657673696d30000000000000280008800c00024000000000000000060c00024000000000000000000c00014000000000000000020900030073797a31000000002c000000160a010200000000000000000a0000030900010073797a30000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0x1c8}, 0x1, 0x0, 0x0, 0x24000000}, 0x4040000) 03:08:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r6, 0xfffffffc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x2000, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = dup2(r8, r7) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 220.861950] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pig=13472 comm=syz-executor.3 03:08:45 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r6, 0xfffffffc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x2000, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = dup2(r8, r7) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, 0x0) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) listen(r10, 0x0) r11 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) 03:08:45 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/wireless\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 03:08:45 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x80}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x80000000004) write(r1, &(0x7f0000000040)="2900000014007f00ff000000040860eb01005e9725dede94d00500000e07fff10f7f25ffffff010000", 0x29) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xfff, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x48d0}, 0x1) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) ioprio_set$pid(0x2, 0xffffffffffffffff, 0xfffffffffffff001) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r6, 0xfffffffc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x2000, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r8, r7) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r9, 0x0) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:45 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80000, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 03:08:45 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x80}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x80000000004) write(r1, &(0x7f0000000040)="2900000014007f00ff000000040860eb01005e9725dede94d00500000e07fff10f7f25ffffff010000", 0x29) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xfff, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x48d0}, 0x1) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) ioprio_set$pid(0x2, 0xffffffffffffffff, 0xfffffffffffff001) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:45 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r6, 0xfffffffc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x2000, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = dup2(r8, r7) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, 0x0) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) listen(r10, 0x0) socket$inet6(0xa, 0x1, 0x0) 03:08:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r6, 0xfffffffc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x2000, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r7, 0x0) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:45 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x80}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x80000000004) write(r1, &(0x7f0000000040)="2900000014007f00ff000000040860eb01005e9725dede94d00500000e07fff10f7f25ffffff010000", 0x29) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xfff, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x48d0}, 0x1) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) ioprio_set$pid(0x2, 0xffffffffffffffff, 0xfffffffffffff001) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:45 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x1) 03:08:45 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r6, 0xfffffffc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x2000, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = dup2(r8, r7) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, 0x0) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) listen(r10, 0x0) 03:08:45 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x80}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x80000000004) write(r1, &(0x7f0000000040)="2900000014007f00ff000000040860eb01005e9725dede94d00500000e07fff10f7f25ffffff010000", 0x29) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xfff, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x48d0}, 0x1) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) ioprio_set$pid(0x2, 0xffffffffffffffff, 0xfffffffffffff001) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) 03:08:45 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/llc/socket\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 03:08:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r6, 0xfffffffc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x2000, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r7, 0x0) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:45 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x80}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x80000000004) write(r1, &(0x7f0000000040)="2900000014007f00ff000000040860eb01005e9725dede94d00500000e07fff10f7f25ffffff010000", 0x29) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xfff, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x48d0}, 0x1) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) ioprio_set$pid(0x2, 0xffffffffffffffff, 0xfffffffffffff001) 03:08:45 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, [], @raw_data=[0x18, 0x7, 0x800, 0x8, 0xef, 0x4, 0x7, 0xc2, 0x7, 0x0, 0x4, 0x3, 0x5, 0x1, 0x0, 0xddfc, 0x6, 0x0, 0x6, 0x4, 0x64b, 0x80000001, 0x2, 0x1000, 0xfffffff7, 0x6, 0x5999, 0x8, 0x8, 0x81, 0x8, 0x3ff]}) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 03:08:45 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r6, 0xfffffffc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x2000, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = dup2(r8, r7) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, 0x0) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) 03:08:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r6, 0xfffffffc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x2000, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r7, 0x0) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:45 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x80}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x80000000004) write(r1, &(0x7f0000000040)="2900000014007f00ff000000040860eb01005e9725dede94d00500000e07fff10f7f25ffffff010000", 0x29) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xfff, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x48d0}, 0x1) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) 03:08:45 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netstat\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) listen(r1, 0x20) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = dup3(r2, r3, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) 03:08:45 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r6, 0xfffffffc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x2000, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = dup2(r8, r7) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, 0x0) socket$inet6(0xa, 0x1, 0x0) 03:08:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r6, 0xfffffffc) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r7, 0x0) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:45 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x80}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x80000000004) write(r1, &(0x7f0000000040)="2900000014007f00ff000000040860eb01005e9725dede94d00500000e07fff10f7f25ffffff010000", 0x29) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xfff, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x48d0}, 0x1) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) 03:08:46 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(r0, &(0x7f0000000080)='net/igmp\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 03:08:46 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x80}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x80000000004) write(r1, &(0x7f0000000040)="2900000014007f00ff000000040860eb01005e9725dede94d00500000e07fff10f7f25ffffff010000", 0x29) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xfff, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x48d0}, 0x1) 03:08:46 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r7, 0x0) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:46 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r6, 0xfffffffc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x2000, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = dup2(r8, r7) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, 0x0) 03:08:46 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x80}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x80000000004) write(r1, &(0x7f0000000040)="2900000014007f00ff000000040860eb01005e9725dede94d00500000e07fff10f7f25ffffff010000", 0x29) 03:08:46 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x5}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000000c0)={r2, 0x4, 0x9, 0xfff9, 0x9, 0x7ff, 0x8, 0x81, {0x0, @in6={{0xa, 0x4e21, 0x7fffffff, @mcast1, 0x1000}}, 0xfffffffb, 0x0, 0x1f, 0x2, 0x8001}}, &(0x7f0000000180)=0xb0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = dup3(r3, r0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) 03:08:46 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x80}, 0x1c) socket$netlink(0x10, 0x3, 0x80000000004) 03:08:46 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040801}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) r5 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) socket(0x9, 0x80000, 0xa5) add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, r5) keyctl$setperm(0x5, r5, 0x104) 03:08:46 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r7, 0x0) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:46 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r6, 0xfffffffc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x2000, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r8, r7) 03:08:46 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x80}, 0x1c) 03:08:46 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r6, 0xfffffffc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x2000, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) [ 222.114016] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 222.133675] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 03:08:46 executing program 0: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x80}, 0x1c) 03:08:46 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r7, 0x0) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 222.166205] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 222.238244] EXT4-fs (loop3): mounting with "discard" option, but the device does not support discard 03:08:46 executing program 0: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x80}, 0x1c) [ 222.282229] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 03:08:46 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) socket$inet6(0xa, 0x1, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r6, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:46 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r6, 0xfffffffc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x2000, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 03:08:46 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) ioctl$TCXONC(r2, 0x540a, 0x0) 03:08:46 executing program 0: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x80}, 0x1c) 03:08:46 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x80}, 0x1c) 03:08:46 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r6, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:46 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r6, 0xfffffffc) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x2000, 0x0) 03:08:46 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 03:08:46 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x80}, 0x1c) 03:08:46 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r3, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000040)={0x6, 0x4, 0x7, 0x7, 0x9}) 03:08:46 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r6, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:47 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r6, 0xfffffffc) 03:08:47 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x80}, 0x1c) 03:08:47 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="010007000010000061f26ad0e4bf17f70800"], 0x16) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 03:08:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r6, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:47 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x80}, 0x1c) 03:08:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r4, r3) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r5, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:47 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:47 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x100, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = dup2(r7, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r11 = dup2(r10, r9) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r11, 0xc08c5332, 0x0) renameat2(r11, &(0x7f0000000080)='./file0\x00', r8, &(0x7f0000000100)='./file0/file0\x00', 0x2) 03:08:47 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x80}, 0x1c) 03:08:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:47 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:47 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x80}, 0x1c) 03:08:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:47 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000040)={0x1, 0x0, @ioapic={0xd000, 0xfff, 0x1, 0x9, 0x0, [{0x1f, 0x8, 0x8, [], 0x7}, {0x8, 0x1, 0x7f, [], 0x7}, {0x3, 0x0, 0x2e, [], 0x1}, {0x3, 0x8, 0x8}, {0x15, 0x94, 0x20, [], 0x6}, {0x6, 0x1, 0x1}, {0x99, 0x9, 0x0, [], 0x1f}, {0x0, 0x4, 0x81, [], 0xb2}, {0xe2, 0xee, 0x6, [], 0x82}, {0xa2, 0x0, 0x8, [], 0x1}, {0x4f, 0xaa, 0x3, [], 0x36}, {0x7f, 0x2, 0x6, [], 0x9}, {0x81, 0x5, 0x3, [], 0x9}, {0x20}, {0xb, 0x80, 0x1, [], 0x42}, {0x0, 0x0, 0x3, [], 0x9}, {0x1, 0x4, 0x10, [], 0x80}, {0x40, 0x8, 0x3}, {0xc7, 0xff, 0x9, [], 0x4}, {0x9, 0x1, 0x20, [], 0x7}, {0x9, 0x5, 0x7f, [], 0x6}, {0x1, 0x5, 0x9, [], 0x3f}, {0xff, 0x9, 0xfa, [], 0x9}, {0xc0, 0xa6, 0x10, [], 0x4}]}}) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = dup2(r7, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r11 = dup2(r10, r9) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r11, 0xc08c5332, 0x0) ioctl$TCSETS(r11, 0x5402, &(0x7f00000002c0)={0x4, 0x86c7, 0x2ec, 0x53e6, 0xc, "f57dd4ab4ca395a230cd21de5303e543147f5f"}) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000280)={0xffffffffffffffff, r8}) 03:08:47 executing program 0: socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x80}, 0x1c) 03:08:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:47 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:47 executing program 0: socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x80}, 0x1c) 03:08:47 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf32(r3, &(0x7f0000000a00)=ANY=[@ANYBLOB="7f454c4600200203010000000000000003000600990000007d01000038000000a9030000ff010000360920000100020000b402000000000006000000040000000004000000800000e07a000049de000000000000f1c500000300000009000000ffff000002000000ffff000007a4790d91041b8100000000020000c100000068da486d5d8a513fa11d41ca3f061f8954ce6f6f80b0b9edf3b01ad12064fb8e3c2ee4815b5027df85cfdadabbd459d99894eee8c212e73c18e3e3f204e6a69e752b161d84e1b2bcfc44f8aaf1d75f37c2b40a5800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023184e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c81d3ff2a77097abe044c281db4e95c76d2662fbc889809c5aea61657b06125b476d85929fb506dd858eb3e1fa2a0e13f91531af9ebfeabfa8384d2f7ae999df86b4fbf0fafd316b4507f61d906f1afd5da3f9e591458212446d95330319e8fbfaf374fb2fb66b4f33936717c758eed0cedb2fb3111e2eb37cccb132c8e3c96b27c538b354734829c24157dea3feb2eab2dfb2e251851346150bc8aab757205f3f4ad3bfb07baa2d711ff6aa383139dd8016837978d945942da1cda23bcb24e7efaf09ba94866cec17ddbed664c579769d1bf3cdfb587d0bddffd2512f7f3ea55c85d6a5e664f69049154b7e67d29e859ea20f2c7d41af2b47bb916501fbb7e8"], 0x3cc) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x6c1) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 03:08:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r1, r0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:47 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:47 executing program 0: socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x80}, 0x1c) 03:08:47 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:47 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f00000000c0)={0x1000003e}) r5 = dup3(r1, r0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = dup2(r7, r6) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000080)=0x336, 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, 0x0) ioctl$TIOCGWINSZ(r8, 0x5413, &(0x7f0000000040)) ioctl$TCXONC(r5, 0x540a, 0x0) 03:08:47 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:47 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, 0x0, 0x0) 03:08:47 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:47 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000040)={0x800, 0x100000000}) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 03:08:47 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:47 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, 0x0, 0x0) 03:08:48 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:48 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454ca6c1780d0b7aec545041ced78b78010012e35d2900000000000000000000000000000000000000000000004000000000ec0000000000000000000000000000000038000000000000000000000000000000000000ffff00"/120], 0x1d800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1004}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x0, 0x1, 0x4}, @IFLA_VLAN_PROTOCOL={0x0, 0x5, 0x8100}, @IFLA_VLAN_EGRESS_QOS={0x0, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0x8, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0x7eea8380, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0x400, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0x3}}, @IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0xc9d}}, @IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0x2, 0x81}}]}, @IFLA_VLAN_INGRESS_QOS={0x0, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0x5, 0xffffb0a7}}, @IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0x40, 0x401}}]}, @IFLA_VLAN_INGRESS_QOS={0x0, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0x5, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0x400, 0x31b6bca}}, @IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0x5, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0x25f2, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0x3}}, @IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0x7, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0x8, 0xff}}]}, @IFLA_VLAN_PROTOCOL={0x0, 0x5, 0x8100}, @IFLA_VLAN_EGRESS_QOS={0x0, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0x1, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0x310, 0x800}}, @IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0x8, 0x20e}}, @IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0x2, 0x9}}]}, @IFLA_VLAN_FLAGS={0x0, 0x2, {0x8}}, @IFLA_VLAN_FLAGS={0x0, 0x2, {0x15, 0x2}}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0xffffffffffffff82, 0xa, r3}]}, 0x60}}, 0x4000001) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = dup2(r6, r5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0) recvmsg$can_raw(r7, &(0x7f0000000680)={&(0x7f0000000300)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000380)=""/182, 0xb6}, {&(0x7f00000004c0)=""/187, 0xbb}], 0x2, &(0x7f00000005c0)=""/186, 0xba}, 0x20) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r11 = dup2(r10, r9) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r11, 0xc08c5332, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x21) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r12}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000240)=')\x00', r12}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000700)={0x0, r11, 0x0, 0x5, &(0x7f00000006c0)='vlan\x00', r12}, 0x30) sendmsg$nl_route(r0, &(0x7f0000000880)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)=@ipmr_newroute={0xf4, 0x18, 0x300, 0x70bd26, 0x25dfdbfc, {0x80, 0x20, 0x0, 0x9, 0xfe, 0x0, 0xff, 0x1, 0x1800}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_IIF={0x8, 0x3, r4}, @RTA_MULTIPATH={0xc, 0x9, {0xfff, 0x8, 0xbd, r8}}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @typed={0x8, 0x7c, 0x0, 0x0, @pid=r13}}, @RTA_ENCAP={0xa7, 0x16, 0x0, 0x1, @generic="64bae9f8f8cc95ed831b7e70cb80652d77437c40f812364a39cf8b838917a0759b0879200b21875fe52bafd75794c0d6153f66a01b662e9821a03b31630e449782dd111e3c3bcfbe4bbc0c6aa2d247d985fb810974670da51e50538da980501fedfedb931934d30b104853bfbf6e49868437e4d8d669444d924685247b7813dea7e9b6779a72f94a55bd46cd70fe0495968005e07b3b2b16787a00808eba03ff3de6a9"}, @RTA_DST={0x8, 0x1, @empty}]}, 0xf4}}, 0x20280d1) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@mcast2, @mcast1, @remote, 0x5, 0x3, 0x3, 0x0, 0x1, 0x4, r3}) close(r0) 03:08:48 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, 0x0, 0x0) 03:08:48 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:48 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 03:08:48 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x80}, 0x1c) 03:08:48 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:48 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f0000000000)='net/netstat\x00') r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = dup2(r7, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, 0x0) sendto$unix(r8, &(0x7f0000000040)="6b6f10b3f992df18971df01e34dc6feb3a5c37efcda6b202fb7efce751f5a12af50286612384ff228ebfd55a63ffcca67ff557ca89ffdecaa308123a03f2580258c6b4eef2a6cb8180a7a870c516c36b762b0c857af591f13d5451306ebabc0b1c68d1a0025d1a437a1f8b596a0ce3", 0x6f, 0x5, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) 03:08:48 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80}, 0x1c) 03:08:48 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:48 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:48 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c) 03:08:48 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:48 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:48 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:48 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c) 03:08:48 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:48 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = dup3(r1, r0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r3, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000040)={0x1, 0x0, 0x81, 0x1834f076, 0x6, 0x8}) r4 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDSETLED(r4, 0x4b32, 0x6) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x1) 03:08:49 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c) 03:08:49 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:49 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:49 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) io_setup(0xb5c, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x810, r5, 0x3) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f0000000140)=0x7) ioctl$TCXONC(r2, 0x540a, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r6, 0x0) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f0000000240)={'mangle\x00'}, &(0x7f00000002c0)=0x54) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000300)={'filter\x00', 0x4}, 0x68) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="1ac34a537dec979bb7fd5a88114a9e81e197493f14065e48dc9807cad4d7540af961eb5d3eb5a545e7ad70eacdf577a95125da90e1b339d22cbbca63d9304353848ff962013d771677", 0x49}, {&(0x7f00000000c0)="f6bf91814c25066994b7bf4c2d1fb455658fec624237ab0f75dd96da33a6aa8faf0105d1df509da287b45a020eb97083fe2d2187c7", 0x35}, {&(0x7f0000000100)="e2ba4ef4bfbb4674bc528182d46adf673a", 0x11}, {&(0x7f0000000140)}, {&(0x7f0000000180)="1f8d4a747373", 0x6}], 0x5) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$FIBMAP(r7, 0x1, &(0x7f0000000400)=0x3ff) 03:08:49 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:49 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454ca6c1780d0b7aec545041ced78b78010012e35d2900000000000000000000000000000000000000000000004000000000ec0000000000000000000000000000000038000000000000000000000000000000000000ffff00"/120], 0x1d800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1004}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x0, 0x1, 0x4}, @IFLA_VLAN_PROTOCOL={0x0, 0x5, 0x8100}, @IFLA_VLAN_EGRESS_QOS={0x0, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0x8, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0x7eea8380, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0x400, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0x3}}, @IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0xc9d}}, @IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0x2, 0x81}}]}, @IFLA_VLAN_INGRESS_QOS={0x0, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0x5, 0xffffb0a7}}, @IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0x40, 0x401}}]}, @IFLA_VLAN_INGRESS_QOS={0x0, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0x5, 0x80000001}}, @IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0x400, 0x31b6bca}}, @IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0x5, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0x25f2, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0x3}}, @IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0x7, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0x8, 0xff}}]}, @IFLA_VLAN_PROTOCOL={0x0, 0x5, 0x8100}, @IFLA_VLAN_EGRESS_QOS={0x0, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0x1, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0x310, 0x800}}, @IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0x8, 0x20e}}, @IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0x2, 0x9}}]}, @IFLA_VLAN_FLAGS={0x0, 0x2, {0x8}}, @IFLA_VLAN_FLAGS={0x0, 0x2, {0x15, 0x2}}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0xffffffffffffff82, 0xa, r3}]}, 0x60}}, 0x4000001) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = dup2(r6, r5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0) recvmsg$can_raw(r7, &(0x7f0000000680)={&(0x7f0000000300)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000380)=""/182, 0xb6}, {&(0x7f00000004c0)=""/187, 0xbb}], 0x2, &(0x7f00000005c0)=""/186, 0xba}, 0x20) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r11 = dup2(r10, r9) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r11, 0xc08c5332, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x21) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r12}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000240)=')\x00', r12}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000700)={0x0, r11, 0x0, 0x5, &(0x7f00000006c0)='vlan\x00', r12}, 0x30) sendmsg$nl_route(r0, &(0x7f0000000880)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)=@ipmr_newroute={0xf4, 0x18, 0x300, 0x70bd26, 0x25dfdbfc, {0x80, 0x20, 0x0, 0x9, 0xfe, 0x0, 0xff, 0x1, 0x1800}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_IIF={0x8, 0x3, r4}, @RTA_MULTIPATH={0xc, 0x9, {0xfff, 0x8, 0xbd, r8}}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @typed={0x8, 0x7c, 0x0, 0x0, @pid=r13}}, @RTA_ENCAP={0xa7, 0x16, 0x0, 0x1, @generic="64bae9f8f8cc95ed831b7e70cb80652d77437c40f812364a39cf8b838917a0759b0879200b21875fe52bafd75794c0d6153f66a01b662e9821a03b31630e449782dd111e3c3bcfbe4bbc0c6aa2d247d985fb810974670da51e50538da980501fedfedb931934d30b104853bfbf6e49868437e4d8d669444d924685247b7813dea7e9b6779a72f94a55bd46cd70fe0495968005e07b3b2b16787a00808eba03ff3de6a9"}, @RTA_DST={0x8, 0x1, @empty}]}, 0xf4}}, 0x20280d1) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@mcast2, @mcast1, @remote, 0x5, 0x3, 0x3, 0x0, 0x1, 0x4, r3}) close(r0) 03:08:49 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$clear(0x7, r2) listen(r1, 0x0) recvmmsg(r1, &(0x7f0000003980)=[{{&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)=""/131, 0x83}, {&(0x7f0000000180)=""/119, 0x77}], 0x2}}, {{&(0x7f0000000500)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000480)}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000000580)=""/21, 0x15}, {&(0x7f00000005c0)=""/255, 0xff}, {&(0x7f00000006c0)=""/206, 0xce}], 0x5, &(0x7f0000000840)=""/121, 0x79}, 0x7ff}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000001900)=""/104, 0x68}], 0x1, &(0x7f00000019c0)=""/173, 0xad}, 0xfffffff7}, {{&(0x7f0000001a80)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001b00)=""/22, 0x16}], 0x1, &(0x7f0000001b80)=""/141, 0x8d}, 0x7ff}, {{&(0x7f0000001c40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001cc0)=""/110, 0x6e}, {&(0x7f0000001d40)=""/106, 0x6a}, {&(0x7f0000001dc0)=""/94, 0x5e}, {&(0x7f0000001e40)}, {&(0x7f0000001e80)=""/159, 0x9f}], 0x5, &(0x7f0000001fc0)=""/97, 0x61}, 0x3}, {{&(0x7f0000002040)=@x25, 0x80, &(0x7f0000003480)=[{&(0x7f00000020c0)=""/48, 0x30}, {&(0x7f0000002100)=""/247, 0xf7}, {&(0x7f0000002200)=""/146, 0x92}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/50, 0x32}, {&(0x7f0000003300)=""/91, 0x5b}, {&(0x7f0000003380)=""/254, 0xfe}], 0x7, &(0x7f0000003500)=""/253, 0xfd}, 0x2}, {{&(0x7f0000003600)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000003900)=[{&(0x7f0000003680)=""/121, 0x79}, {&(0x7f0000003700)=""/57, 0x39}, {&(0x7f0000003740)=""/148, 0x94}, {&(0x7f0000003800)=""/86, 0x56}, {&(0x7f0000003880)=""/74, 0x4a}], 0x5}}], 0x7, 0x1, 0x0) setsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f0000003b40)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000080)=0x100, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r5, 0x0) r6 = accept4(r5, 0x0, &(0x7f0000000000), 0x80800) ioctl$SIOCAX25NOUID(r6, 0x89e3, &(0x7f0000000040)) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1d800) close(r0) 03:08:49 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:49 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 225.015510] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 03:08:49 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:49 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:49 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, 0x0, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:49 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:49 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, 0x0, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x24, &(0x7f0000003740)) syz_mount_image$nfs(&(0x7f00000002c0)='nfs\x00', &(0x7f0000000300)='./bus\x00', 0xca, 0xa, &(0x7f00000018c0)=[{&(0x7f0000000340)="7504c07219c8144fe13f3eeb40f35d90b4801327600ade679e3db1e287a6d9baff5f8c32d76f07e2d67c75b66fbc192e7c0b7b974259d5f3d2e0bdf7141bf48266550794693f4eca57074a2db710d0d8fb39b3740328126fc4df6c96e2432119ff6668667e882baaf0c121", 0x6b, 0x101}, {&(0x7f00000003c0)="9e0e404726f416c81967fa13779a21496a4b9a25f633728c306e8e8833d60c7cdc01345f05e26620e866c0b178590dac8a3a03fb3611fdeeeb0487962372784d13645388d883a8f684e1f4830b4d99085cf6e4979a42cf05e1de", 0x5a, 0xc5f}, {&(0x7f0000000440)="e2a781b081d75270187ca337a9ea82defd5178956c8e588d4d4b9b4b8013cf7bd9ea54ffaafb4bf29edfa2dcfd0b10e68b0f01aaa976e31b6fec473fefc4aa95ee40801304013abd821f85283f7c414a183a45a82f543384971bc059c74aabf3dfd83ca4ac9a03e85dc20603f301ec08e3fb390ac104d400f13c47449dc69c3ff408270aa00fe95077b848730ee4ed1837892521e8dd9c13c1", 0x99, 0x800}, {&(0x7f0000000500)="196a23be988883b86b0b67e95c63c3a689b0abfe316ea051c2300704e19c18d40cb44758933cef340e1124ea933129f9dc755ae665034b195cc43d4789c159508b138cac03b787eb21c13a68f2420d9a17caa079f4271059", 0x58, 0x4a2}, {&(0x7f0000000580)="452d34157a0c3ae9268da03c69a08af32d9f781e3581476c230e55f07cadf82b7db6195ff8580b75f62b17ea1f8437a6e01c06e676b6ff85de9a0dfc5087cb8ffea84e629e48797d99b45619af2a34b056abd942d6fe9628417335ec2ad508c25e28f47bebe9e8e2c3f44e5aae77c75cb313906acfca50cc9b0ccf55", 0x7c, 0x6}, {&(0x7f0000000600)="4a04b1ae610db1157e7e32f468fdfda09dd08be0a87eed4c8c56e96cadc7c1989c724d9ff99e8c5b8beab00f88263dec1493fe4fad643ddd2e44819e9ecba08197c3a8e52b6f55ce39a36301c4c518318e75a2a91239375a5711968fbfb87bff6569b380db4d69f279827bf969fc7e", 0x6f, 0x4}, {&(0x7f0000000680)="7aaf1937246330319a8d6cc132a29de2591fcc51eca879ead4b567eb868917eb5beca51fd0c07259ed50f077432dd2a6260a8b017a9be430054d3dd170a51fd949b4f06dc77abc87d5a011330fbe5c7bc231a73e208dac6ed1faf2bfcb65a68d574d39c130dbb587a81bf1bf7a353f12c352333ea36a7551b6b641c6863568f6926f274502767258ff062f4a72a64ed8acf35a64f081a965aabbde374bf09e26b84704beff45f86a38ba22bd56b31f25bf3764c69b929c02fb462fb732a767434a7f3b642754bb2329264ad7990142", 0xcf, 0x7}, {&(0x7f0000000780)="5fa2a0a072d30bec82f20c95c341cb6da2d4ae69a947be16b8f6275092e137b7789c558ec0d38be3045401d62dd29ce51d279406ba83b743aea92bde73bfc1d50f2f62092dbd8462aaa1c3f637a15ea0f0d17e11a59bfa98ae017e8c169ffb451a58bff09c0ad4076a1a2fe864dc8d8d279033bdd528f232df87cc8cc28a85921a357cfcb06a67a67e5552dfabc3879cd3d9a2e774fff9b58b332d94b6d94b230854ffc7517207e6594e68b3cee036cfe72c6b15ae9ad2fb2b940d7d8fab7da8578e5fe57ce54af784e8e6a843e22f807f51b40d5a27b0c989527cd1f62ff2af9ca3437b9120537ef4935bac6239cf5ef0c4f6763119a0156a5b91a42db22b8408cfb494f51427669d4f7da635972a6c52ff12eba523826cfa34078a14f635336b9f744c3935276795a542b3a67b4ee47f3a35f1010e73848290af8dc1dde1240c5a14a899b9d265a8eb875a22f55d5fa1afb0faccd5a3b0d20070fc9a9ba3226608030c8747450dd2e55cd69dac2ebbfd9658255a508ab055d30ca96bdfd6f68aa5c7fe090d6eb2015a37e5c3e6eeb6c3b5c3e8bee20d0488d7751e31976c0087a88e09d3fb8810a0e620d3b4879abe7df5a5f03e95a0d98d7f59f3b5487b1affed7aa8e71f3ff2d47449feea5726392f2c2e70198ba4a673461a8de76370dbee514ca7cc268c5657e19fb693270aa83645bf353a0c569391b8e58eea05a445b0a77a383db84f090cfdcbb9ea2f289ddd07d5e3de68bb753f4942d80a2618d3d2fcbbf022f0132093b27b0c49133b2e9da359960990e8478d54dca77a420eeae77a8064a934b6dac7cc0feaf1e8329c4835805f8033bb1413f9314884a081bd01415022ced8c226a2de95333e650945f71471ad54465efd03f936eeb7d464a757532519f8e5338f0456aa397b07c5f31e1eab8281c1501c5c2d38aba485bcfde526bef0a64245b8a64cceadc08f385cd205ba34a5ce9337121e733772b0ccb5173de641fa139d0af4bd67bdd042d6a2ab32aa4fd1da511e7aa0010b8870e9416eab29dfdb803222fbc526c5516e0044b59139c1a6c5db188a84765690df4a13fc350c11a842f3afe2f96bb46e20d48c711bbd29d20fb47a9e197a5b6467d77f2c3ced51c8285f405e25f186ba3aa7982586091518d3b99d731084723b3cc2d8d2e11eebb75d0edddbe8013ee049a1ffafdef1b27e4a4a213659713d9d1d6c3b6bfcca7673a8995864919f67dfae0cd3bc132cf5465045bc5aaa68aa29739874e46c61abe37badf3a246addd6a06b9e3e28c4426286b69b620b4e46c175c2cd24e33c7453b5426f808e3875aa002e45dac96208bc649f217b81748684863b29e65d612417ceadb651d6ff410e4a16bca4b6f62419285c3f2de0066d29da63960487231b35c408d5379b185c4f27626adf63294e7c1e985baf971e4575dbd6e88ec449a0cbc2fd67cfeab572bdd2a9dc808a2264aa7481b802f3bed21fdea3ad379ebc4a549120289efe71765b38aa007ac5bad07dd6cced28778b3d9e92a1596e9712dd53ca529107e12c6179946e4f91d921659f70ef0a095c076eb43858e51a629162e6bcd53561e02135b6cc5ba494340dfa8de2f1dd9a1a669aa8ef781dfd077044ee55a71d86ed6b6b1bd65a235173e026a3cccc33b487eed272078f0a05e62f1ee5bde4631822f9fd55449f97407ce924778f6693af23a2c0bfa22bfe69efdb9ef64886f95f54e4b86cd51a8a9b3d7836688dae7df5f535dace44848c31d71895a26c515c749893ae2da629a587ef3f5b375ad5de980b15d2a49ae740cd4b5223b2a07a12c06c71ea4e7961a408ea7783fda5066e99a71e2cadbaadfb405efe3215e44530f3d96f8bd63d38ce606233b957f9a317c2af0f3a0d69ccb0fb3d63a89870f8eca98ad3e0547ea6fcb272233d49b18bdb495f56956f6e459e12f29a3be9beabed2990174e50b1811006d6453e93e1f48f170995d77c34445e7863092a8d03e6f7cfe932c23e4358fa666d98d1d229ff7e4e9f348f1ed803e74163629bac74aa99e2349bdce70c1779f7e4f156f38a5ff7c8bf46c3cf2c1846570d24506ef124fcdcb92a10bb907f57cf9cbf2ff3fa945ca3f5ef875fa65c58d15148367e236ce89250c30c8b39e2c2a4f6297b1c6907b357c2ef5513f0635e88b463931079ba565cd070cfe2c2e0c21a2f541e9841c1e5a434f30670899358016a0e9f429b5b683588f82c76b47742b24683075a621373110a46995649d34d45838d797d60ceeaa2eb0b5e617fc4ac24148bdfc720dc9883b7c059cc2b5725b0fc12ff0037294bc5fed20468194ac628355744b06b76bed0d862271cf46eb8bec32099cfc40a937d988ff1001644bf24233376f159f10f6f4b26c164efacb791893afcac24bb076f7af0ae238d27a5b062d8f20c8b8eb3f5f9a350153ff131ec9957e803d8bfb1e7e9e50d902ad0ac7a6507a24350debf073343c2f033ae6c5f3fe1ad859b182b4a0f510b6da9c9bddcb187fbf33a671160813335040a33e8b8d4150f38f0cc2fe651b034a9a387a3db71d8db12871d6989ff9130620ec14aa1e5be4a571f4b214a88ed6fdb8b143e9579a0771cf119516d7b63c6710b40a919cadc3573bbce981bb4a8643f8fef5b3c84eeb4c4433f66e5b8bdaff958b081e786483e7031439d0505a21ed32ddf60002880009406a5b2f2e42b7fcf16148b2516676d29059c7a884054486455c2cf2af27c889372dbcd328cc28d5adcd74ffc87dbcbf7ea46aa9a432b7b300bdc5f39b4b674be38000466b600601c691b3a985aaeb2b0b868a8440d4804119650080821c7fbca0857d6bb7db16131d479590f838f84b62a589ea84a058206592e14c9f811b3c7750966ba7e9e7fe371910b213f5d3470adc459560c6e1a412b843bcdba3b188988e884ef2d257f60b1f9deb0ffc237dc4773ea12a4104cc0e15680e76105b244fb7bef172a103d0637e3e59fedb01eaa79d9aba22087eef053cdf5af3345e89e8b7f165afb19cc54a2de780f9027ff3e8ea98c3766789072da1acab13b94d0704226e7c1f80c12986685e0da1ec7c2abff7edb4bfb0092343658c6d1a82dc1df3c78bd84ded9ba9237931852a86bf9e9525d7ea84ddb340d2f78fb64786792fcc482ca526aace7a697219d5b4ca3b6bbd773c60338ca7889573f336fffaf5f2e37674980b63454f8705f0edb38cb97bfd49bc56f4b7ec1877683ad7c430a80eeb739c7e9cf0b6a71b310cf9e04f4cdd8828c78d1bb2cb1fd0b17417dfa3169cfff51ba42f95c735a425d60d525923ee1494ac07ec43ab59a416e7433c8920598bb068b2d666710707f5db5c0c90e8b4d5d26b5fe78258de6dfe5b0a727d9b349119b4a3ce5658be9343c86d9b4427ed96aab65680b3fb37fec56a9e9e87b4a764be8238bd8a6ea9f3414cca07f75fbffcb636170bf67e79dbca51b6a7a85d4b3b540dc56afc1819d74df7291addd918dadc494722d33193a8192cfad416d303d18c9433765edc48cbdb15071aca6e7d4305187dff4797015760731c5db5d47cd519a76ba2eb8898e9de25459d76cc854caa1ff89e50e98bacb4f7a0147b15f0a8ba1ce4231c8d99e5eb68025480ef26b2551c40b053a4b665e024a844489a2f5e886e33ed22b392b1835bfac2cbcf21238a7a5c78afd6e09ba5a6592ad116c473910064e30356c8a139a7e07c35d583fe149aec522e87d79ae9427ade27cd60056b3e1249ce808ff77eb06fff45c4a511d6ae1469affa6a76d700a3104dccbf7c1ff8a929d8a907579cb0799bc204781fa360ad7ac2577cbf5c4fc2db631caf76bba8a8b90ec7e1f819234f91a99304e8d60f30cde8eb1d56b6a8eb5d7966c2d0cb42f8f8bf997bc08f9a25fc5409bcee6a4f0b9bff660ae9788729c168d2739fb28238fec1711e69b56d1408d9e09473c3ce661cab0eccfe764b3fc77a94c04dd8826ce639f90d04de3a2226d319aa1680a5a0c2d75d5f9175a1af89ceafbb6fdefa42eb7fcd0e297eb5d87380b358a69ae8a2bf95aa4905a4ba5bf4b7beb298972286bfbeff5ee68c9259e5e34c130d30e8f41ccf1bce31db116b102443c0f69a9237dc08d6a208a6e222ca2a055588cdf85ac415ee51416c96901316e1c49b2d7bddaa30e59f904de452fd343be0542826e5ecd4324e1d3ee0ed03bc1b902887553613ecc95e729ab85c53c317f182e21a8f2b11ed34e0532495cd2cde241d9c79dd8626a77f611e23442f8567fd6c8622c2abf3f697402b2e38acb0fc6e7b70a30d950aa85a4c35438e212128ce2ad5c98d2e7c3a4ce8bb6c15bd65251ce88188386234c5e619f59f661ca1926e9d961fa53f17cca22631d80f39fad7eb36aab41bff9f1f293aa67dbc7af74bf3c1875cfa8a8381256e9d9b138e47fc89724e068b8e482d94272aea57d1c13d0b5cb78fc0d7a94aab13de2ca6d5fad4f5ce2a150b11a96901ba99de66ecff4bf51513db438b81bf3b832c4f276b655963def700e67d78a79fd59c66585ce237054e168af38d8111804436a60f2413f8af72548c09e9439dd387c41e5c22d83f19a4c373a7659bc36447b415968420231d5dc0f4645eaca1e4b391c324db92d2effbccb1e38d81901e5661c23391fc45e31c652f4b9a55fa4d33f1a4c9fab1291b11db1d1dcfec8767b69bf81ef13dd09f8ad27d829cf65d33660c0bfdbe516a0ef2f8b156214e521b9cc2e0fde08363623adf8f1864d9938d31c057d56342b6c55586b6501a66a909a1c1d03f254c6aeaa544c05abbfba1ebdbdcb1a4ec6edb704d40b522379d142b0a7369b1d166818be3df2375fad1b64f894e01537aeea5ea7673cbd7e36e09fa765b4967349cbbbad41055c6c3588fe9ba3905c2a71fbd00fec79ac07b27c2ad448ff85a101a95cf9c709c49b28cdff80cd7908cf2702706e05a48a9d80411ceaf992f2e81669836b437fa50b03b3ecb0b2ad6dfc08a75acea561bb9794cfde2514921d73abd566d1d76a95c137220216b3bb4bf68cddd990c424b1c20cda3188c13dfa786164151a266113109994bf9026ef84be2092f5281a462a9948a2a3d878aa2d8299d7588ab6cd5377cc8cdb33ac00610824780d0e95da23a0b5a71d3b85ff904855fb13236f9944b5bc3c0f53fe550f1604d1b95bf6ed2efd6f6478aa647f16f0a128ac4f1d5791756fc832e21a9da865364d41f210384638dc673dd80625d3a4d51dadc942a8ecb76029743a1f418c35f7f8f7c42300adf4a447efe86554c9309a4a8304e04522809a9bce9d72ee6c91b4d25f2872c3174f2fc38f3d6397e6586c666f530f56659524206cb688dff1c2ecc5bae498f7b85d16f76c1f75a5242441aee54a4eb3d983221ecd27fb7a17dba72c2a484a76a36dd25f36558124ad9d3607d4fee994c345fbda02bdcaa700280c630e615160e77cdccfd93ad17057c6b06278d137609c055356fddce4aae7e6afc8c71545c4f62b80de72315fcf4980cc82a9c3619a93d9006a8a4c55d29f4b5af7ac30d54166338e22b77913704422f30eda5683df16ee53329ad97b145b0c074207dbca22c9a66a81820f002a7ba0ab7c60efeb01be93c2054a49ed737c17d041630634a7ba931200c390571333d0fca6a34c1038ac6dbeb2f5ada38f93902e514f571032789c51dd5c65d41e0b82f9dd809d1aaa12b45a94bc141d78cf8542cb0dc69fccd49c75b3c7c27b1f533b8e98630be9e563ede615930fafd1dfa61021aec1b3eacb9c0f4ce30617712b1984f425f1521f11dc3bd1dff3ce89e3c", 0x1000, 0x1000}, {&(0x7f0000001780), 0x0, 0xbe1c}, {&(0x7f00000017c0)="1e1066beb20b9809be84f7c606e1b312e32f2f820c5217c027f021e93bc16aaae7feb963d5d92e535ecabc5c66ea6237df8135c90a341f34b8a404b00af7011d291f8520fc83dc2de68982e74c5e836e4acae685f91071b038398a6f4d36fdcbe992daa863335c52e0f7122a018a87b06ca0eb2744adf40d0498dbbd202e364c29f796d66df2154b1e5663938b2b5f29a393f260bd2276d6a2cba7034b8daa05cbea1b7d86494cf67037c8341c04bcfa0d560d2ff2b887cc249f11d9492e084507f7c7444c5f9fdd713f7454b34766c960c97ea0835d5fe0864691279e093369f16e66b5", 0xe4, 0xedc7}], 0x1800, &(0x7f00000019c0)='/dev/kvm\x00') r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$netlink(0x10, 0x3, 0x80000000004) write(r2, &(0x7f0000000040)="2900000014007f00ff000000040860eb01005e9725dede94d00500000e07fff10f7f25ffffff010000", 0x29) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) r4 = syz_genetlink_get_family_id$wireguard(0x0) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="001200"/18, @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4004000) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000003700)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000036c0)={&(0x7f0000001a00)={0x1cbc, r4, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x580, 0x8, 0x0, 0x1, [{0x57c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}}, @WGPEER_A_ALLOWEDIPS={0x52c, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr="5f37043e59e3386dfeb07c973f41ffca"}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x17}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x2b}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x5c9}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr="eb12446f2eddee1809c58803d139eba9"}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x24}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x34}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x3a17ebd0}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g='\xd1s(\x99\xf6\x11\xcd\x89\x94\x03M\x7fA=\xc9Wc\x0eT\x93\xc2\x85\xac\xa4\x00e\xcbc\x11\xbeik'}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_PEERS={0x50c, 0x8, 0x0, 0x1, [{0x178, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6448821dffd360321b7fa7319425827f997d3519a09db366b5c6844f8d2a8403"}, @WGPEER_A_ALLOWEDIPS={0x114, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x136}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x1b0, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x10c, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1f}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @loopback}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2f}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000200)={0xf, 0x8, 0xfa00, {r11, 0x3}}, 0x10) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 225.486465] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=13870 comm=syz-executor.5 [ 225.574541] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1280 sclass=netlink_tcpdiag_socket pig=13870 comm=syz-executor.5 03:08:50 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/rt_cache\x00') ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f00000000c0)) getsockname$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x1c) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = dup2(r6, r5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0) write$P9_RREADLINK(r7, &(0x7f0000000100)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) r8 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, 0x0) ioctl$TCGETX(r8, 0x5432, &(0x7f0000000040)) 03:08:50 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, 0x0, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:50 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r4, r3) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 225.795214] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 03:08:50 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x28040) io_setup(0x5, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:50 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:50 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0xca, &(0x7f0000000100)="640bd5f653761a77c610e8929a28de05d1e7680779b2", 0x16) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) r2 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x7f, 0x101000) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f0000000040)={0x9, "737f78543cdc7998c49e54892a95b240e1ce0256c039a2f11278906a6736cf27", 0x1000, 0x7fff, 0x2, 0x8, 0x1}) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:50 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000004c0), 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:50 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x4, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f0000000100)={0x0, 0x0, [], {0x0, @bt={0x2, 0x3f, 0x0, 0x3, 0xffffffffffffff00, 0x8, 0x5, 0x5, 0x800, 0x1000100, 0x5, 0x3, 0xd07, 0x1, 0x0, 0x25, {0x2, 0x8}, 0x9, 0x9}}}) close(r0) 03:08:50 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x1000}, [{}], "457bc7a4a3a3b4ab2c44e969462156c2dc15b4360171bad84fce4586fee5c2481caccddc161a9e2b197af3d39fcf1342fe67f9b6dba6f544010000000000009a95869dbb5f1fde5b25cb5c7574d00776b9047371082b23513c1fc660"}, 0xd4) close(r0) 03:08:50 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000004c0), 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:50 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:50 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x4, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f0000000100)={0x0, 0x0, [], {0x0, @bt={0x2, 0x3f, 0x0, 0x3, 0xffffffffffffff00, 0x8, 0x5, 0x5, 0x800, 0x1000100, 0x5, 0x3, 0xd07, 0x1, 0x0, 0x25, {0x2, 0x8}, 0x9, 0x9}}}) close(r0) 03:08:50 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000004c0), 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:50 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x8, &(0x7f0000000040)='keyring\x00', 0xffffffffffffffff}, 0x30) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:50 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x7f, 0x100, 0xfe, 0x6}, 0x49, [0x8, 0x401, 0xffff8000, 0x7, 0x6, 0xe4, 0x8, 0x5b5, 0x2, 0x3, 0x3, 0x6c, 0x3ff, 0x0, 0x2, 0xd, 0xff, 0x8000, 0x2, 0x1, 0xaf97, 0x0, 0x7, 0x1992331e, 0x6, 0x4, 0x4, 0x3, 0x6ba5, 0x1000, 0xffff, 0x7f, 0x9, 0x1000, 0x0, 0x40, 0x80000001, 0x9, 0x3500000, 0x8, 0x9, 0x5, 0xf19, 0x6, 0x20, 0xfffff6a2, 0x2, 0x20, 0x3, 0x7, 0x3, 0x81, 0x80000001, 0x7, 0x8, 0x9, 0x35b, 0xfffffffe, 0x6, 0xc3, 0x9, 0x7, 0x0, 0x5], [0x10000, 0x8, 0x7, 0xfffffffe, 0x4, 0x3, 0x200, 0x9, 0xffff, 0x4, 0x1, 0x400, 0xa705, 0x7fffffff, 0x765, 0x0, 0x1, 0xffff, 0x3, 0x4, 0x9, 0xf59, 0x2, 0x2, 0x1ff, 0x80, 0xffff, 0x1, 0x8, 0xed6, 0x5, 0x9, 0x20, 0x0, 0x7, 0x5, 0x5, 0xfff, 0x3, 0xffff0000, 0x6, 0x1, 0x8d92, 0x9, 0x80000000, 0xfff, 0x60e6, 0x2, 0x7, 0x7, 0x4, 0x80000000, 0x8, 0x4, 0xfb0, 0x9, 0xee, 0xffffe844, 0x2, 0x5, 0x7fff, 0x1c22, 0x80000000, 0x3ff], [0x8, 0x1f, 0x7, 0x4, 0x8000, 0xffffffff, 0x4, 0xfff, 0xbba4, 0x6, 0x5, 0x6b7, 0xffffffff, 0x5a, 0x0, 0x6, 0x4, 0x7fffffff, 0x6, 0xffffffff, 0x5, 0x5, 0x10001, 0x9, 0x4abc, 0xfffffff2, 0x51, 0x5, 0x5, 0x3, 0x5, 0x0, 0x0, 0x7, 0x700, 0xece, 0x1000, 0xee, 0x9, 0x7, 0x7, 0x3, 0x20, 0x3f, 0x6, 0xfffff2a6, 0x40, 0x7f, 0x81, 0x339, 0x7, 0x3ff, 0x2, 0x4, 0x6, 0xb0a, 0xfffffbff, 0x6, 0x4ac, 0x8, 0x4, 0x7, 0x6, 0x3], [0x800, 0xf34, 0x38a, 0x0, 0xbc, 0x5, 0x7f, 0x101, 0xfff, 0x8, 0x2, 0x2, 0x9, 0x2, 0x8, 0x735, 0x81, 0x20, 0x0, 0x800, 0x5, 0xff, 0x809, 0x99, 0xffffdeeb, 0xfffffffb, 0xfffffffe, 0x0, 0x6, 0x4, 0x1, 0x7fff, 0x81, 0x8001, 0x2, 0x5170, 0x9, 0x400, 0x7ff, 0x10001, 0x2, 0x7, 0x4, 0x3, 0x67f1, 0xfffffff7, 0xfff, 0x9, 0x0, 0xbfe7, 0x996c6669, 0x7, 0x80, 0xc0, 0x1, 0x1000, 0x6, 0x1, 0x800, 0x2, 0x4, 0xfffffffc, 0x1, 0x1]}, 0x45c) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000000040)={0x2, 0x9, 0x9, 0x3}) 03:08:50 executing program 1: openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x4200, 0x0) r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x1d800) close(r0) 03:08:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) ioctl$SG_SET_TIMEOUT(r5, 0x2201, &(0x7f0000000180)=0x1d2c) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000140)={0x9, 0x0, 0x41}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r6, 0x40c, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:08:50 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:50 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r1, r0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:50 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup3(r1, r0, 0x0) r3 = socket(0x10, 0x80000, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @remote}, {0x2, 0x4e21, @rand_addr=0x6}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x1e}) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x82, &(0x7f00000001c0)={r5}, 0x8) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)="1aa8748f21aabbbdb3b1dc4e8e5560a4e4ed6eff2c9324b370c6acb9ecc192f2ab8d59e32008ceec9b84c40c25f585a7bbb8290d052398bfdaad9924a8a94def886a2c46c40f6f3690e4223415316fc2", 0x50, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r5, 0x6a}, 0x8) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r5, &(0x7f0000000200)=0x4) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000040)={r5, @in6={{0xa, 0x4e24, 0x7, @loopback, 0x8}}}, &(0x7f0000000100)=0x84) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 03:08:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x24, &(0x7f0000003740)) syz_mount_image$nfs(&(0x7f00000002c0)='nfs\x00', &(0x7f0000000300)='./bus\x00', 0xca, 0xa, &(0x7f00000018c0)=[{&(0x7f0000000340)="7504c07219c8144fe13f3eeb40f35d90b4801327600ade679e3db1e287a6d9baff5f8c32d76f07e2d67c75b66fbc192e7c0b7b974259d5f3d2e0bdf7141bf48266550794693f4eca57074a2db710d0d8fb39b3740328126fc4df6c96e2432119ff6668667e882baaf0c121", 0x6b, 0x101}, {&(0x7f00000003c0)="9e0e404726f416c81967fa13779a21496a4b9a25f633728c306e8e8833d60c7cdc01345f05e26620e866c0b178590dac8a3a03fb3611fdeeeb0487962372784d13645388d883a8f684e1f4830b4d99085cf6e4979a42cf05e1de", 0x5a, 0xc5f}, {&(0x7f0000000440)="e2a781b081d75270187ca337a9ea82defd5178956c8e588d4d4b9b4b8013cf7bd9ea54ffaafb4bf29edfa2dcfd0b10e68b0f01aaa976e31b6fec473fefc4aa95ee40801304013abd821f85283f7c414a183a45a82f543384971bc059c74aabf3dfd83ca4ac9a03e85dc20603f301ec08e3fb390ac104d400f13c47449dc69c3ff408270aa00fe95077b848730ee4ed1837892521e8dd9c13c1", 0x99, 0x800}, {&(0x7f0000000500)="196a23be988883b86b0b67e95c63c3a689b0abfe316ea051c2300704e19c18d40cb44758933cef340e1124ea933129f9dc755ae665034b195cc43d4789c159508b138cac03b787eb21c13a68f2420d9a17caa079f4271059", 0x58, 0x4a2}, {&(0x7f0000000580)="452d34157a0c3ae9268da03c69a08af32d9f781e3581476c230e55f07cadf82b7db6195ff8580b75f62b17ea1f8437a6e01c06e676b6ff85de9a0dfc5087cb8ffea84e629e48797d99b45619af2a34b056abd942d6fe9628417335ec2ad508c25e28f47bebe9e8e2c3f44e5aae77c75cb313906acfca50cc9b0ccf55", 0x7c, 0x6}, {&(0x7f0000000600)="4a04b1ae610db1157e7e32f468fdfda09dd08be0a87eed4c8c56e96cadc7c1989c724d9ff99e8c5b8beab00f88263dec1493fe4fad643ddd2e44819e9ecba08197c3a8e52b6f55ce39a36301c4c518318e75a2a91239375a5711968fbfb87bff6569b380db4d69f279827bf969fc7e", 0x6f, 0x4}, {&(0x7f0000000680)="7aaf1937246330319a8d6cc132a29de2591fcc51eca879ead4b567eb868917eb5beca51fd0c07259ed50f077432dd2a6260a8b017a9be430054d3dd170a51fd949b4f06dc77abc87d5a011330fbe5c7bc231a73e208dac6ed1faf2bfcb65a68d574d39c130dbb587a81bf1bf7a353f12c352333ea36a7551b6b641c6863568f6926f274502767258ff062f4a72a64ed8acf35a64f081a965aabbde374bf09e26b84704beff45f86a38ba22bd56b31f25bf3764c69b929c02fb462fb732a767434a7f3b642754bb2329264ad7990142", 0xcf, 0x7}, {&(0x7f0000000780)="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", 0x1000, 0x1000}, {&(0x7f0000001780), 0x0, 0xbe1c}, {&(0x7f00000017c0)="1e1066beb20b9809be84f7c606e1b312e32f2f820c5217c027f021e93bc16aaae7feb963d5d92e535ecabc5c66ea6237df8135c90a341f34b8a404b00af7011d291f8520fc83dc2de68982e74c5e836e4acae685f91071b038398a6f4d36fdcbe992daa863335c52e0f7122a018a87b06ca0eb2744adf40d0498dbbd202e364c29f796d66df2154b1e5663938b2b5f29a393f260bd2276d6a2cba7034b8daa05cbea1b7d86494cf67037c8341c04bcfa0d560d2ff2b887cc249f11d9492e084507f7c7444c5f9fdd713f7454b34766c960c97ea0835d5fe0864691279e093369f16e66b5", 0xe4, 0xedc7}], 0x1800, &(0x7f00000019c0)='/dev/kvm\x00') r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$netlink(0x10, 0x3, 0x80000000004) write(r2, &(0x7f0000000040)="2900000014007f00ff000000040860eb01005e9725dede94d00500000e07fff10f7f25ffffff010000", 0x29) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) r4 = syz_genetlink_get_family_id$wireguard(0x0) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="001200"/18, @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4004000) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000003700)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000036c0)={&(0x7f0000001a00)={0x1cbc, r4, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x580, 0x8, 0x0, 0x1, [{0x57c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}}, @WGPEER_A_ALLOWEDIPS={0x52c, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr="5f37043e59e3386dfeb07c973f41ffca"}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x17}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x2b}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x5c9}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr="eb12446f2eddee1809c58803d139eba9"}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x24}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x34}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x3a17ebd0}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g='\xd1s(\x99\xf6\x11\xcd\x89\x94\x03M\x7fA=\xc9Wc\x0eT\x93\xc2\x85\xac\xa4\x00e\xcbc\x11\xbeik'}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_PEERS={0x50c, 0x8, 0x0, 0x1, [{0x178, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6448821dffd360321b7fa7319425827f997d3519a09db366b5c6844f8d2a8403"}, @WGPEER_A_ALLOWEDIPS={0x114, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x136}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x1b0, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x10c, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1f}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @loopback}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2f}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000200)={0xf, 0x8, 0xfa00, {r11, 0x3}}, 0x10) ioctl$KVM_RUN(r5, 0xae80, 0x0) 03:08:50 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000100)={0x28, 0x2, 0x0, {0x5, 0x7fffffff, 0x200}}, 0x28) r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r2, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC=r2], 0x1) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000af6c00003800000000000000000000000c00"/120], 0x1d800) close(r1) 03:08:50 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:50 executing program 3: syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = dup3(r0, r1, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 03:08:50 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:50 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:50 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, &(0x7f0000000100)={@fixed={[], 0x11}, 0x44c7, 0x9, 0x24, 0x4c, 0x7f, "31e6100a0479a20494ce1e346d63560f2804b7cecc916c7ff4fbc863befa26cfb780bc265f5bbc45531dc57eb5c240d56af9d0913a100d8e7ed2e908210de7c514def59f684a1a835abac6aa23cf2762ba2848ef47efca5e537d260bdae3df8e12bfd38ebc5ca84ee117e716c13850b6167a89cd63218851860562473730a611"}) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYRES16], 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000000000000000000000000040000000000000000000000000000000800000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000afb18482ed388e849661a4762fdd39e886d642b90abee288703dcff806de807ff179d84eb6650831a5169de5b260677f892d7943816f0ac257355d91928026eef9e6c1"], 0x1d800) close(r0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1e0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {0x0, 0x0, 0x1}, 0x2}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f00000001c0)={0x7, 'vlan1\x00', {0x5}, 0x9}) 03:08:50 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000140)={[{0x2e5, 0x0, 0x0, 0x1f, 0xce, 0x4, 0x1, 0x10, 0xff, 0x0, 0x5, 0x8, 0x8}, {0x6, 0x205, 0x90, 0xa5, 0x3f, 0x2, 0x9, 0x0, 0xf8, 0x0, 0x4, 0x1f, 0x3}, {0x20, 0x0, 0x7f, 0xfe, 0x6, 0x80, 0x6, 0x80, 0x4, 0x8, 0x8, 0xb2, 0x1}], 0x8}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x880, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300)='ethtool\x00') r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'veth1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000340)=ANY=[@ANYBLOB="8fc5adb767", @ANYRES16=r3, @ANYBLOB="000427bd7000fcdbdf2503000000050003000000000005000200f700000005000200040000000c0001800800030003000000600001800800030001000000140002006873723000000000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="140002006c6f0000000000000000000000000000080003000100000008000100", @ANYRES32=r6, @ANYBLOB="1400020077673000"/20], 0x98}, 0x1, 0x0, 0x0, 0x51}, 0x40) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, &(0x7f0000000440)={0x7, 0x7}) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r11 = dup2(r10, r9) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r11, 0xc08c5332, 0x0) r12 = socket(0x10, 0x80000, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r12, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$sock_inet_SIOCADDRT(r12, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @remote}, {0x2, 0x4e21, @rand_addr=0x6}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x1e}) r13 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r13, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x82, &(0x7f00000001c0)={r14}, 0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r12, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r14, 0x6a}, 0x8) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r14, &(0x7f0000000200)=0x4) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r11, 0x84, 0x76, &(0x7f0000000480)={r14, 0x3f}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r8, 0x84, 0x6c, &(0x7f0000000580)={r15, 0x69, "a492ad1adb5f661f320c5deb8e79c86e0ea200a7a20efe38ddb8433173f70e41e53a3886ff9115edd60abf27049f007ec30241b3242fb21d4770321f517c8802e3fe59c0f2634f3a69fbf374cbea809b9f25aaa1acb5f6e26b8607e1f981b91ab6da9686dc98b29ba1"}, &(0x7f0000000680)=0x71) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r8, 0x40c, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000200)=@generic={0x2, 0xd9b0, 0x126}) 03:08:50 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 03:08:50 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:50 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x24, &(0x7f0000003740)) syz_mount_image$nfs(&(0x7f00000002c0)='nfs\x00', &(0x7f0000000300)='./bus\x00', 0xca, 0xa, &(0x7f00000018c0)=[{&(0x7f0000000340)="7504c07219c8144fe13f3eeb40f35d90b4801327600ade679e3db1e287a6d9baff5f8c32d76f07e2d67c75b66fbc192e7c0b7b974259d5f3d2e0bdf7141bf48266550794693f4eca57074a2db710d0d8fb39b3740328126fc4df6c96e2432119ff6668667e882baaf0c121", 0x6b, 0x101}, {&(0x7f00000003c0)="9e0e404726f416c81967fa13779a21496a4b9a25f633728c306e8e8833d60c7cdc01345f05e26620e866c0b178590dac8a3a03fb3611fdeeeb0487962372784d13645388d883a8f684e1f4830b4d99085cf6e4979a42cf05e1de", 0x5a, 0xc5f}, {&(0x7f0000000440)="e2a781b081d75270187ca337a9ea82defd5178956c8e588d4d4b9b4b8013cf7bd9ea54ffaafb4bf29edfa2dcfd0b10e68b0f01aaa976e31b6fec473fefc4aa95ee40801304013abd821f85283f7c414a183a45a82f543384971bc059c74aabf3dfd83ca4ac9a03e85dc20603f301ec08e3fb390ac104d400f13c47449dc69c3ff408270aa00fe95077b848730ee4ed1837892521e8dd9c13c1", 0x99, 0x800}, {&(0x7f0000000500)="196a23be988883b86b0b67e95c63c3a689b0abfe316ea051c2300704e19c18d40cb44758933cef340e1124ea933129f9dc755ae665034b195cc43d4789c159508b138cac03b787eb21c13a68f2420d9a17caa079f4271059", 0x58, 0x4a2}, {&(0x7f0000000580)="452d34157a0c3ae9268da03c69a08af32d9f781e3581476c230e55f07cadf82b7db6195ff8580b75f62b17ea1f8437a6e01c06e676b6ff85de9a0dfc5087cb8ffea84e629e48797d99b45619af2a34b056abd942d6fe9628417335ec2ad508c25e28f47bebe9e8e2c3f44e5aae77c75cb313906acfca50cc9b0ccf55", 0x7c, 0x6}, {&(0x7f0000000600)="4a04b1ae610db1157e7e32f468fdfda09dd08be0a87eed4c8c56e96cadc7c1989c724d9ff99e8c5b8beab00f88263dec1493fe4fad643ddd2e44819e9ecba08197c3a8e52b6f55ce39a36301c4c518318e75a2a91239375a5711968fbfb87bff6569b380db4d69f279827bf969fc7e", 0x6f, 0x4}, {&(0x7f0000000680)="7aaf1937246330319a8d6cc132a29de2591fcc51eca879ead4b567eb868917eb5beca51fd0c07259ed50f077432dd2a6260a8b017a9be430054d3dd170a51fd949b4f06dc77abc87d5a011330fbe5c7bc231a73e208dac6ed1faf2bfcb65a68d574d39c130dbb587a81bf1bf7a353f12c352333ea36a7551b6b641c6863568f6926f274502767258ff062f4a72a64ed8acf35a64f081a965aabbde374bf09e26b84704beff45f86a38ba22bd56b31f25bf3764c69b929c02fb462fb732a767434a7f3b642754bb2329264ad7990142", 0xcf, 0x7}, {&(0x7f0000000780)="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", 0x1000, 0x1000}, {&(0x7f0000001780), 0x0, 0xbe1c}, {&(0x7f00000017c0)="1e1066beb20b9809be84f7c606e1b312e32f2f820c5217c027f021e93bc16aaae7feb963d5d92e535ecabc5c66ea6237df8135c90a341f34b8a404b00af7011d291f8520fc83dc2de68982e74c5e836e4acae685f91071b038398a6f4d36fdcbe992daa863335c52e0f7122a018a87b06ca0eb2744adf40d0498dbbd202e364c29f796d66df2154b1e5663938b2b5f29a393f260bd2276d6a2cba7034b8daa05cbea1b7d86494cf67037c8341c04bcfa0d560d2ff2b887cc249f11d9492e084507f7c7444c5f9fdd713f7454b34766c960c97ea0835d5fe0864691279e093369f16e66b5", 0xe4, 0xedc7}], 0x1800, &(0x7f00000019c0)='/dev/kvm\x00') r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$netlink(0x10, 0x3, 0x80000000004) write(r2, &(0x7f0000000040)="2900000014007f00ff000000040860eb01005e9725dede94d00500000e07fff10f7f25ffffff010000", 0x29) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) r4 = syz_genetlink_get_family_id$wireguard(0x0) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="001200"/18, @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4004000) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000003700)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000036c0)={&(0x7f0000001a00)={0x1cbc, r4, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x580, 0x8, 0x0, 0x1, [{0x57c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}}, @WGPEER_A_ALLOWEDIPS={0x52c, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr="5f37043e59e3386dfeb07c973f41ffca"}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x17}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x2b}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x5c9}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr="eb12446f2eddee1809c58803d139eba9"}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x24}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x34}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x3a17ebd0}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g='\xd1s(\x99\xf6\x11\xcd\x89\x94\x03M\x7fA=\xc9Wc\x0eT\x93\xc2\x85\xac\xa4\x00e\xcbc\x11\xbeik'}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_PEERS={0x50c, 0x8, 0x0, 0x1, [{0x178, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6448821dffd360321b7fa7319425827f997d3519a09db366b5c6844f8d2a8403"}, @WGPEER_A_ALLOWEDIPS={0x114, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x136}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x1b0, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x10c, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1f}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @loopback}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2f}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000200)={0xf, 0x8, 0xfa00, {r11, 0x3}}, 0x10) ioctl$KVM_RUN(r5, 0xae80, 0x0) 03:08:51 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:51 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x14001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = dup2(r6, r5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r9, r8) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r12 = dup2(r11, r10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r12, 0xc08c5332, 0x0) clock_gettime(0x0, &(0x7f0000000200)) ioctl$VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000140)={0x4, 0x4, 0x4, 0x0, 0x7, {0x77359400}, {0x5, 0x2, 0x5, 0x3e, 0x3, 0x7f, "f2798311"}, 0x3, 0x3, @userptr=0x3afa, 0x5de}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./bus/file0\x00', 0x0, 0x11) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r14 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r15 = dup2(r14, r13) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r15, 0xc08c5332, 0x0) r16 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r16, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) connect$inet6(r16, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r17 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r19 = dup2(r18, r17) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r19, 0xc08c5332, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000440)={0x3, 0x9, 0x4, 0x0, 0x2, {0x77359400}, {0x1, 0xc, 0x5, 0x2, 0xff, 0x1, "01e05b6d"}, 0x7, 0x0, @planes=&(0x7f0000000400)={0x8, 0x1, @fd=r19, 0x6}, 0x9, 0x0, r16}) syz_kvm_setup_cpu$x86(r1, r20, &(0x7f000005c000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, &(0x7f0000000380)="f3970f20c06635080000000f22c065f26c6766c7442400c66c00006766c7442402bc0000006766c744240600000000670f011c24f30f09baf80c66b848efdd8e66efbafc0c66b8e800000066efb889000f00d0660f38809d55b4360f0d8d00200f22c7"}], 0x1, 0x0, 0x0, 0xfef8) r21 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r20, 0x40086200, &(0x7f0000000100)=0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x10000, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000340)=0xc) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x2, 0x4, 0x0, 0x1, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0xffb, 0xde}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r22 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r21, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) fcntl$F_SET_RW_HINT(r22, 0x40c, 0x0) ioctl$KVM_RUN(r21, 0xae80, 0x0) 03:08:51 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 03:08:51 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000004c0)=0x210, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 226.745201] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=13984 comm=syz-executor.0 [ 226.853082] *** Guest State *** [ 226.853091] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 226.853099] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 226.853103] CR3 = 0x00000000fffbc000 [ 226.853108] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 226.853114] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 226.853123] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 226.853130] CS: sel=0x0000, attr=0x0009b, limit=0x0000ffff, base=0x0000000000000000 [ 226.853143] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 226.853157] SS: sel=0x0000, attr=0x00081, limit=0x0000ffff, base=0x0000000000000000 [ 226.853167] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 226.853180] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 226.853192] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 226.853201] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 226.853214] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 226.853223] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 226.853236] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 226.853243] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 226.853251] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 226.853258] Interruptibility = 00000000 ActivityState = 00000000 [ 226.853261] *** Host State *** [ 226.853269] RIP = 0xffffffff8116f8ef RSP = 0xffff888052adf9b0 [ 226.853286] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 226.853294] FSBase=00007fb8ae494700 GSBase=ffff8880aeb00000 TRBase=fffffe0000034000 [ 226.853301] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 226.853311] CR0=0000000080050033 CR3=00000000a78ff000 CR4=00000000001426e0 [ 226.853322] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff866018a0 [ 226.853331] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 226.853334] *** Control State *** [ 226.853340] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000ea [ 226.853344] EntryControls=0000d1ff ExitControls=002fefff [ 226.853353] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 226.853359] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 226.853364] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 226.853368] reason=80000021 qualification=0000000000000000 [ 226.853373] IDTVectoring: info=00000000 errcode=00000000 [ 226.853377] TSC Offset = 0xffffff839295c064 [ 226.853383] EPT pointer = 0x000000009487b01e [ 226.853389] Virtual processor ID = 0x0002 [ 226.907818] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1280 sclass=netlink_tcpdiag_socket pig=13967 comm=syz-executor.0 [ 227.777580] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=14025 comm=syz-executor.0 [ 227.887443] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1280 sclass=netlink_tcpdiag_socket pig=14025 comm=syz-executor.0 [ 243.682513] NOHZ: local_softirq_pending 08 [ 245.600888] NOHZ: local_softirq_pending 08 [ 264.163106] NOHZ: local_softirq_pending 08 [ 285.921626] NOHZ: local_softirq_pending 08 [ 347.361804] NOHZ: local_softirq_pending 08 [ 366.563601] NOHZ: local_softirq_pending 08 [ 368.480926] NOHZ: local_softirq_pending 08 [ 387.043374] NOHZ: local_softirq_pending 08 [ 428.002607] INFO: task syz-executor.1:13978 blocked for more than 140 seconds. [ 428.002615] Not tainted 4.14.173-syzkaller #0 [ 428.002618] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 428.002622] syz-executor.1 D29616 13978 7462 0x00000004 [ 428.002640] Call Trace: [ 428.002657] ? __schedule+0x7b8/0x1ca0 [ 428.002665] ? __mutex_lock+0x737/0x1470 [ 428.002677] ? __sched_text_start+0x8/0x8 [ 428.002686] ? lock_downgrade+0x6e0/0x6e0 [ 428.002698] schedule+0x8d/0x1b0 [ 428.002707] schedule_preempt_disabled+0xf/0x20 [ 428.002714] __mutex_lock+0x73c/0x1470 [ 428.002725] ? lock_fb_info+0x1a/0x70 [ 428.002737] ? mutex_trylock+0x1a0/0x1a0 [ 428.002748] ? save_trace+0x290/0x290 [ 428.002764] ? lock_fb_info+0x1a/0x70 [ 428.002770] lock_fb_info+0x1a/0x70 [ 428.002778] do_fb_ioctl+0x1e8/0x940 [ 428.002792] ? lock_downgrade+0x6e0/0x6e0 [ 428.002799] ? fb_read+0x520/0x520 [ 428.002811] ? avc_has_extended_perms+0x802/0xd40 [ 428.002822] ? avc_ss_reset+0x100/0x100 [ 428.002830] ? __lock_acquire+0x5f7/0x4620 [ 428.002861] ? __lock_acquire+0x5f7/0x4620 [ 428.002873] ? trace_hardirqs_on+0x10/0x10 [ 428.002888] ? trace_hardirqs_on+0x10/0x10 [ 428.002905] fb_ioctl+0xdd/0x130 [ 428.002912] ? do_fb_ioctl+0x940/0x940 [ 428.002922] do_vfs_ioctl+0x75a/0xfe0 [ 428.002931] ? selinux_file_mprotect+0x5c0/0x5c0 [ 428.002941] ? ioctl_preallocate+0x1a0/0x1a0 [ 428.002959] ? security_file_ioctl+0x76/0xb0 [ 428.002967] ? security_file_ioctl+0x83/0xb0 [ 428.002977] SyS_ioctl+0x7f/0xb0 [ 428.002985] ? do_vfs_ioctl+0xfe0/0xfe0 [ 428.002996] do_syscall_64+0x1d5/0x640 [ 428.003010] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 428.003016] RIP: 0033:0x45c679 [ 428.003021] RSP: 002b:00007efd02313c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 428.003031] RAX: ffffffffffffffda RBX: 00007efd023146d4 RCX: 000000000045c679 [ 428.003036] RDX: 00000000200001c0 RSI: 0000000000008982 RDI: 0000000000000003 [ 428.003040] RBP: 000000000076bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 428.003045] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 428.003050] R13: 0000000000000688 R14: 00000000004d47f0 R15: 000000000076bfac [ 428.003068] INFO: task syz-executor.1:14001 blocked for more than 140 seconds. [ 428.003072] Not tainted 4.14.173-syzkaller #0 [ 428.003075] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 428.003080] syz-executor.1 D27184 14001 7462 0x00000004 [ 428.003095] Call Trace: [ 428.003107] ? __schedule+0x7b8/0x1ca0 [ 428.003115] ? __mutex_lock+0x737/0x1470 [ 428.003127] ? __sched_text_start+0x8/0x8 [ 428.003135] ? lock_downgrade+0x6e0/0x6e0 [ 428.003147] schedule+0x8d/0x1b0 [ 428.003156] schedule_preempt_disabled+0xf/0x20 [ 428.003164] __mutex_lock+0x73c/0x1470 [ 428.003172] ? get_fb_info.part.0+0x5f/0x70 [ 428.003181] ? fb_open+0xb7/0x400 [ 428.003191] ? lock_downgrade+0x6e0/0x6e0 [ 428.003200] ? mutex_trylock+0x1a0/0x1a0 [ 428.003212] ? __mutex_unlock_slowpath+0x75/0x780 [ 428.003219] ? find_held_lock+0x2d/0x110 [ 428.003235] ? fb_open+0xb7/0x400 [ 428.003241] fb_open+0xb7/0x400 [ 428.003251] ? get_fb_info.part.0+0x70/0x70 [ 428.003259] chrdev_open+0x1fc/0x540 [ 428.003268] ? cdev_put.part.0+0x50/0x50 [ 428.003282] do_dentry_open+0x732/0xe90 [ 428.003290] ? cdev_put.part.0+0x50/0x50 [ 428.003299] ? __inode_permission+0x7c/0x300 [ 428.003310] vfs_open+0x105/0x220 [ 428.003321] path_openat+0x8ca/0x3c50 [ 428.003341] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 428.003358] do_filp_open+0x18e/0x250 [ 428.003367] ? may_open_dev+0xe0/0xe0 [ 428.003382] ? lock_downgrade+0x6e0/0x6e0 [ 428.003394] ? do_raw_spin_unlock+0x164/0x250 [ 428.003405] ? __alloc_fd+0x1bf/0x490 [ 428.003419] do_sys_open+0x29d/0x3f0 [ 428.003430] ? filp_open+0x60/0x60 [ 428.003441] ? SyS_clock_settime+0x1a0/0x1a0 [ 428.003449] ? do_syscall_64+0x4c/0x640 [ 428.003457] ? SyS_open+0x30/0x30 [ 428.003467] do_syscall_64+0x1d5/0x640 [ 428.003480] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 428.003486] RIP: 0033:0x45c679 [ 428.003490] RSP: 002b:00007efd022f2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 428.003499] RAX: ffffffffffffffda RBX: 00007efd022f36d4 RCX: 000000000045c679 [ 428.003504] RDX: 0000000000000000 RSI: 0000000020000180 RDI: ffffffffffffff9c [ 428.003508] RBP: 000000000076c040 R08: 0000000000000000 R09: 0000000000000000 [ 428.003513] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 428.003530] R13: 0000000000000799 R14: 00000000004ca2eb R15: 000000000076c04c [ 428.003547] INFO: task syz-executor.3:13980 blocked for more than 140 seconds. [ 428.003551] Not tainted 4.14.173-syzkaller #0 [ 428.003554] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 428.003558] syz-executor.3 D28688 13980 7460 0x00000004 [ 428.003574] Call Trace: [ 428.003585] ? __schedule+0x7b8/0x1ca0 [ 428.003597] ? __sched_text_start+0x8/0x8 [ 428.003609] schedule+0x8d/0x1b0 [ 428.003616] schedule_timeout+0x946/0xe40 [ 428.003626] ? usleep_range+0x130/0x130 [ 428.003632] ? find_held_lock+0x2d/0x110 [ 428.003640] ? __down+0x158/0x290 [ 428.003652] ? mark_held_locks+0xa6/0xf0 [ 428.003660] ? _raw_spin_unlock_irq+0x24/0x80 [ 428.003672] __down+0x160/0x290 [ 428.003683] ? ww_mutex_lock+0xb0/0xb0 [ 428.003697] ? vc_allocate+0x550/0x550 [ 428.003704] down+0x57/0x80 [ 428.003712] console_lock+0x24/0x70 [ 428.003719] con_install+0x47/0x3e0 [ 428.003728] ? vc_allocate+0x550/0x550 [ 428.003737] tty_init_dev+0xe1/0x3a0 [ 428.003746] tty_open+0x410/0x9c0 [ 428.003759] ? tty_init_dev+0x3a0/0x3a0 [ 428.003769] ? kobject_get_unless_zero+0x7f/0xc0 [ 428.003780] ? tty_init_dev+0x3a0/0x3a0 [ 428.003792] chrdev_open+0x1fc/0x540 [ 428.003801] ? cdev_put.part.0+0x50/0x50 [ 428.003813] do_dentry_open+0x732/0xe90 [ 428.003821] ? cdev_put.part.0+0x50/0x50 [ 428.003830] ? __inode_permission+0x7c/0x300 [ 428.003840] vfs_open+0x105/0x220 [ 428.003850] path_openat+0x8ca/0x3c50 [ 428.003869] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 428.003885] do_filp_open+0x18e/0x250 [ 428.003894] ? may_open_dev+0xe0/0xe0 [ 428.003909] ? lock_downgrade+0x6e0/0x6e0 [ 428.003919] ? do_raw_spin_unlock+0x164/0x250 [ 428.003929] ? __alloc_fd+0x1bf/0x490 [ 428.003943] do_sys_open+0x29d/0x3f0 [ 428.003952] ? filp_open+0x60/0x60 [ 428.003962] ? SyS_clock_settime+0x1a0/0x1a0 [ 428.003968] ? fput+0xb/0x140 [ 428.003975] ? do_syscall_64+0x4c/0x640 [ 428.003983] ? do_sys_open+0x3f0/0x3f0 [ 428.003992] do_syscall_64+0x1d5/0x640 [ 428.004005] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 428.004010] RIP: 0033:0x416411 [ 428.004014] RSP: 002b:00007f4f3409a7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 428.004023] RAX: ffffffffffffffda RBX: 00007f4f3409b6d4 RCX: 0000000000416411 [ 428.004027] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007f4f3409a7d0 [ 428.004032] RBP: 000000000076bf00 R08: 0000000000000000 R09: 000000000000000e [ 428.004037] R10: 0000000000000064 R11: 0000000000000293 R12: 00000000ffffffff [ 428.004042] R13: 0000000000000c0e R14: 00000000004ce1bb R15: 000000000076bf0c [ 428.004058] INFO: task syz-executor.3:13990 blocked for more than 140 seconds. [ 428.004062] Not tainted 4.14.173-syzkaller #0 [ 428.004066] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 428.004069] syz-executor.3 D29104 13990 7460 0x00000004 [ 428.004086] Call Trace: [ 428.004097] ? __schedule+0x7b8/0x1ca0 [ 428.004105] ? __mutex_lock+0x737/0x1470 [ 428.004116] ? __sched_text_start+0x8/0x8 [ 428.004124] ? lock_downgrade+0x6e0/0x6e0 [ 428.004136] schedule+0x8d/0x1b0 [ 428.004145] schedule_preempt_disabled+0xf/0x20 [ 428.004152] __mutex_lock+0x73c/0x1470 [ 428.004163] ? tty_open+0x352/0x9c0 [ 428.004175] ? mutex_trylock+0x1a0/0x1a0 [ 428.004186] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 428.004194] ? tty_open+0x125/0x9c0 [ 428.004210] ? tty_open+0x352/0x9c0 [ 428.004217] tty_open+0x352/0x9c0 [ 428.004230] ? tty_init_dev+0x3a0/0x3a0 [ 428.004239] ? kobject_get_unless_zero+0x7f/0xc0 [ 428.004249] ? tty_init_dev+0x3a0/0x3a0 [ 428.004256] chrdev_open+0x1fc/0x540 [ 428.004265] ? cdev_put.part.0+0x50/0x50 [ 428.004277] do_dentry_open+0x732/0xe90 [ 428.004285] ? cdev_put.part.0+0x50/0x50 [ 428.004294] ? __inode_permission+0x7c/0x300 [ 428.004304] vfs_open+0x105/0x220 [ 428.004314] path_openat+0x8ca/0x3c50 [ 428.004333] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 428.004350] do_filp_open+0x18e/0x250 [ 428.004359] ? may_open_dev+0xe0/0xe0 [ 428.004374] ? lock_downgrade+0x6e0/0x6e0 [ 428.004384] ? do_raw_spin_unlock+0x164/0x250 [ 428.004394] ? __alloc_fd+0x1bf/0x490 [ 428.004408] do_sys_open+0x29d/0x3f0 [ 428.004418] ? filp_open+0x60/0x60 [ 428.004428] ? SyS_clock_settime+0x1a0/0x1a0 [ 428.004436] ? do_syscall_64+0x4c/0x640 [ 428.004443] ? do_sys_open+0x3f0/0x3f0 [ 428.004453] do_syscall_64+0x1d5/0x640 [ 428.004466] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 428.004471] RIP: 0033:0x416411 [ 428.004475] RSP: 002b:00007f4f340797a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 428.004484] RAX: ffffffffffffffda RBX: 00007f4f3407a6d4 RCX: 0000000000416411 [ 428.004489] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007f4f340797d0 [ 428.004493] RBP: 000000000076bfa0 R08: 0000000000000000 R09: 000000000000000e [ 428.004498] R10: 0000000000000064 R11: 0000000000000293 R12: 00000000ffffffff [ 428.004502] R13: 0000000000000c0e R14: 00000000004ce1bb R15: 000000000076bfac [ 428.004517] [ 428.004517] Showing all locks held in the system: [ 428.004526] 1 lock held by khungtaskd/1056: [ 428.004530] #0: (tasklist_lock){.+.+}, at: [] debug_show_all_locks+0x7c/0x21a [ 428.004566] 1 lock held by rsyslogd/7287: [ 428.004568] #0: (&f->f_pos_lock){+.+.}, at: [] __fdget_pos+0xa6/0xc0 [ 428.004588] 2 locks held by getty/7410: [ 428.004591] #0: (&tty->ldisc_sem){++++}, at: [] tty_ldisc_ref_wait+0x22/0x80 [ 428.004609] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e4/0x16f0 [ 428.004627] 2 locks held by getty/7411: [ 428.004630] #0: (&tty->ldisc_sem){++++}, at: [] tty_ldisc_ref_wait+0x22/0x80 [ 428.004646] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e4/0x16f0 [ 428.004666] 2 locks held by getty/7412: [ 428.004669] #0: (&tty->ldisc_sem){++++}, at: [] tty_ldisc_ref_wait+0x22/0x80 [ 428.004686] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e4/0x16f0 [ 428.004706] 2 locks held by getty/7413: [ 428.004709] #0: (&tty->ldisc_sem){++++}, at: [] tty_ldisc_ref_wait+0x22/0x80 [ 428.004725] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e4/0x16f0 [ 428.004745] 2 locks held by getty/7414: [ 428.004748] #0: (&tty->ldisc_sem){++++}, at: [] tty_ldisc_ref_wait+0x22/0x80 [ 428.004765] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e4/0x16f0 [ 428.004789] 2 locks held by getty/7415: [ 428.004792] #0: (&tty->ldisc_sem){++++}, at: [] tty_ldisc_ref_wait+0x22/0x80 [ 428.004809] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e4/0x16f0 [ 428.004828] 2 locks held by getty/7416: [ 428.004831] #0: (&tty->ldisc_sem){++++}, at: [] tty_ldisc_ref_wait+0x22/0x80 [ 428.004848] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e4/0x16f0 [ 428.004871] 1 lock held by syz-executor.1/13978: [ 428.004874] #0: (&fb_info->lock){+.+.}, at: [] lock_fb_info+0x1a/0x70 [ 428.004893] 1 lock held by syz-executor.1/14001: [ 428.004895] #0: (&fb_info->lock){+.+.}, at: [] fb_open+0xb7/0x400 [ 428.004914] 2 locks held by syz-executor.3/13980: [ 428.004917] #0: (tty_mutex){+.+.}, at: [] tty_open+0x352/0x9c0 [ 428.004935] #1: (&tty->legacy_mutex){+.+.}, at: [] tty_lock+0x5f/0x70 [ 428.004954] 1 lock held by syz-executor.3/13990: [ 428.004957] #0: (tty_mutex){+.+.}, at: [] tty_open+0x352/0x9c0 [ 428.004974] [ 428.004978] ============================================= [ 428.004978] [ 428.004982] NMI backtrace for cpu 1 [ 428.004990] CPU: 1 PID: 1056 Comm: khungtaskd Not tainted 4.14.173-syzkaller #0 [ 428.004995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 428.004998] Call Trace: [ 428.005006] dump_stack+0x13e/0x194 [ 428.005017] nmi_cpu_backtrace.cold+0x57/0x93 [ 428.005028] ? irq_force_complete_move.cold+0x7b/0x7b [ 428.005036] nmi_trigger_cpumask_backtrace+0x139/0x17e [ 428.005046] watchdog+0x5e2/0xb80 [ 428.005055] ? kthread_flush_work_fn+0x20/0x20 [ 428.005064] ? hungtask_pm_notify+0x50/0x50 [ 428.005072] kthread+0x30d/0x420 [ 428.005079] ? kthread_create_on_node+0xd0/0xd0 [ 428.005088] ret_from_fork+0x24/0x30 [ 428.005104] Sending NMI from CPU 1 to CPUs 0: [ 428.005366] NMI backtrace for cpu 0 [ 428.005370] CPU: 0 PID: 966 Comm: kworker/u4:3 Not tainted 4.14.173-syzkaller #0 [ 428.005374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 428.005376] Workqueue: bat_events batadv_purge_orig [ 428.005380] task: ffff8880a833a400 task.stack: ffff8880a8340000 [ 428.005382] RIP: 0010:__lock_acquire+0x62/0x4620 [ 428.005384] RSP: 0018:ffff8880a8347a60 EFLAGS: 00000086 [ 428.005389] RAX: ffffed1015068f60 RBX: 0000000000000000 RCX: 0000000000000000 [ 428.005392] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: ffff88805c9ea5f0 [ 428.005395] RBP: ffff8880a8347c10 R08: 0000000000000001 R09: 0000000000000000 [ 428.005397] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88805c9ea5f0 [ 428.005400] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 428.005404] FS: 0000000000000000(0000) GS:ffff8880aea00000(0000) knlGS:0000000000000000 [ 428.005406] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 428.005409] CR2: 00007f18d656d501 CR3: 000000007bd37000 CR4: 00000000001406f0 [ 428.005412] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 428.005415] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 428.005417] Call Trace: [ 428.005419] ? find_held_lock+0x2d/0x110 [ 428.005421] ? trace_hardirqs_on+0x10/0x10 [ 428.005423] ? __lock_acquire+0x5f7/0x4620 [ 428.005425] ? save_trace+0x290/0x290 [ 428.005426] ? save_trace+0x290/0x290 [ 428.005428] ? find_held_lock+0x2d/0x110 [ 428.005430] ? _batadv_purge_orig+0xa68/0xf60 [ 428.005432] lock_acquire+0x170/0x3f0 [ 428.005434] ? _batadv_purge_orig+0x115/0xf60 [ 428.005436] _raw_spin_lock_bh+0x2f/0x40 [ 428.005438] ? _batadv_purge_orig+0x115/0xf60 [ 428.005440] _batadv_purge_orig+0x115/0xf60 [ 428.005442] ? __lock_is_held+0xad/0x140 [ 428.005444] batadv_purge_orig+0x17/0x60 [ 428.005446] process_one_work+0x813/0x1540 [ 428.005448] ? pwq_dec_nr_in_flight+0x2b0/0x2b0 [ 428.005450] ? worker_thread+0x15d/0x1070 [ 428.005452] ? _raw_spin_unlock_irq+0x24/0x80 [ 428.005454] worker_thread+0x5d1/0x1070 [ 428.005456] ? process_one_work+0x1540/0x1540 [ 428.005458] kthread+0x30d/0x420 [ 428.005460] ? kthread_create_on_node+0xd0/0xd0 [ 428.005462] ret_from_fork+0x24/0x30 [ 428.005463] Code: b3 8a b5 41 48 c7 84 24 a8 00 00 00 c0 d5 8c 87 48 c1 e8 03 48 89 84 24 98 00 00 00 48 01 d0 48 c7 84 24 b0 00 00 00 f0 d6 45 81 00 f1 f1 f1 f1 c7 40 04 00 f2 f2 f2 c7 40 08 00 00 00 f2 c7 [ 428.006119] Kernel panic - not syncing: hung_task: blocked tasks [ 428.006126] CPU: 1 PID: 1056 Comm: khungtaskd Not tainted 4.14.173-syzkaller #0 [ 428.006130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 428.006133] Call Trace: [ 428.006141] dump_stack+0x13e/0x194 [ 428.006152] panic+0x1f9/0x42d [ 428.006159] ? add_taint.cold+0x16/0x16 [ 428.006169] ? printk_safe_flush+0xac/0x110 [ 428.006182] watchdog+0x5f3/0xb80 [ 428.006189] ? kthread_flush_work_fn+0x20/0x20 [ 428.006199] ? hungtask_pm_notify+0x50/0x50 [ 428.006207] kthread+0x30d/0x420 [ 428.006214] ? kthread_create_on_node+0xd0/0xd0 [ 428.006230] ret_from_fork+0x24/0x30 [ 428.007733] Kernel Offset: disabled