01:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400300}, 0x800) 18:01:20 executing program 4: r0 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) prctl$PR_GET_TIMERSLACK(0x1e) lseek(r0, 0x7ffffffffffbfffb, 0xfffffffffffffffd) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x7, 0x121000) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000080)) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="0404000013", 0x5}], 0x0) [ 1508.779361][T25913] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1508.779388][T25913] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1508.779404][T25913] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1508.779427][T25913] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1508.779452][T25913] ? kvm_set_memory_region+0x50/0x50 [ 1508.811023][T25913] ? tomoyo_path_number_perm+0x263/0x520 [ 1508.816675][T25913] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1508.823001][T25913] ? __f_unlock_pos+0x19/0x20 [ 1508.827694][T25913] ? __fget+0x35a/0x550 [ 1508.831876][T25913] ? kvm_set_memory_region+0x50/0x50 [ 1508.837169][T25913] do_vfs_ioctl+0xd5f/0x1380 [ 1508.841776][T25913] ? ioctl_preallocate+0x210/0x210 [ 1508.846902][T25913] ? __fget+0x381/0x550 [ 1508.851162][T25913] ? ksys_dup3+0x3e0/0x3e0 [ 1508.855587][T25913] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1508.861835][T25913] ? fput_many+0x12c/0x1a0 [ 1508.866266][T25913] ? tomoyo_file_ioctl+0x23/0x30 [ 1508.871216][T25913] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1508.877462][T25913] ? security_file_ioctl+0x8d/0xc0 [ 1508.882579][T25913] ksys_ioctl+0xab/0xd0 [ 1508.882597][T25913] __x64_sys_ioctl+0x73/0xb0 [ 1508.882615][T25913] do_syscall_64+0xfd/0x680 [ 1508.882635][T25913] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1508.882653][T25913] RIP: 0033:0x459519 [ 1508.905772][T25913] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1508.925475][T25913] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1508.933897][T25913] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 [ 1508.941870][T25913] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1508.949841][T25913] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1508.957802][T25913] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 [ 1508.965780][T25913] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 18:01:21 executing program 5: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000380), 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) 18:01:21 executing program 4: r0 = memfd_create(&(0x7f0000000040)='posix_acl_sccess{Y\x00', 0xffffffff7ffffffc) lseek(r0, 0x7ffffffffffffffb, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="865ff98113", 0x5}], 0x1) 18:01:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x800) 18:01:21 executing program 1 (fault-call:8 fault-nth:43): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:01:21 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x4000000000000000, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:01:21 executing program 4: r0 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) r1 = syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x4e, 0x280280) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/183, 0xb7}, {&(0x7f0000000040)=""/57, 0x39}, {&(0x7f0000000200)=""/161, 0xa1}], 0x3) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="865ff98113", 0x5}], 0x1) ioctl$RTC_AIE_OFF(r1, 0x7002) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) 18:01:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1000000}, 0x800) [ 1509.294043][T25947] FAULT_INJECTION: forcing a failure. [ 1509.294043][T25947] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1509.339267][T25947] CPU: 1 PID: 25947 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 1509.347195][T25947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1509.357259][T25947] Call Trace: [ 1509.360564][T25947] dump_stack+0x172/0x1f0 [ 1509.364919][T25947] should_fail.cold+0xa/0x15 [ 1509.369528][T25947] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1509.375345][T25947] ? ___might_sleep+0x163/0x280 [ 1509.380209][T25947] should_fail_alloc_page+0x50/0x60 [ 1509.385419][T25947] __alloc_pages_nodemask+0x1a1/0x8d0 [ 1509.390801][T25947] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1509.396891][T25947] ? mmu_topup_memory_caches+0x97/0x490 [ 1509.402456][T25947] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1509.408703][T25947] alloc_pages_current+0x107/0x210 [ 1509.413826][T25947] __get_free_pages+0xc/0x40 [ 1509.413844][T25947] mmu_topup_memory_caches+0x1e1/0x490 [ 1509.413860][T25947] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1509.413876][T25947] kvm_mmu_load+0x21/0x12e0 18:01:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000000}, 0x800) [ 1509.413893][T25947] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1509.413914][T25947] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1509.446524][T25947] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1509.451743][T25947] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1509.458200][T25947] vcpu_enter_guest+0x3b21/0x5f40 [ 1509.463247][T25947] ? emulator_read_emulated+0x50/0x50 [ 1509.468632][T25947] ? lock_acquire+0x16f/0x3f0 [ 1509.473318][T25947] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1509.479066][T25947] kvm_arch_vcpu_ioctl_run+0x423/0x1740 18:01:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x3000000}, 0x800) [ 1509.484635][T25947] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1509.490375][T25947] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1509.495161][T25947] ? kvm_set_memory_region+0x50/0x50 [ 1509.500456][T25947] ? tomoyo_path_number_perm+0x263/0x520 [ 1509.506102][T25947] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1509.511920][T25947] ? __f_unlock_pos+0x19/0x20 [ 1509.516633][T25947] ? __fget+0x35a/0x550 [ 1509.520799][T25947] ? kvm_set_memory_region+0x50/0x50 [ 1509.520815][T25947] do_vfs_ioctl+0xd5f/0x1380 [ 1509.520832][T25947] ? ioctl_preallocate+0x210/0x210 [ 1509.520844][T25947] ? __fget+0x381/0x550 [ 1509.520864][T25947] ? ksys_dup3+0x3e0/0x3e0 [ 1509.544409][T25947] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1509.550661][T25947] ? fput_many+0x12c/0x1a0 [ 1509.555098][T25947] ? tomoyo_file_ioctl+0x23/0x30 [ 1509.560061][T25947] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1509.566335][T25947] ? security_file_ioctl+0x8d/0xc0 [ 1509.571490][T25947] ksys_ioctl+0xab/0xd0 [ 1509.575750][T25947] __x64_sys_ioctl+0x73/0xb0 [ 1509.580363][T25947] do_syscall_64+0xfd/0x680 [ 1509.584889][T25947] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1509.590780][T25947] RIP: 0033:0x459519 [ 1509.594683][T25947] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1509.614303][T25947] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1509.622962][T25947] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 [ 1509.630916][T25947] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 18:01:21 executing program 3: futex(&(0x7f000000cffc)=0x4, 0x7f, 0x4, 0x0, 0x0, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000140)) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x88000, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x1f, 0x1, 0x4, 0x8001, 0x2, 0xfffffffffffffff8, 0x5, 0x1ff, r1}, &(0x7f0000000100)=0x20) 18:01:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 18:01:21 executing program 4: r0 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) lseek(r0, 0x7ffffffefffffffb, 0xfffffffffffffffc) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="865ff98113", 0x5}], 0x1) pipe(&(0x7f0000000040)) [ 1509.638871][T25947] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1509.646840][T25947] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 [ 1509.654805][T25947] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 18:01:22 executing program 5: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000380), 0x0) epoll_create(0x2) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) 18:01:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5000000}, 0x800) 18:01:22 executing program 1 (fault-call:8 fault-nth:44): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:01:22 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x8000000000000000, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:01:22 executing program 4: r0 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) lseek(r0, 0x7ffffffffffffffb, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xffff, 0x480084) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x4, 0xfffffffffffffffa, 0x100}}, 0x30) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x1, 0x80) r3 = syz_open_dev$midi(&(0x7f0000000340)='/dev/midi#\x00', 0x0, 0x2000) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f00000003c0)={'rose0\x00', {0x2, 0x4e20, @multicast1}}) r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x9) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000380)=[r1, r4, r2, r2], 0x4) lsetxattr$trusted_overlay_origin(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.origin\x00', &(0x7f0000000300)='y\x00', 0x2, 0x2) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="865ff98113", 0x5}], 0x1) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="c80000000000000004000000000000000500000a00000000060000000000000002000000c30000002c2600000000000005004c6628b33c81577cffff000000000b000000070000002f6465762f6c6f6f70230000dcbdb20b0bdb0000000002000000000000050003000100000000000000300200000006b2420000000a000000090000002f6465762f637573650000000007bc0001000000000000000700000076706f7369784f61636c5f6163636573737b5900"/200], 0xc8) 18:01:22 executing program 3: futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080)=0x9, &(0x7f00000000c0)=0x2) dup(r0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x2}, 0x10) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) 18:01:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x6000000}, 0x800) 18:01:22 executing program 4: r0 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) lseek(r0, 0x7ffffffffffffffb, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="0900f98113", 0x5}], 0x1) 18:01:22 executing program 4: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xffffffff, 0x7fffffff}) r1 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) lseek(r1, 0x7ffffffffffffffb, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="865ff98113", 0x5}], 0x1) 18:01:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x7000000}, 0x800) 18:01:22 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x2, 0x1000800000000005, 0x0, r0, 0x0}]) [ 1510.376144][T26098] FAULT_INJECTION: forcing a failure. [ 1510.376144][T26098] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1510.419361][T26098] CPU: 0 PID: 26098 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 1510.427475][T26098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1510.437536][T26098] Call Trace: [ 1510.440845][T26098] dump_stack+0x172/0x1f0 [ 1510.445206][T26098] should_fail.cold+0xa/0x15 [ 1510.449824][T26098] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1510.455660][T26098] ? ___might_sleep+0x163/0x280 [ 1510.460531][T26098] should_fail_alloc_page+0x50/0x60 [ 1510.465735][T26098] __alloc_pages_nodemask+0x1a1/0x8d0 [ 1510.471116][T26098] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1510.476859][T26098] ? mmu_topup_memory_caches+0x97/0x490 [ 1510.482420][T26098] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1510.488674][T26098] alloc_pages_current+0x107/0x210 [ 1510.493804][T26098] __get_free_pages+0xc/0x40 [ 1510.498408][T26098] mmu_topup_memory_caches+0x1e1/0x490 [ 1510.503880][T26098] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1510.510136][T26098] kvm_mmu_load+0x21/0x12e0 [ 1510.514655][T26098] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1510.520299][T26098] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1510.526544][T26098] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1510.531751][T26098] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1510.538004][T26098] vcpu_enter_guest+0x3b21/0x5f40 [ 1510.543046][T26098] ? emulator_read_emulated+0x50/0x50 [ 1510.548441][T26098] ? lock_acquire+0x16f/0x3f0 [ 1510.553141][T26098] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1510.558873][T26098] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1510.564421][T26098] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1510.564446][T26098] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1510.564463][T26098] ? kvm_set_memory_region+0x50/0x50 [ 1510.564478][T26098] ? tomoyo_path_number_perm+0x263/0x520 [ 1510.564498][T26098] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1510.591583][T26098] ? __f_unlock_pos+0x19/0x20 [ 1510.596281][T26098] ? __fget+0x35a/0x550 [ 1510.600446][T26098] ? kvm_set_memory_region+0x50/0x50 [ 1510.605750][T26098] do_vfs_ioctl+0xd5f/0x1380 [ 1510.610356][T26098] ? ioctl_preallocate+0x210/0x210 [ 1510.615473][T26098] ? __fget+0x381/0x550 18:01:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000000}, 0x800) [ 1510.619651][T26098] ? ksys_dup3+0x3e0/0x3e0 [ 1510.624074][T26098] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1510.630332][T26098] ? fput_many+0x12c/0x1a0 [ 1510.634760][T26098] ? tomoyo_file_ioctl+0x23/0x30 [ 1510.639794][T26098] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1510.646037][T26098] ? security_file_ioctl+0x8d/0xc0 [ 1510.651158][T26098] ksys_ioctl+0xab/0xd0 [ 1510.655330][T26098] __x64_sys_ioctl+0x73/0xb0 [ 1510.659930][T26098] do_syscall_64+0xfd/0x680 [ 1510.664447][T26098] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1510.670346][T26098] RIP: 0033:0x459519 [ 1510.674248][T26098] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1510.693848][T26098] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1510.693863][T26098] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 [ 1510.693872][T26098] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1510.693880][T26098] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1510.693888][T26098] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 [ 1510.693896][T26098] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 18:01:23 executing program 5: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000380), 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x3344, 0x0, 0x10001, 0x7}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000080)={r1, 0x80000001}) 18:01:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x9000000}, 0x800) 18:01:23 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x4800, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2) r1 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) lseek(r1, 0x7ffffffffffffffb, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="865ff98113", 0x5}], 0x1) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x1, 0x0) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000080)) 18:01:23 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x3, 0x1000800000000005, 0x0, r0, 0x0}]) 18:01:23 executing program 1 (fault-call:8 fault-nth:45): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:01:23 executing program 3: futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x100) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000040)={0x4, 0xa6c, 0x4882}) 18:01:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xa000000}, 0x800) 18:01:23 executing program 4: r0 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) lseek(r0, 0x7ffffffffffffffb, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="865ff98113c461979a3c5978e4ccaf03f19b5aab731ff484fe2ea86968f9c3f7274d578a6d3c5def129205be250316cfffa11df502a959e0ad6ace25838197b437866d14d90cd8c69edb3a4d43a5db8d94ddf1a2bda6ccffac00"/103, 0xfffffffffffffdb5}], 0x1) [ 1511.182109][T26334] FAULT_INJECTION: forcing a failure. [ 1511.182109][T26334] name fail_page_alloc, interval 1, probability 0, space 0, times 0 18:01:23 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x100000001, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x2b, 0xfe, 0x5, 0x918, 0x10, 0x4, 0x0, 0x4000000000007, 0x8, 0x3, 0x8, 0x2}) r1 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) lseek(r1, 0x45, 0x0) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000080)=""/10) 18:01:23 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x4, 0x1000800000000005, 0x0, r0, 0x0}]) [ 1511.245911][T26334] CPU: 0 PID: 26334 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 1511.253838][T26334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1511.263900][T26334] Call Trace: [ 1511.267214][T26334] dump_stack+0x172/0x1f0 [ 1511.271587][T26334] should_fail.cold+0xa/0x15 [ 1511.276202][T26334] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1511.282020][T26334] ? ___might_sleep+0x163/0x280 [ 1511.286888][T26334] should_fail_alloc_page+0x50/0x60 [ 1511.292101][T26334] __alloc_pages_nodemask+0x1a1/0x8d0 [ 1511.297492][T26334] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1511.303236][T26334] ? mmu_topup_memory_caches+0x97/0x490 [ 1511.308800][T26334] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1511.315059][T26334] alloc_pages_current+0x107/0x210 [ 1511.320187][T26334] __get_free_pages+0xc/0x40 [ 1511.324792][T26334] mmu_topup_memory_caches+0x1e1/0x490 [ 1511.330263][T26334] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1511.336517][T26334] kvm_mmu_load+0x21/0x12e0 [ 1511.341035][T26334] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1511.346675][T26334] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1511.352932][T26334] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1511.358146][T26334] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1511.364400][T26334] vcpu_enter_guest+0x3b21/0x5f40 [ 1511.369441][T26334] ? emulator_read_emulated+0x50/0x50 [ 1511.374823][T26334] ? lock_acquire+0x16f/0x3f0 [ 1511.379510][T26334] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1511.385244][T26334] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1511.390803][T26334] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 18:01:23 executing program 4: r0 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) lseek(r0, 0x7ffffffffffffffb, 0x2) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="865ff98113", 0x5}], 0x1) [ 1511.396544][T26334] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1511.401239][T26334] ? kvm_set_memory_region+0x50/0x50 [ 1511.406540][T26334] ? tomoyo_path_number_perm+0x263/0x520 [ 1511.412191][T26334] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1511.418013][T26334] ? __f_unlock_pos+0x19/0x20 [ 1511.422792][T26334] ? __fget+0x35a/0x550 [ 1511.426963][T26334] ? kvm_set_memory_region+0x50/0x50 [ 1511.432260][T26334] do_vfs_ioctl+0xd5f/0x1380 [ 1511.436870][T26334] ? ioctl_preallocate+0x210/0x210 [ 1511.441993][T26334] ? __fget+0x381/0x550 18:01:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xb000000}, 0x800) [ 1511.446162][T26334] ? ksys_dup3+0x3e0/0x3e0 [ 1511.450679][T26334] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1511.456935][T26334] ? fput_many+0x12c/0x1a0 [ 1511.461373][T26334] ? tomoyo_file_ioctl+0x23/0x30 [ 1511.466322][T26334] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1511.472574][T26334] ? security_file_ioctl+0x8d/0xc0 [ 1511.477794][T26334] ksys_ioctl+0xab/0xd0 [ 1511.481962][T26334] __x64_sys_ioctl+0x73/0xb0 [ 1511.486656][T26334] do_syscall_64+0xfd/0x680 [ 1511.491176][T26334] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1511.497071][T26334] RIP: 0033:0x459519 [ 1511.500975][T26334] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1511.520584][T26334] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1511.536491][T26334] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 [ 1511.545581][T26334] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1511.553567][T26334] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1511.561561][T26334] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 [ 1511.569634][T26334] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 18:01:23 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x100, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000040)={0x3, 0x8e, 0xf58}) futex(&(0x7f0000000180)=0x4, 0x80000000000b, 0x0, 0x0, &(0x7f0000000380), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080), 0xfffffffffffffe74) setsockopt$inet_dccp_int(r0, 0x21, 0x4, &(0x7f0000000140)=0x8000, 0x4) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f0000000200)={0x0, 0x6, 0x5, &(0x7f00000001c0)=0x2}) 18:01:23 executing program 4: r0 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) lseek(r0, 0x7ffffffffffffffb, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="865ff98113", 0x5}], 0x1) r1 = syz_open_dev$sndpcmp(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', 0x8, 0x7ffe) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x18, 0x100, 0x5, 0x21, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_sec_ctx={0x6, 0x18, 0x5, 0x3, 0x23, "43f180c73b114655dcd55227d51ee8151dba5732f6d1b1a496e38ff453bab73b280c7f"}, @sadb_ident={0x2, 0xb, 0x81, 0x0, 0x1}, @sadb_x_filter={0x5, 0x1a, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@local, 0x11, 0x14, 0x4}, @sadb_x_nat_t_type={0x1, 0x14, 0x7}, @sadb_x_policy={0x8, 0x12, 0x3, 0x3, 0x0, 0x6e6bb5, 0x2bf7, {0x6, 0x3c, 0x6, 0x4, 0x0, 0x6, 0x0, @in=@empty, @in6=@dev={0xfe, 0x80, [], 0x2a}}}, @sadb_lifetime={0x4, 0x3, 0x315, 0x1, 0x800, 0x5}, @sadb_x_nat_t_type={0x1, 0x14, 0x4}, @sadb_ident={0x2, 0xb, 0x3f, 0x0, 0xfffffffffffffffc}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x4d6}]}, 0x108}}, 0x10) 18:01:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000000}, 0x800) 18:01:23 executing program 1 (fault-call:8 fault-nth:46): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:01:23 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x300, 0x1000800000000005, 0x0, r0, 0x0}]) 18:01:23 executing program 3: futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) [ 1512.088419][T26578] FAULT_INJECTION: forcing a failure. [ 1512.088419][T26578] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1512.114720][T26578] CPU: 1 PID: 26578 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 1512.122651][T26578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1512.132725][T26578] Call Trace: 18:01:24 executing program 4: r0 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) lseek(r0, 0x7ffffffffffffffb, 0x0) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="865ff98113", 0x5}], 0x1) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x0, 0x2) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000280)={@ipv4={[], [], @dev}, 0x0}, &(0x7f00000002c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000400)=0xe8) accept4$packet(0xffffffffffffff9c, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@remote}}, &(0x7f0000000640)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000006c0)={@loopback, @broadcast, 0x0}, &(0x7f0000000700)=0xc) accept4$packet(0xffffffffffffff9c, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000940)=0x14, 0x0) getsockname(0xffffffffffffff9c, &(0x7f0000000980)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000a00)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a80)={{{@in6=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f0000000b80)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000bc0)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000cc0)={'tunl0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000d00)={0x0, @broadcast, @multicast2}, &(0x7f0000000d40)=0xc) accept$packet(0xffffffffffffff9c, &(0x7f0000000d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000dc0)=0x14) accept$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000004c0)=0xffffffffffffff67) accept4$packet(0xffffffffffffffff, &(0x7f0000000f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000f80)=0x14, 0x80000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000001080)={'sit0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000010c0)={{{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@remote}}, &(0x7f00000011c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001200)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000001240)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000001280)={0x0, @rand_addr, @remote}, &(0x7f00000012c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001300)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@empty}}, &(0x7f0000001400)=0xe8) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f0000001440)={@loopback, @multicast1, 0x0}, &(0x7f0000001480)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000014c0)={'syzkaller1\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000001500)={{{@in=@broadcast, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000001600)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000001640)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000001740)=0xe8) recvmmsg(0xffffffffffffffff, &(0x7f0000005040)=[{{&(0x7f0000001940)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000001a40)=[{&(0x7f00000019c0)=""/36, 0x24}, {&(0x7f0000001a00)=""/37, 0x25}], 0x2, &(0x7f0000001a80)=""/196, 0xc4}, 0x5}, {{&(0x7f0000001b80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001c00)=""/33, 0x21}, {&(0x7f0000001c40)=""/135, 0x87}, {&(0x7f0000001d00)=""/35, 0x23}, {&(0x7f0000001d40)=""/39, 0x27}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/1, 0x1}, {&(0x7f0000001e00)=""/38, 0x26}, {&(0x7f0000001e40)=""/196, 0xc4}], 0x8}, 0x7}, {{&(0x7f0000001fc0)=@tipc=@name, 0x80, &(0x7f0000003200)=[{&(0x7f0000002040)=""/36, 0x24}, {&(0x7f0000002080)=""/143, 0x8f}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000003140)=""/167, 0xa7}], 0x4, &(0x7f0000003240)=""/178, 0xb2}, 0x6}, {{&(0x7f0000003300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f00000038c0)=[{&(0x7f0000003380)=""/83, 0x53}, {&(0x7f0000003400)=""/59, 0x3b}, {&(0x7f0000003440)=""/121, 0x79}, {&(0x7f00000034c0)=""/164, 0xa4}, {&(0x7f0000003580)=""/16, 0x10}, {&(0x7f00000035c0)=""/198, 0xc6}, {&(0x7f00000036c0)=""/234, 0xea}, {&(0x7f00000037c0)=""/6, 0x6}, {&(0x7f0000003800)=""/160, 0xa0}], 0x9, &(0x7f0000003980)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000004980)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004a00)=""/85, 0x55}], 0x1, &(0x7f0000004ac0)=""/86, 0x56}, 0x3}, {{0x0, 0x0, &(0x7f0000004f00)=[{&(0x7f0000004b40)=""/122, 0x7a}, {&(0x7f0000004bc0)=""/4, 0x4}, {&(0x7f0000004c00)=""/248, 0xf8}, {&(0x7f0000004d00)=""/254, 0xfe}, {&(0x7f0000004e00)=""/98, 0x62}, {&(0x7f0000004e80)=""/87, 0x57}], 0x6, &(0x7f0000004f80)=""/160, 0xa0}, 0x8001}], 0x6, 0x20, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)={@multicast1, @local, 0x0}, &(0x7f0000005200)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000005b80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000005b40)={&(0x7f0000005240)=ANY=[@ANYBLOB="dc080000", @ANYRES16=r2, @ANYBLOB="200029bd7000fbdbdf250300000008000100", @ANYRES32=r3, @ANYBLOB="3401020040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000000000008000600", @ANYRES32=r4, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004006163746976656261636b7570000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000100000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000000000008000100", @ANYRES32=r6, @ANYBLOB="fc00020040000100240001006d6f646500000000000000000000000000000000000000000000000000000000080003000500000010000400726f756e64726f62696e00003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000400000008000600", @ANYRES32=r8, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000008000100", @ANYRES32=r9, @ANYBLOB="a001020038000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000008000300030000000800040006000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=r10, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r11, @ANYBLOB="6c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000003c0004000500b35004000000ffff04ff070000000100fd0200010100000006041f00000000000534a5050000800000ff02000000ffd600ff20aa000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000100000008000600", @ANYRES32=r12, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="f80002003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r15, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r16, @ANYBLOB="400088f5240001006c625f686173685f737461748b00001700000097b92d074ed088a898002b5f080003000b000000080004000100000008020799dbac838349ae93be", @ANYRES32=r17, @ANYBLOB="680102003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r18, @ANYBLOB="3c000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000000c00040072616e646f6d00003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r19, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000800000008000600", @ANYRES32=r20, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r21, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400f400000008000100", @ANYRES32=r22, @ANYBLOB="bc0002003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r23, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000100000008000600", @ANYRES32=r24, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r25, @ANYBLOB="080007000000000008000100", @ANYRES32=r26, @ANYBLOB="a40102003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r27, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000100008040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040000000000080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r28, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r29, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c00040068617368000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r30], 0x8dc}, 0x1, 0x0, 0x0, 0x10}, 0x4040010) [ 1512.136035][T26578] dump_stack+0x172/0x1f0 [ 1512.140391][T26578] should_fail.cold+0xa/0x15 [ 1512.144992][T26578] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1512.150803][T26578] ? ___might_sleep+0x163/0x280 [ 1512.150825][T26578] should_fail_alloc_page+0x50/0x60 [ 1512.150839][T26578] __alloc_pages_nodemask+0x1a1/0x8d0 [ 1512.150857][T26578] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1512.150889][T26578] ? mmu_topup_memory_caches+0x97/0x490 [ 1512.177536][T26578] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1512.183826][T26578] alloc_pages_current+0x107/0x210 18:01:24 executing program 5: futex(&(0x7f0000000000)=0x4, 0x8f, 0x4, 0x0, &(0x7f0000000380), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) [ 1512.188945][T26578] __get_free_pages+0xc/0x40 [ 1512.193547][T26578] mmu_topup_memory_caches+0x1e1/0x490 [ 1512.199035][T26578] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1512.205287][T26578] kvm_mmu_load+0x21/0x12e0 [ 1512.205308][T26578] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1512.205325][T26578] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1512.205341][T26578] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1512.205358][T26578] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1512.205377][T26578] vcpu_enter_guest+0x3b21/0x5f40 18:01:24 executing program 5: futex(&(0x7f000000cffc)=0x4, 0x85, 0x4, 0x0, &(0x7f0000000380), 0x0) futex(&(0x7f0000000040), 0x5, 0x4, 0x0, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x28000, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000080)={0x18, 0x0, {0x0, @remote, 'veth1_to_bond\x00'}}) [ 1512.226916][T26578] ? emulator_read_emulated+0x50/0x50 [ 1512.226938][T26578] ? lock_acquire+0x16f/0x3f0 [ 1512.226954][T26578] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1512.226982][T26578] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1512.259540][T26578] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1512.265279][T26578] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1512.269966][T26578] ? kvm_set_memory_region+0x50/0x50 [ 1512.275269][T26578] ? tomoyo_path_number_perm+0x263/0x520 [ 1512.280933][T26578] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1512.286754][T26578] ? __f_unlock_pos+0x19/0x20 [ 1512.291487][T26578] ? __fget+0x35a/0x550 [ 1512.295663][T26578] ? kvm_set_memory_region+0x50/0x50 [ 1512.300963][T26578] do_vfs_ioctl+0xd5f/0x1380 [ 1512.305566][T26578] ? ioctl_preallocate+0x210/0x210 [ 1512.310691][T26578] ? __fget+0x381/0x550 [ 1512.314958][T26578] ? ksys_dup3+0x3e0/0x3e0 [ 1512.319423][T26578] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1512.325674][T26578] ? fput_many+0x12c/0x1a0 [ 1512.330105][T26578] ? tomoyo_file_ioctl+0x23/0x30 18:01:24 executing program 5: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000380), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x1) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000300)=0xe8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000006c0)=0x0) getpgrp(r5) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000640), &(0x7f0000000680)=0x4) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0xa, 0x4e24, 0x3, @mcast2, 0x6}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000100)="834c96df15d6b5c99b003d50428261b728445287a58feb4cd94817b711f26d2cb50744be981134dc872a3f84b901a179d4bfef7e712d14d9de0e8f69", 0x3c}, {&(0x7f0000000140)="50c5f0b71a5203a9ec8481e336f50b72705a9d213ef8a7fa5d2830a4903f2a0664cda6cf2cbade736ca137c09d6f31063369a20aae4d445d067c79dc0a9ca15ee9195e030cb96ea3e6b74bcca09021b15cc7244cc1cddd597a31497d93bcc573560c18857670bb56e1054a6b6c8ecee99ae6a5db59eedcaa8ff6d2d89c96751dff20d65e22568c76bb68f047f8bec758b67b16b40470d3bff2d22c7061", 0x9d}, {&(0x7f0000000200)="5601c0f226f33aac21445b16e983a35581ec3c5eb9a14607ffd6a6786aefcbd0e772895cab33c8791fc01cb35da9", 0x2e}], 0x3, &(0x7f00000004c0)=[@pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, [], 0x1, 0x0}, r2}}}, @dstopts_2292={{0xa8, 0x29, 0x4, {0x2e, 0x11, [], [@pad1, @generic={0x0, 0x56, "2485f8d7cc5ddb9bbcca19da1951054776586255ce91526bd8e3b3607994937b7054a455a3810e1a170ec892f8b64529cbf7c184cf0f446003420d3394af4cec3143c8b6ea1771aeb742966cf17df1f59a2b1305b386"}, @hao={0xc9, 0x10, @loopback}, @jumbo={0xc2, 0x4, 0xd98}, @jumbo={0xc2, 0x4, 0x2}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @pad1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr="25be66a86bf00a58d06f882262c7cf86", r3}}}, @hopopts={{0x58, 0x29, 0x36, {0x3a, 0x7, [], [@padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x0, 0x1f, "1fcf84b61926027eb5f15113f0906c16174e0487dda5bdffa9aa83f613f29d"}, @pad1, @hao={0xc9, 0x10, @ipv4={[], [], @local}}, @ra={0x5, 0x2, 0x5}]}}}], 0x150}, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) write$P9_RXATTRWALK(r6, &(0x7f0000000040)={0xf, 0x1f, 0x1, 0x800}, 0xf) setreuid(r4, r4) [ 1512.335070][T26578] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1512.341329][T26578] ? security_file_ioctl+0x8d/0xc0 [ 1512.346454][T26578] ksys_ioctl+0xab/0xd0 [ 1512.350619][T26578] __x64_sys_ioctl+0x73/0xb0 [ 1512.355226][T26578] do_syscall_64+0xfd/0x680 [ 1512.359743][T26578] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1512.365645][T26578] RIP: 0033:0x459519 [ 1512.369547][T26578] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 18:01:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xe000000}, 0x800) [ 1512.389193][T26578] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1512.389210][T26578] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 [ 1512.389217][T26578] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1512.389224][T26578] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1512.389232][T26578] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 [ 1512.389239][T26578] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 18:01:24 executing program 4: r0 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) lseek(r0, 0x7ffffffffffffffb, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)="beb0a05de49c60fea105e5da9581a63c24a14da381fa81746598a1fca59dedcb31c05d5015bd048cb5a53bcbc8f12a3238705ed9ffb6deeac1e075b17b832190e074878802d1d9dd5115f84ad72ae59993a05abb7f33f67789c34e17d1098eda98de7911a428fc029a17f9ddf41635dbdc60019500c43d281c75f787b31ea6ca9b501ff9", 0x84}, {&(0x7f0000000340)="cb6eced717fc90e414a5230f1b00571b63cef0f37650a90f93383dcb4d89222af4a1e7434f7b64c376057e99ce45658493dff1c690774e839bc5cd62362b384b00fcac95faa84839fb8e487825da849275fc764eb5ed00abf4bf65d0814ae815eabf75610efe7919ac6c78e89b3397dc30ddb02c79ec648231000000000000000000000000f6b298f01c7944aaedb5ed000000", 0x93}, {&(0x7f0000000300)="9fda48db1334bac6fa038febec189149c0489aa9f6e30124642cba4dd80000000000001e18d4965ebb4f8f74", 0x2c}, {&(0x7f00000001c0)="c2cb3c67ebfdb5927feddcf74f894a0f39273893deeb3f6f67d4b3df8e39178b9f08370b95c428a4e4767568946c378e0202acc0eb3d158f102acca385723fbb12fd5fb5197f9af0755a334965dd80d3727a62725fe6e668d5b274ff118560be816e6fa8d8851b6deecfa6cfa64d4359f6aa2128d5f66d3e12958842ce416d73fa3649012df274886bb756b0ab5f30ba6707d5c541442b076bd29b59abd38c", 0x6d}], 0x4) 18:01:24 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x4000, 0x1000800000000005, 0x0, r0, 0x0}]) 18:01:24 executing program 4: r0 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x0, 0x40) sendmsg$nl_crypto(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f80000001200000627bd7000fedbdf2561656769733132382d67656e657269630000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000254100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000024000000000000000000000800010005000000080001000900000008000100ff030000"], 0xf8}, 0x1, 0x0, 0x0, 0xbd220d92fa241199}, 0x8000) r1 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x10000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000340)={0x3f, 0x6, 0x2e79, 0x20, 0x4, 0x7}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000080)={0xfffffffffffff000, 0x0, {0x0, 0x1, 0xad3, 0x3, 0x20}}) lseek(r1, 0x7ffffffffffffffb, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="865ff98113", 0x5}], 0x1) prctl$PR_SET_THP_DISABLE(0x29, 0x0) 18:01:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xf000000}, 0x800) 18:01:24 executing program 1 (fault-call:8 fault-nth:47): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:01:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000000}, 0x800) 18:01:24 executing program 3: futex(&(0x7f000000cffc)=0x1, 0x1, 0x0, 0x0, 0x0, 0x1) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) 18:01:24 executing program 4: r0 = memfd_create(&(0x7f0000000040)='posix_acl_access{Y\x00', 0x0) lseek(r0, 0x7ffffffffffffffb, 0x0) writev(r0, &(0x7f0000000080), 0x0) 18:01:24 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x1000000, 0x1000800000000005, 0x0, r0, 0x0}]) 18:01:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x11000000}, 0x800) [ 1512.917804][T26820] FAULT_INJECTION: forcing a failure. [ 1512.917804][T26820] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1512.952155][T26820] CPU: 1 PID: 26820 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 1512.960176][T26820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1512.970237][T26820] Call Trace: [ 1512.973544][T26820] dump_stack+0x172/0x1f0 [ 1512.977896][T26820] should_fail.cold+0xa/0x15 [ 1512.982522][T26820] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1512.988332][T26820] ? ___might_sleep+0x163/0x280 [ 1512.993199][T26820] should_fail_alloc_page+0x50/0x60 [ 1512.998418][T26820] __alloc_pages_nodemask+0x1a1/0x8d0 [ 1513.003809][T26820] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1513.009552][T26820] ? mmu_topup_memory_caches+0x97/0x490 [ 1513.015204][T26820] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1513.021463][T26820] alloc_pages_current+0x107/0x210 [ 1513.026593][T26820] __get_free_pages+0xc/0x40 [ 1513.031228][T26820] mmu_topup_memory_caches+0x1e1/0x490 [ 1513.036699][T26820] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1513.042953][T26820] kvm_mmu_load+0x21/0x12e0 [ 1513.047492][T26820] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1513.053139][T26820] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1513.059386][T26820] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1513.064594][T26820] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1513.070835][T26820] vcpu_enter_guest+0x3b21/0x5f40 [ 1513.070859][T26820] ? emulator_read_emulated+0x50/0x50 [ 1513.070876][T26820] ? lock_acquire+0x16f/0x3f0 [ 1513.070891][T26820] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1513.070911][T26820] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1513.070931][T26820] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1513.103022][T26820] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1513.107706][T26820] ? kvm_set_memory_region+0x50/0x50 [ 1513.113001][T26820] ? tomoyo_path_number_perm+0x263/0x520 [ 1513.118649][T26820] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1513.124474][T26820] ? __f_unlock_pos+0x19/0x20 [ 1513.129171][T26820] ? __fget+0x35a/0x550 [ 1513.133349][T26820] ? kvm_set_memory_region+0x50/0x50 [ 1513.138647][T26820] do_vfs_ioctl+0xd5f/0x1380 [ 1513.143251][T26820] ? ioctl_preallocate+0x210/0x210 [ 1513.148370][T26820] ? __fget+0x381/0x550 [ 1513.152542][T26820] ? ksys_dup3+0x3e0/0x3e0 [ 1513.156968][T26820] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1513.163216][T26820] ? fput_many+0x12c/0x1a0 [ 1513.167648][T26820] ? tomoyo_file_ioctl+0x23/0x30 [ 1513.172607][T26820] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1513.178877][T26820] ? security_file_ioctl+0x8d/0xc0 [ 1513.183999][T26820] ksys_ioctl+0xab/0xd0 [ 1513.188170][T26820] __x64_sys_ioctl+0x73/0xb0 [ 1513.192783][T26820] do_syscall_64+0xfd/0x680 [ 1513.197274][T26820] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1513.203146][T26820] RIP: 0033:0x459519 [ 1513.207035][T26820] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1513.226647][T26820] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1513.235058][T26820] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 [ 1513.243011][T26820] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1513.250963][T26820] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1513.258927][T26820] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 [ 1513.266918][T26820] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 18:01:25 executing program 5: r0 = getpid() waitid(0x2, r0, &(0x7f0000000000), 0x1000000, &(0x7f0000000080)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000380), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) 18:01:25 executing program 4: r0 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) lseek(r0, 0x7ffffffffffffffb, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="865ff98113", 0x5}], 0x1) 18:01:25 executing program 3: futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r2 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x7, 0x800) r3 = getpgrp(0xffffffffffffffff) write$P9_RGETLOCK(r2, &(0x7f0000000140)={0x2b, 0x37, 0x2, {0x1, 0x4, 0x5, r3, 0xd, '\\bdev^cgroup\\'}}, 0x2b) futex(&(0x7f0000000000)=0x1, 0x0, 0x1, &(0x7f0000000080)={r0, r1+30000000}, &(0x7f00000000c0)=0x1, 0x0) 18:01:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x12000000}, 0x800) 18:01:25 executing program 1 (fault-call:8 fault-nth:48): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:01:25 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x2000000, 0x1000800000000005, 0x0, r0, 0x0}]) 18:01:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x13000000}, 0x800) [ 1513.480352][T26943] FAULT_INJECTION: forcing a failure. [ 1513.480352][T26943] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1513.507561][T26943] CPU: 0 PID: 26943 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 1513.515495][T26943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1513.525555][T26943] Call Trace: [ 1513.525585][T26943] dump_stack+0x172/0x1f0 [ 1513.525609][T26943] should_fail.cold+0xa/0x15 [ 1513.525641][T26943] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1513.525665][T26943] ? ___might_sleep+0x163/0x280 [ 1513.548493][T26943] should_fail_alloc_page+0x50/0x60 [ 1513.553705][T26943] __alloc_pages_nodemask+0x1a1/0x8d0 [ 1513.559090][T26943] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1513.564821][T26943] ? mmu_topup_memory_caches+0x97/0x490 [ 1513.570379][T26943] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1513.576647][T26943] alloc_pages_current+0x107/0x210 [ 1513.581774][T26943] __get_free_pages+0xc/0x40 [ 1513.586381][T26943] mmu_topup_memory_caches+0x1e1/0x490 [ 1513.591864][T26943] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1513.598124][T26943] kvm_mmu_load+0x21/0x12e0 [ 1513.602654][T26943] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1513.608306][T26943] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1513.614917][T26943] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1513.620129][T26943] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1513.626387][T26943] vcpu_enter_guest+0x3b21/0x5f40 [ 1513.631430][T26943] ? emulator_read_emulated+0x50/0x50 [ 1513.636851][T26943] ? lock_acquire+0x16f/0x3f0 [ 1513.641547][T26943] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1513.647310][T26943] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1513.652868][T26943] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1513.658610][T26943] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1513.663312][T26943] ? kvm_set_memory_region+0x50/0x50 [ 1513.668609][T26943] ? tomoyo_path_number_perm+0x263/0x520 [ 1513.674261][T26943] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1513.680073][T26943] ? __f_unlock_pos+0x19/0x20 [ 1513.684753][T26943] ? __fget+0x35a/0x550 [ 1513.688921][T26943] ? kvm_set_memory_region+0x50/0x50 [ 1513.694214][T26943] do_vfs_ioctl+0xd5f/0x1380 [ 1513.698814][T26943] ? ioctl_preallocate+0x210/0x210 [ 1513.703939][T26943] ? __fget+0x381/0x550 [ 1513.708106][T26943] ? ksys_dup3+0x3e0/0x3e0 [ 1513.713052][T26943] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1513.719301][T26943] ? fput_many+0x12c/0x1a0 [ 1513.723729][T26943] ? tomoyo_file_ioctl+0x23/0x30 18:01:25 executing program 4: lseek(0xffffffffffffffff, 0x7ffffffffffffffb, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="865ff98113", 0x5}], 0x1) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000080)) 18:01:25 executing program 4: r0 = memfd_create(&(0x7f0000000040)='posix_acl_access{Y\x00', 0x0) lseek(r0, 0x7ffffffffffffffb, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="865ff98113", 0x5}], 0x1) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4800) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f00000000c0)=0x4000) 18:01:25 executing program 4: r0 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) lseek(r0, 0x7ffffffffffffffb, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="865ff98113", 0x1}], 0x1) [ 1513.728682][T26943] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1513.734931][T26943] ? security_file_ioctl+0x8d/0xc0 [ 1513.740054][T26943] ksys_ioctl+0xab/0xd0 [ 1513.744222][T26943] __x64_sys_ioctl+0x73/0xb0 [ 1513.748835][T26943] do_syscall_64+0xfd/0x680 [ 1513.753352][T26943] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1513.759245][T26943] RIP: 0033:0x459519 [ 1513.763236][T26943] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1513.782851][T26943] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1513.791285][T26943] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 [ 1513.799266][T26943] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1513.799275][T26943] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1513.799283][T26943] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 18:01:25 executing program 4: r0 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x4000, 0x0) lseek(r0, 0x7ffffffffffffffb, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="865ff98113", 0x5}], 0x1) [ 1513.799290][T26943] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 18:01:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x14000000}, 0x800) 18:01:26 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x3000000, 0x1000800000000005, 0x0, r0, 0x0}]) 18:01:26 executing program 1 (fault-call:8 fault-nth:49): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:01:26 executing program 3: futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) accept$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10) 18:01:26 executing program 5: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000380), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x0, @time={0x77359400}, 0x7, {0x1, 0x9}, 0xc15, 0x2, 0xffffffffffff3417}) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x20000, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10a) 18:01:26 executing program 4: r0 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) lseek(r0, 0x7ffffffffffffffb, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f00000000c0)={0x1, 0x1f5}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="865ff98113", 0x5}], 0x1) r2 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f0000000140)=""/217) 18:01:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000000}, 0x800) [ 1514.465051][T27093] FAULT_INJECTION: forcing a failure. [ 1514.465051][T27093] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1514.486205][T27093] CPU: 1 PID: 27093 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 1514.494156][T27093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1514.504222][T27093] Call Trace: [ 1514.504262][T27093] dump_stack+0x172/0x1f0 [ 1514.511888][T27093] should_fail.cold+0xa/0x15 [ 1514.511906][T27093] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1514.511921][T27093] ? ___might_sleep+0x163/0x280 [ 1514.511941][T27093] should_fail_alloc_page+0x50/0x60 [ 1514.511955][T27093] __alloc_pages_nodemask+0x1a1/0x8d0 [ 1514.511973][T27093] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1514.511998][T27093] ? mmu_topup_memory_caches+0x97/0x490 [ 1514.512021][T27093] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1514.555453][T27093] alloc_pages_current+0x107/0x210 [ 1514.560578][T27093] __get_free_pages+0xc/0x40 18:01:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x60000000}, 0x800) 18:01:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x65580000}, 0x800) [ 1514.565186][T27093] mmu_topup_memory_caches+0x1e1/0x490 [ 1514.570650][T27093] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1514.576902][T27093] kvm_mmu_load+0x21/0x12e0 [ 1514.581419][T27093] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1514.587067][T27093] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1514.593325][T27093] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1514.598537][T27093] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1514.604785][T27093] vcpu_enter_guest+0x3b21/0x5f40 [ 1514.609829][T27093] ? emulator_read_emulated+0x50/0x50 [ 1514.615206][T27093] ? lock_acquire+0x16f/0x3f0 [ 1514.619890][T27093] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1514.625621][T27093] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1514.631262][T27093] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1514.631286][T27093] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1514.631302][T27093] ? kvm_set_memory_region+0x50/0x50 [ 1514.631317][T27093] ? tomoyo_path_number_perm+0x263/0x520 [ 1514.631340][T27093] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1514.641729][T27093] ? __f_unlock_pos+0x19/0x20 [ 1514.641753][T27093] ? __fget+0x35a/0x550 [ 1514.641772][T27093] ? kvm_set_memory_region+0x50/0x50 [ 1514.641788][T27093] do_vfs_ioctl+0xd5f/0x1380 [ 1514.641806][T27093] ? ioctl_preallocate+0x210/0x210 [ 1514.641819][T27093] ? __fget+0x381/0x550 [ 1514.641839][T27093] ? ksys_dup3+0x3e0/0x3e0 [ 1514.641855][T27093] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1514.641869][T27093] ? fput_many+0x12c/0x1a0 [ 1514.641889][T27093] ? tomoyo_file_ioctl+0x23/0x30 [ 1514.641903][T27093] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 18:01:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x6e100000}, 0x800) [ 1514.641922][T27093] ? security_file_ioctl+0x8d/0xc0 [ 1514.719019][T27093] ksys_ioctl+0xab/0xd0 [ 1514.723201][T27093] __x64_sys_ioctl+0x73/0xb0 [ 1514.727804][T27093] do_syscall_64+0xfd/0x680 [ 1514.732327][T27093] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1514.738221][T27093] RIP: 0033:0x459519 [ 1514.742124][T27093] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 18:01:26 executing program 4: r0 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) lseek(r0, 0x7ffffffffffffffb, 0x0) [ 1514.761730][T27093] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1514.770151][T27093] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 [ 1514.770161][T27093] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1514.770168][T27093] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1514.770176][T27093] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 [ 1514.770184][T27093] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 18:01:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81000000}, 0x800) 18:01:26 executing program 1 (fault-call:8 fault-nth:50): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:01:26 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x4000000, 0x1000800000000005, 0x0, r0, 0x0}]) 18:01:26 executing program 4: r0 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) lseek(r0, 0x7ffffffffffffffb, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10020) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="865ff98113", 0x5}], 0x1) [ 1515.119370][T27218] FAULT_INJECTION: forcing a failure. [ 1515.119370][T27218] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1515.133281][T27218] CPU: 0 PID: 27218 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 1515.141630][T27218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1515.151684][T27218] Call Trace: [ 1515.155002][T27218] dump_stack+0x172/0x1f0 [ 1515.159372][T27218] should_fail.cold+0xa/0x15 [ 1515.164001][T27218] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1515.169838][T27218] ? ___might_sleep+0x163/0x280 [ 1515.174822][T27218] should_fail_alloc_page+0x50/0x60 [ 1515.180059][T27218] __alloc_pages_nodemask+0x1a1/0x8d0 [ 1515.185461][T27218] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1515.191356][T27218] ? mmu_topup_memory_caches+0x97/0x490 [ 1515.205380][T27218] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1515.211653][T27218] alloc_pages_current+0x107/0x210 [ 1515.216760][T27218] __get_free_pages+0xc/0x40 [ 1515.221419][T27218] mmu_topup_memory_caches+0x1e1/0x490 [ 1515.226896][T27218] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1515.233144][T27218] kvm_mmu_load+0x21/0x12e0 [ 1515.237658][T27218] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1515.243311][T27218] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1515.249552][T27218] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1515.254744][T27218] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1515.261003][T27218] vcpu_enter_guest+0x3b21/0x5f40 [ 1515.266021][T27218] ? emulator_read_emulated+0x50/0x50 [ 1515.271394][T27218] ? lock_acquire+0x16f/0x3f0 [ 1515.276070][T27218] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1515.281775][T27218] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1515.287306][T27218] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1515.293033][T27218] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1515.297707][T27218] ? kvm_set_memory_region+0x50/0x50 [ 1515.302979][T27218] ? tomoyo_path_number_perm+0x263/0x520 [ 1515.308605][T27218] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1515.314417][T27218] ? __f_unlock_pos+0x19/0x20 [ 1515.319079][T27218] ? __fget+0x35a/0x550 [ 1515.323222][T27218] ? kvm_set_memory_region+0x50/0x50 [ 1515.328504][T27218] do_vfs_ioctl+0xd5f/0x1380 [ 1515.333095][T27218] ? ioctl_preallocate+0x210/0x210 [ 1515.338195][T27218] ? __fget+0x381/0x550 [ 1515.342334][T27218] ? ksys_dup3+0x3e0/0x3e0 [ 1515.346743][T27218] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1515.352966][T27218] ? fput_many+0x12c/0x1a0 [ 1515.357367][T27218] ? tomoyo_file_ioctl+0x23/0x30 [ 1515.362296][T27218] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1515.368535][T27218] ? security_file_ioctl+0x8d/0xc0 [ 1515.373721][T27218] ksys_ioctl+0xab/0xd0 [ 1515.377888][T27218] __x64_sys_ioctl+0x73/0xb0 [ 1515.382466][T27218] do_syscall_64+0xfd/0x680 [ 1515.386964][T27218] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1515.392854][T27218] RIP: 0033:0x459519 [ 1515.396760][T27218] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 18:01:27 executing program 5: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x6, 0x200) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000040)=0x8, 0x4) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000380), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) 18:01:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x88a8ffff}, 0x800) 18:01:27 executing program 4: r0 = memfd_create(&(0x7f0000000080)='posix_a\xe7\xcc\xb1\xb9\xb9\x85[b\xef\x9dcess{Y\x12\xe4\x00\x00\x00\x00\x00\x00', 0x3fd) lseek(r0, 0x7ffffffffffffffb, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="865ff98113", 0x5}], 0x1) r1 = accept(0xffffffffffffff9c, &(0x7f0000000140)=@caif=@dgm, &(0x7f0000000040)=0x80) r2 = dup(r1) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000340)={0x2800, 0x2000, 0x99, 'queue1\x00', 0x7}) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f00000000c0)={0x5a3, 'syz1\x00'}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f0000000300)={0x4, 0x17ff, 0x3, 0x62c4c2cd, 0x10c6, "c05a134d847011e2237ab9cf1d45ff7f2df21b", 0x1, 0x7fffffff}) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x71, 0x3, @stepwise={{0x5, 0x5}, {0x200, 0x2}, {0x8, 0x3}}}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0x40045542, &(0x7f0000000400)=0x1ffc) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/4\x00') ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000200)=0x3) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000280)=0x9) 18:01:27 executing program 3: futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptmx\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x54, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="046304400300000011634840000000000000000000000000000000000000000010000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a747000000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/29], @ANYBLOB="1d00000000000000000000000000000009000000000000008561646600000000060000000000000002000000000000000600000000000000852a6277001000000200"/80], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='@\x00\x00\x00\x00\x00\x00\x00'], 0x84, 0x0, &(0x7f00000001c0)="21859366f58f230eac292884860bb9b4e465a673d3b05fa28ba9efe7d1506e811ea10b1d9540a3144f6cfb2704f18da941f2a75dd4acde769921e8723c4173d24cf68bcce68eb84f1e58cc232438dcbb7dc529590179495949bb1da4b2ccd4a813b09a270eb5a75237f7dd65e4ef4015f1bc951674287f0b341a3a849e97d366d556e15f"}) nanosleep(&(0x7f00000002c0)={0x77359400}, &(0x7f0000000300)) fsync(r0) [ 1515.416368][T27218] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1515.424777][T27218] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 [ 1515.432751][T27218] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1515.440729][T27218] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1515.448795][T27218] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 [ 1515.456855][T27218] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 18:01:27 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x40000000, 0x1000800000000005, 0x0, r0, 0x0}]) 18:01:27 executing program 1 (fault-call:8 fault-nth:51): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:01:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x9effffff}, 0x800) 18:01:27 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udplite6\x00') getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x400}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={r1, 0x4}, &(0x7f0000000180)=0x8) r2 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x1100081) r4 = memfd_create(&(0x7f00000002c0)='t\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000000c0)={0x0, 0x200000000000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, "a431c2a4cdb9795b06f93c44aefdc4ebf9addb49fd9e2cfaaa63c88dddde91314b0d0c1bcae24ad02e236d21bd56c63a54cc7bfd4ad9913e2f2b6f447da7afba", "ca7b43cfe50b09a476d2e2c6bfd6ac63b02d293cd0b94a4956448cd4144cb88abeba582dc0a71367dc57a23815f624081914c7ef067966df29d18a5750689cdf", "81c7d45ce1dc72f0bb0a35d8194333e5cd543f10797db1079d5bc87f576edc84"}) lseek(r2, 0x7ffffffffffffffb, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="865ff98113", 0x5}], 0x1) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000001c0)={0x0, @speck128, 0x3, "a15dcb06e6f40a34"}) [ 1515.771120][T27350] FAULT_INJECTION: forcing a failure. [ 1515.771120][T27350] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1515.784766][T27350] CPU: 0 PID: 27350 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 1515.792677][T27350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1515.802739][T27350] Call Trace: [ 1515.806050][T27350] dump_stack+0x172/0x1f0 [ 1515.810410][T27350] should_fail.cold+0xa/0x15 18:01:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x800) 18:01:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xfeff0000}, 0x800) [ 1515.815022][T27350] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1515.821639][T27350] ? ___might_sleep+0x163/0x280 [ 1515.826508][T27350] should_fail_alloc_page+0x50/0x60 [ 1515.831723][T27350] __alloc_pages_nodemask+0x1a1/0x8d0 [ 1515.837107][T27350] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1515.842848][T27350] ? mmu_topup_memory_caches+0x97/0x490 [ 1515.848402][T27350] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1515.854663][T27350] alloc_pages_current+0x107/0x210 [ 1515.859790][T27350] __get_free_pages+0xc/0x40 [ 1515.864390][T27350] mmu_topup_memory_caches+0x1e1/0x490 18:01:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xff0f0000}, 0x800) [ 1515.869861][T27350] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1515.876116][T27350] kvm_mmu_load+0x21/0x12e0 [ 1515.880637][T27350] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1515.886280][T27350] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1515.892619][T27350] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1515.892638][T27350] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1515.892658][T27350] vcpu_enter_guest+0x3b21/0x5f40 [ 1515.909107][T27350] ? emulator_read_emulated+0x50/0x50 [ 1515.909126][T27350] ? lock_acquire+0x16f/0x3f0 18:01:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xffffa888}, 0x800) [ 1515.909141][T27350] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1515.909163][T27350] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1515.909183][T27350] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1515.936180][T27350] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1515.940903][T27350] ? kvm_set_memory_region+0x50/0x50 [ 1515.946195][T27350] ? tomoyo_path_number_perm+0x263/0x520 [ 1515.951927][T27350] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1515.957749][T27350] ? __f_unlock_pos+0x19/0x20 [ 1515.962442][T27350] ? __fget+0x35a/0x550 [ 1515.966628][T27350] ? kvm_set_memory_region+0x50/0x50 [ 1515.971923][T27350] do_vfs_ioctl+0xd5f/0x1380 [ 1515.976523][T27350] ? ioctl_preallocate+0x210/0x210 [ 1515.981657][T27350] ? __fget+0x381/0x550 [ 1515.985829][T27350] ? ksys_dup3+0x3e0/0x3e0 [ 1515.990351][T27350] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1515.996604][T27350] ? fput_many+0x12c/0x1a0 [ 1516.001048][T27350] ? tomoyo_file_ioctl+0x23/0x30 [ 1516.006168][T27350] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1516.012415][T27350] ? security_file_ioctl+0x8d/0xc0 [ 1516.017541][T27350] ksys_ioctl+0xab/0xd0 [ 1516.021710][T27350] __x64_sys_ioctl+0x73/0xb0 [ 1516.021729][T27350] do_syscall_64+0xfd/0x680 [ 1516.021748][T27350] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1516.021760][T27350] RIP: 0033:0x459519 [ 1516.021780][T27350] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1516.060390][T27350] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1516.068900][T27350] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 [ 1516.076886][T27350] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1516.084865][T27350] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1516.092823][T27350] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 [ 1516.100777][T27350] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 18:01:28 executing program 5: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000380), 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write(r0, &(0x7f0000000240)="453baf6547650cc5bef165a973db46f18999e21fe4e3ad1881e334e89198c7f007c33ad4a7f8d1d260141289d9de08e91bf65d0038a114041094c0ab1db17475509ee39b1f3df40dfc7d8fae4d7ae10f7e563c955d542e936af63cecacbdc558f4c933d4bc312973bb8503d38467aec8834a7227be390ec3c5", 0x79) pwritev(r0, &(0x7f0000000040)=[{&(0x7f00000023c0)="3d64ecbfa6ef3cee27d196f7dc09153c17d04b1fb8d1a2a53b4f1093834d8c812adce9acabf683b198495af82cb82294c62a8c95767840251135fdb3b39ae83c8813c9e1e3d761a5f4ca6ba96c2c7186fa72b9092933dd98aa45309723a948c5da3a7af8196c5975db388fb03390943f3742ec220c6f69755bbc6678401f5947031d5f9951b8f76df691d51661d429dc77b2a49719ee61d76b95a58ff057c1349e977e3579d9", 0xa6}], 0x1, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000200)={0x21, &(0x7f00000001c0)=""/33}) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xfffffffffffffff7, 0x400) recvmsg$kcm(r1, &(0x7f0000000180)={&(0x7f00000002c0), 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/90, 0xfffffffffffffe66}, {&(0x7f00000003c0)=""/4096, 0xc21}], 0x2, &(0x7f00000013c0)=""/4096, 0x1000}, 0x40002163) 18:01:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xfffff000}, 0x800) 18:01:28 executing program 4: r0 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x410000, 0x0) write$FUSE_NOTIFY_DELETE(r1, &(0x7f00000000c0)={0x33, 0x6, 0x0, {0x6, 0x3, 0xa, 0x0, '/dev/full\x00'}}, 0x33) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x80, 0x0) lseek(r0, 0x7ffffffffffffffb, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="865ff98113", 0x5}], 0x1) 18:01:28 executing program 1 (fault-call:8 fault-nth:52): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:01:28 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x100000000000000, 0x1000800000000005, 0x0, r0, 0x0}]) 18:01:28 executing program 3: futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x80000000000, 0x5, 0x0, 0x0, 0x0, 0x0) 18:01:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x800) 18:01:28 executing program 4: r0 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) lseek(r0, 0x7ffffffffffffffb, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="865ff98113", 0x5}], 0x1) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x20000000080, 0x0) [ 1516.568194][T27475] FAULT_INJECTION: forcing a failure. [ 1516.568194][T27475] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1516.602002][T27475] CPU: 1 PID: 27475 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 1516.609940][T27475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1516.620002][T27475] Call Trace: [ 1516.623316][T27475] dump_stack+0x172/0x1f0 [ 1516.627672][T27475] should_fail.cold+0xa/0x15 [ 1516.632287][T27475] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1516.638109][T27475] ? ___might_sleep+0x163/0x280 [ 1516.642995][T27475] should_fail_alloc_page+0x50/0x60 [ 1516.648212][T27475] __alloc_pages_nodemask+0x1a1/0x8d0 [ 1516.653605][T27475] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1516.659347][T27475] ? mmu_topup_memory_caches+0x97/0x490 [ 1516.664906][T27475] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1516.671189][T27475] alloc_pages_current+0x107/0x210 [ 1516.676308][T27475] __get_free_pages+0xc/0x40 [ 1516.680912][T27475] mmu_topup_memory_caches+0x1e1/0x490 [ 1516.686392][T27475] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1516.692654][T27475] kvm_mmu_load+0x21/0x12e0 [ 1516.692674][T27475] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1516.692691][T27475] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1516.692706][T27475] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1516.692721][T27475] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1516.692742][T27475] vcpu_enter_guest+0x3b21/0x5f40 [ 1516.702915][T27475] ? emulator_read_emulated+0x50/0x50 [ 1516.702936][T27475] ? lock_acquire+0x16f/0x3f0 [ 1516.702951][T27475] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1516.702975][T27475] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1516.702991][T27475] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1516.703016][T27475] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1516.703033][T27475] ? kvm_set_memory_region+0x50/0x50 [ 1516.703050][T27475] ? tomoyo_path_number_perm+0x263/0x520 18:01:28 executing program 4: r0 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="2321202e2f66696c65302073656375726974795b2020706f7369785f61636c5f61636569ddcc454473737b61000ad6a41738c8d42a974a54b1473667dd8ec6b62b32cd638f5e6e69b0f5bcb99aa48470b3f3ec6874bb1921398a1964f1f5d1114f991982f623958a4eac8f67662af260000000000000000000"], 0x7a) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x5, &(0x7f0000000000)=[{0x100000000000000, 0x1ff, 0xaf9, 0x5e4}, {0x5, 0x400, 0xb8, 0x800}, {0x7fffffff, 0x101, 0x3, 0x9}, {0x1, 0x80, 0x1, 0x6}, {0x8, 0x9, 0x3d, 0x1}]}, 0x10) lseek(r0, 0x7fffffffffbffff8, 0x200000000000003) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="865f5c7f0796a06012e58185dca03e439a1aaa492974c72c7257b4f59f14162865c8602e37c15f4478f0bbead4626a5c67f6cbc9c3e881309c481b7f81d5f84750014c44a8863fb4febe731f1949248c8b458667546342905b3a1ea87ae0b80992de95934b9acb8fccc25e703710e874d2c4910000f11e9a8efd11156a4fd3c59dfb384da3d28b2513930e5a99a9fdc37c0cab78c30000000000000000000000000000008a97ed562b", 0xfffffe1e}], 0x100000000000002e) 18:01:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x800) [ 1516.703067][T27475] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1516.703082][T27475] ? __f_unlock_pos+0x19/0x20 [ 1516.703106][T27475] ? __fget+0x35a/0x550 [ 1516.783787][T27475] ? kvm_set_memory_region+0x50/0x50 [ 1516.789092][T27475] do_vfs_ioctl+0xd5f/0x1380 [ 1516.793707][T27475] ? ioctl_preallocate+0x210/0x210 [ 1516.798825][T27475] ? __fget+0x381/0x550 [ 1516.803001][T27475] ? ksys_dup3+0x3e0/0x3e0 [ 1516.807426][T27475] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1516.813676][T27475] ? fput_many+0x12c/0x1a0 18:01:28 executing program 4: r0 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) lseek(r0, 0x7ffffffffffffffb, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x8000) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="865ff98113", 0x5}], 0x1) [ 1516.818133][T27475] ? tomoyo_file_ioctl+0x23/0x30 [ 1516.823594][T27475] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1516.829841][T27475] ? security_file_ioctl+0x8d/0xc0 [ 1516.834960][T27475] ksys_ioctl+0xab/0xd0 [ 1516.839156][T27475] __x64_sys_ioctl+0x73/0xb0 [ 1516.839174][T27475] do_syscall_64+0xfd/0x680 [ 1516.839194][T27475] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1516.839206][T27475] RIP: 0033:0x459519 [ 1516.839227][T27475] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1516.858154][T27475] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1516.858170][T27475] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 [ 1516.858178][T27475] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1516.858195][T27475] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1516.910321][T27475] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 [ 1516.918301][T27475] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 18:01:28 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x200000000000000, 0x1000800000000005, 0x0, r0, 0x0}]) 18:01:29 executing program 5: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000380), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) 18:01:29 executing program 4: r0 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) lseek(r0, 0x7ffffffffffffffb, 0x0) writev(r0, &(0x7f0000000140), 0xba1170b25bcf6fb) 18:01:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x800) 18:01:29 executing program 1 (fault-call:8 fault-nth:53): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:01:29 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x300000000000000, 0x1000800000000005, 0x0, r0, 0x0}]) 18:01:29 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x4102, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r0, 0xc0385720, &(0x7f0000000140)={0x1, {}, 0x800, 0x8}) r1 = getpgid(0x0) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000100)=r1) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x20) mq_timedreceive(r2, &(0x7f0000000040)=""/56, 0x38, 0x7ff, &(0x7f0000000080)={0x0, 0x989680}) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) 18:01:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x3000000000000}, 0x800) [ 1517.518351][T27724] FAULT_INJECTION: forcing a failure. [ 1517.518351][T27724] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1517.538506][T27724] CPU: 0 PID: 27724 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 1517.546469][T27724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1517.556537][T27724] Call Trace: [ 1517.559841][T27724] dump_stack+0x172/0x1f0 [ 1517.559868][T27724] should_fail.cold+0xa/0x15 18:01:29 executing program 4: r0 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) lseek(r0, 0x7ffffffffffffffb, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x10021, 0x100) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000080)) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="865ff98113", 0x5}], 0x1) [ 1517.559891][T27724] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1517.568802][T27724] ? ___might_sleep+0x163/0x280 [ 1517.568833][T27724] should_fail_alloc_page+0x50/0x60 [ 1517.584699][T27724] __alloc_pages_nodemask+0x1a1/0x8d0 [ 1517.590092][T27724] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1517.595833][T27724] ? mmu_topup_memory_caches+0x97/0x490 [ 1517.601396][T27724] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1517.607663][T27724] alloc_pages_current+0x107/0x210 [ 1517.612790][T27724] __get_free_pages+0xc/0x40 18:01:29 executing program 4: r0 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000040)={0x0, 0xb5, "69081d06dc3650b3bfc2bcee7bf9b991679ae59cbe17bf06a296c8ba632dc19f7e68632469624885bbdd1a44c5bcee2b212ba25164ec801763728781b9e8f1602650d7904b9a5c7f013674da73120b49ca616d6e3b02512ca70a0082cff5b255c1aee9bafd6ff39c48fae58bd8596d3da6f2ee2abfe884108ca4dea12729dbb212536601d66921f6b317381a63f69a2f648d09b51298a4b851fd83001ab5499ebc581582e95959ed91da8292355326488a9d8183f2"}, &(0x7f0000000140)=0xbd) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000180)={r2, 0x7f, 0xd3, "a5a3f2f3c7ba39886c1430e6d6d02b3e9423334f3de6232154f44a2126c47cced7f05323f75c07fc6a2646e1ff9f44d63f4b093b0f46be6668d02d5f71278abe9e50c8a96a89c46f860121cd827b5678d8b275cf508ed68e4c49600f23c844a666658b349567d712cc495218be43a719e2bc8cc935ddc5e1a0dc4034b20dbb81c6bfd9509941d346799a55e19d9db9e1baec03febbca5cc5054c14ead691a3690b996e86196a66dc62001e627de6ef6c831885056682fd4e3178492587519eb338b1c0967b665e5b3bac38fb5c35205960bfde"}, 0xdb) lseek(r0, 0x7ffffffffffffffb, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="865ff98113", 0x5}], 0x1) [ 1517.617446][T27724] mmu_topup_memory_caches+0x1e1/0x490 [ 1517.622936][T27724] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1517.629186][T27724] kvm_mmu_load+0x21/0x12e0 [ 1517.633701][T27724] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1517.639344][T27724] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1517.645596][T27724] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1517.650823][T27724] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1517.657134][T27724] vcpu_enter_guest+0x3b21/0x5f40 [ 1517.662181][T27724] ? emulator_read_emulated+0x50/0x50 18:01:29 executing program 4: r0 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000001240)=@caif=@dgm, &(0x7f00000012c0)=0x80, 0x80000) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001340)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x5002000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x24, r2, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) lseek(r0, 0x7ffffffffffffffb, 0x0) r3 = accept4$vsock_stream(r0, &(0x7f0000001480)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10, 0x7fffd) sendmsg$inet(r3, &(0x7f0000001200)={&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)="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", 0x1000}], 0x1, &(0x7f0000001140)=[@ip_retopts={{0x4c, 0x0, 0x7, {[@generic={0x9f, 0x9, "d6d3af752135b2"}, @lsrr={0x83, 0x17, 0x4, [@broadcast, @loopback, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}, @cipso={0x86, 0xf, 0x0, [{0x1bb075be0dfd604b, 0x9, "d8f6761d13ba4a"}]}, @timestamp={0x44, 0xc, 0x7, 0x0, 0xf000000000000000, [{[@remote], 0x3}]}]}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@noop, @generic={0x88, 0xe, "20ceb9fbd2036b6f01e5638c"}, @noop, @lsrr={0x83, 0xf, 0x1, [@multicast2, @rand_addr=0xfffffffffffffd0c, @rand_addr=0x81]}, @ra={0x94, 0x6, 0x62aaec88}]}}}], 0x88}, 0x4880) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="865ff98113", 0x5}], 0x1) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x1a040, 0x0) write$UHID_INPUT2(r4, &(0x7f0000001440)={0xc, 0x36, "4139e4892cd69059c49e6bcca04a668ab0e4b525326807f2852654d13b708e8b047c31f30663df1f8dc2a59ac06d2cbfbd78b7326824"}, 0x3c) [ 1517.667569][T27724] ? lock_acquire+0x16f/0x3f0 [ 1517.672360][T27724] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1517.678101][T27724] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1517.683663][T27724] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1517.689407][T27724] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1517.694095][T27724] ? kvm_set_memory_region+0x50/0x50 [ 1517.699403][T27724] ? tomoyo_path_number_perm+0x263/0x520 [ 1517.705054][T27724] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1517.710864][T27724] ? __f_unlock_pos+0x19/0x20 [ 1517.710885][T27724] ? __fget+0x35a/0x550 [ 1517.710904][T27724] ? kvm_set_memory_region+0x50/0x50 [ 1517.710919][T27724] do_vfs_ioctl+0xd5f/0x1380 [ 1517.710937][T27724] ? ioctl_preallocate+0x210/0x210 [ 1517.710949][T27724] ? __fget+0x381/0x550 [ 1517.710967][T27724] ? ksys_dup3+0x3e0/0x3e0 [ 1517.710991][T27724] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1517.749658][T27724] ? fput_many+0x12c/0x1a0 [ 1517.754097][T27724] ? tomoyo_file_ioctl+0x23/0x30 [ 1517.759046][T27724] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1517.765300][T27724] ? security_file_ioctl+0x8d/0xc0 [ 1517.770423][T27724] ksys_ioctl+0xab/0xd0 [ 1517.774593][T27724] __x64_sys_ioctl+0x73/0xb0 [ 1517.779621][T27724] do_syscall_64+0xfd/0x680 [ 1517.784161][T27724] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1517.790070][T27724] RIP: 0033:0x459519 [ 1517.793980][T27724] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 18:01:29 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x240000, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x1, 0x200) fanotify_mark(r0, 0x0, 0x20, r1, &(0x7f00000000c0)='./file0\x00') r2 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) lseek(r2, 0x7ffffffffffffffb, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="865ff98113", 0x5}], 0x1) 18:01:29 executing program 4: r0 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) lseek(r0, 0xfffffffffffffffd, 0x7) fchmod(r0, 0xc0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="865ff98113", 0x5}], 0x1) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000080)={{0x5, 0x4d}, 0x0, 0x10001, 0x81, {0x1, 0x40}, 0x2, 0x9}) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000340)) [ 1517.813773][T27724] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1517.823071][T27724] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 [ 1517.831145][T27724] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1517.836093][T27851] Unknown ioctl -1067953329 [ 1517.839126][T27724] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1517.839136][T27724] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 [ 1517.839144][T27724] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 [ 1517.875896][T27851] Unknown ioctl -2130668495 [ 1517.885009][T27851] Unknown ioctl -1067953329 [ 1517.890579][T27852] Unknown ioctl -2130668495 18:01:30 executing program 5: futex(&(0x7f000000cffc)=0x6, 0x80000000000b, 0x4, 0x0, &(0x7f0000000380), 0x0) futex(&(0x7f000000cffc), 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0) 18:01:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40030000000000}, 0x800) 18:01:30 executing program 4: r0 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) r1 = dup2(r0, r0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000000)=0x80000000) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="865ff98113", 0xffffffffffffff4c}], 0x1) openat$cgroup_ro(r1, &(0x7f0000000080)='pids.events\x00', 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x2d, &(0x7f00000000c0)=0x7, 0x4) 18:01:30 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x400000000000000, 0x1000800000000005, 0x0, r0, 0x0}]) 18:01:30 executing program 1 (fault-call:8 fault-nth:54): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:01:30 executing program 3: futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@nfc, &(0x7f0000000080)=0x80, 0x800) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f00000000c0)=0x1ff, 0x4) futex(&(0x7f0000000140)=0x2, 0x9, 0x0, 0x0, 0x0, 0x0) 18:01:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xf0ffffffffffff}, 0x800) 18:01:30 executing program 4: r0 = memfd_create(&(0x7f0000000240)='posix_acl_acce\x03\xde\xbf\xeb\x8bR_\xa1X\x8d\x83\xe9\xe1\xe0\x8b\x85\x96\xa5\xaf\xa1\xdev\xf6\xe4\xb4F\xeeD\xf1D\xef\xe9\xf3\xc4\xe9\b\x04\x057A\xc0y\xde\xb6\xcc\x00\x00\x00\x00\xeb^@\x11V\xd3b\aW\x00&\xc3\xda\x95z\x84\xf8v\xa7_r\x9e\xffl\xae5-%\xf7q\x01\x1f\x14k\xfd\xa9\xb9\x05\xe0\xe9n\xdd\xbb\fj\x13\xb1\xb4\xf1\xd4\'\x11r\xc6\xfc\xa4\x85\b\xe7j\x80\xabT\x0f\x00\x003\xc3-\xdb\x11Y\xe4\xd9y\xbcYP2\x97\x1e\x84^Hj\x97\x97\xc7\x9b;.\xb1\xb4\xed\x0fd\xe6\x91f\xd00\xabm4 7;\xeaS\xa1\xf5m\xbb\xe5\x14\xb1\xfc\x18\xb9i\xd3\x00\xa2\x14\a\xfaJ\'\xf39e\x92\x01\xa4\xde\xeat\xaa\xc1Wv\x1e\xf3=+\xc8\"K\xed#\xbd\xc6\xaf\xd8\"\x88\xcc\xdcr\x80\rX\x8esU\x04\x8a\xe58\x93\xf6r\xfa\xe6d\'\xb60gloq\x83_\xbc\x82\xc5\xd7\bR\x8c\xc4\x8dI1\xa8\xf5\xd0)\x1f\xe5_w\xa7\x0e\xea\x8b\xa4pO\xcc\x95a2\xb7\xeb\xa7\x12\x9f\x8e\x1b\x8a', 0x1) lseek(r0, 0x7ffffffffffffffb, 0x0) writev(r0, &(0x7f00000001c0), 0x34b2ff964f31df9) [ 1518.398332][T27864] FAULT_INJECTION: forcing a failure. [ 1518.398332][T27864] name fail_page_alloc, interval 1, probability 0, space 0, times 0 18:01:30 executing program 5: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000380), 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000680)={@loopback}, &(0x7f00000006c0)=0x14) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) [ 1518.470860][T27864] CPU: 0 PID: 27864 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 1518.478796][T27864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1518.488861][T27864] Call Trace: [ 1518.492170][T27864] dump_stack+0x172/0x1f0 [ 1518.496697][T27864] should_fail.cold+0xa/0x15 [ 1518.501313][T27864] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1518.507144][T27864] ? ___might_sleep+0x163/0x280 [ 1518.512017][T27864] should_fail_alloc_page+0x50/0x60 [ 1518.517231][T27864] __alloc_pages_nodemask+0x1a1/0x8d0 [ 1518.522627][T27864] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1518.528367][T27864] ? mmu_topup_memory_caches+0x97/0x490 [ 1518.533926][T27864] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1518.540182][T27864] alloc_pages_current+0x107/0x210 [ 1518.545314][T27864] __get_free_pages+0xc/0x40 [ 1518.549917][T27864] mmu_topup_memory_caches+0x1e1/0x490 [ 1518.555383][T27864] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1518.561644][T27864] kvm_mmu_load+0x21/0x12e0 18:01:30 executing program 4: r0 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000140)="7482b179aa3dbaac21a3430165969c7ea74ca645065d7b3ece8e7cf3306b2a7fb70aed4a0a998cc32db2d9757be015af94c84630c648ba0e941003cfad39b1aea064d9364a4ca5ec6c6433da3a41a4e23b1e818269921198ee7889c9a04cfb05060a47a7ee18b17aa0bb418b85f32b4b2e62ddcdb736f8c26f55e2d68bd14fd18e4f73a6cdee99a789119d040e09537da3e5c45ac665b29380c76260fd0ca3b6729f1f8e98a54c1900c72116ca49eafae2aab82c17e6120439e3334ef120fcac99a62f3c901abd5ea457e8f63790211f238f8d4a5bca00192491afd2e90298d7fe134eec4ee7c743f9d255af4d3ec485c018af2401546e1f86d508b1a7362e72") r1 = memfd_create(&(0x7f000003affa)='wlan0\x00', 0x3) r2 = accept(r0, &(0x7f0000000240)=@can, &(0x7f00000000c0)=0x80) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x200, 0x4) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000002c0)=@generic={0x2, 0x8, 0x400}) lseek(r1, 0x7ffffffffffffffb, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000002a40)='/dev/usbmon#\x00', 0x2, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000002a80)={'vcan0\x00', 0x0}) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000040)=0x7) sendmsg$xdp(r3, &(0x7f0000002c00)={&(0x7f0000002ac0)={0x2c, 0x4, r4, 0x37}, 0x10, &(0x7f0000002bc0)=[{&(0x7f0000002b00)="5d216145968ea6ab689312ad3baae4bab06ece999cac2335ff7bca49d98a8ddd28fa496f05e4aa16a384936f7193626f9d101c506b76dfcd39288920f8cd693f1273b28c1afaa80e0cf4ff55f25c727bbf183c890f4c19ae73de6eab298414296d573eccf3d4c6a3d289f89f695fc665f25ae001f1a7e1a45c8dbee41b94812564dc5eebf97e6ea58883e89bb3c85de2281cad92d9e4d27761aad126a3fe78", 0x9f}], 0x1, 0x0, 0x0, 0x8000}, 0x4000000) fdatasync(r1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="865ff98113", 0x5}], 0x1) 18:01:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x100000000000000}, 0x800) [ 1518.566159][T27864] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1518.571803][T27864] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1518.578048][T27864] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1518.583255][T27864] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1518.589514][T27864] vcpu_enter_guest+0x3b21/0x5f40 [ 1518.594564][T27864] ? emulator_read_emulated+0x50/0x50 [ 1518.599945][T27864] ? lock_acquire+0x16f/0x3f0 [ 1518.604649][T27864] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1518.610401][T27864] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1518.615951][T27864] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1518.621690][T27864] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1518.626380][T27864] ? kvm_set_memory_region+0x50/0x50 [ 1518.631680][T27864] ? tomoyo_path_number_perm+0x263/0x520 [ 1518.637323][T27864] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1518.643136][T27864] ? __f_unlock_pos+0x19/0x20 [ 1518.647826][T27864] ? __fget+0x35a/0x550 [ 1518.651997][T27864] ? kvm_set_memory_region+0x50/0x50 [ 1518.657312][T27864] do_vfs_ioctl+0xd5f/0x1380 [ 1518.661914][T27864] ? ioctl_preallocate+0x210/0x210 [ 1518.667031][T27864] ? __fget+0x381/0x550 [ 1518.671207][T27864] ? ksys_dup3+0x3e0/0x3e0 [ 1518.675647][T27864] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1518.681912][T27864] ? fput_many+0x12c/0x1a0 [ 1518.686352][T27864] ? tomoyo_file_ioctl+0x23/0x30 [ 1518.691302][T27864] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1518.697556][T27864] ? security_file_ioctl+0x8d/0xc0 [ 1518.702685][T27864] ksys_ioctl+0xab/0xd0 [ 1518.706868][T27864] __x64_sys_ioctl+0x73/0xb0 [ 1518.711478][T27864] do_syscall_64+0xfd/0x680 [ 1518.717707][T27864] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1518.723607][T27864] RIP: 0033:0x459519 [ 1518.727528][T27864] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1518.747340][T27864] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1518.755783][T27864] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 [ 1518.763771][T27864] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 18:01:30 executing program 4: r0 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) lseek(r0, 0x7ffffffffffffffd, 0x3) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="865ff98113", 0x5}], 0x1) [ 1518.771760][T27864] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1518.779758][T27864] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 [ 1518.787750][T27864] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 18:01:30 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x4000000000000000, 0x1000800000000005, 0x0, r0, 0x0}]) 18:01:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200000000000000}, 0x800) 18:01:30 executing program 4: r0 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) lseek(r0, 0x7ffffffffffffffb, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000100)='security.capability\x00', &(0x7f00000002c0)=@v1={0x1000000, [{0x4a2ced0a, 0x1}]}, 0xc, 0x1) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="b01671ec70d5ec637d3f52f1a5b0b24ab43737545492f36211d5c880422da9d69731949b9968fd9e89f791a44cb4853bdd4c6a80bad47d835df1d1720bbc6feaed65ebab19e2c8ab15666cb14ce74c2aec939ae2a8c9d46b17", 0xff27}, {&(0x7f0000000140)="6f1d7d1287ad016c6a8cb841bc8de6cb5c4d4eb69d8bebb2738f26f2fc50c4e262c795c2cab0975368966ee9de904b3f4af0adaf7a42cdcca18648b71edf1f8b3db399d5679f24c0093b718bb824b24301d8a8f1137cafcb6f1f1f523d434bc00e83f94efeaecd7ea9172a1650fef3548e672a388a98f7b4dccc64351f02638a2d71c0c519235143c31398a4ca378ad921a2cdc62bf038ca", 0x98}, {&(0x7f0000000200)="4bdad86630f21ed47b63c3c2c6dd020c72c734e3b456fd906d07517b4a22bb229250eaa486ccdff1562def55b9d6bd2505fb004e5249e379a5db9d3bdb428881ae182ab2d230d1a7b1870baf474d720b7546cd46b449978dbebb7cb55f51e6d161529e770ab65af19fa790795e3c6e2f87fe97e12af96d2a21c9f94c21fa023204bcbc5507e2279739b08035a3df8a7638f73533f73154e7926f6456c78ff9", 0x9f}, {&(0x7f0000000340)="83e834368681cecf9dd25a17fd5049d14370ce5d26b632ad65b372ac582338ceb1f707f24e166d77d3945ef071748e71c4195471b5b928c1ee3b050299774cbc07c6fb668a180f", 0x47}], 0x4) 18:01:30 executing program 1 (fault-call:8 fault-nth:55): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:01:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x300000000000000}, 0x800) [ 1519.141930][T28069] FAULT_INJECTION: forcing a failure. [ 1519.141930][T28069] name fail_page_alloc, interval 1, probability 0, space 0, times 0 18:01:31 executing program 3: futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x42) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) 18:01:31 executing program 4: r0 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f0000000080)={0x0, {0x5, 0xea}}) lseek(r0, 0x7ffffffffffffffb, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="865ff98113", 0x5}], 0x1) 18:01:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400000000000000}, 0x800) [ 1519.211702][T28069] CPU: 0 PID: 28069 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 1519.219732][T28069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1519.229797][T28069] Call Trace: [ 1519.233111][T28069] dump_stack+0x172/0x1f0 [ 1519.237463][T28069] should_fail.cold+0xa/0x15 [ 1519.242075][T28069] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1519.247894][T28069] ? ___might_sleep+0x163/0x280 [ 1519.252771][T28069] should_fail_alloc_page+0x50/0x60 [ 1519.257987][T28069] __alloc_pages_nodemask+0x1a1/0x8d0 [ 1519.263385][T28069] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1519.269129][T28069] ? mmu_topup_memory_caches+0x97/0x490 [ 1519.274692][T28069] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1519.280946][T28069] alloc_pages_current+0x107/0x210 [ 1519.286070][T28069] __get_free_pages+0xc/0x40 [ 1519.290674][T28069] mmu_topup_memory_caches+0x1e1/0x490 [ 1519.296137][T28069] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1519.302395][T28069] kvm_mmu_load+0x21/0x12e0 [ 1519.306912][T28069] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1519.312556][T28069] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1519.318807][T28069] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1519.324035][T28069] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1519.330297][T28069] vcpu_enter_guest+0x3b21/0x5f40 [ 1519.335337][T28069] ? emulator_read_emulated+0x50/0x50 [ 1519.340717][T28069] ? lock_acquire+0x16f/0x3f0 [ 1519.345403][T28069] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1519.351138][T28069] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1519.356698][T28069] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1519.362434][T28069] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1519.367120][T28069] ? kvm_set_memory_region+0x50/0x50 [ 1519.372440][T28069] ? tomoyo_path_number_perm+0x263/0x520 [ 1519.378086][T28069] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1519.383918][T28069] ? __f_unlock_pos+0x19/0x20 [ 1519.388604][T28069] ? __fget+0x35a/0x550 [ 1519.392777][T28069] ? kvm_set_memory_region+0x50/0x50 [ 1519.398069][T28069] do_vfs_ioctl+0xd5f/0x1380 [ 1519.402677][T28069] ? ioctl_preallocate+0x210/0x210 [ 1519.407796][T28069] ? __fget+0x381/0x550 18:01:31 executing program 5: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000380), 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x185002, 0x0) mq_notify(r0, &(0x7f0000000100)={0x0, 0x3b, 0x7, @thr={&(0x7f00000003c0)="eee6d03752208c0acb4bac759632175bf36809b316ae3de7f4f946be4ac13eb0f425e06edd156ed8f19c7d116dbcdde2bdfeef5c4497029a63fa1943bd3de7e423e80f9a0176c82ba1e764c990d6b00919b76acb12b3f8c2d8c6ca8a0b992f08317ce3889431359d9da1cd67d784a866bb7d186dbb8db8802bb70a093051aceabf53d0e1a436ed10eefd6471f5109e017ce52b8dc7cb2e29d8780e1b0b88ad93e81ea4b9c14c37f3f5aa8f0983331308ae904fd722e6cf7b309623fb98f8b123166745be726a6f4c07cf7a2beba974976f6670400448d40a6758c8b369188abada61defe1bb9e782d259e8b867069fe0590aa4e062f2b15210c7872b0b13b99927bdec4c420255252a58022aa54e327d509424342412c67c47b9737e0c8e0f21712f80daff35670e899a3496cfdd448b3d764fbd578ac0655ca234c66b65e8950451c41ae9d90e7bda880b4f4070f181cd5f712263e259a08c47db2f353a43dd7b9fb2dd851cdd2c9f717110bba3bdd951f7561d028d4ba1f7137d05f788b739fbfbb45b5ade9a27eaa113c770a991cc430657ee413d88a5085bf3f5470b72732a595dde325fe51c8ab0e3a4c09b7905541dbd3b38f6c611795d3ef639a4b3e1bcd4e7d0c9e42021ddc6eb2eb6f81e22d41428cf93017538c9e82cc3d9e5621fee55356a9cce0c398fa9864877e10b4a5e5b801631fd19d165bd2ba75620164c9411ee96a2e1a4b8c7bee59ecdb0d4e34989db28282413e9b4a986e64748f46519d467439674f51b7177bcdd40431dfed8b0112bfebb5b45197799c902c17041889845491d798838bcac5edbc6c3eec31ee396b241a1d41ac384b564a7dda7df689d97c442f0ed25ec39bd72614d9536458453c88bc203d225e62fbbd2f953b1ff3165343371653c3e7425ebc2d46a7437ea57f8f35c79fd2103e5d104578db4b552a058640969298d6c2584ccf7158b2b95256f922a21bde3553aef3df0a3ab8137a5526d6d9463b346c5167be20b6f5ed541a35e81644cd9e8cf1b7f63e2dd76a5f6cc05801264352e5921d477e6df0519e3fd36caf7e5b19ec492d02575f4690215426368f00e7bf5c7aeda6928c4dce4e9117c725dd44feab97d977fd3ea4a8f474d9397711bb82ed47290bcdf63cc8a156c8b6a7e5d74392b26f6cafdf75fb7af2de4e63d2e9e012f00cfa1a1ca4c2c78a73bcfcc98ff43d76aef7f5c16810b30d8b497c6ff73c5af5ab3da5af7748cd2bbd6096c35de5fb8c900706e0766c65f52fef3d18d6c5a7cff99168591284eeebdbef4d6c2df733b9050aa6a6ec5fb0441d101d854862d532541f5d95a132675033bbeaaf670699b5abe0fd4912bdd72aa8c6f57c12f5466f592fac9f5a2d755a7dfb80f8b77304cbc9e321b066a13319b81f8a94feeedaf3fc4113025e4cd9437098d261ac02924a02d46ea113963f7155c1be782959543852d4a2ac911263d4d39297a696cbaec00538e4be598c4b4b3f59d933a9a3a196f75b5a2a8ff725eda4f09d03a03e5f1ad57f2dccdb901f5b13a97a40e06fa82a30801155b52e0cee02bfeb7a3ebcaa98520e5ee36dc3bc21b89e0879456e5e2a51ac363a6a05c3358fcc8807ba8faabf7a2a84074cbdccf6830cb25ddac9b3df80c1e6f46b878f15d0e5a38ea0405237ec009580d296d970c37472c926f3e4e01543f6e89525bae46e2a61b9bd83c91fb03e8d541f7abeab8f329e3962f2ddbfda754451a167fa6fe6d8f417ca75f1038efe6acc826080c891945f54d009c1b0e9108a652f1c20b24f8faf6ca53d3beb49751c5e5788426f94072b6b387e5adf09843d115a65ed289407ed8cad7d0848075d1f5ab01b679aabbcd8d2db031d067e35efdaabbd96712355aea6d226a5599d35893184ef53f635b616d05685d06c6243dd2e2e79cff2b7b327c55adcb8d52c87df67e5d672231491b0d3399b37984ef49aacb1ac54c3f8de6b4d67e0f627924eeaead35e7aac6f06de339a97c6c3bb3820b0cffe1485ad2af299917d8c133c30915cefe67a5d6434c88d7ec3306f32061d3a53aa214d3db03df2cd647a83d81b156f094833462dea9a58f60889645d65ddf49cdc967c1c1605ec2f5e7f7dc6e155bace075d1a5f13e1cadd7235ea94f7577d41715c6cb7def07d4c03b2d6cb9fc776c4df503dd25d04e7cf7a6f900aa70acd90bed8862b7eb68271c223f6cff6cd4fdf319085ff9973f081f3ec6177b3ec79883575e5863ca59045efded6f99fe6568bdec74e80bdea9d85bd2aa1aaa037d78e6e22c48f1817c2d2e8dfe340c0f4e0b45dfb25b4663b412ebf051ba9df24707a59bb55b5ac48579ed85b4cc123a2f428fcf7941dd21204f11987fd82fc697ad2093c2f9d0c1a8e71e9b2ac42e9050c40ef49283f276bd3094997bc935d86568aecc48d0d5fbf074a196b927d90e98afe0fcbe9db363973611b8ecc300e457f64cc7dc302b5e244d890c7f39ed16d2ab259d31978de73d0b5d32e004fadd5c1324d1d2dfff292820b3fba11eb3a883a142af21fd12aa8276120f3d82ab2885cac8fb3ce683416b27b889a2fce97fb2a384f6a67c8b9b819855f81fe6c04587ea7c9a1776ee3a14e6672f76b6fd2807eda18fe1779d581859a17a0c7f774050562bc9106de301a9fcab1987416b70e8f6fd0cdb6dbba8340312dc7d9678de25f56a1869f2d91f2e8ce36f71c68c929d48be1e467029e7f236abbeed972b10e4ea1cf6e2ae9cc78f43ba66315330c3dee5a25ff71d5b3ec7114425614f02017238610d1f0eb66fcc6bfb21ec43462b57c2cfd1fd92ece22e89271a1aa87183d9b2752c3c4b84683a1646743210b2ae928cddf68ecd9e0f98cdcaf64733bcf923d28c6ef80346b68154e31e66a30d10ab5b7bc9a7162c87011554b9eec180864dbd445682fd01f2d658bdbb4cbf3302181a4dfc5e1a8f28d0ccaf4fcf785ac8c87f6decb768dcea5d76804cd48dfc1cf167604d3f09b40be8eb09c5d9c52b75fd1e03675a5e67a42dd994cfe6c67befad9e4c2ea6363d327ea1a3a41932b21849f4e4856e935824cf512552487c034cdb180e7277628a18274dcaaa87ec05532b20a01c77a93b82ec5034992d87959178a2d791dfee8d459fea166580db56ae3bc5c8cea8e89ed76bf69e425a6d5f510cb717136966716b81b75b4cdc89358d33fd5d852d5756715c1c0fdbe72de3a0c66882ee6e196da5b84baec54d62d7495cb21fa0f05f8e46f6b769f5ba76c30cbd32c61ff1ea7a03e615ed5fe89b7c73785a27c3997d121cfba2ab0ee0c8cf18362dba02f436609928e711aa7f4ca38bf865e2292c8979b3765ad82f89bc8e2c74ee1d9f83444f1af5bba96150cf6a59301538332d3e32dd2c9be7aae48c6eaf163fce25656c09e91b40e8d25192ef01b9759a88152977a85a372a45a003b164bcceea8a02fa2ed9bd2449453909c18a3757b325e8659c9fff8f7d416084150d41ccaf8194140253db8ecb4018a5c7e6e8a36be8fec2ef37424b039ea6ec4b3fa438d1a33c6390d3da7ed21bd8d24b844676cf800643859ff76527cc13691cd3d6f11ca3f5573f48a808dbfc73123dc88be25f659d0ae0fce872b1e0197d25b62ffe1216bd4b9d55573adcca44bc7736441f3fe62da859466fe237d9a22ec7d435482b2556865f41a522bdc5b7524ba9cbac5af64e789e9ab06e5c44bb31fb3517d65c70f7ca98118141501f6245b5b2fe015c15a3c9fbd06ed9da0f055edf16b4acdfe04959c534f28155d56c6513bb6c5a965022665edf42d9fb34918594071b0771f9a3a45148740987f9bdfacc7ae429baa2f2dee48c503d711ed33525b3f197a5f22e9d71858b085556068cfa122b44340ae0fbb92f2d705db1069494748534d2111e3bf56ed8e5ef1dd05904953488be403794885f2400d11a98dc1e279d54e946e2915badedc20faeb919bc47f3770d934d30d92c99dca1088308a4b66a63733e532b5080e6ffd832bb6f2c617bf7cdbbff5c23094bf67d3638a30d83ed5b33a94d9f13dbfdca2f1363d8bcfad293cd597dacf8bc5eb5fea4f29af311124d9ac90fbc1e57e55f34a9a6927b57e837764cd085118fc8ea360b95265273e4c5204eff1dcde1e65c38c2ab82d15770dc6f795d5c76c1d69d8f359d3c7d4ae9265d8b87830087c754837a8135108d6dfd319e821c58c7a24c3910b64c27406901c83de642f8d948f99fc2ed3e8f56c82acad331617a9d2072b339e3743b1051f96a9a76e9e4d46f1643af44f5954eea1fbde73a96e44fa5032a902082bdc0641e13c03a666d45846d460a235a66567e507ad2ac7f305b3c6a036f33cf26fe14a3f8a2a84f84b5ba641db9ae4bef8c59d54b7101436292cbea9d7e1f07afd0994d9b091e8f2ffe881d115609832854fabddc3aecd33f0a402597427c7fab92ebee37c2b0bcf5a0c439b171b730637ef471b338d3efb806ca973f4d26cb49aa56fb4e34986ddb69c9a5b57bc70c5c979324ac4ef659633cc31d36dbf0735607a09c01c5ffbd9d1ce493634788e9e549f6431cab04261eb0f523983fac7c6a2863ca6e28691b2ed909f36c9b566bfe2642c5176b07e11267b32209a421cd554302a70b142df7956c1e75471f9ff730a86be84a8c01d5c927ae6b4ad535d9fdb1555b18608c8cde59592cfce88becfda2ea1fc0069f1ef2be82f68b1a40490d58ee2443a96f1d04bb6392c10afc2de1524349add99d617fb1261716244d42c074c12ce76aacf7b13a78bb086dd8239ce359588dd29da7ef53fe5938aa3228abc5a9e404becb48802ccd50d3515c39c69e0af98285f28ae88e7d6541357a5be6cde267b0066324709f06a2cafbbd532cc4a223b64d90bc76265f46dced1ed5904af3c6cdf9ed09346106f33199b3ad6d289b6df67e72f77afbd1e23756e27bfbf797910c2b67227d04102acd3fd228d45260d9163fad7aaaf6c43ffe02c1a9dfe3ec62131788d4c3f9c4ebe4b526f325c62072206970a3b86c0aaeabe55b1d4119cec973d110015c917b32e6cc0a46666baf86f99b7de45481a6923db334b22d66a4b25da74898f83ab721b97959cfa0d582b8f7740be9ba242d17cba57f373e334bade324c38235efc769c75a1ae391aa947e1422009146573da34c29ef95e401026d19c8380bec74c145635c04987e291623b6b13dfca3bd97d1c007208237db42039b2ad4763fa3f29a1ff0806ae840a32dd9b249c6b73c8aa321e9026c24c6123d2dd5ddbfbafe44709de57146298b07cf01bacd2d1475879e36ae185e405917d32fa63b67973f348254ef8645faef694ac9e01b2028479b4f77f30b1bd22a4eaf0dafac88e3749c79bac60e1e40720798b10970ec108717fac6d5287cfbc56321381f270ebf9cff6df533ce4166375deb7577f72eb252b514719249746fc9351eaf62b7abbe5d75122d931e33d86f2bbb1e64895bffab5dc1c6da47ae13a27d8ecd256ca156d99a75376b9cafdfaa1c9639e4f98ca9e35a123efc331895e706addfa1afdfeaa0833a8bd716ed38cf20c373b8e72bc96f6b4d5fa4a611f16c4e59cd26ce41b7074f58dbbc3402d47a24efdc398c542865ba08be6d3240dea96d8b9786a9fa012ff79211f90d9e507d1f9f0fca7ccd13b8577d1bcf0d1c0cd36f0c8ecc024d59e1c65af092e7dffd4a539a58223123f515a476b8ce4a6c12dc571a502d058cc02fe9654a354737e0754d04fd9e6b23af43bb7866d99c9f693338d4929f13a54e177a48937a8396a59633599faa17a109917f37c3d7aeca39fdc869", &(0x7f0000000040)="7532c27c825343ba1dc7cfa34c5d5cdd62a2829c7315ef3cfd16c5d23fd2a7384d54c3974277eccd6c7434159df73dc9240d6087465a9388ddc9ae738f6849e6561e251640df49429a83456dff485c8603609032c0edc0894353dc817d6bbb50df66819124c7b87446e7742546ced9108966e51e1bfd5bf47236202707139fbbc143f0cf8263d851c4eb732881ad9817f0513ed244bc018ff1"}}) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) 18:01:31 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x1000800000000005, 0x0, r0, 0x0}]) 18:01:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x500000000000000}, 0x800) [ 1519.411976][T28069] ? ksys_dup3+0x3e0/0x3e0 [ 1519.416402][T28069] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1519.422655][T28069] ? fput_many+0x12c/0x1a0 [ 1519.427083][T28069] ? tomoyo_file_ioctl+0x23/0x30 [ 1519.432036][T28069] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1519.438277][T28069] ? security_file_ioctl+0x8d/0xc0 [ 1519.443399][T28069] ksys_ioctl+0xab/0xd0 [ 1519.447598][T28069] __x64_sys_ioctl+0x73/0xb0 [ 1519.452215][T28069] do_syscall_64+0xfd/0x680 [ 1519.456733][T28069] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1519.462656][T28069] RIP: 0033:0x459519 [ 1519.466576][T28069] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1519.486529][T28069] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1519.494947][T28069] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 [ 1519.494957][T28069] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 18:01:31 executing program 4: r0 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) lseek(r0, 0x7fffffffffffffff, 0x7) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="865ff98113", 0x5}], 0x1) 18:01:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x600000000000000}, 0x800) [ 1519.494965][T28069] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1519.494973][T28069] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 [ 1519.494981][T28069] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 18:01:31 executing program 1 (fault-call:8 fault-nth:56): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:01:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x700000000000000}, 0x800) 18:01:31 executing program 4: r0 = memfd_create(&(0x7f0000000040)='posix\b\x00\x00\x00\x00\x00\x00\x00\x87\xa1$\xec\xf6R', 0x2) lseek(r0, 0x7ffffffffffffffb, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x10) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x1}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000021c0)={{{@in6=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f00000022c0)=0xe8) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000140), 0x1) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000002300)={@local, @dev={0xfe, 0x80, [], 0x14}, @mcast1, 0x0, 0x4a, 0x5, 0x100, 0x100, 0x80000000, r2}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="865ff98113", 0x5}], 0x1) 18:01:31 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000002, 0x0, r0, 0x0}]) [ 1519.817093][T28246] FAULT_INJECTION: forcing a failure. [ 1519.817093][T28246] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1519.839957][T28246] CPU: 0 PID: 28246 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 1519.847869][T28246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1519.857944][T28246] Call Trace: [ 1519.861269][T28246] dump_stack+0x172/0x1f0 [ 1519.865629][T28246] should_fail.cold+0xa/0x15 [ 1519.870237][T28246] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1519.876053][T28246] ? ___might_sleep+0x163/0x280 [ 1519.880922][T28246] should_fail_alloc_page+0x50/0x60 [ 1519.886134][T28246] __alloc_pages_nodemask+0x1a1/0x8d0 [ 1519.891522][T28246] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1519.897264][T28246] ? mmu_topup_memory_caches+0x97/0x490 [ 1519.902822][T28246] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1519.909087][T28246] alloc_pages_current+0x107/0x210 [ 1519.914233][T28246] __get_free_pages+0xc/0x40 [ 1519.918836][T28246] mmu_topup_memory_caches+0x1e1/0x490 [ 1519.924404][T28246] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1519.930666][T28246] kvm_mmu_load+0x21/0x12e0 [ 1519.935184][T28246] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1519.940829][T28246] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1519.947098][T28246] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1519.952306][T28246] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1519.958572][T28246] vcpu_enter_guest+0x3b21/0x5f40 [ 1519.963627][T28246] ? emulator_read_emulated+0x50/0x50 [ 1519.969041][T28246] ? lock_acquire+0x16f/0x3f0 [ 1519.973729][T28246] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1519.979463][T28246] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1519.985013][T28246] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1519.990751][T28246] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1519.995436][T28246] ? kvm_set_memory_region+0x50/0x50 [ 1520.000733][T28246] ? tomoyo_path_number_perm+0x263/0x520 [ 1520.006391][T28246] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1520.012215][T28246] ? __f_unlock_pos+0x19/0x20 [ 1520.016911][T28246] ? __fget+0x35a/0x550 [ 1520.021088][T28246] ? kvm_set_memory_region+0x50/0x50 [ 1520.026401][T28246] do_vfs_ioctl+0xd5f/0x1380 [ 1520.031033][T28246] ? ioctl_preallocate+0x210/0x210 [ 1520.036149][T28246] ? __fget+0x381/0x550 [ 1520.040316][T28246] ? ksys_dup3+0x3e0/0x3e0 [ 1520.045216][T28246] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1520.051467][T28246] ? fput_many+0x12c/0x1a0 [ 1520.055895][T28246] ? tomoyo_file_ioctl+0x23/0x30 [ 1520.060867][T28246] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1520.067132][T28246] ? security_file_ioctl+0x8d/0xc0 [ 1520.072257][T28246] ksys_ioctl+0xab/0xd0 [ 1520.076431][T28246] __x64_sys_ioctl+0x73/0xb0 [ 1520.081035][T28246] do_syscall_64+0xfd/0x680 [ 1520.085550][T28246] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1520.091458][T28246] RIP: 0033:0x459519 [ 1520.091474][T28246] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1520.091482][T28246] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1520.091495][T28246] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 [ 1520.091504][T28246] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1520.091512][T28246] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1520.091520][T28246] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 [ 1520.091528][T28246] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 18:01:32 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0x2) recvmmsg(r0, &(0x7f0000009640)=[{{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000000)=""/4096, 0x1000}, {&(0x7f0000001000)=""/5, 0x5}, {&(0x7f0000001040)=""/255, 0xff}, {&(0x7f0000001140)=""/131, 0x83}], 0x4}, 0x4}, {{&(0x7f0000001240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000002700)=[{&(0x7f00000012c0)=""/233, 0xe9}, {&(0x7f00000013c0)=""/3, 0x3}, {&(0x7f0000001400)=""/58, 0x3a}, {&(0x7f0000001440)=""/31, 0x1f}, {&(0x7f0000001480)=""/20, 0x14}, {&(0x7f00000014c0)=""/215, 0xd7}, {&(0x7f00000015c0)=""/203, 0xcb}, {&(0x7f00000016c0)=""/61, 0x3d}, {&(0x7f0000001700)=""/4096, 0x1000}], 0x9}, 0x7f}, {{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f00000027c0)=""/224, 0xe0}, {&(0x7f00000028c0)=""/192, 0xc0}], 0x2, &(0x7f00000029c0)=""/78, 0x4e}, 0x8}, {{&(0x7f0000002a40)=@vsock, 0x80, &(0x7f00000040c0)=[{&(0x7f0000002ac0)=""/116, 0x74}, {&(0x7f0000002b40)=""/158, 0x9e}, {&(0x7f0000002c00)=""/18, 0x12}, {&(0x7f0000002c40)=""/199, 0xc7}, {&(0x7f0000002d40)=""/129, 0x81}, {&(0x7f0000002e00)=""/98, 0x62}, {&(0x7f0000002e80)=""/245, 0xf5}, {&(0x7f0000002f80)=""/234, 0xea}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000004080)=""/29, 0x1d}], 0xa, &(0x7f0000004180)=""/80, 0x50}, 0x100}, {{&(0x7f0000004200)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, &(0x7f00000058c0)=[{&(0x7f0000004280)=""/150, 0x96}, {&(0x7f0000004340)=""/144, 0x90}, {&(0x7f0000004400)=""/105, 0x69}, {&(0x7f0000004480)=""/185, 0xb9}, {&(0x7f0000004540)=""/161, 0xa1}, {&(0x7f0000004600)=""/177, 0xb1}, {&(0x7f00000046c0)=""/4096, 0x1000}, {&(0x7f00000056c0)=""/98, 0x62}, {&(0x7f0000005740)=""/147, 0x93}, {&(0x7f0000005800)=""/171, 0xab}], 0xa, &(0x7f0000005980)=""/230, 0xe6}, 0x7fffffff}, {{&(0x7f0000005a80)=@tipc=@name, 0x80, &(0x7f0000007e00)=[{&(0x7f0000005b00)=""/93, 0x5d}, {&(0x7f0000005b80)=""/4096, 0x1000}, {&(0x7f0000006b80)=""/214, 0xd6}, {&(0x7f0000006c80)=""/68, 0x44}, {&(0x7f0000006d00)=""/251, 0xfb}, {&(0x7f0000006e00)=""/4096, 0x1000}], 0x6, &(0x7f0000007e80)=""/51, 0x33}, 0x6f4}, {{0x0, 0x0, &(0x7f0000007f40)=[{&(0x7f0000007ec0)=""/69, 0x45}], 0x1, &(0x7f0000007f80)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000008f80)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f00000092c0)=[{&(0x7f0000009000)=""/16, 0x10}, {&(0x7f0000009040)=""/16, 0x10}, {&(0x7f0000009080)=""/169, 0xa9}, {&(0x7f0000009140)=""/197, 0xc5}, {&(0x7f0000009240)=""/82, 0x52}], 0x5, &(0x7f0000009340)=""/11, 0xb}, 0x1}, {{0x0, 0x0, &(0x7f0000009580)=[{&(0x7f0000009380)=""/188, 0xbc}, {&(0x7f0000009440)=""/236, 0xec}, {&(0x7f0000009540)}], 0x3, &(0x7f00000095c0)=""/101, 0x65}, 0x7fff}], 0x9, 0x1, &(0x7f0000009880)) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) 18:01:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800000000000000}, 0x800) 18:01:32 executing program 4: r0 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) lseek(r0, 0x7ffffffffffffffb, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="865ff98113", 0x5}], 0x1) fstatfs(r0, &(0x7f0000000140)=""/230) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace(0x4217, r1) 18:01:32 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x8100000000000, 0x840) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000180)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000380), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x20000, 0x0) futex(&(0x7f0000000080)=0x2, 0x0, 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)=0x2, 0x2) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000004c0)={0x4, 0x0, [{0x1f000, 0x94, &(0x7f00000001c0)=""/148}, {0x3002, 0x69, &(0x7f0000000280)=""/105}, {0x1f001, 0xd4, &(0x7f00000003c0)=""/212}, {0x2000, 0x6, &(0x7f0000000300)=""/6}]}) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000040)={0x0, 0x5}) 18:01:32 executing program 1 (fault-call:8 fault-nth:57): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:01:32 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000003, 0x0, r0, 0x0}]) 18:01:32 executing program 4: r0 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1f, 0x242100) lseek(r0, 0x7ffffffffffffffb, 0x0) writev(r0, &(0x7f0000000100), 0x0) 18:01:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x900000000000000}, 0x800) 18:01:32 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000080)=""/77) r1 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) lseek(r1, 0x7ffffffffffffffb, 0x2) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="865ff98113", 0x5}], 0x1) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x40, 0x0) r3 = getpgid(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000240)={{0x4, 0x5, 0x80, 0x0, 'syz1\x00', 0x2}, 0x5, 0x20, 0x1, r3, 0x2, 0x3, 'syz0\x00', &(0x7f0000000200)=['user{#bdev&em1wlan1\x00', '.-selinux^\xb6wlan0\x00'], 0x25, [], [0x7, 0x8, 0x8, 0xe5]}) 18:01:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xa00000000000000}, 0x800) [ 1520.574600][T28373] FAULT_INJECTION: forcing a failure. [ 1520.574600][T28373] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1520.597546][T28373] CPU: 1 PID: 28373 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 1520.605499][T28373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1520.615559][T28373] Call Trace: [ 1520.618866][T28373] dump_stack+0x172/0x1f0 18:01:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xb00000000000000}, 0x800) [ 1520.623214][T28373] should_fail.cold+0xa/0x15 [ 1520.627818][T28373] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1520.633639][T28373] ? ___might_sleep+0x163/0x280 [ 1520.638511][T28373] should_fail_alloc_page+0x50/0x60 [ 1520.643720][T28373] __alloc_pages_nodemask+0x1a1/0x8d0 [ 1520.649107][T28373] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1520.654849][T28373] ? mmu_topup_memory_caches+0x97/0x490 [ 1520.660426][T28373] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1520.667124][T28373] alloc_pages_current+0x107/0x210 [ 1520.672272][T28373] __get_free_pages+0xc/0x40 [ 1520.676880][T28373] mmu_topup_memory_caches+0x1e1/0x490 [ 1520.682351][T28373] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1520.688604][T28373] kvm_mmu_load+0x21/0x12e0 [ 1520.693125][T28373] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1520.698770][T28373] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1520.705042][T28373] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1520.710250][T28373] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1520.717194][T28373] vcpu_enter_guest+0x3b21/0x5f40 18:01:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc00000000000000}, 0x800) [ 1520.722232][T28373] ? emulator_read_emulated+0x50/0x50 [ 1520.727612][T28373] ? lock_acquire+0x16f/0x3f0 [ 1520.732301][T28373] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1520.738034][T28373] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1520.743591][T28373] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1520.743616][T28373] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1520.743631][T28373] ? kvm_set_memory_region+0x50/0x50 [ 1520.743646][T28373] ? tomoyo_path_number_perm+0x263/0x520 [ 1520.743663][T28373] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1520.743683][T28373] ? __f_unlock_pos+0x19/0x20 [ 1520.775469][T28373] ? __fget+0x35a/0x550 [ 1520.779659][T28373] ? kvm_set_memory_region+0x50/0x50 [ 1520.784960][T28373] do_vfs_ioctl+0xd5f/0x1380 [ 1520.789570][T28373] ? ioctl_preallocate+0x210/0x210 [ 1520.794689][T28373] ? __fget+0x381/0x550 [ 1520.798856][T28373] ? ksys_dup3+0x3e0/0x3e0 [ 1520.803280][T28373] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1520.803300][T28373] ? fput_many+0x12c/0x1a0 [ 1520.813984][T28373] ? tomoyo_file_ioctl+0x23/0x30 [ 1520.818932][T28373] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1520.825670][T28373] ? security_file_ioctl+0x8d/0xc0 [ 1520.830797][T28373] ksys_ioctl+0xab/0xd0 [ 1520.834958][T28373] __x64_sys_ioctl+0x73/0xb0 [ 1520.839553][T28373] do_syscall_64+0xfd/0x680 [ 1520.839574][T28373] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1520.839592][T28373] RIP: 0033:0x459519 [ 1520.853949][T28373] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1520.873569][T28373] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1520.882016][T28373] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 [ 1520.889999][T28373] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1520.898000][T28373] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1520.905987][T28373] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 [ 1520.913963][T28373] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 18:01:33 executing program 3: futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000040)=""/152) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) 18:01:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xe00000000000000}, 0x800) 18:01:33 executing program 4: r0 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) lseek(r0, 0x7ffffffffffffffa, 0x3) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="865ff98113", 0x5}], 0x1) 18:01:33 executing program 5: fchmod(0xffffffffffffffff, 0x81) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000040)=""/98) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000000)) r0 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x101, 0x4802) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000140)={{0x2, 0x3, 0x5, 0x2, 0x7}}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x200100, 0x0) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000001100)=""/4096) 18:01:33 executing program 1 (fault-call:8 fault-nth:58): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:01:33 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000007, 0x0, r0, 0x0}]) 18:01:33 executing program 4: r0 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) lseek(r0, 0x7ffffffffffffffb, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x400001, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000140)=""/174) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vsock\x00', 0x101000, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000500)={0x0, 0x8, 0xfffffffffffffffd, 0x4}, &(0x7f00000005c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000600)=ANY=[@ANYBLOB="f400000005332ce4f91d1479cb358f41a2a4ea64b59c8596e725ae82ab50f32105367c7e6d5c754c2913a89d764b7375e3271535fc7e088cdd27f8f02ddc58dad336704bbdd2cdcb21a879d295c27739466f50a27e84666db513328650963463fdb23994febfd19252d237e653550e1cb7b401ff4b356c4a54d48987bb247273929c6a061f03004fe8104f401779cbcf831b3f7038bf7a5683de0379d83108bc9fd5"], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$admmidi(&(0x7f00000012c0)='/dev/admmidi#\x00', 0x2, 0x150d1c6b1b09fa8f) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000480)) inotify_init() getsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f0000000300), &(0x7f0000000340)=0x4) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r5, 0x810c5701, &(0x7f0000000740)) ioctl$VIDIOC_SUBDEV_S_CROP(r5, 0xc038563c, &(0x7f0000000400)={0x0, 0x0, {0x1, 0x9, 0x0, 0xffffffff}}) rt_sigprocmask(0x4, &(0x7f00000004c0)={0x2}, &(0x7f0000000540), 0xfffffffffffffd7c) sendto$inet(r3, &(0x7f0000000880)="ed5e683e4aff75573525928ec56ee3b5b639cb05d129112eac421648ad68d3b3c6cc15ebb90ded100f2f4adfcd18bb2826e6ecbeb68e7ca2222e58ec1707640af75a5a3b95c93188b083e037fe99a1110b1b285ef537077fcd49f1c0938f56defffac1a42583eabfaefd30952a16537473cef491214a45062c0cf58c0d42cd99c2145f9430460555acb21bedfdd668db21b8f6b4d26464912f2922099b2598b317982023a36925c3199dc493c66c6fa19f24871dabee920a44e90c04260fd75b1ae066d230a4c5211017862a226f739d52af01e76f", 0xd5, 0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r5, 0x40045731, &(0x7f0000000980)=0x100000001) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r5, 0x29, 0xd3, &(0x7f00000006c0)={{0xa, 0x4e24, 0x1, @empty, 0x9}, {0xa, 0x4e23, 0x8001, @local, 0x8b}, 0x2, [0x0, 0x8000, 0x8, 0x6, 0x4, 0x4, 0x6, 0x8f]}, 0x5c) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000580)={&(0x7f0000000280)=[0x0, 0x0, 0x0], 0x0, 0x0, &(0x7f00000003c0)=[0x0, 0x0], 0x3, 0x0, 0x0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x100000000000000, 0x0, 0x65}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00'/248, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x800000000000000}}, 0x48) ioctl$EVIOCGEFFECTS(r5, 0x80044584, &(0x7f0000000240)=""/29) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x5, 0x100000001, 0x8000000, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, [], r2}, 0x3c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="865ff98113", 0x5}], 0x1) 18:01:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xf00000000000000}, 0x800) 18:01:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1000000000000000}, 0x800) 18:01:33 executing program 5: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000380), 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x824c, 0x4040) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x400, 0x650, 0x100000001, 0x3, 0xc7d}, 0x14) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f00000000c0)={0x7, 0xed2, 0x5, {r1, r2+10000000}, 0x7f, 0x3}) futex(&(0x7f0000000000)=0xfffffffffffffffc, 0x3, 0x0, 0x0, 0x0, 0x1) [ 1521.554427][T28558] FAULT_INJECTION: forcing a failure. [ 1521.554427][T28558] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1521.602932][T28558] CPU: 0 PID: 28558 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 1521.610873][T28558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1521.620956][T28558] Call Trace: [ 1521.624266][T28558] dump_stack+0x172/0x1f0 [ 1521.628622][T28558] should_fail.cold+0xa/0x15 [ 1521.633229][T28558] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1521.639049][T28558] ? ___might_sleep+0x163/0x280 [ 1521.643919][T28558] should_fail_alloc_page+0x50/0x60 [ 1521.649124][T28558] __alloc_pages_nodemask+0x1a1/0x8d0 [ 1521.654506][T28558] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1521.660258][T28558] ? mmu_topup_memory_caches+0x97/0x490 [ 1521.665815][T28558] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1521.672075][T28558] alloc_pages_current+0x107/0x210 [ 1521.677198][T28558] __get_free_pages+0xc/0x40 [ 1521.681797][T28558] mmu_topup_memory_caches+0x1e1/0x490 [ 1521.687263][T28558] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1521.693524][T28558] kvm_mmu_load+0x21/0x12e0 [ 1521.698033][T28558] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1521.703674][T28558] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1521.709927][T28558] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1521.715141][T28558] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1521.721492][T28558] vcpu_enter_guest+0x3b21/0x5f40 [ 1521.730702][T28558] ? emulator_read_emulated+0x50/0x50 [ 1521.736090][T28558] ? lock_acquire+0x16f/0x3f0 [ 1521.741080][T28558] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1521.746841][T28558] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1521.752394][T28558] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1521.758127][T28558] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1521.762821][T28558] ? kvm_set_memory_region+0x50/0x50 [ 1521.768113][T28558] ? tomoyo_path_number_perm+0x263/0x520 [ 1521.773762][T28558] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1521.779574][T28558] ? __f_unlock_pos+0x19/0x20 [ 1521.784271][T28558] ? __fget+0x35a/0x550 [ 1521.788444][T28558] ? kvm_set_memory_region+0x50/0x50 [ 1521.793740][T28558] do_vfs_ioctl+0xd5f/0x1380 [ 1521.798344][T28558] ? ioctl_preallocate+0x210/0x210 [ 1521.803466][T28558] ? __fget+0x381/0x550 [ 1521.807640][T28558] ? ksys_dup3+0x3e0/0x3e0 [ 1521.812071][T28558] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1521.818320][T28558] ? fput_many+0x12c/0x1a0 [ 1521.823489][T28558] ? tomoyo_file_ioctl+0x23/0x30 [ 1521.828435][T28558] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1521.834683][T28558] ? security_file_ioctl+0x8d/0xc0 [ 1521.839802][T28558] ksys_ioctl+0xab/0xd0 [ 1521.843966][T28558] __x64_sys_ioctl+0x73/0xb0 [ 1521.848565][T28558] do_syscall_64+0xfd/0x680 [ 1521.853084][T28558] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1521.858980][T28558] RIP: 0033:0x459519 [ 1521.862880][T28558] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1521.882483][T28558] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1521.890914][T28558] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 [ 1521.898886][T28558] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1521.906859][T28558] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1521.914831][T28558] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 [ 1521.922808][T28558] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 18:01:33 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000008, 0x0, r0, 0x0}]) 18:01:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1100000000000000}, 0x800) 18:01:34 executing program 3: epoll_create1(0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) 18:01:34 executing program 4 (fault-call:8 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:01:34 executing program 1 (fault-call:8 fault-nth:59): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:01:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1200000000000000}, 0x800) [ 1522.212212][T28645] FAULT_INJECTION: forcing a failure. [ 1522.212212][T28645] name failslab, interval 1, probability 0, space 0, times 0 [ 1522.240566][T28645] CPU: 1 PID: 28645 Comm: syz-executor.4 Not tainted 5.2.0-rc7 #65 [ 1522.248664][T28645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1522.258724][T28645] Call Trace: [ 1522.262040][T28645] dump_stack+0x172/0x1f0 [ 1522.266396][T28645] should_fail.cold+0xa/0x15 [ 1522.271005][T28645] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1522.276823][T28645] ? ___might_sleep+0x163/0x280 [ 1522.281690][T28645] __should_failslab+0x121/0x190 [ 1522.286634][T28645] should_failslab+0x9/0x14 [ 1522.286649][T28645] __kmalloc+0x2d9/0x740 [ 1522.286668][T28645] ? tomoyo_realpath_from_path+0xc0/0x7a0 [ 1522.286686][T28645] ? rcu_read_lock_sched_held+0x110/0x130 [ 1522.286700][T28645] ? tomoyo_realpath_from_path+0xcd/0x7a0 [ 1522.286722][T28645] tomoyo_realpath_from_path+0xcd/0x7a0 [ 1522.295536][T28645] ? tomoyo_path_number_perm+0x193/0x520 [ 1522.295560][T28645] tomoyo_path_number_perm+0x1dd/0x520 [ 1522.295574][T28645] ? tomoyo_path_number_perm+0x193/0x520 [ 1522.295592][T28645] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1522.295612][T28645] ? __f_unlock_pos+0x19/0x20 [ 1522.345390][T28645] ? __fget+0x35a/0x550 [ 1522.349577][T28645] ? __fget+0x381/0x550 [ 1522.353747][T28645] ? ksys_dup3+0x3e0/0x3e0 [ 1522.358168][T28645] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1522.364413][T28645] ? fput_many+0x12c/0x1a0 [ 1522.366989][T28750] FAULT_INJECTION: forcing a failure. [ 1522.366989][T28750] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1522.368844][T28645] tomoyo_file_ioctl+0x23/0x30 [ 1522.368862][T28645] security_file_ioctl+0x77/0xc0 [ 1522.368880][T28645] ksys_ioctl+0x57/0xd0 [ 1522.368897][T28645] __x64_sys_ioctl+0x73/0xb0 [ 1522.368916][T28645] do_syscall_64+0xfd/0x680 [ 1522.368936][T28645] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1522.368948][T28645] RIP: 0033:0x459519 [ 1522.368964][T28645] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1522.368972][T28645] RSP: 002b:00007f0542e37c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1522.368987][T28645] RAX: ffffffffffffffda RBX: 00007f0542e37c90 RCX: 0000000000459519 [ 1522.369003][T28645] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1522.458746][T28645] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1522.466822][T28645] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0542e386d4 [ 1522.474882][T28645] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 [ 1522.483324][T28750] CPU: 0 PID: 28750 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 1522.491241][T28750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1522.491248][T28750] Call Trace: [ 1522.491271][T28750] dump_stack+0x172/0x1f0 [ 1522.491297][T28750] should_fail.cold+0xa/0x15 [ 1522.504661][T28750] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1522.519355][T28750] ? ___might_sleep+0x163/0x280 [ 1522.524227][T28750] should_fail_alloc_page+0x50/0x60 [ 1522.529435][T28750] __alloc_pages_nodemask+0x1a1/0x8d0 [ 1522.534821][T28750] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1522.538016][T28645] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1522.540557][T28750] ? mmu_topup_memory_caches+0x97/0x490 [ 1522.540578][T28750] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1522.540599][T28750] alloc_pages_current+0x107/0x210 [ 1522.540624][T28750] __get_free_pages+0xc/0x40 [ 1522.540646][T28750] mmu_topup_memory_caches+0x1e1/0x490 [ 1522.559073][T28750] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1522.559096][T28750] kvm_mmu_load+0x21/0x12e0 [ 1522.559119][T28750] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1522.574252][T28750] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1522.574269][T28750] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1522.574291][T28750] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1522.608269][T28750] vcpu_enter_guest+0x3b21/0x5f40 [ 1522.613498][T28750] ? emulator_read_emulated+0x50/0x50 [ 1522.618887][T28750] ? lock_acquire+0x16f/0x3f0 [ 1522.623580][T28750] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1522.629410][T28750] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1522.634965][T28750] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1522.640716][T28750] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1522.645407][T28750] ? kvm_set_memory_region+0x50/0x50 [ 1522.650701][T28750] ? tomoyo_path_number_perm+0x263/0x520 [ 1522.656350][T28750] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1522.662256][T28750] ? __f_unlock_pos+0x19/0x20 [ 1522.666956][T28750] ? __fget+0x35a/0x550 [ 1522.671141][T28750] ? kvm_set_memory_region+0x50/0x50 [ 1522.676518][T28750] do_vfs_ioctl+0xd5f/0x1380 [ 1522.681119][T28750] ? ioctl_preallocate+0x210/0x210 [ 1522.686242][T28750] ? __fget+0x381/0x550 [ 1522.690411][T28750] ? ksys_dup3+0x3e0/0x3e0 [ 1522.694839][T28750] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1522.701094][T28750] ? fput_many+0x12c/0x1a0 [ 1522.705530][T28750] ? tomoyo_file_ioctl+0x23/0x30 [ 1522.710492][T28750] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1522.718391][T28750] ? security_file_ioctl+0x8d/0xc0 [ 1522.723494][T28750] ksys_ioctl+0xab/0xd0 [ 1522.727670][T28750] __x64_sys_ioctl+0x73/0xb0 [ 1522.732271][T28750] do_syscall_64+0xfd/0x680 [ 1522.736762][T28750] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1522.742649][T28750] RIP: 0033:0x459519 18:01:34 executing program 4 (fault-call:8 fault-nth:1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:01:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1300000000000000}, 0x800) [ 1522.746576][T28750] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1522.766401][T28750] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1522.774822][T28750] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 [ 1522.782786][T28750] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1522.790750][T28750] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1522.798715][T28750] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 [ 1522.806693][T28750] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 18:01:34 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x2, r0, 0x0}]) 18:01:34 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) setsockopt(r0, 0x2, 0x5, &(0x7f00000003c0)="671ea51641a3423d8019412fd92268d0ea16d4c618cd1dda4a9e5c157466cc7647e937094a09c1e642c9e413c4b2a5045346835e658a049bef3acd67e633be049ae5934d8b44d456fb0a1cbee947dd354bee90f73a4f90bf3a5ccf37b916bc6792b757fd45165a321dee1fa2c5ef734a1c04daa463e68f408932b30c8709c4b182a9cb289533b60ff357ad8d4e89b8eb163a509deee8b3e38150ef8405b816ffaafeb15e27ccc9c831d00a83a1942e146cdc70d1aeb03470dbe3c46292796c1acbeb2a1c8d9b00b801cb5f0139e9c35584dc5f0e7a28850a08aedb6316d6d2811e5bad95adb3114bc0197bbe21969567c0dfbdfe8dfa1c79e87f246a0c1ec443b20a1473952d903654686dedc2ad3623eb731208c9c03be31f753091bb9d66c0cff87d5cb07dd010468419c37875c021fde1f40b269cbf23d24ff649b961b5b383ea36690956aa0cbe4cb1cff7bcad1c206cd35a0e4c5a32464a7ebc96966a3b95cb1fe9f0cecb550cc66a50e414604aaa28ca40972445835b6e6fe17847e0e17cb57ef2817d2831f600c7a8f847e7a8b5de94bd11b3c6785549ff1f6bc8fa8713822e7d37886544e912fe168de6e8bd42888a886b6b248b4d63ce11472749fab6de92a056be6dcc302aa2825439adc84389826b1f22b57d0769f9f405cca126865ba0d6bf231b762d6597bec4658a255ab992bcf512e4064395dad1d862dc27bbe9d3cbea6c8bcd3f8955cec53273510e41509af59c3251b094cb17b5c0f7ef747d7e1d304f80a52b39b79ba6dea221039b735918ae7fca407be4a18a62bd760b0d59c88eb77edfcea5b341d47540970a451baa962248137167ad8962ba53143bc58214fe5189db4b877a57dffe6655516a9237b70ea915f368dcdeb6b08ba734e2321549580a874d3f8134931e4b3327ff13e37c8519186bc467aedcb74b818d492c2001e509c1837107e86748fd4675a47a68ccc748a0a0b949b82d494e7b749985d09ec69e417a6d069401bb7165fe9183f686e6fff6fee437298b18eb2f710fb1179ed532a9d4b5f6477ebeb8b760d7f98ebf72079cc71dea9c76db6434240c17ba89beda16d64d197c66067649042cba817b1edd66b003ebe848314d3f3c395ddd36f654341d1096050178167bccd38bf846b6598854079dcd717860c17cb131200c2afa40e4bc39053820c97d56c80be7c3aa30675ff310bf5f98b8f2a21fb8b0d726599c7cde55703799de3e884ece4bd53935a8507b1935f445be354dcfc642b4871eef9a0c2b545477d2898828ed58b1087cddd743893b9648d2cf1d5d691d392791d8641d935e6a89d36bed60a43b6c5b17500b022e9d7ed1839311958e6a37971d54670b0a2ecc8d94f9a43fd91cf4e44af9afea4e7fdce19ced1b7c830573af17f6f7c58d2f7072c0a10e06ccc3ca644e87f2d3d462107845cb398f54301625b6f1afc53378835f98a6bcae948326ad492879a55f61a4af002d2796cc1140e8ea0e9152863f22f5fa91c8bfa47d00ec735c9d16059cd2a29e9cd76ca94a1c622c87eeebc56232fc9ebb7a0f6d2633f0313dd5bf8d1168144885672a94f5534f7770f0b5c1d5f2d3e9c733f2baae4d0a78093148f50a302e8852bb066cfe9b55df60e20817bf149766c2d1c128dff034525e6b7faeb6b711eedd96e2f17c1030e84b828a845db0d6e0dd143908ff40823b033f12a7f619bd9e0f316f75a28df63663d7865a0e9ce527d5fda4cd4579e0ad10bd43eac1de5834c8dbd6542275fe6b9739311ee19d2815c3ed2f5f008a8dc783ba5e7469e6bcf34eea3b27cda9d425d2f9fabc3bab0ebebb70b3f720f85ec557aaf97d60c2d2da0d40427e3349c4efc4957f3a611c1615ffbeab8c53f740dfe9f2c87b11580d256ca07ad6435333954712935e835a8a59ff74d0fa68bd23fff3a4d9883c3e9730c2c792c9f7e40e07078bef3bf318de5d4cb122ac0f1331b52874dc9d09074012260191d0f0a4a23e951ac74df68347aa552547ffb3b5f5de336780d588387558e37402e2340aeb75371aa484e6d7808f44a6a1c9b5274198473e9249e4f669c982fccceadf25991eb7e19582de8ff8fc265effbb4bdcc39f87dff1bb4e535b1b74a4c4e682cd97cf471ce8973e39b1e2bdf1c92f062bf1dc42dbc36cb42a70f73221564d99281c652ca14ebddef3ba27e1ae8f779329c02431d428983b0d2fa1d051fe1e2eb815b32c62b5274aed56cb7f4c195e721793be9faee4ff1642b804317b41b000020f36d7af80f8eb8419ae33726c3da1a7a2bb881be6f66ffca056938ec801118d7414aeb9d7510c9cd63ded705c15efa42e3681adeb50e0a3180b85e37e33ecf8fe3f467afa1cbfff01d1dbe6a60fd1dc17ffdcac1f631f9921e481c1cf921b15e27ccd1f2de30884d630d3f2e12915253b284bf6a8b6edfb1f05f66e3a971d049fb189fc00683cb7e030fd75b67a37ea9da35000d7a0b30d184bb72ccafe57a1bb23828ff6b1d0e6ba1eed36cda3d7b620f63ac6ca9f4e50278e78a0e2463f36133c5ecd5f201d8b0a4d0b6c29558d1b631fa53e4844d79c91ca59512431058a6024fcb72e36352034049f741e43970e652670704c7706a3221fa655a03cd471832bf8d0ccc59c3f577cf160db413b8dc993f13523eadfa87867996f993ae675cd74b483d722a17dbb5cc64785e9fa7053cbbfa8373814de77e47d30ef905fb494f2cc01e84d6cf6b918ca3170d12b2dd8e8320ff60c74cd246d7155bce96204725e11700ba2bea9f3215852bc384f3f14d520a7a869219fb599f865bcd90e232c43b43a329ccecb586cb7191a4aab4fb9c725659a0a6f7cc907328f46a71fd92833bd174dcd23fab76d71ff2b7db44c80ef8a02657fe9453f9e92ef1801adc22c5711df4bb176cfe06b351a6a986d80cf5b7af017431786558c49d856087a263a1b003ac127d4cf99b728590d700dc829e804ed737d8a903ca9a9635ba0112edead4259078bb0b785e0107084a767c54dc606bb3d81ef0c378a9d47ae756a58f2f6343ff302dd9acf591628e72d64a799fe49dd1b1230d01e8cadc465b4a11023802e75cf82266aa9f630978e62a8f37333a0b000ff9025faea940be270d43b63b097b207e2908d7b58e0de935e9105bffa79f8667a9f5f0086af2053cec6c354c38ff8f8b406f8dda30a557bac7d3c5aadf0a08a1240e7d7de4f354c0743a98e004220815a09714ea5edd89e178336d804dfdc7b6d6745de382f4091479396c84e0eb8e56e03c076139174192d27e9eb774eb99538ac96d5d7da6fb1879c0c3258587b5853fbf7b7520200538df318ca8a1bd7da7534ed1b51e3f2586412c9ecab77fb9e436444af29df76063357312519740df856dcd746fe80f3b6c4dd7b02ab9366dc5a0cf95a42f6c69c3b91cd7798357d84ca9f6f6429aa3a5aedb7c4cc95b67713503365d5bd00cb08fcc3073694f07aecd625488a504cd1d362d32c1e6b046d769c3ee7a1ec4b6f4d1efe9ecf55e5bb9ce68a09f515c77a1979d35e7a747d511a07f75abbc6cd350a4e3e198f146bc7300c927ddc5bd3f9e5db61122f27aed9edf709f9ffa20fbf0678341c92c10f382cf6272ddec0faa9c2011cf595ea74ea7f3a175a66378aeb79e186a76ce9f5b721060db9596e794e4d2750532ca0b28056640405028df0f5ba5cd756d458bdf285c8d0c5fee9e148a872671b4b87a269a5fe6fec5a8c500f700cb192b876aedd7a8889a4e34119f878b4f5838936f9bfbf6f26bc437b18ea8b2344add77d9caaaaf3e06186a31b4dcf1762cbe878d2f6a5589a38268d82b8ab68b5e1acd08329f59de16f0f7e215c6b192ba2b579edf8069c8eab299ac1d0783b2821f2242641ee65a975723f33f9e5b776f1940494d8bd7a815a630b3dafa77d216d5cc35199644bd816e6688a33eaac5e6299bd893b4956773c740cf3615c8dced445d0d7aed87d1c04e493adf230dbb498cc2a73161bbd84a385bf9f8d075306dcf00fe2db651e9917e01558deba3fa5db6bfbe1ee6b28feeb5c64c3f4facb64ab011d403c93964bdce351c23dfcfd06655616783f4c8e391e6aebc280602ca940202a641ed60c434e258acce15603a279e1c72e934b7e48ffb774b53225a09de1fbd7ef8ef86b05fc931debca72283077052ff8f5fea5ea98b488a46fdac22f2c560450ad6bda46b5890a80da1cbd31a18c24cb226d59e29099eff5288fc24b50bc2986e64ee274d4a9a98d779556b72acd868a029cfb5f03b86906cf357685ee89c98119a35ce9e5830e46979c5f42ed03133a64e998b0add4e733922fadb494f68a3876116e9f018dc0dec7c42fb9ec3f493e4e4b1665bef02f03fb102e7983edb1e510fda5c779b84d39b807dbb180506e60fce25c7854ddae4b622cf85834efd6c212fbfea6da472f5ea9cf5bdd93d2aff62e349c904b7ef310c9b631199826664fa53673bb18df659584817c223e2a9515e358ed66aa86af7646c3ddab0e63d67e509a5937a26e30c2035976f3ca81ad5746f3fd7108898412a526497e05cfc3217dbecf6ae98196d04ce242de7ab4f96df6abdbc6a141d919f0e7cd50ea183a0146aaf7fdc5d2b2e76edd8545d487b5e94656759fb750c293199bda038ea86a3134f67d5de5a7d4b6d5e797426e665cc026723d94107206c6f1ff5240efbe863c3002cb07bf2cf5439fac5b50690de4823e139f1ac89c4e915702ed50ac11668b2db4f58cd8fd2329e8b286200e87828aa38a7e002a85f6fce13629480e44a207c548ba735ebd67e1350f8a5bf2f179120b69733b1ae73a91ba379e2f2264aa5eceab50a074de2ce541a46acae6c39a7c6b63bb1640d77ef29dd78858124d0c707a01f20447bfde8e308568b8160944c4ea79994494063225bdcebd21f5e7c2eaeadd3fda54594bc10fa22dafd51b47026d0bf7eed4d4431631798b82ffa518174402ef2aeb2b0ebb70f4894731b247ce4dc4f3f7b53987e40c0e7b6641ab7644e1b25b7133d53b8c0641cc5109bea0602fdae015126e4c43919816c49972b7092c01b8f21d1af2e1e3af31f4cd138aa9aa89e45ba0ae211dd361f7ac0c9294cad0218774c3722ac526adba181e339c69272813f8444103f35e5f3874a9d7099b2d0074648338cb8d994078164c217f06f15df8684746f0fa11e2c31e527c29ef247a0874c8dac60156e9f08b6f6ca2f8aae5110f90a4e227f56f1eeeb898a8ab7a112a34cf8d1136fa788909a980ad0953d77a46e2f50a41bb29de9ca7edcc56c0e91f748bc364dbf518ac51f3a5def01e876d8a58476a147841bcc6d53b6bed39e1c710cd396ac798ad9bc9ad94bafb70316999b09ba1547e4d9f97aa07309868a6fb9565e5fc8b3e830245e7ee03bd37df2364fab7e8e0b34fc0d120ccdf1e1eff44ca96a83f9926d477907892e0adb507c75934f734e3c8b0ff1b0d0715d053a187a92d539590fa58a7cb33c17bda2045c13fc48505436100b149c08864d15fa486f9a019f8d9daf5a2a6db0598300d6b9484d789febc8dec8167d5d25eaf09bc65b8943d8990a66c332c2c36fe6802c494d111176c1d04443a9d9cd5f7cfac9f71e90db3cdcbda7c8f2c753a224c35f91154b9c58af26c23c1974d4b8772510e4ad8034ad63f504584d18e20ffd8c03324395bc6551f129348ceb59d03ac9c6f27e269842dabb9e20ca28970b8d750f4f807e84b2c079f2106ad16ba0535fd6236b1598e2ad1dae705b6a1efcc1b1101eb909c980bb959fca4f72da9d9ee9a76b977be4579f8", 0x1000) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000380), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) 18:01:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1400000000000000}, 0x800) 18:01:35 executing program 1 (fault-call:8 fault-nth:60): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1523.047626][T28764] FAULT_INJECTION: forcing a failure. [ 1523.047626][T28764] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1523.060863][T28764] CPU: 0 PID: 28764 Comm: syz-executor.4 Not tainted 5.2.0-rc7 #65 [ 1523.068756][T28764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1523.078809][T28764] Call Trace: [ 1523.082120][T28764] dump_stack+0x172/0x1f0 [ 1523.086480][T28764] should_fail.cold+0xa/0x15 [ 1523.091097][T28764] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1523.096916][T28764] should_fail_alloc_page+0x50/0x60 [ 1523.102129][T28764] __alloc_pages_nodemask+0x1a1/0x8d0 [ 1523.107525][T28764] ? __lock_acquire+0x54f/0x5490 [ 1523.112483][T28764] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1523.118304][T28764] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1523.124128][T28764] cache_grow_begin+0x9d/0x650 [ 1523.128906][T28764] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1523.135157][T28764] __kmalloc+0x67c/0x740 [ 1523.139432][T28764] ? tomoyo_realpath_from_path+0xcd/0x7a0 [ 1523.145176][T28764] tomoyo_realpath_from_path+0xcd/0x7a0 [ 1523.150730][T28764] ? tomoyo_path_number_perm+0x193/0x520 [ 1523.156384][T28764] tomoyo_path_number_perm+0x1dd/0x520 [ 1523.161870][T28764] ? tomoyo_path_number_perm+0x193/0x520 [ 1523.167547][T28764] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1523.173392][T28764] ? __f_unlock_pos+0x19/0x20 [ 1523.178107][T28764] ? __fget+0x35a/0x550 [ 1523.182297][T28764] ? __fget+0x381/0x550 [ 1523.186472][T28764] ? ksys_dup3+0x3e0/0x3e0 [ 1523.190900][T28764] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1523.197157][T28764] ? fput_many+0x12c/0x1a0 [ 1523.201603][T28764] tomoyo_file_ioctl+0x23/0x30 [ 1523.206384][T28764] security_file_ioctl+0x77/0xc0 [ 1523.211334][T28764] ksys_ioctl+0x57/0xd0 [ 1523.215513][T28764] __x64_sys_ioctl+0x73/0xb0 [ 1523.220232][T28764] do_syscall_64+0xfd/0x680 [ 1523.224752][T28764] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1523.230654][T28764] RIP: 0033:0x459519 [ 1523.234542][T28764] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1523.254237][T28764] RSP: 002b:00007f0542e37c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1523.262659][T28764] RAX: ffffffffffffffda RBX: 00007f0542e37c90 RCX: 0000000000459519 [ 1523.270646][T28764] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1523.278633][T28764] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1523.286613][T28764] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0542e386d4 18:01:35 executing program 3: futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) 18:01:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000000000000}, 0x800) [ 1523.294605][T28764] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 [ 1523.336456][T28882] FAULT_INJECTION: forcing a failure. [ 1523.336456][T28882] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1523.350069][T28882] CPU: 0 PID: 28882 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 1523.357976][T28882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1523.368037][T28882] Call Trace: [ 1523.371356][T28882] dump_stack+0x172/0x1f0 [ 1523.375733][T28882] should_fail.cold+0xa/0x15 [ 1523.380359][T28882] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1523.386189][T28882] ? ___might_sleep+0x163/0x280 [ 1523.391066][T28882] should_fail_alloc_page+0x50/0x60 [ 1523.396275][T28882] __alloc_pages_nodemask+0x1a1/0x8d0 [ 1523.401670][T28882] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1523.407414][T28882] ? mmu_topup_memory_caches+0x97/0x490 [ 1523.412976][T28882] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1523.419231][T28882] alloc_pages_current+0x107/0x210 [ 1523.424361][T28882] __get_free_pages+0xc/0x40 [ 1523.428972][T28882] mmu_topup_memory_caches+0x1e1/0x490 [ 1523.434452][T28882] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1523.440832][T28882] kvm_mmu_load+0x21/0x12e0 [ 1523.445349][T28882] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1523.450995][T28882] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1523.457245][T28882] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1523.462470][T28882] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1523.468726][T28882] vcpu_enter_guest+0x3b21/0x5f40 [ 1523.473764][T28882] ? emulator_read_emulated+0x50/0x50 [ 1523.479140][T28882] ? lock_acquire+0x16f/0x3f0 [ 1523.479155][T28882] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1523.479176][T28882] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1523.479191][T28882] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1523.479213][T28882] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1523.505611][T28882] ? kvm_set_memory_region+0x50/0x50 [ 1523.510913][T28882] ? tomoyo_path_number_perm+0x263/0x520 [ 1523.516558][T28882] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1523.522371][T28882] ? __f_unlock_pos+0x19/0x20 [ 1523.527070][T28882] ? __fget+0x35a/0x550 [ 1523.531242][T28882] ? kvm_set_memory_region+0x50/0x50 [ 1523.536540][T28882] do_vfs_ioctl+0xd5f/0x1380 [ 1523.541141][T28882] ? ioctl_preallocate+0x210/0x210 [ 1523.546259][T28882] ? __fget+0x381/0x550 [ 1523.550431][T28882] ? ksys_dup3+0x3e0/0x3e0 [ 1523.554858][T28882] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1523.561114][T28882] ? fput_many+0x12c/0x1a0 [ 1523.565547][T28882] ? tomoyo_file_ioctl+0x23/0x30 [ 1523.570493][T28882] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1523.576737][T28882] ? security_file_ioctl+0x8d/0xc0 [ 1523.581859][T28882] ksys_ioctl+0xab/0xd0 [ 1523.586030][T28882] __x64_sys_ioctl+0x73/0xb0 [ 1523.590638][T28882] do_syscall_64+0xfd/0x680 [ 1523.595185][T28882] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1523.601082][T28882] RIP: 0033:0x459519 [ 1523.604982][T28882] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1523.624591][T28882] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 18:01:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x6000000000000000}, 0x800) 18:01:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x6558000000000000}, 0x800) 18:01:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x6e10000000000000}, 0x800) 18:01:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8100000000000000}, 0x800) [ 1523.633022][T28882] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 [ 1523.640995][T28882] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1523.649066][T28882] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1523.657043][T28882] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 [ 1523.665033][T28882] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 18:01:35 executing program 4 (fault-call:8 fault-nth:2): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:01:35 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x3, r0, 0x0}]) 18:01:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x800) 18:01:35 executing program 5: futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000), 0x10) 18:01:35 executing program 1 (fault-call:8 fault-nth:61): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:01:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x9effffff00000000}, 0x800) [ 1523.963225][T28902] FAULT_INJECTION: forcing a failure. [ 1523.963225][T28902] name failslab, interval 1, probability 0, space 0, times 0 [ 1524.001411][T28902] CPU: 0 PID: 28902 Comm: syz-executor.4 Not tainted 5.2.0-rc7 #65 [ 1524.009591][T28902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1524.019656][T28902] Call Trace: [ 1524.022967][T28902] dump_stack+0x172/0x1f0 [ 1524.027322][T28902] should_fail.cold+0xa/0x15 [ 1524.031931][T28902] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1524.037754][T28902] ? ___might_sleep+0x163/0x280 [ 1524.042628][T28902] __should_failslab+0x121/0x190 [ 1524.047583][T28902] should_failslab+0x9/0x14 [ 1524.052104][T28902] __kmalloc+0x2d9/0x740 [ 1524.056369][T28902] ? tomoyo_encode2.part.0+0xf5/0x400 [ 1524.061757][T28902] tomoyo_encode2.part.0+0xf5/0x400 [ 1524.066974][T28902] tomoyo_encode+0x2b/0x50 [ 1524.071399][T28902] tomoyo_realpath_from_path+0x1d3/0x7a0 [ 1524.077040][T28902] ? tomoyo_path_number_perm+0x193/0x520 [ 1524.082690][T28902] tomoyo_path_number_perm+0x1dd/0x520 [ 1524.088158][T28902] ? tomoyo_path_number_perm+0x193/0x520 [ 1524.093801][T28902] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1524.099621][T28902] ? __f_unlock_pos+0x19/0x20 [ 1524.104324][T28902] ? __fget+0x35a/0x550 [ 1524.108499][T28902] ? __fget+0x381/0x550 [ 1524.112675][T28902] ? ksys_dup3+0x3e0/0x3e0 [ 1524.117096][T28902] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1524.123338][T28902] ? fput_many+0x12c/0x1a0 [ 1524.127759][T28902] tomoyo_file_ioctl+0x23/0x30 [ 1524.132530][T28902] security_file_ioctl+0x77/0xc0 [ 1524.137473][T28902] ksys_ioctl+0x57/0xd0 [ 1524.141644][T28902] __x64_sys_ioctl+0x73/0xb0 [ 1524.146246][T28902] do_syscall_64+0xfd/0x680 [ 1524.150768][T28902] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1524.156661][T28902] RIP: 0033:0x459519 [ 1524.160559][T28902] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1524.180165][T28902] RSP: 002b:00007f0542e37c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1524.180181][T28902] RAX: ffffffffffffffda RBX: 00007f0542e37c90 RCX: 0000000000459519 [ 1524.180189][T28902] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1524.180198][T28902] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 18:01:36 executing program 3: futex(&(0x7f000000cffc)=0x6, 0x80000002, 0x2, 0x0, 0x0, 0x0) futex(&(0x7f0000000000)=0x4, 0x6, 0x1, 0x0, 0x0, 0x1) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x1, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r1 = open(&(0x7f0000000080)='./file1\x00', 0x2, 0x39) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000140)) ioctl$TIOCSBRK(r0, 0x5427) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000100)) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000280)) 18:01:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xf0ffffff00000000}, 0x800) 18:01:36 executing program 5: r0 = syz_open_dev$video(&(0x7f00000001c0)='/dev/video#\x00', 0x1, 0x10000) fcntl$getflags(r0, 0x40b) futex(&(0x7f0000000000)=0x4, 0x4, 0x4, 0x0, &(0x7f0000000180)=0x2, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=""/148, 0x94}], 0x1, 0x0) [ 1524.180215][T28902] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0542e386d4 [ 1524.204635][T28902] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 [ 1524.222415][T28902] ERROR: Out of memory at tomoyo_realpath_from_path. 18:01:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xfeff000000000000}, 0x800) 18:01:36 executing program 5: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000380), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) [ 1524.271392][T28993] FAULT_INJECTION: forcing a failure. [ 1524.271392][T28993] name fail_page_alloc, interval 1, probability 0, space 0, times 0 18:01:36 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x4, r0, 0x0}]) 18:01:36 executing program 4 (fault-call:8 fault-nth:3): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1524.366461][T28993] CPU: 0 PID: 28993 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 1524.374400][T28993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1524.384551][T28993] Call Trace: [ 1524.387871][T28993] dump_stack+0x172/0x1f0 [ 1524.392220][T28993] should_fail.cold+0xa/0x15 [ 1524.396836][T28993] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1524.402666][T28993] ? ___might_sleep+0x163/0x280 [ 1524.407536][T28993] should_fail_alloc_page+0x50/0x60 [ 1524.412744][T28993] __alloc_pages_nodemask+0x1a1/0x8d0 [ 1524.418162][T28993] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1524.423992][T28993] ? mmu_topup_memory_caches+0x97/0x490 [ 1524.429555][T28993] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1524.435817][T28993] alloc_pages_current+0x107/0x210 [ 1524.440955][T28993] __get_free_pages+0xc/0x40 [ 1524.445568][T28993] mmu_topup_memory_caches+0x1e1/0x490 [ 1524.451051][T28993] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1524.457310][T28993] kvm_mmu_load+0x21/0x12e0 [ 1524.461828][T28993] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1524.467473][T28993] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1524.473724][T28993] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1524.478936][T28993] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1524.485189][T28993] vcpu_enter_guest+0x3b21/0x5f40 [ 1524.490231][T28993] ? emulator_read_emulated+0x50/0x50 [ 1524.495623][T28993] ? lock_acquire+0x16f/0x3f0 [ 1524.500333][T28993] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1524.506082][T28993] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1524.511646][T28993] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1524.517387][T28993] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1524.522104][T28993] ? kvm_set_memory_region+0x50/0x50 [ 1524.527401][T28993] ? tomoyo_path_number_perm+0x263/0x520 [ 1524.533043][T28993] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1524.533060][T28993] ? __f_unlock_pos+0x19/0x20 [ 1524.533083][T28993] ? __fget+0x35a/0x550 [ 1524.533105][T28993] ? kvm_set_memory_region+0x50/0x50 [ 1524.533132][T28993] do_vfs_ioctl+0xd5f/0x1380 [ 1524.543621][T28993] ? ioctl_preallocate+0x210/0x210 [ 1524.543637][T28993] ? __fget+0x381/0x550 [ 1524.543666][T28993] ? ksys_dup3+0x3e0/0x3e0 [ 1524.571625][T28993] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1524.577885][T28993] ? fput_many+0x12c/0x1a0 [ 1524.582324][T28993] ? tomoyo_file_ioctl+0x23/0x30 [ 1524.587273][T28993] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1524.592319][T29036] FAULT_INJECTION: forcing a failure. [ 1524.592319][T29036] name failslab, interval 1, probability 0, space 0, times 0 [ 1524.593519][T28993] ? security_file_ioctl+0x8d/0xc0 [ 1524.593539][T28993] ksys_ioctl+0xab/0xd0 [ 1524.593559][T28993] __x64_sys_ioctl+0x73/0xb0 [ 1524.620003][T28993] do_syscall_64+0xfd/0x680 [ 1524.624528][T28993] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1524.630427][T28993] RIP: 0033:0x459519 [ 1524.634323][T28993] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1524.653935][T28993] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1524.662353][T28993] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 [ 1524.670329][T28993] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1524.678308][T28993] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1524.686281][T28993] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 [ 1524.694255][T28993] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 [ 1524.702326][T29036] CPU: 1 PID: 29036 Comm: syz-executor.4 Not tainted 5.2.0-rc7 #65 18:01:36 executing program 3: futex(&(0x7f0000000000)=0x4, 0x0, 0x800000004, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) [ 1524.710237][T29036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1524.721020][T29036] Call Trace: [ 1524.724325][T29036] dump_stack+0x172/0x1f0 [ 1524.728667][T29036] should_fail.cold+0xa/0x15 [ 1524.733309][T29036] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1524.739145][T29036] ? ___might_sleep+0x163/0x280 [ 1524.744014][T29036] __should_failslab+0x121/0x190 [ 1524.748966][T29036] should_failslab+0x9/0x14 [ 1524.753485][T29036] kmem_cache_alloc+0x2af/0x6f0 [ 1524.758343][T29036] ? vcpu_enter_guest+0x1847/0x5f40 [ 1524.763570][T29036] mmu_topup_memory_caches+0x97/0x490 [ 1524.768965][T29036] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1524.775215][T29036] ? vmx_set_apic_access_page_addr+0x1c3/0x380 [ 1524.781378][T29036] kvm_mmu_load+0x21/0x12e0 [ 1524.781399][T29036] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1524.781418][T29036] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1524.781434][T29036] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1524.781455][T29036] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1524.791578][T29036] vcpu_enter_guest+0x3b21/0x5f40 18:01:36 executing program 1 (fault-call:8 fault-nth:62): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1524.791606][T29036] ? emulator_read_emulated+0x50/0x50 [ 1524.791625][T29036] ? lock_acquire+0x16f/0x3f0 [ 1524.791641][T29036] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1524.791663][T29036] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1524.835598][T29036] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1524.841333][T29036] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1524.846018][T29036] ? kvm_set_memory_region+0x50/0x50 [ 1524.851309][T29036] ? tomoyo_path_number_perm+0x263/0x520 [ 1524.856954][T29036] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1524.862766][T29036] ? __f_unlock_pos+0x19/0x20 [ 1524.867459][T29036] ? __fget+0x35a/0x550 [ 1524.871626][T29036] ? kvm_set_memory_region+0x50/0x50 [ 1524.876924][T29036] do_vfs_ioctl+0xd5f/0x1380 [ 1524.881527][T29036] ? ioctl_preallocate+0x210/0x210 [ 1524.886648][T29036] ? __fget+0x381/0x550 [ 1524.886669][T29036] ? ksys_dup3+0x3e0/0x3e0 [ 1524.895240][T29036] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1524.901486][T29036] ? fput_many+0x12c/0x1a0 [ 1524.905911][T29036] ? tomoyo_file_ioctl+0x23/0x30 [ 1524.910857][T29036] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1524.917109][T29036] ? security_file_ioctl+0x8d/0xc0 [ 1524.922330][T29036] ksys_ioctl+0xab/0xd0 [ 1524.926495][T29036] __x64_sys_ioctl+0x73/0xb0 [ 1524.931101][T29036] do_syscall_64+0xfd/0x680 [ 1524.935625][T29036] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1524.941522][T29036] RIP: 0033:0x459519 [ 1524.945428][T29036] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 18:01:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xff0f000000000000}, 0x800) 18:01:37 executing program 5: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000380), 0x0) futex(&(0x7f000000cffc)=0xfffffffffffffffc, 0x5, 0x0, 0x0, 0x0, 0x0) [ 1524.965041][T29036] RSP: 002b:00007f0542e37c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1524.973464][T29036] RAX: ffffffffffffffda RBX: 00007f0542e37c90 RCX: 0000000000459519 [ 1524.981433][T29036] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1524.981443][T29036] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1524.981452][T29036] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0542e386d4 [ 1524.981461][T29036] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 18:01:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xffffff7f00000000}, 0x800) 18:01:37 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x300, r0, 0x0}]) 18:01:37 executing program 4 (fault-call:8 fault-nth:4): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:01:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xfffffffffffff000}, 0x800) [ 1525.214727][T29148] FAULT_INJECTION: forcing a failure. [ 1525.214727][T29148] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1525.238891][T29148] CPU: 1 PID: 29148 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 1525.246810][T29148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1525.256865][T29148] Call Trace: [ 1525.260172][T29148] dump_stack+0x172/0x1f0 [ 1525.264525][T29148] should_fail.cold+0xa/0x15 [ 1525.269148][T29148] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1525.269166][T29148] ? ___might_sleep+0x163/0x280 [ 1525.269187][T29148] should_fail_alloc_page+0x50/0x60 [ 1525.269201][T29148] __alloc_pages_nodemask+0x1a1/0x8d0 [ 1525.269220][T29148] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1525.269257][T29148] ? mmu_topup_memory_caches+0x97/0x490 [ 1525.269282][T29148] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1525.285193][T29148] alloc_pages_current+0x107/0x210 [ 1525.285215][T29148] __get_free_pages+0xc/0x40 [ 1525.317821][T29148] mmu_topup_memory_caches+0x1e1/0x490 [ 1525.323290][T29148] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1525.329538][T29148] kvm_mmu_load+0x21/0x12e0 [ 1525.334053][T29148] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1525.339691][T29148] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1525.345937][T29148] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1525.351157][T29148] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1525.357025][T29210] FAULT_INJECTION: forcing a failure. [ 1525.357025][T29210] name failslab, interval 1, probability 0, space 0, times 0 [ 1525.357405][T29148] vcpu_enter_guest+0x3b21/0x5f40 [ 1525.375008][T29148] ? emulator_read_emulated+0x50/0x50 [ 1525.380412][T29148] ? lock_acquire+0x16f/0x3f0 [ 1525.385102][T29148] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1525.390854][T29148] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1525.396405][T29148] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1525.402144][T29148] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1525.406828][T29148] ? kvm_set_memory_region+0x50/0x50 [ 1525.412126][T29148] ? tomoyo_path_number_perm+0x263/0x520 [ 1525.417770][T29148] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1525.423672][T29148] ? __f_unlock_pos+0x19/0x20 [ 1525.428359][T29148] ? __fget+0x35a/0x550 [ 1525.432532][T29148] ? kvm_set_memory_region+0x50/0x50 [ 1525.437822][T29148] do_vfs_ioctl+0xd5f/0x1380 [ 1525.442421][T29148] ? ioctl_preallocate+0x210/0x210 [ 1525.447540][T29148] ? __fget+0x381/0x550 [ 1525.451702][T29148] ? ksys_dup3+0x3e0/0x3e0 [ 1525.456126][T29148] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1525.462483][T29148] ? fput_many+0x12c/0x1a0 [ 1525.466910][T29148] ? tomoyo_file_ioctl+0x23/0x30 [ 1525.471858][T29148] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1525.478107][T29148] ? security_file_ioctl+0x8d/0xc0 [ 1525.483242][T29148] ksys_ioctl+0xab/0xd0 [ 1525.487408][T29148] __x64_sys_ioctl+0x73/0xb0 [ 1525.492016][T29148] do_syscall_64+0xfd/0x680 [ 1525.496541][T29148] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1525.503001][T29148] RIP: 0033:0x459519 [ 1525.506902][T29148] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1525.526524][T29148] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1525.534945][T29148] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 [ 1525.542921][T29148] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1525.550897][T29148] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 18:01:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1525.558870][T29148] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 [ 1525.566845][T29148] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 [ 1525.574851][T29210] CPU: 0 PID: 29210 Comm: syz-executor.4 Not tainted 5.2.0-rc7 #65 [ 1525.582761][T29210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1525.592824][T29210] Call Trace: [ 1525.596128][T29210] dump_stack+0x172/0x1f0 [ 1525.600476][T29210] should_fail.cold+0xa/0x15 [ 1525.605090][T29210] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1525.610910][T29210] ? ___might_sleep+0x163/0x280 [ 1525.610933][T29210] __should_failslab+0x121/0x190 [ 1525.610952][T29210] should_failslab+0x9/0x14 [ 1525.610965][T29210] kmem_cache_alloc+0x2af/0x6f0 [ 1525.610979][T29210] ? vcpu_enter_guest+0x1847/0x5f40 [ 1525.611004][T29210] mmu_topup_memory_caches+0x97/0x490 [ 1525.625359][T29210] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1525.625382][T29210] kvm_mmu_load+0x21/0x12e0 [ 1525.625400][T29210] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1525.625417][T29210] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 18:01:37 executing program 1 (fault-call:8 fault-nth:63): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1525.625432][T29210] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1525.625455][T29210] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1525.674991][T29210] vcpu_enter_guest+0x3b21/0x5f40 [ 1525.680035][T29210] ? emulator_read_emulated+0x50/0x50 [ 1525.685458][T29210] ? lock_acquire+0x16f/0x3f0 [ 1525.690183][T29210] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1525.695920][T29210] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1525.695938][T29210] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1525.695962][T29210] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1525.695978][T29210] ? kvm_set_memory_region+0x50/0x50 [ 1525.696000][T29210] ? tomoyo_path_number_perm+0x263/0x520 [ 1525.707283][T29210] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1525.707300][T29210] ? __f_unlock_pos+0x19/0x20 [ 1525.707322][T29210] ? __fget+0x35a/0x550 [ 1525.707343][T29210] ? kvm_set_memory_region+0x50/0x50 [ 1525.707373][T29210] do_vfs_ioctl+0xd5f/0x1380 [ 1525.738487][T29272] FAULT_INJECTION: forcing a failure. [ 1525.738487][T29272] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1525.743009][T29210] ? ioctl_preallocate+0x210/0x210 [ 1525.743023][T29210] ? __fget+0x381/0x550 [ 1525.743044][T29210] ? ksys_dup3+0x3e0/0x3e0 [ 1525.743061][T29210] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1525.743076][T29210] ? fput_many+0x12c/0x1a0 [ 1525.743105][T29210] ? tomoyo_file_ioctl+0x23/0x30 [ 1525.790272][T29210] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1525.796525][T29210] ? security_file_ioctl+0x8d/0xc0 [ 1525.801654][T29210] ksys_ioctl+0xab/0xd0 [ 1525.805818][T29210] __x64_sys_ioctl+0x73/0xb0 [ 1525.810416][T29210] do_syscall_64+0xfd/0x680 [ 1525.814932][T29210] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1525.821560][T29210] RIP: 0033:0x459519 [ 1525.825459][T29210] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1525.845068][T29210] RSP: 002b:00007f0542e37c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1525.853480][T29210] RAX: ffffffffffffffda RBX: 00007f0542e37c90 RCX: 0000000000459519 [ 1525.861466][T29210] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1525.869435][T29210] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1525.877405][T29210] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0542e386d4 [ 1525.885392][T29210] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 [ 1525.894225][T29272] CPU: 1 PID: 29272 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 1525.902142][T29272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1525.912219][T29272] Call Trace: [ 1525.915514][T29272] dump_stack+0x172/0x1f0 [ 1525.919872][T29272] should_fail.cold+0xa/0x15 [ 1525.919891][T29272] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1525.919908][T29272] ? ___might_sleep+0x163/0x280 [ 1525.919930][T29272] should_fail_alloc_page+0x50/0x60 [ 1525.919950][T29272] __alloc_pages_nodemask+0x1a1/0x8d0 [ 1525.945769][T29272] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1525.951525][T29272] ? mmu_topup_memory_caches+0x97/0x490 [ 1525.957078][T29272] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1525.957101][T29272] alloc_pages_current+0x107/0x210 [ 1525.957125][T29272] __get_free_pages+0xc/0x40 [ 1525.957147][T29272] mmu_topup_memory_caches+0x1e1/0x490 [ 1525.978510][T29272] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1525.984765][T29272] kvm_mmu_load+0x21/0x12e0 [ 1525.989279][T29272] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1525.994943][T29272] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1526.001191][T29272] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1526.001208][T29272] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1526.001226][T29272] vcpu_enter_guest+0x3b21/0x5f40 [ 1526.001249][T29272] ? emulator_read_emulated+0x50/0x50 [ 1526.001269][T29272] ? lock_acquire+0x16f/0x3f0 [ 1526.012703][T29272] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1526.012725][T29272] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1526.012740][T29272] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1526.012761][T29272] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1526.012777][T29272] ? kvm_set_memory_region+0x50/0x50 [ 1526.012792][T29272] ? tomoyo_path_number_perm+0x263/0x520 [ 1526.012810][T29272] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1526.012826][T29272] ? __f_unlock_pos+0x19/0x20 [ 1526.012850][T29272] ? __fget+0x35a/0x550 [ 1526.070883][T29272] ? kvm_set_memory_region+0x50/0x50 [ 1526.080298][T29272] do_vfs_ioctl+0xd5f/0x1380 [ 1526.080318][T29272] ? ioctl_preallocate+0x210/0x210 [ 1526.080331][T29272] ? __fget+0x381/0x550 [ 1526.080350][T29272] ? ksys_dup3+0x3e0/0x3e0 [ 1526.080366][T29272] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1526.080381][T29272] ? fput_many+0x12c/0x1a0 [ 1526.080402][T29272] ? tomoyo_file_ioctl+0x23/0x30 [ 1526.080424][T29272] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1526.120432][T29272] ? security_file_ioctl+0x8d/0xc0 [ 1526.125557][T29272] ksys_ioctl+0xab/0xd0 [ 1526.129723][T29272] __x64_sys_ioctl+0x73/0xb0 [ 1526.134332][T29272] do_syscall_64+0xfd/0x680 [ 1526.138848][T29272] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1526.144829][T29272] RIP: 0033:0x459519 [ 1526.148731][T29272] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 18:01:38 executing program 3: futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) 18:01:38 executing program 5: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000380), 0x0) futex(&(0x7f000000cffc)=0x8000000000000002, 0x80, 0x2, 0x0, 0x0, 0x100) [ 1526.168422][T29272] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1526.168438][T29272] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 [ 1526.168446][T29272] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1526.168455][T29272] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1526.168463][T29272] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 [ 1526.168472][T29272] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 18:01:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:01:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:01:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:01:38 executing program 1 (fault-call:8 fault-nth:64): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:01:38 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x4000, r0, 0x0}]) 18:01:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:01:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1526.553702][T29295] FAULT_INJECTION: forcing a failure. [ 1526.553702][T29295] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1526.615741][T29295] CPU: 1 PID: 29295 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 1526.623697][T29295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1526.633756][T29295] Call Trace: [ 1526.637096][T29295] dump_stack+0x172/0x1f0 [ 1526.641462][T29295] should_fail.cold+0xa/0x15 [ 1526.646070][T29295] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1526.651893][T29295] ? ___might_sleep+0x163/0x280 [ 1526.656798][T29295] should_fail_alloc_page+0x50/0x60 [ 1526.662001][T29295] __alloc_pages_nodemask+0x1a1/0x8d0 [ 1526.662021][T29295] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1526.662045][T29295] ? mmu_topup_memory_caches+0x97/0x490 [ 1526.662064][T29295] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1526.662083][T29295] alloc_pages_current+0x107/0x210 [ 1526.662103][T29295] __get_free_pages+0xc/0x40 [ 1526.694697][T29295] mmu_topup_memory_caches+0x1e1/0x490 [ 1526.700165][T29295] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1526.706420][T29295] kvm_mmu_load+0x21/0x12e0 [ 1526.706441][T29295] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1526.706458][T29295] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1526.706480][T29295] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1526.728883][T29295] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1526.728903][T29295] vcpu_enter_guest+0x3b21/0x5f40 [ 1526.728929][T29295] ? emulator_read_emulated+0x50/0x50 [ 1526.728948][T29295] ? lock_acquire+0x16f/0x3f0 [ 1526.728963][T29295] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1526.728984][T29295] kvm_arch_vcpu_ioctl_run+0x423/0x1740 18:01:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x2, 0x0) 18:01:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1526.729004][T29295] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1526.767240][T29295] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1526.771937][T29295] ? kvm_set_memory_region+0x50/0x50 [ 1526.777260][T29295] ? tomoyo_path_number_perm+0x263/0x520 [ 1526.783033][T29295] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1526.788849][T29295] ? __f_unlock_pos+0x19/0x20 [ 1526.793544][T29295] ? __fget+0x35a/0x550 [ 1526.797719][T29295] ? kvm_set_memory_region+0x50/0x50 [ 1526.803049][T29295] do_vfs_ioctl+0xd5f/0x1380 [ 1526.807653][T29295] ? ioctl_preallocate+0x210/0x210 [ 1526.812778][T29295] ? __fget+0x381/0x550 [ 1526.816959][T29295] ? ksys_dup3+0x3e0/0x3e0 [ 1526.821386][T29295] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1526.827637][T29295] ? fput_many+0x12c/0x1a0 [ 1526.832070][T29295] ? tomoyo_file_ioctl+0x23/0x30 [ 1526.837276][T29295] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1526.837292][T29295] ? security_file_ioctl+0x8d/0xc0 [ 1526.837310][T29295] ksys_ioctl+0xab/0xd0 [ 1526.837328][T29295] __x64_sys_ioctl+0x73/0xb0 [ 1526.837346][T29295] do_syscall_64+0xfd/0x680 [ 1526.837369][T29295] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1526.848725][T29295] RIP: 0033:0x459519 [ 1526.848742][T29295] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1526.848751][T29295] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1526.848766][T29295] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 [ 1526.848775][T29295] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 18:01:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1526.848783][T29295] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1526.848792][T29295] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 [ 1526.848808][T29295] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 18:01:39 executing program 3: socket$unix(0x1, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40400, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd8, r1, 0x0, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x956}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xfffffffffffffffc}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0x2}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6c}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x99}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5c}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40d4}, 0x4000010) 18:01:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:01:39 executing program 5: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000040), 0x0) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, 0x0, 0x0) 18:01:39 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x1000000, r0, 0x0}]) 18:01:39 executing program 1 (fault-call:8 fault-nth:65): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:01:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x10, 0x0) 18:01:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1527.264688][T29429] FAULT_INJECTION: forcing a failure. [ 1527.264688][T29429] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1527.308022][T29429] CPU: 0 PID: 29429 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 1527.315961][T29429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1527.326029][T29429] Call Trace: [ 1527.329356][T29429] dump_stack+0x172/0x1f0 [ 1527.333714][T29429] should_fail.cold+0xa/0x15 [ 1527.338326][T29429] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1527.344152][T29429] ? ___might_sleep+0x163/0x280 [ 1527.349024][T29429] should_fail_alloc_page+0x50/0x60 [ 1527.354229][T29429] __alloc_pages_nodemask+0x1a1/0x8d0 [ 1527.359610][T29429] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1527.359643][T29429] ? mmu_topup_memory_caches+0x97/0x490 [ 1527.359665][T29429] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1527.377156][T29429] alloc_pages_current+0x107/0x210 [ 1527.382289][T29429] __get_free_pages+0xc/0x40 [ 1527.386892][T29429] mmu_topup_memory_caches+0x1e1/0x490 [ 1527.392366][T29429] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1527.398632][T29429] kvm_mmu_load+0x21/0x12e0 [ 1527.403477][T29429] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1527.409124][T29429] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1527.415377][T29429] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1527.415397][T29429] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1527.415415][T29429] vcpu_enter_guest+0x3b21/0x5f40 [ 1527.415437][T29429] ? emulator_read_emulated+0x50/0x50 [ 1527.426875][T29429] ? lock_acquire+0x16f/0x3f0 [ 1527.426893][T29429] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1527.426916][T29429] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1527.426947][T29429] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1527.458943][T29429] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1527.463637][T29429] ? kvm_set_memory_region+0x50/0x50 [ 1527.468922][T29429] ? tomoyo_path_number_perm+0x263/0x520 [ 1527.468941][T29429] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1527.468961][T29429] ? __f_unlock_pos+0x19/0x20 [ 1527.480407][T29429] ? __fget+0x35a/0x550 [ 1527.480430][T29429] ? kvm_set_memory_region+0x50/0x50 [ 1527.480446][T29429] do_vfs_ioctl+0xd5f/0x1380 [ 1527.480464][T29429] ? ioctl_preallocate+0x210/0x210 [ 1527.480476][T29429] ? __fget+0x381/0x550 18:01:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:01:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x4b4e, 0x0) [ 1527.480495][T29429] ? ksys_dup3+0x3e0/0x3e0 [ 1527.512946][T29429] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1527.519203][T29429] ? fput_many+0x12c/0x1a0 [ 1527.523634][T29429] ? tomoyo_file_ioctl+0x23/0x30 [ 1527.528592][T29429] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1527.534846][T29429] ? security_file_ioctl+0x8d/0xc0 [ 1527.540015][T29429] ksys_ioctl+0xab/0xd0 [ 1527.544191][T29429] __x64_sys_ioctl+0x73/0xb0 [ 1527.548794][T29429] do_syscall_64+0xfd/0x680 [ 1527.553313][T29429] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1527.559209][T29429] RIP: 0033:0x459519 [ 1527.559226][T29429] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1527.559235][T29429] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1527.559249][T29429] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 [ 1527.559258][T29429] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 18:01:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1527.559266][T29429] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1527.559275][T29429] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 [ 1527.559291][T29429] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 18:01:39 executing program 1 (fault-call:8 fault-nth:66): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:01:39 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x2000000, r0, 0x0}]) [ 1527.912265][T29575] FAULT_INJECTION: forcing a failure. [ 1527.912265][T29575] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1527.925945][T29575] CPU: 0 PID: 29575 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 1527.933844][T29575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1527.943884][T29575] Call Trace: [ 1527.947164][T29575] dump_stack+0x172/0x1f0 [ 1527.951500][T29575] should_fail.cold+0xa/0x15 [ 1527.956114][T29575] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1527.961919][T29575] ? ___might_sleep+0x163/0x280 [ 1527.966764][T29575] should_fail_alloc_page+0x50/0x60 [ 1527.971960][T29575] __alloc_pages_nodemask+0x1a1/0x8d0 [ 1527.977344][T29575] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1527.983076][T29575] ? mmu_topup_memory_caches+0x97/0x490 [ 1527.988608][T29575] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1527.994865][T29575] alloc_pages_current+0x107/0x210 [ 1528.000096][T29575] __get_free_pages+0xc/0x40 [ 1528.004686][T29575] mmu_topup_memory_caches+0x1e1/0x490 [ 1528.010159][T29575] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1528.016406][T29575] kvm_mmu_load+0x21/0x12e0 [ 1528.020895][T29575] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1528.026865][T29575] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1528.033194][T29575] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1528.038384][T29575] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1528.044614][T29575] vcpu_enter_guest+0x3b21/0x5f40 [ 1528.049653][T29575] ? emulator_read_emulated+0x50/0x50 [ 1528.055076][T29575] ? lock_acquire+0x16f/0x3f0 [ 1528.059751][T29575] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1528.065502][T29575] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1528.071058][T29575] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1528.076786][T29575] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1528.081477][T29575] ? kvm_set_memory_region+0x50/0x50 [ 1528.086940][T29575] ? tomoyo_path_number_perm+0x263/0x520 [ 1528.092586][T29575] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1528.098466][T29575] ? __f_unlock_pos+0x19/0x20 [ 1528.103135][T29575] ? __fget+0x35a/0x550 [ 1528.107281][T29575] ? kvm_set_memory_region+0x50/0x50 [ 1528.112551][T29575] do_vfs_ioctl+0xd5f/0x1380 [ 1528.117143][T29575] ? ioctl_preallocate+0x210/0x210 [ 1528.122266][T29575] ? __fget+0x381/0x550 [ 1528.126428][T29575] ? ksys_dup3+0x3e0/0x3e0 [ 1528.130832][T29575] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1528.137064][T29575] ? fput_many+0x12c/0x1a0 [ 1528.141487][T29575] ? tomoyo_file_ioctl+0x23/0x30 [ 1528.146425][T29575] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1528.152650][T29575] ? security_file_ioctl+0x8d/0xc0 [ 1528.157744][T29575] ksys_ioctl+0xab/0xd0 [ 1528.161893][T29575] __x64_sys_ioctl+0x73/0xb0 [ 1528.166498][T29575] do_syscall_64+0xfd/0x680 [ 1528.171015][T29575] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1528.176906][T29575] RIP: 0033:0x459519 [ 1528.180812][T29575] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1528.200676][T29575] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 18:01:40 executing program 3: futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) socket$vsock_dgram(0x28, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4000, 0x40) getsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000001200)={0x0, 0x7, 0x20}, &(0x7f0000001240)=0xc) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001280)={r2, @in={{0x2, 0x4e20, @local}}, 0x0, 0x81, 0xf66, 0x6}, 0x98) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000000)=@add_del={0x2, &(0x7f0000000100)='vxcan1\x00'}) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) name_to_handle_at(r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x1008, 0x1, "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"}, &(0x7f00000011c0), 0x400) 18:01:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x4c00, 0x0) 18:01:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:01:40 executing program 5: futex(&(0x7f0000003cc0)=0x404, 0x804, 0xdffffffffffffffd, 0x0, &(0x7f0000003d80), 0x4) futex(&(0x7f0000000000)=0x2, 0x0, 0x0, 0x0, 0x0, 0x3) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x40, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000003dc0)={{0x9, 0x0, 0x1, 0xbc85, 'syz1\x00', 0x56f}, 0x0, [0xffff, 0x5f67, 0x401, 0x9, 0x0, 0x8, 0x2, 0x5, 0x4, 0xb2, 0xb450, 0x548, 0x8000, 0x8001, 0xffffffffffffffff, 0x1, 0x10001, 0x18, 0x0, 0x48862ea6, 0x0, 0x6, 0xff, 0x2, 0xff, 0x7, 0x7a, 0x4, 0x8001, 0x95aa, 0x9, 0xe1, 0x100000001, 0x6, 0x7, 0x9, 0x6, 0x0, 0x66b, 0x8, 0xad9, 0x10001, 0x0, 0xca81, 0x8001, 0x6, 0x2, 0x1, 0x9, 0x3, 0x7fffffff, 0x3, 0x2, 0x7, 0x7, 0x6, 0x7, 0xdf, 0x25f, 0x1f, 0x200, 0x5b20000000000, 0x81, 0x8, 0x7ff, 0x1, 0x2, 0xff, 0x8, 0x80000000, 0x8, 0x1, 0x81, 0x100000001, 0x7f, 0x3, 0x8, 0xffffffffffff80d9, 0x800, 0x8, 0x4, 0x9, 0x80, 0x8, 0x0, 0x6e, 0xfffffffffffffc01, 0x1000, 0x9, 0x193, 0x800, 0x5, 0x8, 0xffffffffffff385f, 0x8, 0x8a81, 0x0, 0x2, 0x6, 0x40, 0x7, 0x2, 0x3f, 0xd0d7, 0xf7e0, 0x6, 0x0, 0x5, 0x8000, 0x80, 0x5, 0x9, 0x7, 0x4, 0x2, 0x8, 0xffff, 0xf11, 0xfff, 0xff, 0x100000001, 0xffffffffffffff80, 0x0, 0x58c, 0x7ff, 0x8, 0x1000, 0x56d5]}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0xfffffffffffffff8, 0x3, @empty, 0x6}}, 0x7, 0x200, 0x5, 0x10, 0x22}, &(0x7f0000000140)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000180)={0x1ff, 0xffffffffffff8000, 0x8000, 0x9, 0x100000001, 0xafd, 0x7, 0x10001, r1}, 0x20) recvmmsg(r0, &(0x7f0000003b00)=[{{&(0x7f00000001c0)=@sco, 0x80, &(0x7f0000000300)=[{&(0x7f0000000240)=""/156, 0x9c}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x2}, 0x3}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000340)=""/15, 0xf}, {&(0x7f00000013c0)=""/124, 0x7c}, {&(0x7f0000001440)=""/53, 0x35}, {&(0x7f0000001480)=""/207, 0xcf}, {&(0x7f0000001580)=""/235, 0xeb}, {&(0x7f0000001680)=""/63, 0x3f}, {&(0x7f00000016c0)=""/76, 0x4c}, {&(0x7f0000001740)=""/232, 0xe8}, {&(0x7f0000001840)=""/185, 0xb9}], 0x9}, 0x7}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000019c0)=""/39, 0x27}, {&(0x7f0000001a00)=""/2, 0x2}, {&(0x7f0000001a40)=""/108, 0x6c}], 0x3}, 0xffff}, {{&(0x7f0000001b00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001b80)=""/74, 0x4a}, {&(0x7f0000001c00)=""/120, 0x78}, {&(0x7f0000001c80)=""/55, 0x37}, {&(0x7f0000001cc0)=""/86, 0x56}, {&(0x7f0000001d40)=""/99, 0x63}], 0x5, &(0x7f0000001e40)}, 0x43}, {{&(0x7f0000001e80)=@ipx, 0x80, &(0x7f0000002300)=[{&(0x7f0000001f00)=""/26, 0x1a}, {&(0x7f0000001f40)=""/54, 0x36}, {&(0x7f0000001f80)=""/54, 0x36}, {&(0x7f0000001fc0)=""/233, 0xe9}, {&(0x7f00000020c0)=""/237, 0xed}, {&(0x7f00000021c0)=""/212, 0xd4}, {&(0x7f00000022c0)=""/48, 0x30}], 0x7}, 0x1ff}, {{&(0x7f0000002380)=@xdp, 0x80, &(0x7f0000003980)=[{&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/16, 0x10}, {&(0x7f0000003440)=""/125, 0x7d}, {&(0x7f00000034c0)=""/152, 0x98}, {&(0x7f0000003580)=""/248, 0xf8}, {&(0x7f0000003680)=""/247, 0xf7}, {&(0x7f0000003780)=""/147, 0x93}, {&(0x7f0000003840)=""/255, 0xff}, {&(0x7f0000003940)=""/32, 0x20}], 0x9, &(0x7f0000003a40)=""/152, 0x98}, 0x40}], 0x6, 0x10142, &(0x7f0000003c80)={0x0, 0x989680}) [ 1528.209101][T29575] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 [ 1528.217166][T29575] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1528.225144][T29575] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1528.233121][T29575] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 [ 1528.241098][T29575] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 18:01:40 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x3000000, r0, 0x0}]) 18:01:40 executing program 1 (fault-call:8 fault-nth:67): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:01:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:01:40 executing program 5: r0 = socket$kcm(0x29, 0x7, 0x0) accept4(r0, &(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f00000001c0)=0x80, 0x80800) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000380), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) [ 1528.597731][T29689] FAULT_INJECTION: forcing a failure. [ 1528.597731][T29689] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1528.627567][T29689] CPU: 0 PID: 29689 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 1528.635585][T29689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1528.645653][T29689] Call Trace: [ 1528.648962][T29689] dump_stack+0x172/0x1f0 [ 1528.653313][T29689] should_fail.cold+0xa/0x15 [ 1528.657920][T29689] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1528.663733][T29689] ? ___might_sleep+0x163/0x280 [ 1528.668594][T29689] should_fail_alloc_page+0x50/0x60 [ 1528.673810][T29689] __alloc_pages_nodemask+0x1a1/0x8d0 [ 1528.679205][T29689] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1528.685052][T29689] ? mmu_topup_memory_caches+0x97/0x490 [ 1528.685073][T29689] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1528.685096][T29689] alloc_pages_current+0x107/0x210 [ 1528.696895][T29689] __get_free_pages+0xc/0x40 [ 1528.696915][T29689] mmu_topup_memory_caches+0x1e1/0x490 [ 1528.696940][T29689] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1528.719102][T29689] kvm_mmu_load+0x21/0x12e0 [ 1528.723625][T29689] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1528.729280][T29689] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1528.729298][T29689] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1528.729314][T29689] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1528.729332][T29689] vcpu_enter_guest+0x3b21/0x5f40 [ 1528.729356][T29689] ? emulator_read_emulated+0x50/0x50 [ 1528.740788][T29689] ? lock_acquire+0x16f/0x3f0 [ 1528.740805][T29689] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1528.740827][T29689] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1528.740842][T29689] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1528.740872][T29689] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1528.767858][T29689] ? kvm_set_memory_region+0x50/0x50 [ 1528.767875][T29689] ? tomoyo_path_number_perm+0x263/0x520 18:01:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x4c01, 0x0) 18:01:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1528.767893][T29689] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1528.767908][T29689] ? __f_unlock_pos+0x19/0x20 [ 1528.767929][T29689] ? __fget+0x35a/0x550 [ 1528.779186][T29689] ? kvm_set_memory_region+0x50/0x50 [ 1528.779205][T29689] do_vfs_ioctl+0xd5f/0x1380 [ 1528.779223][T29689] ? ioctl_preallocate+0x210/0x210 [ 1528.779236][T29689] ? __fget+0x381/0x550 [ 1528.779264][T29689] ? ksys_dup3+0x3e0/0x3e0 [ 1528.809421][T29689] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1528.809439][T29689] ? fput_many+0x12c/0x1a0 [ 1528.809461][T29689] ? tomoyo_file_ioctl+0x23/0x30 [ 1528.809477][T29689] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1528.809496][T29689] ? security_file_ioctl+0x8d/0xc0 [ 1528.819355][T29689] ksys_ioctl+0xab/0xd0 [ 1528.819375][T29689] __x64_sys_ioctl+0x73/0xb0 [ 1528.819394][T29689] do_syscall_64+0xfd/0x680 [ 1528.819414][T29689] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1528.819426][T29689] RIP: 0033:0x459519 18:01:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x5421, 0x0) [ 1528.819447][T29689] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1528.839298][T29689] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1528.839313][T29689] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 [ 1528.839322][T29689] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1528.839330][T29689] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1528.839339][T29689] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 18:01:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1528.839355][T29689] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 18:01:41 executing program 3: futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x4000000000001) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f0000000340)='/dev/media#\x00', 0x0, 0x800) write$eventfd(r0, &(0x7f0000000040)=0x3, 0x8) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000380)=""/144) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x1, @broadcast}}, 0x1e) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000300)={0x0, {0x7, 0x7faa4f0e}}) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000001c0)={0x0, 0x0, @ioapic}) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000140)={0x7, r0, 0x1}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r0, &(0x7f0000000140), &(0x7f0000000180)=""/40}, 0x18) connect$can_bcm(r0, &(0x7f0000000100), 0x10) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f00000000c0)) 18:01:41 executing program 1 (fault-call:8 fault-nth:68): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:01:41 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x4000000, r0, 0x0}]) 18:01:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:01:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x5429, 0x0) 18:01:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1529.365508][T29811] FAULT_INJECTION: forcing a failure. [ 1529.365508][T29811] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1529.409261][T29811] CPU: 0 PID: 29811 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 1529.417189][T29811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1529.427252][T29811] Call Trace: [ 1529.430560][T29811] dump_stack+0x172/0x1f0 [ 1529.434911][T29811] should_fail.cold+0xa/0x15 [ 1529.439518][T29811] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1529.445323][T29811] ? ___might_sleep+0x163/0x280 [ 1529.450181][T29811] should_fail_alloc_page+0x50/0x60 [ 1529.455383][T29811] __alloc_pages_nodemask+0x1a1/0x8d0 [ 1529.460763][T29811] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1529.460788][T29811] ? mmu_topup_memory_caches+0x97/0x490 [ 1529.460813][T29811] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1529.472057][T29811] alloc_pages_current+0x107/0x210 [ 1529.472076][T29811] __get_free_pages+0xc/0x40 [ 1529.472093][T29811] mmu_topup_memory_caches+0x1e1/0x490 [ 1529.472108][T29811] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1529.472135][T29811] kvm_mmu_load+0x21/0x12e0 [ 1529.504267][T29811] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1529.509919][T29811] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1529.509936][T29811] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1529.509952][T29811] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1529.509971][T29811] vcpu_enter_guest+0x3b21/0x5f40 [ 1529.509993][T29811] ? emulator_read_emulated+0x50/0x50 [ 1529.521519][T29811] ? lock_acquire+0x16f/0x3f0 [ 1529.521536][T29811] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1529.521558][T29811] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1529.521572][T29811] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1529.521595][T29811] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1529.564453][T29811] ? kvm_set_memory_region+0x50/0x50 [ 1529.569735][T29811] ? tomoyo_path_number_perm+0x263/0x520 [ 1529.575368][T29811] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1529.581185][T29811] ? __f_unlock_pos+0x19/0x20 [ 1529.585878][T29811] ? __fget+0x35a/0x550 [ 1529.590037][T29811] ? kvm_set_memory_region+0x50/0x50 [ 1529.595318][T29811] do_vfs_ioctl+0xd5f/0x1380 [ 1529.599906][T29811] ? ioctl_preallocate+0x210/0x210 [ 1529.605009][T29811] ? __fget+0x381/0x550 [ 1529.609164][T29811] ? ksys_dup3+0x3e0/0x3e0 [ 1529.613578][T29811] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1529.619811][T29811] ? fput_many+0x12c/0x1a0 [ 1529.624228][T29811] ? tomoyo_file_ioctl+0x23/0x30 [ 1529.629162][T29811] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1529.635393][T29811] ? security_file_ioctl+0x8d/0xc0 [ 1529.640500][T29811] ksys_ioctl+0xab/0xd0 [ 1529.644652][T29811] __x64_sys_ioctl+0x73/0xb0 [ 1529.649240][T29811] do_syscall_64+0xfd/0x680 [ 1529.653747][T29811] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1529.659638][T29811] RIP: 0033:0x459519 [ 1529.663528][T29811] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1529.683207][T29811] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1529.691623][T29811] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 [ 1529.699596][T29811] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 18:01:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1529.707569][T29811] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1529.715981][T29811] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 [ 1529.723946][T29811] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 18:01:41 executing program 5: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000380), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) r0 = request_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='eth1ppp1\x00', 0xffffffffffffffff) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000140)={r0, 0xc0, 0x8d}, &(0x7f0000000180)={'enc=', 'oaep', ' hash=', {'tgr128\x00'}}, &(0x7f0000000200)="f4e67d99e617d058326110a2eb649f2cfb8ef4ef5e8632302f307d9d68f55172da263342a1b87cecd4460c30b261d7ad0fe347a65ea6728df1ede36e8a1bbbc6ecfa88466099a940cc9c8d22976ae921b89ea49e27999355d8304c311a1946e96b0a4f3223c5d1d2589527d79d450e82053a2eae663fe85f19dc781bb07db63248e2b9c8a374be407d699328a4ac9528427d8a20be84d89de886f5ce4e3f72249f93fb672690b4842a0eb136ddf25c29bef3776c367cc028fdea070683753ee4", &(0x7f00000002c0)=""/141) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x347441, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000040)={0x8001009, 0x8, 0x3}) 18:01:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:01:41 executing program 1 (fault-call:8 fault-nth:69): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:01:41 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x40000000, r0, 0x0}]) 18:01:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x5450, 0x0) [ 1529.984505][T29937] FAULT_INJECTION: forcing a failure. [ 1529.984505][T29937] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1530.025226][T29937] CPU: 1 PID: 29937 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 1530.033152][T29937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1530.033159][T29937] Call Trace: [ 1530.033188][T29937] dump_stack+0x172/0x1f0 [ 1530.033213][T29937] should_fail.cold+0xa/0x15 [ 1530.033237][T29937] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1530.061290][T29937] ? ___might_sleep+0x163/0x280 [ 1530.066164][T29937] should_fail_alloc_page+0x50/0x60 [ 1530.071371][T29937] __alloc_pages_nodemask+0x1a1/0x8d0 [ 1530.076757][T29937] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1530.076784][T29937] ? mmu_topup_memory_caches+0x97/0x490 [ 1530.076805][T29937] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1530.076826][T29937] alloc_pages_current+0x107/0x210 [ 1530.076846][T29937] __get_free_pages+0xc/0x40 [ 1530.094321][T29937] mmu_topup_memory_caches+0x1e1/0x490 [ 1530.094339][T29937] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1530.094358][T29937] kvm_mmu_load+0x21/0x12e0 [ 1530.094383][T29937] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1530.115744][T29937] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1530.115762][T29937] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1530.115779][T29937] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1530.115797][T29937] vcpu_enter_guest+0x3b21/0x5f40 [ 1530.115820][T29937] ? emulator_read_emulated+0x50/0x50 [ 1530.154058][T29937] ? lock_acquire+0x16f/0x3f0 [ 1530.154077][T29937] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1530.154099][T29937] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1530.154127][T29937] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 18:01:42 executing program 3: futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x4, 0x400082) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000040)='syz0\x00') 18:01:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1530.170048][T29937] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1530.180417][T29937] ? kvm_set_memory_region+0x50/0x50 [ 1530.185709][T29937] ? tomoyo_path_number_perm+0x263/0x520 [ 1530.191349][T29937] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1530.197162][T29937] ? __f_unlock_pos+0x19/0x20 [ 1530.201853][T29937] ? __fget+0x35a/0x550 [ 1530.206021][T29937] ? kvm_set_memory_region+0x50/0x50 [ 1530.211315][T29937] do_vfs_ioctl+0xd5f/0x1380 [ 1530.215925][T29937] ? ioctl_preallocate+0x210/0x210 [ 1530.221050][T29937] ? __fget+0x381/0x550 [ 1530.225218][T29937] ? ksys_dup3+0x3e0/0x3e0 [ 1530.229644][T29937] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1530.235898][T29937] ? fput_many+0x12c/0x1a0 [ 1530.240330][T29937] ? tomoyo_file_ioctl+0x23/0x30 [ 1530.245273][T29937] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1530.251519][T29937] ? security_file_ioctl+0x8d/0xc0 [ 1530.256650][T29937] ksys_ioctl+0xab/0xd0 [ 1530.260813][T29937] __x64_sys_ioctl+0x73/0xb0 [ 1530.265427][T29937] do_syscall_64+0xfd/0x680 [ 1530.269965][T29937] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1530.275860][T29937] RIP: 0033:0x459519 [ 1530.279771][T29937] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1530.299381][T29937] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1530.307800][T29937] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 [ 1530.315781][T29937] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1530.323748][T29937] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1530.323758][T29937] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 [ 1530.323767][T29937] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 18:01:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:01:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x5451, 0x0) 18:01:42 executing program 1 (fault-call:8 fault-nth:70): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:01:42 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x100000000000000, r0, 0x0}]) 18:01:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1530.619897][T30062] FAULT_INJECTION: forcing a failure. [ 1530.619897][T30062] name fail_page_alloc, interval 1, probability 0, space 0, times 0 18:01:42 executing program 5: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000380), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) r0 = accept$packet(0xffffffffffffff9c, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) r1 = shmget$private(0x0, 0x4000, 0xc00, &(0x7f0000ffb000/0x4000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x0) sendmsg$sock(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="6a28d7f18f1df9fa5c71685bf5fcd2d1e955ae7a658d879e3b2aa52ae2aba6aa5b9143aef5f873dc68eb72f233f13c1f37e4491b91c58e04af05c45b6c7f2d4960d4a65f47d7ef045cb69eb418b99838db28fd4abb8f03fb8b6030d73235a0ad043fe496e574717871c23409f3ea01a649858fe2cfb813e23cf7a7dd42b57c72693bdc5c16a37e", 0x87}], 0x1, &(0x7f0000000180)=[@timestamping={{0x14, 0x1, 0x25, 0x1aa}}, @timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x8e}}], 0x48}, 0x800) 18:01:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x5452, 0x0) [ 1530.742996][T30062] CPU: 0 PID: 30062 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 1530.750935][T30062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1530.760994][T30062] Call Trace: [ 1530.764299][T30062] dump_stack+0x172/0x1f0 [ 1530.768659][T30062] should_fail.cold+0xa/0x15 [ 1530.773271][T30062] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1530.779089][T30062] ? ___might_sleep+0x163/0x280 [ 1530.783953][T30062] should_fail_alloc_page+0x50/0x60 [ 1530.783969][T30062] __alloc_pages_nodemask+0x1a1/0x8d0 [ 1530.783991][T30062] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1530.784015][T30062] ? mmu_topup_memory_caches+0x97/0x490 [ 1530.784038][T30062] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1530.794593][T30062] alloc_pages_current+0x107/0x210 [ 1530.794612][T30062] __get_free_pages+0xc/0x40 [ 1530.794639][T30062] mmu_topup_memory_caches+0x1e1/0x490 [ 1530.794655][T30062] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1530.794675][T30062] kvm_mmu_load+0x21/0x12e0 [ 1530.833529][T30062] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1530.833549][T30062] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1530.833566][T30062] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1530.833582][T30062] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1530.833600][T30062] vcpu_enter_guest+0x3b21/0x5f40 [ 1530.833633][T30062] ? emulator_read_emulated+0x50/0x50 [ 1530.843751][T30062] ? lock_acquire+0x16f/0x3f0 [ 1530.843768][T30062] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1530.843791][T30062] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1530.843807][T30062] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1530.843831][T30062] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1530.843854][T30062] ? kvm_set_memory_region+0x50/0x50 [ 1530.871863][T30062] ? tomoyo_path_number_perm+0x263/0x520 [ 1530.871883][T30062] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1530.871899][T30062] ? __f_unlock_pos+0x19/0x20 [ 1530.871921][T30062] ? __fget+0x35a/0x550 [ 1530.871942][T30062] ? kvm_set_memory_region+0x50/0x50 [ 1530.871958][T30062] do_vfs_ioctl+0xd5f/0x1380 [ 1530.871977][T30062] ? ioctl_preallocate+0x210/0x210 [ 1530.898254][T30062] ? __fget+0x381/0x550 [ 1530.898276][T30062] ? ksys_dup3+0x3e0/0x3e0 [ 1530.898293][T30062] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1530.898308][T30062] ? fput_many+0x12c/0x1a0 [ 1530.898330][T30062] ? tomoyo_file_ioctl+0x23/0x30 [ 1530.898350][T30062] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1530.909243][T30062] ? security_file_ioctl+0x8d/0xc0 [ 1530.909262][T30062] ksys_ioctl+0xab/0xd0 [ 1530.909280][T30062] __x64_sys_ioctl+0x73/0xb0 [ 1530.909300][T30062] do_syscall_64+0xfd/0x680 [ 1530.909320][T30062] entry_SYSCALL_64_after_hwframe+0x49/0xbe 18:01:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x5460, 0x0) 18:01:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1530.909332][T30062] RIP: 0033:0x459519 [ 1530.909352][T30062] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1530.987493][T30062] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1530.987509][T30062] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 [ 1530.987517][T30062] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 18:01:43 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x200000000000000, r0, 0x0}]) [ 1530.987526][T30062] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1530.987535][T30062] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 [ 1530.987544][T30062] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 18:01:43 executing program 3: futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x1, 0x0, 0x0, 0x2) 18:01:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x5501, 0x0) 18:01:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:01:43 executing program 1 (fault-call:8 fault-nth:71): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:01:43 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x300000000000000, r0, 0x0}]) 18:01:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1531.518706][T30306] FAULT_INJECTION: forcing a failure. [ 1531.518706][T30306] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1531.543732][T30306] CPU: 0 PID: 30306 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 1531.551654][T30306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1531.561713][T30306] Call Trace: [ 1531.565025][T30306] dump_stack+0x172/0x1f0 [ 1531.569375][T30306] should_fail.cold+0xa/0x15 [ 1531.573976][T30306] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1531.579797][T30306] ? ___might_sleep+0x163/0x280 [ 1531.584671][T30306] should_fail_alloc_page+0x50/0x60 [ 1531.589886][T30306] __alloc_pages_nodemask+0x1a1/0x8d0 [ 1531.595271][T30306] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1531.601009][T30306] ? mmu_topup_memory_caches+0x97/0x490 [ 1531.606568][T30306] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1531.612823][T30306] alloc_pages_current+0x107/0x210 [ 1531.617947][T30306] __get_free_pages+0xc/0x40 [ 1531.622554][T30306] mmu_topup_memory_caches+0x1e1/0x490 [ 1531.628020][T30306] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1531.634271][T30306] kvm_mmu_load+0x21/0x12e0 [ 1531.638812][T30306] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1531.644458][T30306] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1531.650708][T30306] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1531.655917][T30306] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1531.662172][T30306] vcpu_enter_guest+0x3b21/0x5f40 [ 1531.667207][T30306] ? emulator_read_emulated+0x50/0x50 [ 1531.672596][T30306] ? lock_acquire+0x16f/0x3f0 [ 1531.677321][T30306] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1531.683057][T30306] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1531.688613][T30306] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1531.694355][T30306] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1531.699045][T30306] ? kvm_set_memory_region+0x50/0x50 [ 1531.704329][T30306] ? tomoyo_path_number_perm+0x263/0x520 [ 1531.709957][T30306] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1531.715775][T30306] ? __f_unlock_pos+0x19/0x20 [ 1531.720439][T30306] ? __fget+0x35a/0x550 [ 1531.726593][T30306] ? kvm_set_memory_region+0x50/0x50 [ 1531.731864][T30306] do_vfs_ioctl+0xd5f/0x1380 [ 1531.736441][T30306] ? ioctl_preallocate+0x210/0x210 [ 1531.741537][T30306] ? __fget+0x381/0x550 [ 1531.745703][T30306] ? ksys_dup3+0x3e0/0x3e0 [ 1531.750125][T30306] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1531.756348][T30306] ? fput_many+0x12c/0x1a0 [ 1531.760792][T30306] ? tomoyo_file_ioctl+0x23/0x30 [ 1531.765732][T30306] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1531.771962][T30306] ? security_file_ioctl+0x8d/0xc0 [ 1531.777070][T30306] ksys_ioctl+0xab/0xd0 [ 1531.781208][T30306] __x64_sys_ioctl+0x73/0xb0 [ 1531.785801][T30306] do_syscall_64+0xfd/0x680 [ 1531.790298][T30306] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1531.796181][T30306] RIP: 0033:0x459519 [ 1531.800081][T30306] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 18:01:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1531.820469][T30306] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1531.828888][T30306] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 [ 1531.836864][T30306] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1531.844854][T30306] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1531.852808][T30306] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 [ 1531.860761][T30306] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 18:01:43 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x400, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f0000000140)={{r1, r2+10000000}}, &(0x7f00000001c0)) futex(&(0x7f00000000c0)=0x84, 0x8f, 0x4, 0x0, &(0x7f0000000080)=0x8, 0x2) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x800000100ffe, 0x0) ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f0000000040)) 18:01:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x6364, 0x0) 18:01:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:01:43 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x400000000000000, r0, 0x0}]) 18:01:44 executing program 1 (fault-call:8 fault-nth:72): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1532.224451][T30514] FAULT_INJECTION: forcing a failure. [ 1532.224451][T30514] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1532.243056][T30514] CPU: 1 PID: 30514 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 1532.250983][T30514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1532.261046][T30514] Call Trace: [ 1532.264353][T30514] dump_stack+0x172/0x1f0 [ 1532.268709][T30514] should_fail.cold+0xa/0x15 [ 1532.273307][T30514] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1532.279113][T30514] ? ___might_sleep+0x163/0x280 [ 1532.283971][T30514] should_fail_alloc_page+0x50/0x60 [ 1532.289167][T30514] __alloc_pages_nodemask+0x1a1/0x8d0 [ 1532.294568][T30514] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1532.300292][T30514] ? policy_node+0xf0/0x140 [ 1532.304794][T30514] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1532.311037][T30514] alloc_pages_current+0x107/0x210 [ 1532.316153][T30514] __get_free_pages+0xc/0x40 [ 1532.320746][T30514] mmu_topup_memory_caches+0x1e1/0x490 [ 1532.326200][T30514] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1532.332441][T30514] kvm_mmu_load+0x21/0x12e0 [ 1532.336941][T30514] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1532.342574][T30514] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1532.348814][T30514] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1532.354025][T30514] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1532.360262][T30514] vcpu_enter_guest+0x3b21/0x5f40 [ 1532.365289][T30514] ? emulator_read_emulated+0x50/0x50 [ 1532.370659][T30514] ? lock_acquire+0x16f/0x3f0 [ 1532.375333][T30514] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1532.381055][T30514] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1532.386595][T30514] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1532.392325][T30514] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1532.397004][T30514] ? kvm_set_memory_region+0x50/0x50 [ 1532.402290][T30514] ? tomoyo_path_number_perm+0x263/0x520 [ 1532.407921][T30514] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1532.413728][T30514] ? __f_unlock_pos+0x19/0x20 [ 1532.418408][T30514] ? __fget+0x35a/0x550 [ 1532.422565][T30514] ? kvm_set_memory_region+0x50/0x50 [ 1532.427850][T30514] do_vfs_ioctl+0xd5f/0x1380 [ 1532.432440][T30514] ? ioctl_preallocate+0x210/0x210 [ 1532.437544][T30514] ? __fget+0x381/0x550 [ 1532.441700][T30514] ? ksys_dup3+0x3e0/0x3e0 [ 1532.446117][T30514] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1532.452361][T30514] ? fput_many+0x12c/0x1a0 [ 1532.456779][T30514] ? tomoyo_file_ioctl+0x23/0x30 [ 1532.461717][T30514] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1532.467953][T30514] ? security_file_ioctl+0x8d/0xc0 [ 1532.473060][T30514] ksys_ioctl+0xab/0xd0 [ 1532.477214][T30514] __x64_sys_ioctl+0x73/0xb0 [ 1532.481808][T30514] do_syscall_64+0xfd/0x680 [ 1532.486310][T30514] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1532.492213][T30514] RIP: 0033:0x459519 [ 1532.496109][T30514] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1532.515723][T30514] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 18:01:44 executing program 3: futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7, 0x8800) writev(r0, &(0x7f0000001500)=[{&(0x7f0000000040)="5b52ef9fe6aed639d3f74083", 0xc}, {&(0x7f0000000080)="c64fa38540565190916971bfcb994b111a90fee1c7285196611b674d6cacb2f5d13a47d1d3745684289028db9afbe5fd74b8d8df5362513731f655dfda46468ea5ab12d5abf3840da4d39f5654b87c97fee367a67d9bb7bb6c3f457452408b59a7144f053c45cc02be98f81dbc053f736940764f72a300474a3975a72d605431a65108e591f8afaef7bb9408725e3f9654db9ddb4cd823affc46ab37cb1bd713e31bee8edaadb34f828e83c326ade3ad09b7b8f19f1a949b49501964", 0xbc}, {&(0x7f0000000140)="5a91bdd3bc99e6a7c33b98f79ff35d5bb2233dddfd5858d79f542a936ebaa3de2ebea5888bb56faa69300569e1", 0x2d}, {&(0x7f0000000180)="ccc1414ce8160ba88baea8313d937c0cb7738d57879622954d8878b2bfa5347aef7a41250f48f388532447c46febe861fa4b12dd6eca6f0460dbf00620c94c5d08ce9b1a5c6e418dc024c058d8e74aea3d17cf219a174613fa2da9a40aa34b12511de3e52c886fa92d9dabe1c429ef5c93bad1471c886aba7d02be31cf167f5901bf1ad91c60b728e0c77da75ea175690c1f335c1f642676472a5736dff7cb335f44cac2dce41674dd88537fad0e725c0b5623239990d4fb4cb0d189d42db358b836bca0fabdd088c8260ec6cee6f951d2cb72cc15ec1b14126a0d31848ff8ac65f1b6c19282b091428ee5d3b7a58646183d513e0d4c1cbc727ef42360df14002f2914826ecf8314fd24984dd5157213bced006103280436cdbedc7539540b1a6dbe59d68236fe99da43021fab7539e07175591a68fa5bb73ad73b352edcffac78ce961d8d3f53953fe2bf85f4f2019adf3bfc6ebcefa5bbb03127404b1435ebf6986abec081c51c4dce24ea28f3c408d9a1c0682583da003a970f6aad5d75007723b9b30f44da011c986a0c9e7bc8752a3b06ebac91b63c5071ef5841598772ddc4f812b082b55da73e7f3610253e59d80a569f6dcf692318b127aad3658b0a5aeebdcaa0344890688bf546dc14b80dffcd85c1dc3f8ad346601f2c82d3256dbb1242c13fb8ed635e4ce0b55ee5e42952b6f99b538b325e89fe22ee4616e41d9bf4db2c8ae66fccb8b92a2cef7bb628e44a17a35c1c83d2968ba75c7482f8201c73a6f1011ebd9f7f1ed841c7078166ab2a91156f69dec1d4733ba21208d1ec04af525672c1d1fa0c646aaaefd2bb2d6a1e5622d2fdeabdc6454ca0c7a12cce5b2187e585c798316a596265d4c821ec5e84f0f255e21613a5c680e38f5c6eb4821ac7d0b1190b2e24825b7f5595be6f4b8901287d7f483add0d9f8ad5ebd9d044c555635aed1e766010c9c8408c43c48aace69229f695b08a51e389da5c389077bbef8228dc7896c1c492ebd3c2c21ec52c36d9530befc59326bdc45c5c6dbacc1aa6a22294686a9ac4077dcef73d328cee6f6126652e348db682bfad2a18436d1c78d57f69ff0fe6dc7dd0fdb872ef73bf1874bc5fe2bb7d8a42fe59a2d46f5ea1ea12602da44bf9a55275436ed4cbeb8f40bbde1c32d0098d4f5cd1c0b4e65761ec24981ffa204fba46f347994fea2a55ee60a38f7d44780088ca8904d3ea577fa0c5f25611e7e15f9221b639b4e9bc5b828b0e8afe65f047ce9cb9dfe28eabb75b7328537cf156a7e62b59c93cdf29dc342fca0cd145055fb78a5b5541373de2a78e68d114881d9c92937dd785b80c4034125200a9cfa7885115dc75773a5df46ba714ef12e37eaf3b0b7d9e6411313724150502ddb22dd02e3f4949c239427fe0451e2d0d0b5efd325c3f25d197f5d2065334d8d0b8db8a1d49d7556a1af685011fe3dcc2d6730ded92e4eb83f14ec4bce5a4e88c18c00e87513588c2cdde3189b9a905f04a4772d01e1211afd33de463c752ea00eaac18d2d54968db90dd2d507f73cb7f911ce942ae42b5e9079d50fd3fafca7e831e72a88c092cb6eade05817946125c35fda32d7746402cb7346e22fde17528a87389bc07a3ae59d15d624d84a9cc297e84c88896a43a458eb93dcdcadc06155064924af8342ab6418f7c33a7f09c07ddaa6f09a75c1783ac559404798b528edbcd693d5a34a9a5e0d99426b9d9ea3113290aed25ddfe62d5bf4de6c1892a02b7aaff92cb68eb52e72bf808d52e10300135894f84d508b80ec343a75ec56768eb18fe87084718f6155d4b366141524f31c9a5535dd51b19f4c6dd172a15798c4d275696c7ef1d7cfbac3d47e4c21c7f4edd53f95a14f7a788fa150bdcc598ca837105372d7b7fcb7beee387855bba559baeb496a0cc879b687f4d8e76e5a2000d479ea9efd85bf9572416257da8afda64609c42a6447c1c2aaaf67a3ed929ced9bf3fa1861a1ab08b591f81832a86c0224dc5ffff75787a45609d1d2ba1db9c330bd325595658219df0a56265ead627650aaa8591928315e0967ddcd6376ee080de323a93ac2f01da2cf65af6d09c3a703b608bf394e893613c5b1f3444d850215af7a6a605c08c0e8d1ac00f15061b595f902aec94a5cb7bc46028d2e200563661ec13abd9163ff6f06ad20f2fdaef8687ab9104e0ccd10256915d8861ea22f7b91aba2fd34d5577e832842c1a285c0afc63611465542ead32d0534de69fcfad1e0b9343a4d731ea07da5b290ad2a32980a36277524c17c14ef437bb5e2c733025cbfd6df636a192ed806c7252a879731a34318edb5c4c471ce0fcca6635c89b72e7ee782f0749fb5c34b02343c974164b905eb398c9eded70bde6d36d2b706c3b209a496850085772b01d90f6206db91d4e82670f405fbfedede41130685a46d7b3368ebe496ef3e518f723e993a3dd230baa80d3d8e736494ff33b6cf844adf9f7672fa2eebaf0c489e0c8006d56d4e9e38e4ae04b4f454c5be59c162a5680eba9895f174be65af8f708186fe9dd00a66a9470c35cc3948bf5e45d61beb5bdf0c505c6ae86adaa967c4b377392fe4b01a640982e362314c4cff30e561ce006098f2eca00b83b5aa63ba6825e17a104366e90684b5ce5f42eae38209073bebc2708acaa904962750d8455780ead5e3dd57829d388102b686f05ab82ebdff5a0c9b1fb20ab5757f98563c4bfe6e583a5ee6c420270d6904310671175bc0e4ce51c83bdd9336345dbd1f742428dc2c61f20d1c167d003b987a501270233f72eb457c63e5ac2089883d5136b8cc10acdbbe319597b0adb7418ea5f56d04cb76c631dc491c49a83644056cad21ec12c1a9273f8f6dda71c331a8de1b581a49da162a80f3ce4a302e83febaec0cf733d8f612a713b1be22c2b7cd8d4ce3f864f6abb33e1fd409fc437ef8be5ecb4fa9b2ef01d7bb99aaf42e8e906b6b18f10c3b45943a84d4559ba44b02f85df081472763f97347cc36fcc3400bace0d8882b44e02f14a1a697e8a53d65e00bd68fa80f94667b90d8c76614cb8066b0db76230a5175790a8fc21de87139af331c5ab48e9f2032bc66174d9058acad9b1ab5eb692a1b181afe6d9a1c1971e6b901b485f37cd897efa10264b2593d008b3a16e01f3ebeb1e3fb79e7195a60712747aaaac6a48e989541ab70f50b464d1ddd1c289a540a3d192898354d6d04c9a839a99c0ceb8f47c78298e8871d4fd3c9d4049329955b30e415e2daf74a6cbaa72aca21156bfb02a764b2503c1d52dcfc0f138ce8467156100fa6450201194cff7b7d32a2d8dc6de61d11986fb813e7f2158ad3f4927e785aa5c886932ac73e67eb1fd66989e3cd1f32d90a800900b1422f5326bf262e92093930e55272cf7c3e77c725fb5f46d86baddc6411fdecc425e1f26b03de90b6d7fbb12240be33452a38049617ca7be9829d63244f34be38d0287e28b4ff38132f6c619b033acc5705b0fc300bbc91041e9fa43bf95ef46568b218e061c5ed535288a5988c033182680c24ecc3ec96415f2c7c7c9d905abb2945f599f4d34f9e4a9ff720e08d6182990c4b6452f94ade5d4025f1397e6375d103fa8e5a5ea3bb156ac8dd36442cc407f2b031052ba2774751261e6361aa8f2ada5a3d0c6ad86ee853954bd8796e8985c81fb068967816fdd0bd5d9680a71eb9f446f3f8e4b5258a3fc557ec7524b119de385c7d2bc20de625179bc84bf8d2967234f9fc940ad79b6963079e8eb3fcce49533c2cd1dd3253b76c039d20000c6026eccdc1be9d56ac75aa2fe31aac4b8f658ba55a15b64c5072ffdfb0e1199e5e2b444febbbf4f0bdd829177f522d0c29616fa59cbe628fdf565934db1ee7ad3f9dec41103ad142bab68859796f3f003bf86a1884c8418e2c29feba640c79f25dde3f2f4e496590d1113a64edd74f8dc783fa843925160bf451ed97799d2afc9d5ef7a49e7e0165cccada320abb651c879589fe0b32f6835c17cf7b367354a80e1ed2df6fc3ed9662b1483f78d3d2c1c6d57520e18af37db093c49a472eb67c5691e0ba1472c3913f8615faba9b5a5f48538043ef882c7ca813185c652c58ee951e7161f1d85ca623c9000ee634f6affd50935a55f796b24c5db9af14f15bbffbe1d64b729e27fd41fa0c6e04a67cff87ed698fa6ae2c8373ce0e19e7f7029e511a497047c88e00f21909930a781f71897e01adc9cf79042396e2b91080036f2b8c981ecbbb406bc9103bbba79a9b162506b3e7a067034cf0872aaa47562364e22e536df7158f1979ed5c3f689751a42a627446f9ba32e82e44457999ac101fa645bcaf737138356865fcf0c245e430bd998ef3613f7220057106d3810f10cddea085ebb3f886591bf1b05b8e67f5bcb4230ba6bbf6053cb2ef2de5dfc38f0c07cc6f79f421294e0db7b4b527a8b14f88a20643a36f4120d155874f792e112b5332e1eaa2833341d770f05ea091f050e1554f868da45f940749e7737080b4217a579d9fb53e568f15d1999218737ae1880b923ee1fab525cdff5792feabb526f3cee162745bc3a6b34915ea8f0cb81c7c8976b69c09d6743619a4d1df034aa5f3be67fe41d4a7146d969e7137d47cd1b88ec8b4f0a8fda4232513d8dba7a6fb4d01c485963dbdbfb2aaa70db4f3a1b2da6dd3ad73ad61df9c79cd0d107225bfcf6ea25ff2eeaaf0c0575bc4cbb6b8497115fb495de5f1179bc19ac80fb9f313ce99daaf3e42822cd69dca7032c00f5cc638b90ab3f576b2730abc1467f85a538ae35249f02196e65dfd441bbd1f5156900240a89f1a3d2d9ffb4f3e4252a55e9e7046a4b1b4c50dfbbb87820ade4a98b0dd30ed2d99169f69a6ec26c1f54a0e7fb424bf4a7b3ac2455f89504753428af6ff887f2ab8ac0712ea7be0c0ceffd18378c5b6a1b58be4abd3ea123e490b0d8a8402c0eaa0c87bc9db958b16e7fb4d2afdeb689ef8b00a3d36189b06c5a348068708cde5d896e3622735b362939468b38eda4b5318963fae3f83188f48a72ed8a6917b23b2c1317dc0b49f04c781f2cd13ee1b7601be63e8a60cc7853ff3bf3dc11c7c1f7be2de87a3007c44df25e3c60934b704ae41ba37d77d42629ac0181a82717b06318f72b4013811d66634e17b29a6b020331ef0afdf4a14bbb99c84b5ff3a4c043319c52aa366edb7dd3ef7ac4cb1c419d74f95839cfc1174268352e82d73b7d433e4da8ef28f18911bac194946c8e4d5b3f2229129f26a8ec7b1fe218b6ae0b55fb7eda173355913d65f4a4766698ca053f6b9ced79f9399721e887389bc7925e2d65d3a232363304f745e406c7eb5542de2afecba2a361d1738dca27a74791cfe8cb74414a9991bbaf72daf9426cdfc4c67bcc50bb95e26ed751c7455cdbc36083e542ef5d271c4447f9aedba0905c6f769747a93ab439bbcd40e8c43da8a255c75e47d9d77dbdacfe5e76d95cf5e50b690507526244850c1b0de728ece255ff24274ef4ba048fa09960d19ef1807b8c3e1321d6b0efd0578191f5f5ed71a5d9212bb6a7cdc5a96e1795be3684f3d2aaf23da1c866832a47016b01d97961faa1aeeeb672e54fbcb674a51ecc2cca1fa6650bb685962c1e89068625202418cea4c66653d4d3e6a62e92b3cd183d56b124c3605daf59ef268652cff5c980ef896dd7196b50e05e1e63ed0bd08ca3e6e2dfaf0d208c1b53e317ae8353b71499c5e6acd5c56d8e0fc3b5715b890d729bee447b0d206cd74f0ec5e35ee1d2803517698438a9730ec8a1d26cf08953a1c6f61c1ecea38190800cacf4", 0x1000}, {&(0x7f0000001180)="08ae3a69f633340002ec22b870a0efc77bc7972d556b32a96387ea17e17ec7e7653b536e7a9f277bad996dbe53a746d4cda214de621e0b462643f9191386ea3ab5a3bca79f56ef2d1fa03b4877ae6234d7a5d2c0bf60b517744519a8a90a72d0fe46eb91d8dbb8d2cf2bd11ca53ecb9425e9acdfbd526b2d470c7968b8f64d45e4dd2e389d914bc906b39282d71e38c08b261b0093d16447761ea13ff6de13c1bcfd99e2c0160a941d356cfa76cd94c0e5c18cfe6730523a12f7a186981c8da7c82129202c58fc497ea5649ed94217bf4662f40409d5e7659437fc3ed5547440bc7ef0eac3562553c2698c74ba88d5", 0xef}, {&(0x7f0000001280)="3a56d52125236c485fc3bbf429241a33252481f271d6b7c48503f1d92569da5df11993f5fed7a463be96453ac7960e0c9680f8caad7d42f4439a8abc78095345ff19e946f0e31090084510", 0x4b}, {&(0x7f0000001300)="af900298c4a50e696e43874013c1628acb1113333fe6002ae1585b08885f72a0dc7afa991f063a8d9531f217071fe4cec6e3525496df2e1b165437ed2a8c67b8767be9d0070b472531d6ac12c98a943ec660696d4bbf67fcb9d60b1413cd14253130ff3c2b4a78320d1f8db9d5b51598b58fa88c1f62de7118477c6e6578a60d22df623bec1da33889ceae152cb6e8ba72e8c78f2ce2dd92759d2e6b24ff623bd715", 0xa2}, {&(0x7f00000013c0)="5caaba4b3a658ff2a26cb1966da2b44a21057e43e9f0df43af515537f3b8116f407105818bab4cce8b81cc0bfd13d531a27f8d299bdc338645903a029f439dee59628de668192ff1ce473a32fd50128d193784cc50ba26f96b8ef93f6aaf845193b9ffabb2637435996e8e", 0x6b}, {&(0x7f0000001440)="216668279fea7aef7c5fb5b06a39057b096673e702170311cba87827ee6774a7500552af9d148049d496ce074a0a1952cdf4be5bdbb484128a947160345a8b594cef12526d682bf0c098b4c44ae2830709c33bec869df41f82c27501ecca04f1bf9ce161ed7726c836c4488513dfa0208168d835ad9ce96421ac310cccf7cebe1f8e574aea440237670c79fccd97a020652078ace346081f068a5dbfed62f3159a8ccfa320d9ed795c6d0564", 0xac}], 0x9) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f00000015c0)={0x8, 0xffff}) 18:01:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:01:44 executing program 5: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000380), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000000040)={@local, 0x0}, &(0x7f0000000080)=0x14) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x6, 0x20, 0x2, {0x0, 0x7530}, {0x77359400}, {0x3, 0x4, 0x6, 0x8000}, 0x1, @canfd={{0x1, 0xf8a5, 0x3, 0x7fffffff}, 0x14, 0x2, 0x0, 0x0, "641169074df5f394731adea58edff71cc323aa99c68cb022f8d4068f724557fe3417332f7ada95f63ec5680a44f22289ea4afa383ac2248335bf04cc361dd18b"}}, 0x80}, 0x1, 0x0, 0x0, 0x20004800}, 0x10) [ 1532.524136][T30514] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 [ 1532.532102][T30514] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1532.540072][T30514] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1532.548037][T30514] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 [ 1532.556000][T30514] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 18:01:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:01:44 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x4000000000000000, r0, 0x0}]) 18:01:44 executing program 1 (fault-call:8 fault-nth:73): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:01:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:01:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x8903, 0x0) 18:01:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1532.942866][T30577] FAULT_INJECTION: forcing a failure. [ 1532.942866][T30577] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1532.965861][T30577] CPU: 1 PID: 30577 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 1532.973769][T30577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1532.983830][T30577] Call Trace: [ 1532.987147][T30577] dump_stack+0x172/0x1f0 [ 1532.991526][T30577] should_fail.cold+0xa/0x15 [ 1532.996140][T30577] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1533.001955][T30577] ? ___might_sleep+0x163/0x280 [ 1533.006823][T30577] should_fail_alloc_page+0x50/0x60 [ 1533.012024][T30577] __alloc_pages_nodemask+0x1a1/0x8d0 [ 1533.017417][T30577] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1533.023154][T30577] ? mmu_topup_memory_caches+0x97/0x490 [ 1533.023174][T30577] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1533.023194][T30577] alloc_pages_current+0x107/0x210 [ 1533.023210][T30577] __get_free_pages+0xc/0x40 [ 1533.023225][T30577] mmu_topup_memory_caches+0x1e1/0x490 [ 1533.023240][T30577] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1533.023264][T30577] kvm_mmu_load+0x21/0x12e0 [ 1533.044720][T30577] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1533.056413][T30577] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1533.056431][T30577] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1533.056448][T30577] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1533.056471][T30577] vcpu_enter_guest+0x3b21/0x5f40 [ 1533.089842][T30577] ? emulator_read_emulated+0x50/0x50 [ 1533.095225][T30577] ? lock_acquire+0x16f/0x3f0 [ 1533.099914][T30577] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1533.105647][T30577] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1533.111199][T30577] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1533.116934][T30577] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1533.121618][T30577] ? kvm_set_memory_region+0x50/0x50 [ 1533.126908][T30577] ? tomoyo_path_number_perm+0x263/0x520 [ 1533.132552][T30577] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1533.138363][T30577] ? __f_unlock_pos+0x19/0x20 18:01:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:01:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1533.143053][T30577] ? __fget+0x35a/0x550 [ 1533.147227][T30577] ? kvm_set_memory_region+0x50/0x50 [ 1533.152516][T30577] do_vfs_ioctl+0xd5f/0x1380 [ 1533.157114][T30577] ? ioctl_preallocate+0x210/0x210 [ 1533.162241][T30577] ? __fget+0x381/0x550 [ 1533.166412][T30577] ? ksys_dup3+0x3e0/0x3e0 [ 1533.170834][T30577] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1533.170852][T30577] ? fput_many+0x12c/0x1a0 [ 1533.170873][T30577] ? tomoyo_file_ioctl+0x23/0x30 [ 1533.170894][T30577] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1533.186461][T30577] ? security_file_ioctl+0x8d/0xc0 [ 1533.186480][T30577] ksys_ioctl+0xab/0xd0 [ 1533.186498][T30577] __x64_sys_ioctl+0x73/0xb0 [ 1533.186520][T30577] do_syscall_64+0xfd/0x680 [ 1533.211162][T30577] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1533.217062][T30577] RIP: 0033:0x459519 [ 1533.220968][T30577] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 18:01:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1533.240591][T30577] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1533.249022][T30577] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 [ 1533.249031][T30577] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1533.249041][T30577] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1533.249050][T30577] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 [ 1533.249060][T30577] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 18:01:45 executing program 3: futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1, 0x40, 0x4, 0xfffffffffffffc01, 0xa0}, &(0x7f00000000c0)=0x98) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={r1, 0x1}, 0x8) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) 18:01:45 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x8000000000000000, r0, 0x0}]) 18:01:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x8904, 0x0) 18:01:45 executing program 1 (fault-call:8 fault-nth:74): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:01:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:01:45 executing program 5: futex(&(0x7f0000000000)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000380), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) getdents(r0, &(0x7f0000000080)=""/233, 0xe9) 18:01:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1533.697496][T30702] FAULT_INJECTION: forcing a failure. [ 1533.697496][T30702] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1533.727915][T30702] CPU: 1 PID: 30702 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 1533.735832][T30702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1533.745890][T30702] Call Trace: [ 1533.745919][T30702] dump_stack+0x172/0x1f0 [ 1533.745944][T30702] should_fail.cold+0xa/0x15 [ 1533.745965][T30702] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1533.745985][T30702] ? ___might_sleep+0x163/0x280 [ 1533.746010][T30702] should_fail_alloc_page+0x50/0x60 [ 1533.746027][T30702] __alloc_pages_nodemask+0x1a1/0x8d0 [ 1533.746049][T30702] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1533.746090][T30702] ? mmu_topup_memory_caches+0x97/0x490 [ 1533.753691][T30702] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1533.764072][T30702] alloc_pages_current+0x107/0x210 [ 1533.764091][T30702] __get_free_pages+0xc/0x40 [ 1533.764109][T30702] mmu_topup_memory_caches+0x1e1/0x490 [ 1533.764137][T30702] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1533.818338][T30702] kvm_mmu_load+0x21/0x12e0 [ 1533.824357][T30702] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1533.830001][T30702] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1533.836246][T30702] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1533.836265][T30702] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 18:01:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1533.836283][T30702] vcpu_enter_guest+0x3b21/0x5f40 [ 1533.836306][T30702] ? emulator_read_emulated+0x50/0x50 [ 1533.847725][T30702] ? lock_acquire+0x16f/0x3f0 [ 1533.847742][T30702] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1533.847764][T30702] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1533.847784][T30702] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1533.879805][T30702] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1533.884500][T30702] ? kvm_set_memory_region+0x50/0x50 [ 1533.889788][T30702] ? tomoyo_path_number_perm+0x263/0x520 [ 1533.895432][T30702] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1533.901245][T30702] ? __f_unlock_pos+0x19/0x20 [ 1533.905941][T30702] ? __fget+0x35a/0x550 [ 1533.910104][T30702] ? kvm_set_memory_region+0x50/0x50 [ 1533.915401][T30702] do_vfs_ioctl+0xd5f/0x1380 [ 1533.920005][T30702] ? ioctl_preallocate+0x210/0x210 [ 1533.925125][T30702] ? __fget+0x381/0x550 [ 1533.929293][T30702] ? ksys_dup3+0x3e0/0x3e0 [ 1533.933716][T30702] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1533.939964][T30702] ? fput_many+0x12c/0x1a0 [ 1533.944402][T30702] ? tomoyo_file_ioctl+0x23/0x30 [ 1533.949367][T30702] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1533.955625][T30702] ? security_file_ioctl+0x8d/0xc0 [ 1533.960752][T30702] ksys_ioctl+0xab/0xd0 [ 1533.964922][T30702] __x64_sys_ioctl+0x73/0xb0 [ 1533.969615][T30702] do_syscall_64+0xfd/0x680 [ 1533.974147][T30702] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1533.980046][T30702] RIP: 0033:0x459519 18:01:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1533.983953][T30702] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1534.003567][T30702] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1534.011989][T30702] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 [ 1534.019962][T30702] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1534.019971][T30702] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1534.019979][T30702] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 18:01:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x8912, 0x0) [ 1534.019987][T30702] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 18:01:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:01:46 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x2}]) 18:01:46 executing program 3: futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x5, 0x0, 0x0, 0x0, 0x0) r0 = dup(0xffffffffffffff9c) getpeername$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c) 18:01:46 executing program 1 (fault-call:8 fault-nth:75): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:01:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x8916, 0x0) 18:01:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:01:46 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x3}]) 18:01:46 executing program 5: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000380), 0x0) futex(&(0x7f000000cffc), 0x20000000003, 0x4, 0x0, 0x0, 0x0) [ 1534.636333][T30930] FAULT_INJECTION: forcing a failure. [ 1534.636333][T30930] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1534.658366][T30930] CPU: 0 PID: 30930 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 1534.666291][T30930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1534.676365][T30930] Call Trace: [ 1534.679687][T30930] dump_stack+0x172/0x1f0 [ 1534.684043][T30930] should_fail.cold+0xa/0x15 [ 1534.688663][T30930] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1534.694484][T30930] ? ___might_sleep+0x163/0x280 [ 1534.694506][T30930] should_fail_alloc_page+0x50/0x60 [ 1534.694521][T30930] __alloc_pages_nodemask+0x1a1/0x8d0 [ 1534.694541][T30930] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1534.694565][T30930] ? mmu_topup_memory_caches+0x97/0x490 [ 1534.709980][T30930] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1534.710004][T30930] alloc_pages_current+0x107/0x210 [ 1534.710022][T30930] __get_free_pages+0xc/0x40 [ 1534.710039][T30930] mmu_topup_memory_caches+0x1e1/0x490 [ 1534.710062][T30930] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1534.728411][T30930] kvm_mmu_load+0x21/0x12e0 [ 1534.728431][T30930] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1534.728456][T30930] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1534.766135][T30930] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1534.771342][T30930] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1534.771372][T30930] vcpu_enter_guest+0x3b21/0x5f40 [ 1534.771396][T30930] ? emulator_read_emulated+0x50/0x50 [ 1534.788030][T30930] ? lock_acquire+0x16f/0x3f0 [ 1534.792719][T30930] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1534.798453][T30930] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1534.804012][T30930] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1534.809753][T30930] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1534.814442][T30930] ? kvm_set_memory_region+0x50/0x50 [ 1534.819743][T30930] ? tomoyo_path_number_perm+0x263/0x520 [ 1534.825386][T30930] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1534.825404][T30930] ? __f_unlock_pos+0x19/0x20 [ 1534.825426][T30930] ? __fget+0x35a/0x550 [ 1534.825448][T30930] ? kvm_set_memory_region+0x50/0x50 [ 1534.845375][T30930] do_vfs_ioctl+0xd5f/0x1380 [ 1534.849980][T30930] ? ioctl_preallocate+0x210/0x210 [ 1534.849995][T30930] ? __fget+0x381/0x550 [ 1534.850016][T30930] ? ksys_dup3+0x3e0/0x3e0 [ 1534.850032][T30930] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1534.850048][T30930] ? fput_many+0x12c/0x1a0 [ 1534.850069][T30930] ? tomoyo_file_ioctl+0x23/0x30 [ 1534.850084][T30930] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 18:01:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:01:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x8933, 0x0) [ 1534.850106][T30930] ? security_file_ioctl+0x8d/0xc0 [ 1534.885591][T30930] ksys_ioctl+0xab/0xd0 [ 1534.894856][T30930] __x64_sys_ioctl+0x73/0xb0 [ 1534.894877][T30930] do_syscall_64+0xfd/0x680 [ 1534.894898][T30930] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1534.894910][T30930] RIP: 0033:0x459519 [ 1534.894927][T30930] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 18:01:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1534.894934][T30930] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1534.933381][T30930] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 [ 1534.933390][T30930] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1534.933397][T30930] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1534.933405][T30930] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 [ 1534.933412][T30930] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 18:01:47 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x4}]) 18:01:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:01:47 executing program 1 (fault-call:8 fault-nth:76): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1535.323964][T31163] FAULT_INJECTION: forcing a failure. [ 1535.323964][T31163] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1535.337434][T31163] CPU: 1 PID: 31163 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 1535.345311][T31163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1535.355346][T31163] Call Trace: [ 1535.358798][T31163] dump_stack+0x172/0x1f0 [ 1535.363118][T31163] should_fail.cold+0xa/0x15 [ 1535.367704][T31163] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1535.373495][T31163] ? ___might_sleep+0x163/0x280 [ 1535.378332][T31163] should_fail_alloc_page+0x50/0x60 [ 1535.383537][T31163] __alloc_pages_nodemask+0x1a1/0x8d0 [ 1535.388908][T31163] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1535.394638][T31163] ? mmu_topup_memory_caches+0x97/0x490 [ 1535.400186][T31163] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1535.406427][T31163] alloc_pages_current+0x107/0x210 [ 1535.411523][T31163] __get_free_pages+0xc/0x40 [ 1535.416100][T31163] mmu_topup_memory_caches+0x1e1/0x490 [ 1535.421580][T31163] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1535.427814][T31163] kvm_mmu_load+0x21/0x12e0 [ 1535.432305][T31163] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1535.437923][T31163] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1535.444169][T31163] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1535.449481][T31163] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1535.455733][T31163] vcpu_enter_guest+0x3b21/0x5f40 [ 1535.460773][T31163] ? emulator_read_emulated+0x50/0x50 [ 1535.466158][T31163] ? lock_acquire+0x16f/0x3f0 18:01:47 executing program 3: futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1, 0x0) syz_open_pts(r0, 0x40000) 18:01:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x8943, 0x0) 18:01:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:01:47 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x300}]) [ 1535.470845][T31163] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1535.476577][T31163] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1535.482131][T31163] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1535.482155][T31163] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1535.482170][T31163] ? kvm_set_memory_region+0x50/0x50 [ 1535.482186][T31163] ? tomoyo_path_number_perm+0x263/0x520 [ 1535.482203][T31163] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1535.482218][T31163] ? __f_unlock_pos+0x19/0x20 [ 1535.482248][T31163] ? __fget+0x35a/0x550 [ 1535.518129][T31163] ? kvm_set_memory_region+0x50/0x50 [ 1535.523431][T31163] do_vfs_ioctl+0xd5f/0x1380 [ 1535.528032][T31163] ? ioctl_preallocate+0x210/0x210 [ 1535.533151][T31163] ? __fget+0x381/0x550 [ 1535.537321][T31163] ? ksys_dup3+0x3e0/0x3e0 [ 1535.541751][T31163] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1535.547999][T31163] ? fput_many+0x12c/0x1a0 [ 1535.552431][T31163] ? tomoyo_file_ioctl+0x23/0x30 [ 1535.557380][T31163] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1535.563623][T31163] ? security_file_ioctl+0x8d/0xc0 [ 1535.568744][T31163] ksys_ioctl+0xab/0xd0 [ 1535.572913][T31163] __x64_sys_ioctl+0x73/0xb0 [ 1535.577514][T31163] do_syscall_64+0xfd/0x680 [ 1535.582030][T31163] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1535.587925][T31163] RIP: 0033:0x459519 [ 1535.591827][T31163] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1535.611446][T31163] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 18:01:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1535.611461][T31163] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 [ 1535.611468][T31163] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1535.611475][T31163] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1535.611484][T31163] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 [ 1535.611492][T31163] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 18:01:47 executing program 5: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000380), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x4, 0x210000) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0xa20, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$sock_proto_private(r0, 0x89eb, &(0x7f0000000180)="c2d34df0aefbba7f36343a542594e4b863447df9b814918c45c112a6d1647dd502f552dc680ce984e294104a016e56b49629d8023724b85f0ccffa015cc6e7d1d14796a74a7363070b77b6c0d9dd9b0bee4889ab9af259ff0b0fe3fe53ec802836177251c8da848dedbfc42c88ab8d52038994e9c81a7bc7679cd0") 18:01:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:01:47 executing program 1 (fault-call:8 fault-nth:77): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:01:47 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x4000}]) 18:01:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1535.918055][T31289] FAULT_INJECTION: forcing a failure. [ 1535.918055][T31289] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1535.932980][T31289] CPU: 1 PID: 31289 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 1535.940893][T31289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1535.950957][T31289] Call Trace: [ 1535.954272][T31289] dump_stack+0x172/0x1f0 [ 1535.958628][T31289] should_fail.cold+0xa/0x15 [ 1535.963230][T31289] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1535.963246][T31289] ? ___might_sleep+0x163/0x280 [ 1535.963268][T31289] should_fail_alloc_page+0x50/0x60 [ 1535.963281][T31289] __alloc_pages_nodemask+0x1a1/0x8d0 [ 1535.963301][T31289] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1535.963324][T31289] ? mmu_topup_memory_caches+0x97/0x490 [ 1535.995785][T31289] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1536.002048][T31289] alloc_pages_current+0x107/0x210 [ 1536.007173][T31289] __get_free_pages+0xc/0x40 [ 1536.011767][T31289] mmu_topup_memory_caches+0x1e1/0x490 [ 1536.017239][T31289] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1536.023484][T31289] kvm_mmu_load+0x21/0x12e0 [ 1536.027987][T31289] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1536.033616][T31289] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1536.039853][T31289] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1536.045050][T31289] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1536.051293][T31289] vcpu_enter_guest+0x3b21/0x5f40 [ 1536.056341][T31289] ? emulator_read_emulated+0x50/0x50 [ 1536.061721][T31289] ? lock_acquire+0x16f/0x3f0 [ 1536.066408][T31289] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1536.072139][T31289] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1536.077741][T31289] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1536.083465][T31289] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1536.088142][T31289] ? kvm_set_memory_region+0x50/0x50 [ 1536.093427][T31289] ? tomoyo_path_number_perm+0x263/0x520 [ 1536.099057][T31289] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1536.104958][T31289] ? __f_unlock_pos+0x19/0x20 [ 1536.109637][T31289] ? __fget+0x35a/0x550 [ 1536.113812][T31289] ? kvm_set_memory_region+0x50/0x50 [ 1536.119096][T31289] do_vfs_ioctl+0xd5f/0x1380 [ 1536.123703][T31289] ? ioctl_preallocate+0x210/0x210 [ 1536.128803][T31289] ? __fget+0x381/0x550 [ 1536.132973][T31289] ? ksys_dup3+0x3e0/0x3e0 [ 1536.137390][T31289] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1536.143624][T31289] ? fput_many+0x12c/0x1a0 [ 1536.148042][T31289] ? tomoyo_file_ioctl+0x23/0x30 [ 1536.152976][T31289] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1536.159212][T31289] ? security_file_ioctl+0x8d/0xc0 [ 1536.164319][T31289] ksys_ioctl+0xab/0xd0 [ 1536.168471][T31289] __x64_sys_ioctl+0x73/0xb0 [ 1536.173065][T31289] do_syscall_64+0xfd/0x680 [ 1536.177571][T31289] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1536.183458][T31289] RIP: 0033:0x459519 [ 1536.187346][T31289] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1536.206949][T31289] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1536.215359][T31289] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 [ 1536.223342][T31289] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1536.231654][T31289] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1536.239623][T31289] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 [ 1536.247589][T31289] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 18:01:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:01:48 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x1000000}]) 18:01:48 executing program 1 (fault-call:8 fault-nth:78): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:01:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae01, 0x0) 18:01:48 executing program 3: futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f0000000000), 0x40000005, 0x0, 0x0, 0x0, 0x0) 18:01:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1536.681243][T31419] FAULT_INJECTION: forcing a failure. [ 1536.681243][T31419] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1536.703908][T31419] CPU: 0 PID: 31419 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 1536.711830][T31419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1536.723423][T31419] Call Trace: [ 1536.726829][T31419] dump_stack+0x172/0x1f0 [ 1536.731182][T31419] should_fail.cold+0xa/0x15 [ 1536.735773][T31419] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1536.741576][T31419] ? ___might_sleep+0x163/0x280 [ 1536.746455][T31419] should_fail_alloc_page+0x50/0x60 [ 1536.751666][T31419] __alloc_pages_nodemask+0x1a1/0x8d0 [ 1536.757048][T31419] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1536.757076][T31419] ? mmu_topup_memory_caches+0x97/0x490 [ 1536.757100][T31419] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1536.768363][T31419] alloc_pages_current+0x107/0x210 [ 1536.768382][T31419] __get_free_pages+0xc/0x40 [ 1536.768408][T31419] mmu_topup_memory_caches+0x1e1/0x490 [ 1536.789768][T31419] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1536.796025][T31419] kvm_mmu_load+0x21/0x12e0 [ 1536.800542][T31419] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1536.806184][T31419] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1536.806202][T31419] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1536.806218][T31419] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1536.806245][T31419] vcpu_enter_guest+0x3b21/0x5f40 [ 1536.817682][T31419] ? emulator_read_emulated+0x50/0x50 [ 1536.817703][T31419] ? lock_acquire+0x16f/0x3f0 [ 1536.817725][T31419] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1536.844906][T31419] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1536.850468][T31419] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1536.856206][T31419] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1536.860891][T31419] ? kvm_set_memory_region+0x50/0x50 [ 1536.860908][T31419] ? tomoyo_path_number_perm+0x263/0x520 [ 1536.860927][T31419] ? tomoyo_execute_permission+0x4a0/0x4a0 18:01:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae02, 0x0) [ 1536.860942][T31419] ? finish_task_switch+0x118/0x730 [ 1536.860963][T31419] ? __f_unlock_pos+0x19/0x20 [ 1536.871884][T31419] ? __fget+0x35a/0x550 [ 1536.871906][T31419] ? kvm_set_memory_region+0x50/0x50 [ 1536.871923][T31419] do_vfs_ioctl+0xd5f/0x1380 [ 1536.871941][T31419] ? ioctl_preallocate+0x210/0x210 [ 1536.871960][T31419] ? __fget+0x381/0x550 [ 1536.910871][T31419] ? ksys_dup3+0x3e0/0x3e0 [ 1536.915308][T31419] ? tomoyo_file_ioctl+0x23/0x30 [ 1536.920255][T31419] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1536.926505][T31419] ? security_file_ioctl+0x8d/0xc0 [ 1536.931647][T31419] ksys_ioctl+0xab/0xd0 [ 1536.935812][T31419] __x64_sys_ioctl+0x73/0xb0 [ 1536.940434][T31419] do_syscall_64+0xfd/0x680 [ 1536.944957][T31419] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1536.950853][T31419] RIP: 0033:0x459519 [ 1536.954762][T31419] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 18:01:49 executing program 5: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000380), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x101) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x81, 0x80) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000040)=0x2) 18:01:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1536.974372][T31419] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1536.974388][T31419] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 [ 1536.974397][T31419] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1536.974406][T31419] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1536.974415][T31419] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 [ 1536.974432][T31419] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 18:01:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:01:49 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x2000000}]) 18:01:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae03, 0x0) 18:01:49 executing program 1 (fault-call:8 fault-nth:79): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:01:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1537.352939][T31643] FAULT_INJECTION: forcing a failure. [ 1537.352939][T31643] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1537.368527][T31643] CPU: 1 PID: 31643 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 1537.376440][T31643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1537.386505][T31643] Call Trace: [ 1537.389823][T31643] dump_stack+0x172/0x1f0 [ 1537.394269][T31643] should_fail.cold+0xa/0x15 [ 1537.398881][T31643] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1537.404708][T31643] ? ___might_sleep+0x163/0x280 [ 1537.409603][T31643] should_fail_alloc_page+0x50/0x60 [ 1537.414817][T31643] __alloc_pages_nodemask+0x1a1/0x8d0 [ 1537.420209][T31643] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1537.425956][T31643] ? mmu_topup_memory_caches+0x97/0x490 [ 1537.431523][T31643] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1537.437786][T31643] alloc_pages_current+0x107/0x210 [ 1537.437805][T31643] __get_free_pages+0xc/0x40 [ 1537.437824][T31643] mmu_topup_memory_caches+0x1e1/0x490 18:01:49 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x3000000}]) [ 1537.437840][T31643] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1537.437860][T31643] kvm_mmu_load+0x21/0x12e0 [ 1537.463722][T31643] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1537.469380][T31643] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1537.475634][T31643] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1537.475655][T31643] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1537.475673][T31643] vcpu_enter_guest+0x3b21/0x5f40 [ 1537.475698][T31643] ? emulator_read_emulated+0x50/0x50 [ 1537.497560][T31643] ? lock_acquire+0x16f/0x3f0 [ 1537.502254][T31643] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1537.508000][T31643] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1537.513567][T31643] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1537.519404][T31643] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1537.524098][T31643] ? kvm_set_memory_region+0x50/0x50 [ 1537.529404][T31643] ? tomoyo_path_number_perm+0x263/0x520 [ 1537.535065][T31643] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1537.540911][T31643] ? __f_unlock_pos+0x19/0x20 [ 1537.545613][T31643] ? __fget+0x35a/0x550 [ 1537.549789][T31643] ? kvm_set_memory_region+0x50/0x50 [ 1537.555090][T31643] do_vfs_ioctl+0xd5f/0x1380 [ 1537.559712][T31643] ? ioctl_preallocate+0x210/0x210 [ 1537.564844][T31643] ? __fget+0x381/0x550 [ 1537.569026][T31643] ? ksys_dup3+0x3e0/0x3e0 [ 1537.569044][T31643] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1537.569060][T31643] ? fput_many+0x12c/0x1a0 [ 1537.569079][T31643] ? tomoyo_file_ioctl+0x23/0x30 [ 1537.569094][T31643] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1537.569107][T31643] ? security_file_ioctl+0x8d/0xc0 18:01:49 executing program 3: futex(&(0x7f000000cffc)=0x4, 0x4, 0x4, 0x0, 0x0, 0x3) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = accept$inet(r0, &(0x7f0000000240)={0x2, 0x0, @remote}, &(0x7f0000000280)=0x10) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f00000002c0)=0x9) write$P9_RVERSION(r0, &(0x7f0000000040)={0x13, 0x65, 0xffff, 0x6, 0x6, '9P2000'}, 0x13) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4d, 0x4d, 0x5, [@datasec={0xa, 0x3, 0x0, 0xf, 0x1, [{0x5, 0xffffffff00000000, 0x7}, {0x5, 0xe2, 0x600000}, {0x3, 0x7, 0x3ff}], "c3"}, @var={0xa, 0x0, 0x0, 0xe, 0x4, 0x1}, @func={0x4, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x30, 0x0, 0x7f]}}, &(0x7f0000000100)=""/233, 0x6d, 0xe9, 0x1}, 0x20) [ 1537.569131][T31643] ksys_ioctl+0xab/0xd0 [ 1537.569148][T31643] __x64_sys_ioctl+0x73/0xb0 [ 1537.569167][T31643] do_syscall_64+0xfd/0x680 [ 1537.569187][T31643] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1537.569207][T31643] RIP: 0033:0x459519 [ 1537.584294][T31643] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1537.584304][T31643] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 18:01:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:01:49 executing program 3: futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) io_setup(0x8000000000000002, &(0x7f0000000140)=0x0) io_getevents(r0, 0x3, 0x3, &(0x7f0000000040)=[{}, {}, {}], &(0x7f00000000c0)={0x77359400}) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000100)={0x5, 0x10001, 0x2, 0x2, 0x9}) [ 1537.584320][T31643] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 [ 1537.584329][T31643] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1537.584338][T31643] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1537.584346][T31643] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 [ 1537.584355][T31643] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 18:01:49 executing program 1 (fault-call:8 fault-nth:80): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:01:49 executing program 5: futex(&(0x7f000000cffc)=0x2000000004, 0x80000000000b, 0x4, 0x0, &(0x7f0000000380), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) r0 = dup(0xffffffffffffff9c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e24, @multicast2}}, [0x2e9, 0xffff, 0x6, 0xfffffffffffffc01, 0x1ff, 0x8, 0x1, 0x28, 0x1, 0x800, 0x7fffffffffffffe, 0x1, 0x4, 0xa0, 0x7f]}, &(0x7f0000000100)=0x100) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0xcd, 0x7, 0x100000000, 0x1fffffffc0, 0x9, 0x2, 0x3, 0x800, 0x31c, 0x40, 0x3c7, 0x10001, 0x0, 0x38, 0x2, 0x8, 0x6, 0x7}, [{0x60000006, 0xfffffffffffff02d, 0x0, 0x100000001, 0x3, 0x7990, 0x8, 0x8}, {0x0, 0x6e82e5bb, 0xa7, 0x9, 0x8, 0x7ff, 0x5, 0x7}], "10b91635a387e9fd398d74ac3772778747b8086290a025e093b7dfbea65471d69ad7ade1d21ca87e9c9a31473a83f724de0fd037c1e70f39dc7119370b72e87b56955680f153391dfa089f5d2620ea2cb4c7f657205cb8e5b8d5654ad1e488f5a8b9c61b053af7abb08e9771943a89b1c0ff5ddd27ab8885e132424afa7a0d2992d55dd3d88d3264b36fe24a9cecb058c1d3740e379f62376b662285f9b935d7a7ad8906788d77f58ba6a6cfb125b8fce759eedb54592637894dde64eb04089d747cba418080c06966", [[], [], [], [], [], [], [], [], []]}, 0xa79) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x80, 0x1000, 0x8000, 0x23a, 0x1, 0x5, 0x9, 0x7, r1}, &(0x7f0000000180)=0x20) 18:01:49 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x4000000}]) 18:01:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:01:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae04, 0x0) [ 1537.976080][T31767] FAULT_INJECTION: forcing a failure. [ 1537.976080][T31767] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1538.018434][T31767] CPU: 1 PID: 31767 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 1538.026374][T31767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1538.036438][T31767] Call Trace: [ 1538.039769][T31767] dump_stack+0x172/0x1f0 [ 1538.044127][T31767] should_fail.cold+0xa/0x15 [ 1538.048732][T31767] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1538.054558][T31767] ? ___might_sleep+0x163/0x280 [ 1538.059421][T31767] should_fail_alloc_page+0x50/0x60 [ 1538.064626][T31767] __alloc_pages_nodemask+0x1a1/0x8d0 [ 1538.070013][T31767] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1538.075750][T31767] ? mmu_topup_memory_caches+0x97/0x490 [ 1538.081310][T31767] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1538.087566][T31767] alloc_pages_current+0x107/0x210 [ 1538.092684][T31767] __get_free_pages+0xc/0x40 [ 1538.092703][T31767] mmu_topup_memory_caches+0x1e1/0x490 [ 1538.092719][T31767] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1538.092738][T31767] kvm_mmu_load+0x21/0x12e0 [ 1538.092755][T31767] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1538.092772][T31767] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1538.092787][T31767] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1538.092814][T31767] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1538.136835][T31767] vcpu_enter_guest+0x3b21/0x5f40 [ 1538.141887][T31767] ? emulator_read_emulated+0x50/0x50 [ 1538.147268][T31767] ? lock_acquire+0x16f/0x3f0 [ 1538.151956][T31767] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1538.157694][T31767] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1538.163250][T31767] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1538.169094][T31767] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1538.173791][T31767] ? kvm_set_memory_region+0x50/0x50 [ 1538.179088][T31767] ? tomoyo_path_number_perm+0x263/0x520 [ 1538.184737][T31767] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1538.190713][T31767] ? __f_unlock_pos+0x19/0x20 [ 1538.195416][T31767] ? __fget+0x35a/0x550 [ 1538.199588][T31767] ? kvm_set_memory_region+0x50/0x50 [ 1538.199606][T31767] do_vfs_ioctl+0xd5f/0x1380 [ 1538.199624][T31767] ? ioctl_preallocate+0x210/0x210 [ 1538.199636][T31767] ? __fget+0x381/0x550 [ 1538.199655][T31767] ? ksys_dup3+0x3e0/0x3e0 [ 1538.199672][T31767] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1538.199687][T31767] ? fput_many+0x12c/0x1a0 [ 1538.199708][T31767] ? tomoyo_file_ioctl+0x23/0x30 [ 1538.199731][T31767] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1538.214846][T31767] ? security_file_ioctl+0x8d/0xc0 [ 1538.214865][T31767] ksys_ioctl+0xab/0xd0 [ 1538.214891][T31767] __x64_sys_ioctl+0x73/0xb0 [ 1538.259042][T31767] do_syscall_64+0xfd/0x680 [ 1538.263568][T31767] entry_SYSCALL_64_after_hwframe+0x49/0xbe 18:01:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1538.269492][T31767] RIP: 0033:0x459519 [ 1538.269509][T31767] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1538.269517][T31767] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1538.269531][T31767] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 [ 1538.269539][T31767] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 18:01:50 executing program 5: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000380), 0x0) futex(&(0x7f0000000000)=0x2, 0x5, 0x0, 0x0, 0x0, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x4c01, 0x0) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000080)) 18:01:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1538.269547][T31767] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1538.269555][T31767] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 [ 1538.269563][T31767] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 18:01:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae05, 0x0) 18:01:50 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x40000000}]) 18:01:50 executing program 1 (fault-call:8 fault-nth:81): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1538.590658][T31897] FAULT_INJECTION: forcing a failure. [ 1538.590658][T31897] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1538.636882][T31897] CPU: 1 PID: 31897 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 1538.644816][T31897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1538.654872][T31897] Call Trace: [ 1538.658179][T31897] dump_stack+0x172/0x1f0 [ 1538.662569][T31897] should_fail.cold+0xa/0x15 [ 1538.667186][T31897] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1538.673002][T31897] ? ___might_sleep+0x163/0x280 [ 1538.677953][T31897] should_fail_alloc_page+0x50/0x60 [ 1538.683171][T31897] __alloc_pages_nodemask+0x1a1/0x8d0 [ 1538.688556][T31897] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1538.694306][T31897] ? mmu_topup_memory_caches+0x97/0x490 [ 1538.699865][T31897] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1538.706132][T31897] alloc_pages_current+0x107/0x210 [ 1538.711279][T31897] __get_free_pages+0xc/0x40 [ 1538.716865][T31897] mmu_topup_memory_caches+0x1e1/0x490 [ 1538.722333][T31897] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1538.728599][T31897] kvm_mmu_load+0x21/0x12e0 [ 1538.733108][T31897] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1538.738769][T31897] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1538.745110][T31897] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1538.750316][T31897] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1538.756579][T31897] vcpu_enter_guest+0x3b21/0x5f40 [ 1538.761628][T31897] ? emulator_read_emulated+0x50/0x50 [ 1538.767002][T31897] ? lock_acquire+0x16f/0x3f0 [ 1538.771676][T31897] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1538.777403][T31897] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1538.782944][T31897] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1538.788670][T31897] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1538.793346][T31897] ? kvm_set_memory_region+0x50/0x50 [ 1538.798649][T31897] ? tomoyo_path_number_perm+0x263/0x520 [ 1538.804286][T31897] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1538.810106][T31897] ? __f_unlock_pos+0x19/0x20 [ 1538.814794][T31897] ? __fget+0x35a/0x550 [ 1538.818951][T31897] ? kvm_set_memory_region+0x50/0x50 [ 1538.824703][T31897] do_vfs_ioctl+0xd5f/0x1380 [ 1538.829298][T31897] ? ioctl_preallocate+0x210/0x210 [ 1538.834415][T31897] ? __fget+0x381/0x550 [ 1538.838569][T31897] ? ksys_dup3+0x3e0/0x3e0 [ 1538.842986][T31897] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1538.849221][T31897] ? fput_many+0x12c/0x1a0 [ 1538.853636][T31897] ? tomoyo_file_ioctl+0x23/0x30 [ 1538.858594][T31897] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1538.864841][T31897] ? security_file_ioctl+0x8d/0xc0 [ 1538.869958][T31897] ksys_ioctl+0xab/0xd0 [ 1538.874116][T31897] __x64_sys_ioctl+0x73/0xb0 [ 1538.878712][T31897] do_syscall_64+0xfd/0x680 [ 1538.883235][T31897] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1538.889130][T31897] RIP: 0033:0x459519 [ 1538.893025][T31897] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1538.912632][T31897] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1538.921045][T31897] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 [ 1538.929014][T31897] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1538.936983][T31897] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1538.944966][T31897] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 [ 1538.952952][T31897] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 18:01:51 executing program 3: futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f0000000000), 0x8f, 0x1, 0x0, 0x0, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{0x597a, 0xf6, 0x9, 0x10001}, {0xfbac, 0x166, 0x1074c51a, 0x6}, {0x0, 0x1, 0x6, 0x7}, {0x4561, 0xffffffff, 0x200, 0x5}, {0x3f, 0x2, 0xb360, 0x98}, {0x9d, 0x7fffffff, 0x5, 0x70c}, {0xfffffffffffffffe, 0x8, 0x2, 0x2}, {0x7, 0x5e, 0x87d7, 0x1d}]}) 18:01:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:01:51 executing program 1 (fault-call:8 fault-nth:82): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:01:51 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x100000000000000}]) 18:01:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae06, 0x0) 18:01:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1539.307751][T32019] FAULT_INJECTION: forcing a failure. [ 1539.307751][T32019] name fail_page_alloc, interval 1, probability 0, space 0, times 0 18:01:51 executing program 5: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000380), 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x92000) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) 18:01:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1539.391730][T32019] CPU: 1 PID: 32019 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 1539.399658][T32019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1539.409713][T32019] Call Trace: [ 1539.413014][T32019] dump_stack+0x172/0x1f0 [ 1539.417360][T32019] should_fail.cold+0xa/0x15 [ 1539.421961][T32019] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1539.427778][T32019] ? ___might_sleep+0x163/0x280 [ 1539.432640][T32019] should_fail_alloc_page+0x50/0x60 18:01:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:01:51 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x200000000000000}]) 18:01:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae07, 0x0) [ 1539.437850][T32019] __alloc_pages_nodemask+0x1a1/0x8d0 [ 1539.443245][T32019] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 1539.448978][T32019] ? mmu_topup_memory_caches+0x97/0x490 [ 1539.454532][T32019] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1539.460787][T32019] alloc_pages_current+0x107/0x210 [ 1539.465903][T32019] __get_free_pages+0xc/0x40 [ 1539.470502][T32019] mmu_topup_memory_caches+0x1e1/0x490 [ 1539.475969][T32019] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1539.482225][T32019] kvm_mmu_load+0x21/0x12e0 [ 1539.486737][T32019] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1539.492383][T32019] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1539.498640][T32019] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1539.503849][T32019] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1539.510135][T32019] vcpu_enter_guest+0x3b21/0x5f40 [ 1539.515181][T32019] ? emulator_read_emulated+0x50/0x50 [ 1539.520566][T32019] ? lock_acquire+0x16f/0x3f0 [ 1539.525252][T32019] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1539.530981][T32019] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1539.536529][T32019] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1539.542281][T32019] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1539.546970][T32019] ? kvm_set_memory_region+0x50/0x50 [ 1539.552299][T32019] ? tomoyo_path_number_perm+0x263/0x520 [ 1539.557949][T32019] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1539.563761][T32019] ? __f_unlock_pos+0x19/0x20 [ 1539.568446][T32019] ? __fget+0x35a/0x550 [ 1539.572619][T32019] ? kvm_set_memory_region+0x50/0x50 [ 1539.577908][T32019] do_vfs_ioctl+0xd5f/0x1380 [ 1539.582508][T32019] ? ioctl_preallocate+0x210/0x210 [ 1539.587620][T32019] ? __fget+0x381/0x550 18:01:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1539.587641][T32019] ? ksys_dup3+0x3e0/0x3e0 [ 1539.587658][T32019] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1539.587674][T32019] ? fput_many+0x12c/0x1a0 [ 1539.587696][T32019] ? tomoyo_file_ioctl+0x23/0x30 [ 1539.587720][T32019] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1539.611822][T32019] ? security_file_ioctl+0x8d/0xc0 [ 1539.611841][T32019] ksys_ioctl+0xab/0xd0 [ 1539.611860][T32019] __x64_sys_ioctl+0x73/0xb0 [ 1539.611879][T32019] do_syscall_64+0xfd/0x680 [ 1539.611899][T32019] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1539.611911][T32019] RIP: 0033:0x459519 [ 1539.611927][T32019] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1539.611935][T32019] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1539.611949][T32019] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 [ 1539.611957][T32019] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1539.611966][T32019] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1539.611975][T32019] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 [ 1539.611984][T32019] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 18:01:52 executing program 3: futex(&(0x7f000000cffc)=0x4, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) 18:01:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:01:52 executing program 1 (fault-call:8 fault-nth:83): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:01:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae08, 0x0) 18:01:52 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x300000000000000}]) 18:01:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1540.201432][T32269] FAULT_INJECTION: forcing a failure. [ 1540.201432][T32269] name failslab, interval 1, probability 0, space 0, times 0 [ 1540.217321][T32269] CPU: 1 PID: 32269 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 1540.225236][T32269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1540.235289][T32269] Call Trace: [ 1540.235319][T32269] dump_stack+0x172/0x1f0 [ 1540.235345][T32269] should_fail.cold+0xa/0x15 [ 1540.235378][T32269] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1540.247563][T32269] ? ___might_sleep+0x163/0x280 [ 1540.247587][T32269] __should_failslab+0x121/0x190 [ 1540.247615][T32269] should_failslab+0x9/0x14 [ 1540.267691][T32269] kmem_cache_alloc+0x2af/0x6f0 [ 1540.272551][T32269] ? alloc_pages_current+0x10f/0x210 [ 1540.277851][T32269] mmu_topup_memory_caches+0x2bc/0x490 [ 1540.283312][T32269] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1540.283332][T32269] kvm_mmu_load+0x21/0x12e0 [ 1540.283349][T32269] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1540.283365][T32269] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1540.283380][T32269] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1540.283396][T32269] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1540.283414][T32269] vcpu_enter_guest+0x3b21/0x5f40 [ 1540.283436][T32269] ? emulator_read_emulated+0x50/0x50 [ 1540.327995][T32269] ? lock_acquire+0x16f/0x3f0 [ 1540.332689][T32269] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1540.338424][T32269] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1540.343981][T32269] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 18:01:52 executing program 5: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000000), 0x0) r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x5, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080), 0x4) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) ioctl$int_out(r0, 0x2, &(0x7f00000000c0)) 18:01:52 executing program 3: futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f0000000040), 0x5, 0x0, 0x0, 0x0, 0x0) 18:01:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1540.349719][T32269] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1540.354406][T32269] ? kvm_set_memory_region+0x50/0x50 [ 1540.359703][T32269] ? tomoyo_path_number_perm+0x263/0x520 [ 1540.365348][T32269] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1540.371196][T32269] ? __f_unlock_pos+0x19/0x20 [ 1540.375893][T32269] ? __fget+0x35a/0x550 [ 1540.375917][T32269] ? kvm_set_memory_region+0x50/0x50 [ 1540.375935][T32269] do_vfs_ioctl+0xd5f/0x1380 [ 1540.375953][T32269] ? ioctl_preallocate+0x210/0x210 [ 1540.375971][T32269] ? __fget+0x381/0x550 [ 1540.395183][T32269] ? ksys_dup3+0x3e0/0x3e0 [ 1540.395203][T32269] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1540.395219][T32269] ? fput_many+0x12c/0x1a0 [ 1540.395240][T32269] ? tomoyo_file_ioctl+0x23/0x30 [ 1540.395263][T32269] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1540.414450][T32269] ? security_file_ioctl+0x8d/0xc0 [ 1540.414469][T32269] ksys_ioctl+0xab/0xd0 [ 1540.414487][T32269] __x64_sys_ioctl+0x73/0xb0 [ 1540.414512][T32269] do_syscall_64+0xfd/0x680 [ 1540.430882][T32269] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1540.430895][T32269] RIP: 0033:0x459519 [ 1540.430912][T32269] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1540.430921][T32269] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1540.430936][T32269] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 [ 1540.430944][T32269] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 18:01:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae09, 0x0) 18:01:52 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x400000000000000}]) 18:01:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1540.430952][T32269] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1540.430961][T32269] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 [ 1540.430970][T32269] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 18:01:52 executing program 1 (fault-call:8 fault-nth:84): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:01:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:01:52 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x4000000000000000}]) 18:01:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae0a, 0x0) 18:01:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1540.883437][T32495] FAULT_INJECTION: forcing a failure. [ 1540.883437][T32495] name failslab, interval 1, probability 0, space 0, times 0 [ 1540.906669][T32495] CPU: 0 PID: 32495 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 1540.914590][T32495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1540.924661][T32495] Call Trace: [ 1540.927982][T32495] dump_stack+0x172/0x1f0 [ 1540.932344][T32495] should_fail.cold+0xa/0x15 [ 1540.936956][T32495] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1540.942783][T32495] ? ___might_sleep+0x163/0x280 [ 1540.947661][T32495] __should_failslab+0x121/0x190 [ 1540.952616][T32495] should_failslab+0x9/0x14 [ 1540.957145][T32495] kmem_cache_alloc+0x2af/0x6f0 [ 1540.962011][T32495] ? alloc_pages_current+0x10f/0x210 [ 1540.967326][T32495] mmu_topup_memory_caches+0x2bc/0x490 [ 1540.967350][T32495] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1540.967375][T32495] kvm_mmu_load+0x21/0x12e0 [ 1540.967401][T32495] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1540.967432][T32495] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1540.979125][T32495] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1540.979144][T32495] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1540.979162][T32495] vcpu_enter_guest+0x3b21/0x5f40 [ 1540.979187][T32495] ? emulator_read_emulated+0x50/0x50 [ 1540.979211][T32495] ? lock_acquire+0x16f/0x3f0 [ 1540.979230][T32495] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1540.979252][T32495] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1540.979267][T32495] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1540.979289][T32495] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1541.017772][T32495] ? kvm_set_memory_region+0x50/0x50 [ 1541.017790][T32495] ? tomoyo_path_number_perm+0x263/0x520 [ 1541.017809][T32495] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1541.017825][T32495] ? __f_unlock_pos+0x19/0x20 [ 1541.017847][T32495] ? __fget+0x35a/0x550 [ 1541.017869][T32495] ? kvm_set_memory_region+0x50/0x50 [ 1541.028261][T32495] do_vfs_ioctl+0xd5f/0x1380 [ 1541.028281][T32495] ? ioctl_preallocate+0x210/0x210 [ 1541.028294][T32495] ? __fget+0x381/0x550 [ 1541.028315][T32495] ? ksys_dup3+0x3e0/0x3e0 [ 1541.028331][T32495] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1541.028346][T32495] ? fput_many+0x12c/0x1a0 [ 1541.028367][T32495] ? tomoyo_file_ioctl+0x23/0x30 [ 1541.028388][T32495] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1541.060986][T32495] ? security_file_ioctl+0x8d/0xc0 [ 1541.061006][T32495] ksys_ioctl+0xab/0xd0 [ 1541.061025][T32495] __x64_sys_ioctl+0x73/0xb0 [ 1541.061045][T32495] do_syscall_64+0xfd/0x680 18:01:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1541.061066][T32495] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1541.061077][T32495] RIP: 0033:0x459519 [ 1541.061092][T32495] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1541.061109][T32495] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1541.069928][T32495] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 [ 1541.069938][T32495] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1541.069947][T32495] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1541.069956][T32495] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 [ 1541.069965][T32495] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 18:01:53 executing program 5: futex(&(0x7f0000000200), 0x2000000000008b, 0x1000000104, 0x0, &(0x7f0000000380)=0x4, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f00000001c0)={0xf, {0x20000000000fb, 0x3, 0x6226, 0x9e2a}}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000300)={0x7ff, {0xfff, 0x3f, 0x5, 0xf9d, 0x1, 0x4}}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e22, @loopback}}}, &(0x7f0000000480)=0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000004c0)={r3, 0x7f}, &(0x7f0000000500)=0x8) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000340)={0x7, 0x3, 0x1}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r7 = creat(&(0x7f0000000000)='./file0/file0\x00', 0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x2}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000280)={r8, 0x1}, 0x8) ioctl$VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000100)={0x9, 0xf, 0x4, 0x10000, {r5, r6/1000+30000}, {0x2, 0x8, 0x5, 0x101, 0x3, 0x7ff, "20d43b4a"}, 0x9, 0x5a4f330e38a64e0, @fd=r7, 0x4}) 18:01:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:01:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae0b, 0x0) 18:01:53 executing program 1 (fault-call:8 fault-nth:85): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:01:53 executing program 3: futex(&(0x7f0000000000), 0x5, 0x0, 0x0, 0x0, 0xfff7fffffffffffc) 18:01:53 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x8000000000000000}]) 18:01:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:01:53 executing program 3: timer_create(0x6, &(0x7f0000000140)={0x0, 0x31, 0x3, @thr={&(0x7f0000000000)="87ec3b223f67e59e00432144dffd7ed19dfa98623d0fd21f9331854b4eb9fd147d0f2437c4274eb5afbd59b2ec44ee2792023113b88265cdc1f1379ce81f2cf9f012adf37c08a8fecbde0158743088e08733007a09dac4bf", &(0x7f0000000080)="e766d730032e0ee42e05dd054a1cb6894a79bda61eb2d898838a4325a86f7a7127c82d724279bea9a80ffae9396bc34f5f733857ac58f76d19c27172698cc967838ccfa95158a47aefed8f7cc2b81e54e0b36744ae959bf418fd90d47f20bb46362aba799444de71650f6ddb20901836d15b8ab1ded0ffa4bf393b06fe2936845c1815b27923eb775006d049d5af9807f52de219"}}, &(0x7f0000000180)=0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x20000, 0x0) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000200)=0x1) timer_getoverrun(r0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) [ 1541.601994][T32622] FAULT_INJECTION: forcing a failure. [ 1541.601994][T32622] name failslab, interval 1, probability 0, space 0, times 0 18:01:53 executing program 5: futex(&(0x7f000000cffc)=0x1, 0x80000000000a, 0x5, 0x0, &(0x7f0000000380)=0x3, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) [ 1541.687341][T32622] CPU: 0 PID: 32622 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 1541.695283][T32622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1541.705345][T32622] Call Trace: [ 1541.708662][T32622] dump_stack+0x172/0x1f0 [ 1541.713490][T32622] should_fail.cold+0xa/0x15 [ 1541.718101][T32622] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1541.723928][T32622] ? ___might_sleep+0x163/0x280 [ 1541.728794][T32622] __should_failslab+0x121/0x190 18:01:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1541.733741][T32622] should_failslab+0x9/0x14 [ 1541.738257][T32622] kmem_cache_alloc+0x2af/0x6f0 [ 1541.743121][T32622] ? alloc_pages_current+0x10f/0x210 [ 1541.748425][T32622] mmu_topup_memory_caches+0x2bc/0x490 [ 1541.753887][T32622] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1541.760160][T32622] kvm_mmu_load+0x21/0x12e0 [ 1541.760179][T32622] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1541.760195][T32622] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1541.760209][T32622] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1541.760232][T32622] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1541.789479][T32622] vcpu_enter_guest+0x3b21/0x5f40 [ 1541.794525][T32622] ? emulator_read_emulated+0x50/0x50 [ 1541.799915][T32622] ? lock_acquire+0x16f/0x3f0 [ 1541.804600][T32622] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1541.804631][T32622] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1541.804647][T32622] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1541.804674][T32622] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1541.827332][T32622] ? kvm_set_memory_region+0x50/0x50 [ 1541.832807][T32622] ? tomoyo_path_number_perm+0x263/0x520 [ 1541.832825][T32622] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1541.832841][T32622] ? __f_unlock_pos+0x19/0x20 [ 1541.832861][T32622] ? __fget+0x35a/0x550 [ 1541.832883][T32622] ? kvm_set_memory_region+0x50/0x50 [ 1541.832900][T32622] do_vfs_ioctl+0xd5f/0x1380 [ 1541.832919][T32622] ? ioctl_preallocate+0x210/0x210 [ 1541.832931][T32622] ? __fget+0x381/0x550 [ 1541.832950][T32622] ? ksys_dup3+0x3e0/0x3e0 [ 1541.876736][T32622] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1541.882993][T32622] ? fput_many+0x12c/0x1a0 18:01:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1541.887428][T32622] ? tomoyo_file_ioctl+0x23/0x30 [ 1541.892376][T32622] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1541.898629][T32622] ? security_file_ioctl+0x8d/0xc0 [ 1541.903785][T32622] ksys_ioctl+0xab/0xd0 [ 1541.907953][T32622] __x64_sys_ioctl+0x73/0xb0 [ 1541.912562][T32622] do_syscall_64+0xfd/0x680 [ 1541.917112][T32622] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1541.923006][T32622] RIP: 0033:0x459519 [ 1541.926911][T32622] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1541.946522][T32622] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1541.946537][T32622] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 [ 1541.946545][T32622] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1541.946552][T32622] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1541.946560][T32622] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 [ 1541.946567][T32622] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 18:01:54 executing program 5: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000380), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000180)="be85798f07c0a122eff755cb3c5e2345f186ac5375c3a52421c59a8c788596c31f94abb4bbaabc3e84084aabca6b5cd811abfb0bfad4137f5848d9525a2ba0a0df6312ac771992408206cf4645acd158b1141c09832831c2913338396b02c2d89e919fd3c61ab137f701bab89b9c4ec1", 0xc9, 0xfffffffffffffffa) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000040)=""/153, &(0x7f0000000100)=0x99) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x42000003}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x1cc, r2, 0x229, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3e000000000}]}, @TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xad8e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x46}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb395}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffffff9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0x54, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffffffffff7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA={0x78, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6cb}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3fe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x20040040}, 0x10) keyctl$setperm(0x5, r0, 0x2002) 18:01:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:01:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae0c, 0x0) 18:01:54 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x0, 0x2}]) 18:01:54 executing program 1 (fault-call:8 fault-nth:86): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:01:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:01:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae0d, 0x0) 18:01:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1542.432884][ T363] FAULT_INJECTION: forcing a failure. [ 1542.432884][ T363] name failslab, interval 1, probability 0, space 0, times 0 [ 1542.467215][ T363] CPU: 1 PID: 363 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 1542.474977][ T363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1542.485141][ T363] Call Trace: [ 1542.485172][ T363] dump_stack+0x172/0x1f0 [ 1542.485206][ T363] should_fail.cold+0xa/0x15 [ 1542.492812][ T363] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1542.492833][ T363] ? ___might_sleep+0x163/0x280 [ 1542.492854][ T363] __should_failslab+0x121/0x190 [ 1542.492874][ T363] should_failslab+0x9/0x14 [ 1542.492888][ T363] kmem_cache_alloc+0x2af/0x6f0 [ 1542.492906][ T363] ? alloc_pages_current+0x10f/0x210 [ 1542.492931][ T363] mmu_topup_memory_caches+0x2bc/0x490 [ 1542.527695][ T363] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1542.527720][ T363] kvm_mmu_load+0x21/0x12e0 [ 1542.527739][ T363] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1542.527761][ T363] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1542.539529][ T363] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1542.539548][ T363] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1542.539565][ T363] vcpu_enter_guest+0x3b21/0x5f40 [ 1542.539587][ T363] ? emulator_read_emulated+0x50/0x50 [ 1542.539605][ T363] ? lock_acquire+0x16f/0x3f0 [ 1542.539620][ T363] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1542.539647][ T363] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1542.572462][ T363] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1542.572488][ T363] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1542.572514][ T363] ? kvm_set_memory_region+0x50/0x50 [ 1542.582558][ T363] ? tomoyo_path_number_perm+0x263/0x520 [ 1542.582576][ T363] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1542.582591][ T363] ? __f_unlock_pos+0x19/0x20 [ 1542.582613][ T363] ? __fget+0x35a/0x550 [ 1542.582635][ T363] ? kvm_set_memory_region+0x50/0x50 [ 1542.582650][ T363] do_vfs_ioctl+0xd5f/0x1380 [ 1542.582668][ T363] ? ioctl_preallocate+0x210/0x210 [ 1542.582680][ T363] ? __fget+0x381/0x550 [ 1542.582700][ T363] ? ksys_dup3+0x3e0/0x3e0 [ 1542.582723][ T363] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1542.659495][ T363] ? fput_many+0x12c/0x1a0 [ 1542.663915][ T363] ? tomoyo_file_ioctl+0x23/0x30 [ 1542.668852][ T363] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1542.675094][ T363] ? security_file_ioctl+0x8d/0xc0 [ 1542.680234][ T363] ksys_ioctl+0xab/0xd0 [ 1542.684394][ T363] __x64_sys_ioctl+0x73/0xb0 [ 1542.688993][ T363] do_syscall_64+0xfd/0x680 [ 1542.693505][ T363] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1542.699405][ T363] RIP: 0033:0x459519 [ 1542.703301][ T363] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1542.723941][ T363] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1542.732368][ T363] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 [ 1542.740332][ T363] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1542.748297][ T363] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1542.756263][ T363] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 [ 1542.764260][ T363] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 18:01:54 executing program 3: futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$TIOCCBRK(r0, 0x5428) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) 18:01:54 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x0, 0x3}]) 18:01:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:01:54 executing program 1 (fault-call:8 fault-nth:87): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:01:55 executing program 5: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000380), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x802, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f0000000040)={0x100, 0xff, 0x5, 0x3}) 18:01:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae0e, 0x0) 18:01:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:01:55 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x0, 0x4}]) [ 1543.177570][ T526] FAULT_INJECTION: forcing a failure. [ 1543.177570][ T526] name failslab, interval 1, probability 0, space 0, times 0 [ 1543.222885][ T526] CPU: 0 PID: 526 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 1543.230651][ T526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1543.240742][ T526] Call Trace: [ 1543.240769][ T526] dump_stack+0x172/0x1f0 [ 1543.240841][ T526] should_fail.cold+0xa/0x15 [ 1543.240879][ T526] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1543.248493][ T526] ? ___might_sleep+0x163/0x280 [ 1543.248517][ T526] __should_failslab+0x121/0x190 [ 1543.248537][ T526] should_failslab+0x9/0x14 [ 1543.248558][ T526] kmem_cache_alloc+0x2af/0x6f0 [ 1543.278315][ T526] ? alloc_pages_current+0x10f/0x210 [ 1543.283619][ T526] mmu_topup_memory_caches+0x2bc/0x490 [ 1543.289092][ T526] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1543.295346][ T526] kvm_mmu_load+0x21/0x12e0 [ 1543.299855][ T526] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1543.305494][ T526] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1543.305511][ T526] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1543.305529][ T526] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1543.305548][ T526] vcpu_enter_guest+0x3b21/0x5f40 [ 1543.305578][ T526] ? emulator_read_emulated+0x50/0x50 [ 1543.333602][ T526] ? lock_acquire+0x16f/0x3f0 [ 1543.338289][ T526] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1543.344022][ T526] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1543.349596][ T526] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1543.355337][ T526] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1543.360024][ T526] ? kvm_set_memory_region+0x50/0x50 [ 1543.365319][ T526] ? tomoyo_path_number_perm+0x263/0x520 [ 1543.370953][ T526] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1543.376869][ T526] ? __f_unlock_pos+0x19/0x20 [ 1543.381561][ T526] ? __fget+0x35a/0x550 [ 1543.385721][ T526] ? kvm_set_memory_region+0x50/0x50 [ 1543.391002][ T526] do_vfs_ioctl+0xd5f/0x1380 [ 1543.395605][ T526] ? ioctl_preallocate+0x210/0x210 [ 1543.400730][ T526] ? __fget+0x381/0x550 [ 1543.404872][ T526] ? ksys_dup3+0x3e0/0x3e0 [ 1543.409273][ T526] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1543.415494][ T526] ? fput_many+0x12c/0x1a0 [ 1543.419901][ T526] ? tomoyo_file_ioctl+0x23/0x30 [ 1543.424834][ T526] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1543.431072][ T526] ? security_file_ioctl+0x8d/0xc0 [ 1543.436179][ T526] ksys_ioctl+0xab/0xd0 [ 1543.440368][ T526] __x64_sys_ioctl+0x73/0xb0 [ 1543.445043][ T526] do_syscall_64+0xfd/0x680 [ 1543.449538][ T526] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1543.455432][ T526] RIP: 0033:0x459519 [ 1543.459343][ T526] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1543.478949][ T526] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1543.487364][ T526] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 [ 1543.495324][ T526] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1543.503295][ T526] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1543.511250][ T526] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 18:01:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:01:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae0f, 0x0) [ 1543.519224][ T526] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 18:01:55 executing program 1 (fault-call:8 fault-nth:88): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:01:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:01:55 executing program 3: futex(&(0x7f000000cffc)=0x20008, 0x6, 0x0, 0x0, 0x0, 0x4) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) 18:01:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae10, 0x0) 18:01:55 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x0, 0x300}]) [ 1543.856845][ T652] FAULT_INJECTION: forcing a failure. [ 1543.856845][ T652] name failslab, interval 1, probability 0, space 0, times 0 [ 1543.919078][ T652] CPU: 0 PID: 652 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 1543.926835][ T652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1543.936911][ T652] Call Trace: [ 1543.940235][ T652] dump_stack+0x172/0x1f0 [ 1543.944594][ T652] should_fail.cold+0xa/0x15 [ 1543.949210][ T652] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1543.955048][ T652] ? ___might_sleep+0x163/0x280 [ 1543.959921][ T652] __should_failslab+0x121/0x190 [ 1543.964883][ T652] should_failslab+0x9/0x14 [ 1543.969401][ T652] kmem_cache_alloc+0x2af/0x6f0 [ 1543.974279][ T652] ? alloc_pages_current+0x10f/0x210 [ 1543.979596][ T652] mmu_topup_memory_caches+0x2bc/0x490 [ 1543.985075][ T652] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1543.991335][ T652] kvm_mmu_load+0x21/0x12e0 [ 1543.995861][ T652] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1544.001510][ T652] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1544.007762][ T652] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1544.012985][ T652] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1544.019235][ T652] vcpu_enter_guest+0x3b21/0x5f40 [ 1544.024302][ T652] ? emulator_read_emulated+0x50/0x50 [ 1544.029688][ T652] ? lock_acquire+0x16f/0x3f0 [ 1544.034374][ T652] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1544.040114][ T652] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1544.045700][ T652] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1544.051432][ T652] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1544.056114][ T652] ? kvm_set_memory_region+0x50/0x50 [ 1544.056130][ T652] ? tomoyo_path_number_perm+0x263/0x520 [ 1544.056149][ T652] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1544.056164][ T652] ? __f_unlock_pos+0x19/0x20 [ 1544.056185][ T652] ? __fget+0x35a/0x550 [ 1544.081689][ T652] ? kvm_set_memory_region+0x50/0x50 [ 1544.081708][ T652] do_vfs_ioctl+0xd5f/0x1380 [ 1544.081728][ T652] ? ioctl_preallocate+0x210/0x210 [ 1544.081740][ T652] ? __fget+0x381/0x550 [ 1544.081760][ T652] ? ksys_dup3+0x3e0/0x3e0 [ 1544.091633][ T652] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1544.091652][ T652] ? fput_many+0x12c/0x1a0 18:01:56 executing program 3: futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x400, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x201) setsockopt$inet6_buf(r0, 0x29, 0xea, &(0x7f0000000040)="ed7966418ce567eaa8c9e5f4176a54747975", 0x12) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000240)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000280)={@local, 0x1b, r1}) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) [ 1544.091674][ T652] ? tomoyo_file_ioctl+0x23/0x30 [ 1544.091691][ T652] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1544.091711][ T652] ? security_file_ioctl+0x8d/0xc0 [ 1544.132249][ T652] ksys_ioctl+0xab/0xd0 [ 1544.136419][ T652] __x64_sys_ioctl+0x73/0xb0 [ 1544.141020][ T652] do_syscall_64+0xfd/0x680 [ 1544.145541][ T652] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1544.151435][ T652] RIP: 0033:0x459519 [ 1544.155342][ T652] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1544.174950][ T652] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1544.174966][ T652] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 [ 1544.174975][ T652] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1544.174984][ T652] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1544.174992][ T652] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 [ 1544.175000][ T652] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 18:01:56 executing program 5: futex(&(0x7f000000cffc)=0x4, 0x80000000000c, 0x4, 0x0, &(0x7f0000000380), 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x3, 0x2000) write$9p(r0, &(0x7f0000000080)="255b6217e00be60c51afb499df82211303564e7b8955189c931a4131e6ce61e64789a0a4a78f735a50840f99d636cb846f25ea2a5f0854f80520fa4d9f8a6e51b5dca74719c70a6702e2784a75fc51bc44f59e3c47dbaeccea62db102688b836e56da9d78202ecc9f100c581f7121fa9a2502ee3efe6e211a0a0c477ff65a02b99a0370d7e4c7201b7d62b6d7056b2e563fc35382238624e67bf4ecce07d182548e7861a021bd69f0703192fb3bf8dd582c6b0972037f291b6153817d6f09e75f8698daf3b9bc5709e32d849ad11d79897bf264e725518131dffe0835b8fa6bd42770ae6c4fe4ed775f3d45aef9ca87e66f2cd17f63980", 0xf7) write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0x0, 0x2, {0x0, 0x10}}, 0x20) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) 18:01:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:01:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae11, 0x0) 18:01:56 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x0, 0x4000}]) 18:01:56 executing program 1 (fault-call:8 fault-nth:89): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:01:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:01:56 executing program 5: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000380), 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000480)='/dev/snapshot\x00', 0x44000, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f00000004c0)) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) r1 = dup(0xffffffffffffff9c) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2100030}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r2, 0x424, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc040}, 0x1) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000000)=0x63, 0x2) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x1000, 0x360f, 0x7, 0x99, 0x8001}, &(0x7f00000001c0)=0x14) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000200)={r3, 0x43, "bba56c6d782f3b02b16a9d7a0fd8be9d88b60d95c7bace9ba838b24df5446218453f4dddc38a48f7a88c6366d4038b271d6f18861aa4c5abed64fa4cd6494c10fa85bf"}, &(0x7f0000000280)=0x4b) timer_create(0x5, &(0x7f00000002c0)={0x0, 0x9, 0x6, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f00000003c0)={{r5, r6+10000000}, {0x0, 0x1c9c380}}, &(0x7f0000000440)) [ 1544.592743][ T797] FAULT_INJECTION: forcing a failure. [ 1544.592743][ T797] name failslab, interval 1, probability 0, space 0, times 0 18:01:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1544.634680][ T797] CPU: 0 PID: 797 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 1544.642442][ T797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1544.652505][ T797] Call Trace: [ 1544.655840][ T797] dump_stack+0x172/0x1f0 [ 1544.660182][ T797] should_fail.cold+0xa/0x15 [ 1544.664778][ T797] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1544.670592][ T797] ? ___might_sleep+0x163/0x280 [ 1544.675458][ T797] __should_failslab+0x121/0x190 [ 1544.680411][ T797] should_failslab+0x9/0x14 [ 1544.684919][ T797] kmem_cache_alloc+0x2af/0x6f0 [ 1544.689775][ T797] ? alloc_pages_current+0x10f/0x210 [ 1544.695072][ T797] mmu_topup_memory_caches+0x2bc/0x490 [ 1544.700531][ T797] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1544.706786][ T797] kvm_mmu_load+0x21/0x12e0 [ 1544.711296][ T797] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1544.718148][ T797] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1544.724398][ T797] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1544.729604][ T797] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1544.735852][ T797] vcpu_enter_guest+0x3b21/0x5f40 [ 1544.740885][ T797] ? emulator_read_emulated+0x50/0x50 [ 1544.746261][ T797] ? lock_acquire+0x16f/0x3f0 [ 1544.750942][ T797] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1544.756666][ T797] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1544.762214][ T797] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1544.767942][ T797] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1544.772631][ T797] ? kvm_set_memory_region+0x50/0x50 [ 1544.777920][ T797] ? tomoyo_path_number_perm+0x263/0x520 [ 1544.783559][ T797] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1544.789383][ T797] ? __f_unlock_pos+0x19/0x20 [ 1544.794082][ T797] ? __fget+0x35a/0x550 [ 1544.798255][ T797] ? kvm_set_memory_region+0x50/0x50 [ 1544.803611][ T797] do_vfs_ioctl+0xd5f/0x1380 [ 1544.808237][ T797] ? ioctl_preallocate+0x210/0x210 [ 1544.813368][ T797] ? __fget+0x381/0x550 [ 1544.817542][ T797] ? ksys_dup3+0x3e0/0x3e0 [ 1544.821968][ T797] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1544.828236][ T797] ? fput_many+0x12c/0x1a0 [ 1544.832673][ T797] ? tomoyo_file_ioctl+0x23/0x30 [ 1544.837638][ T797] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1544.843884][ T797] ? security_file_ioctl+0x8d/0xc0 [ 1544.849006][ T797] ksys_ioctl+0xab/0xd0 [ 1544.853169][ T797] __x64_sys_ioctl+0x73/0xb0 [ 1544.857764][ T797] do_syscall_64+0xfd/0x680 [ 1544.862278][ T797] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1544.868171][ T797] RIP: 0033:0x459519 [ 1544.872069][ T797] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1544.891771][ T797] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1544.900197][ T797] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 [ 1544.908214][ T797] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1544.916200][ T797] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1544.924196][ T797] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 [ 1544.932176][ T797] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 18:01:57 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x0, 0x1000000}]) 18:01:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae12, 0x0) 18:01:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:01:57 executing program 3: futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 18:01:57 executing program 1 (fault-call:8 fault-nth:90): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:01:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:01:57 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x0, 0x2000000}]) 18:01:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae13, 0x0) 18:01:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1545.458076][ T1020] FAULT_INJECTION: forcing a failure. [ 1545.458076][ T1020] name failslab, interval 1, probability 0, space 0, times 0 [ 1545.493224][ T1020] CPU: 0 PID: 1020 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 18:01:57 executing program 5: futex(&(0x7f000000cffc)=0x1, 0x80000000000b, 0x2, 0x0, &(0x7f0000000380), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0xa04000, 0x0) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000040)={0x7, 0x10000000000000, 0x3ff, 0x8, 0x3, 0x38a}) [ 1545.501108][ T1020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1545.511187][ T1020] Call Trace: [ 1545.511215][ T1020] dump_stack+0x172/0x1f0 [ 1545.511247][ T1020] should_fail.cold+0xa/0x15 [ 1545.523488][ T1020] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1545.529315][ T1020] ? ___might_sleep+0x163/0x280 [ 1545.534187][ T1020] __should_failslab+0x121/0x190 [ 1545.539139][ T1020] should_failslab+0x9/0x14 [ 1545.543662][ T1020] kmem_cache_alloc+0x2af/0x6f0 [ 1545.548542][ T1020] ? alloc_pages_current+0x10f/0x210 [ 1545.553860][ T1020] mmu_topup_memory_caches+0x2bc/0x490 [ 1545.559325][ T1020] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1545.559348][ T1020] kvm_mmu_load+0x21/0x12e0 [ 1545.559365][ T1020] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1545.559381][ T1020] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1545.559396][ T1020] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1545.559417][ T1020] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1545.593641][ T1020] vcpu_enter_guest+0x3b21/0x5f40 [ 1545.598693][ T1020] ? emulator_read_emulated+0x50/0x50 [ 1545.604084][ T1020] ? lock_acquire+0x16f/0x3f0 18:01:57 executing program 5: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000380), 0x0) clock_gettime(0x4, &(0x7f0000000000)) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) [ 1545.608773][ T1020] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1545.614512][ T1020] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1545.620089][ T1020] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1545.625832][ T1020] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1545.630517][ T1020] ? kvm_set_memory_region+0x50/0x50 [ 1545.635809][ T1020] ? tomoyo_path_number_perm+0x263/0x520 [ 1545.641640][ T1020] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1545.647489][ T1020] ? __f_unlock_pos+0x19/0x20 [ 1545.652200][ T1020] ? __fget+0x35a/0x550 [ 1545.656379][ T1020] ? kvm_set_memory_region+0x50/0x50 [ 1545.661681][ T1020] do_vfs_ioctl+0xd5f/0x1380 [ 1545.666281][ T1020] ? ioctl_preallocate+0x210/0x210 [ 1545.671411][ T1020] ? __fget+0x381/0x550 [ 1545.675585][ T1020] ? ksys_dup3+0x3e0/0x3e0 [ 1545.680013][ T1020] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1545.680030][ T1020] ? fput_many+0x12c/0x1a0 [ 1545.680051][ T1020] ? tomoyo_file_ioctl+0x23/0x30 [ 1545.680073][ T1020] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1545.701900][ T1020] ? security_file_ioctl+0x8d/0xc0 [ 1545.707027][ T1020] ksys_ioctl+0xab/0xd0 [ 1545.711201][ T1020] __x64_sys_ioctl+0x73/0xb0 [ 1545.716270][ T1020] do_syscall_64+0xfd/0x680 [ 1545.720792][ T1020] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1545.726699][ T1020] RIP: 0033:0x459519 [ 1545.730620][ T1020] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1545.750255][ T1020] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 18:01:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:01:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae14, 0x0) [ 1545.758778][ T1020] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 [ 1545.766756][ T1020] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1545.774730][ T1020] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1545.782700][ T1020] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 [ 1545.782709][ T1020] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 18:01:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:01:57 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x0, 0x3000000}]) 18:01:58 executing program 3: futex(&(0x7f000000cffc)=0x3, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0xf8d, 0x1, 0x1, 0xffffffffffffff9c}) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x2) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) fadvise64(r1, 0x0, 0x7, 0x4) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000040)=0x1dbc12f) prctl$PR_SET_TIMERSLACK(0x1d, 0x1) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000080)={0x3, 0x2}) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, 0x7, {0x7, 0x1f, 0x56, 0x0, 0x0, 0x8, 0xfbb, 0x6}}, 0x50) 18:01:58 executing program 1 (fault-call:8 fault-nth:91): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:01:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae15, 0x0) 18:01:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:01:58 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x0, 0x4000000}]) 18:01:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1546.327140][ T1279] FAULT_INJECTION: forcing a failure. [ 1546.327140][ T1279] name failslab, interval 1, probability 0, space 0, times 0 [ 1546.389056][ T1279] CPU: 1 PID: 1279 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 1546.396915][ T1279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1546.406979][ T1279] Call Trace: [ 1546.410291][ T1279] dump_stack+0x172/0x1f0 [ 1546.414650][ T1279] should_fail.cold+0xa/0x15 [ 1546.419264][ T1279] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1546.425174][ T1279] ? ___might_sleep+0x163/0x280 [ 1546.430139][ T1279] __should_failslab+0x121/0x190 18:01:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1546.435107][ T1279] should_failslab+0x9/0x14 [ 1546.439630][ T1279] kmem_cache_alloc+0x2af/0x6f0 [ 1546.444497][ T1279] ? alloc_pages_current+0x10f/0x210 [ 1546.449912][ T1279] mmu_topup_memory_caches+0x2bc/0x490 [ 1546.455411][ T1279] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1546.461755][ T1279] kvm_mmu_load+0x21/0x12e0 [ 1546.466282][ T1279] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1546.471936][ T1279] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1546.478184][ T1279] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1546.483395][ T1279] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1546.489646][ T1279] vcpu_enter_guest+0x3b21/0x5f40 [ 1546.494689][ T1279] ? emulator_read_emulated+0x50/0x50 [ 1546.500075][ T1279] ? lock_acquire+0x16f/0x3f0 [ 1546.504765][ T1279] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1546.510512][ T1279] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1546.516069][ T1279] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1546.516094][ T1279] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1546.516111][ T1279] ? kvm_set_memory_region+0x50/0x50 [ 1546.516133][ T1279] ? tomoyo_path_number_perm+0x263/0x520 [ 1546.516154][ T1279] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1546.543251][ T1279] ? __f_unlock_pos+0x19/0x20 [ 1546.547968][ T1279] ? __fget+0x35a/0x550 [ 1546.552178][ T1279] ? kvm_set_memory_region+0x50/0x50 [ 1546.557497][ T1279] do_vfs_ioctl+0xd5f/0x1380 [ 1546.562104][ T1279] ? ioctl_preallocate+0x210/0x210 [ 1546.567238][ T1279] ? __fget+0x381/0x550 [ 1546.571409][ T1279] ? ksys_dup3+0x3e0/0x3e0 [ 1546.575876][ T1279] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1546.582138][ T1279] ? fput_many+0x12c/0x1a0 [ 1546.582160][ T1279] ? tomoyo_file_ioctl+0x23/0x30 [ 1546.582175][ T1279] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1546.582189][ T1279] ? security_file_ioctl+0x8d/0xc0 [ 1546.582206][ T1279] ksys_ioctl+0xab/0xd0 [ 1546.582222][ T1279] __x64_sys_ioctl+0x73/0xb0 [ 1546.582242][ T1279] do_syscall_64+0xfd/0x680 [ 1546.582262][ T1279] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1546.582273][ T1279] RIP: 0033:0x459519 18:01:58 executing program 5: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000380), 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x100, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e20, @local}}, 0x1, 0xffffffffffffff81}, &(0x7f0000000100)=0x90) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={r1, 0xb24}, 0x8) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={r1, 0x2}, &(0x7f00000001c0)=0x8) 18:01:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1546.582289][ T1279] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1546.582304][ T1279] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1546.654161][ T1279] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 [ 1546.662167][ T1279] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1546.670152][ T1279] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1546.678147][ T1279] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 18:01:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae16, 0x0) [ 1546.686139][ T1279] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 18:01:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:01:58 executing program 1 (fault-call:8 fault-nth:92): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:01:58 executing program 3: futex(&(0x7f000000cffc)=0x1004, 0x4010000000, 0x4, 0x0, 0x0, 0x0) select(0x40, &(0x7f0000000140)={0x2, 0x2, 0x39, 0x800, 0x1, 0x1000, 0x3, 0x6d}, &(0x7f0000000180)={0x1, 0x7, 0xcf5, 0x0, 0x0, 0x1, 0x2, 0x1000}, &(0x7f00000001c0)={0x7, 0x20, 0x7786, 0x0, 0x2d5, 0x55, 0x3, 0xff}, &(0x7f0000000200)={0x0, 0x2710}) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0x89, 0x5, 0x40, "b5f3bef5b58c4b0e863db80f3594977a", "b035b385b3dc790bcf92dbe638a06d09f2bfae3d450c777c5456ee0d748c33361593b5d94670c2421614de19876d6f48e72fe3bd7e844bb300afa21a8861badc5199b0e60502b46a6c0c3c4582fa2db59d6c7984a2dc392e14338717fde04826e7aaa1b68eca9dca279a038a0e56c260d5d7b221"}, 0x89, 0x1) 18:01:58 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x0, 0x40000000}]) 18:01:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:01:59 executing program 3: futex(&(0x7f0000000000)=0x3, 0x1, 0x1, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) [ 1547.020345][ T1410] FAULT_INJECTION: forcing a failure. [ 1547.020345][ T1410] name failslab, interval 1, probability 0, space 0, times 0 [ 1547.109174][ T1410] CPU: 1 PID: 1410 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 1547.117022][ T1410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1547.127086][ T1410] Call Trace: [ 1547.130406][ T1410] dump_stack+0x172/0x1f0 [ 1547.134762][ T1410] should_fail.cold+0xa/0x15 [ 1547.139370][ T1410] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1547.145187][ T1410] ? ___might_sleep+0x163/0x280 [ 1547.150055][ T1410] __should_failslab+0x121/0x190 [ 1547.155010][ T1410] should_failslab+0x9/0x14 [ 1547.159545][ T1410] kmem_cache_alloc+0x2af/0x6f0 [ 1547.164421][ T1410] ? alloc_pages_current+0x10f/0x210 [ 1547.169731][ T1410] mmu_topup_memory_caches+0x2bc/0x490 [ 1547.175202][ T1410] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1547.181456][ T1410] kvm_mmu_load+0x21/0x12e0 [ 1547.185967][ T1410] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1547.191608][ T1410] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1547.197859][ T1410] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1547.203069][ T1410] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1547.209325][ T1410] vcpu_enter_guest+0x3b21/0x5f40 [ 1547.214369][ T1410] ? emulator_read_emulated+0x50/0x50 [ 1547.219753][ T1410] ? lock_acquire+0x16f/0x3f0 [ 1547.224433][ T1410] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1547.230164][ T1410] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1547.230179][ T1410] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1547.230200][ T1410] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1547.230215][ T1410] ? kvm_set_memory_region+0x50/0x50 [ 1547.230229][ T1410] ? tomoyo_path_number_perm+0x263/0x520 [ 1547.230247][ T1410] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1547.230262][ T1410] ? __f_unlock_pos+0x19/0x20 [ 1547.230280][ T1410] ? __fget+0x35a/0x550 [ 1547.230301][ T1410] ? kvm_set_memory_region+0x50/0x50 [ 1547.277114][ T1410] do_vfs_ioctl+0xd5f/0x1380 [ 1547.281735][ T1410] ? ioctl_preallocate+0x210/0x210 [ 1547.286860][ T1410] ? __fget+0x381/0x550 [ 1547.286883][ T1410] ? ksys_dup3+0x3e0/0x3e0 [ 1547.286900][ T1410] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1547.286921][ T1410] ? fput_many+0x12c/0x1a0 18:01:59 executing program 3: futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x2, 0x0, 0x0, 0x0) 18:01:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1547.301736][ T1410] ? tomoyo_file_ioctl+0x23/0x30 [ 1547.301755][ T1410] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1547.301768][ T1410] ? security_file_ioctl+0x8d/0xc0 [ 1547.301786][ T1410] ksys_ioctl+0xab/0xd0 [ 1547.301803][ T1410] __x64_sys_ioctl+0x73/0xb0 [ 1547.301822][ T1410] do_syscall_64+0xfd/0x680 [ 1547.301842][ T1410] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1547.301860][ T1410] RIP: 0033:0x459519 [ 1547.345616][ T1410] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1547.365232][ T1410] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1547.373653][ T1410] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 [ 1547.381631][ T1410] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1547.389631][ T1410] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1547.397609][ T1410] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 18:01:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae17, 0x0) [ 1547.406291][ T1410] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 18:01:59 executing program 1 (fault-call:8 fault-nth:93): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:01:59 executing program 5: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000380), 0x0) futex(&(0x7f0000000000)=0xffffffffffffffff, 0x8, 0x2, 0x0, 0x0, 0x0) 18:01:59 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x0, 0x100000000000000}]) 18:01:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:01:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae18, 0x0) 18:01:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1547.808720][ T1562] FAULT_INJECTION: forcing a failure. [ 1547.808720][ T1562] name failslab, interval 1, probability 0, space 0, times 0 [ 1547.832999][ T1562] CPU: 0 PID: 1562 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 1547.840934][ T1562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1547.851002][ T1562] Call Trace: [ 1547.854317][ T1562] dump_stack+0x172/0x1f0 [ 1547.858680][ T1562] should_fail.cold+0xa/0x15 [ 1547.863315][ T1562] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1547.869144][ T1562] ? ___might_sleep+0x163/0x280 [ 1547.874206][ T1562] __should_failslab+0x121/0x190 [ 1547.879187][ T1562] should_failslab+0x9/0x14 [ 1547.883704][ T1562] kmem_cache_alloc+0x2af/0x6f0 [ 1547.888593][ T1562] ? alloc_pages_current+0x10f/0x210 [ 1547.893896][ T1562] mmu_topup_memory_caches+0x2bc/0x490 [ 1547.893913][ T1562] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1547.893930][ T1562] kvm_mmu_load+0x21/0x12e0 [ 1547.893948][ T1562] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1547.893969][ T1562] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1547.915893][ T1562] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1547.915913][ T1562] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1547.915932][ T1562] vcpu_enter_guest+0x3b21/0x5f40 [ 1547.915958][ T1562] ? emulator_read_emulated+0x50/0x50 [ 1547.915976][ T1562] ? lock_acquire+0x16f/0x3f0 [ 1547.915998][ T1562] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1547.927443][ T1562] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1547.927460][ T1562] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1547.927484][ T1562] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1547.927501][ T1562] ? kvm_set_memory_region+0x50/0x50 [ 1547.927517][ T1562] ? tomoyo_path_number_perm+0x263/0x520 [ 1547.927534][ T1562] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1547.927555][ T1562] ? __f_unlock_pos+0x19/0x20 [ 1547.975757][ T1562] ? __fget+0x35a/0x550 [ 1547.975781][ T1562] ? kvm_set_memory_region+0x50/0x50 [ 1547.975798][ T1562] do_vfs_ioctl+0xd5f/0x1380 18:01:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1547.975818][ T1562] ? ioctl_preallocate+0x210/0x210 [ 1547.975831][ T1562] ? __fget+0x381/0x550 [ 1547.975850][ T1562] ? ksys_dup3+0x3e0/0x3e0 [ 1547.975873][ T1562] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1547.987296][ T1562] ? fput_many+0x12c/0x1a0 [ 1547.987319][ T1562] ? tomoyo_file_ioctl+0x23/0x30 [ 1547.987337][ T1562] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1547.987351][ T1562] ? security_file_ioctl+0x8d/0xc0 [ 1547.987368][ T1562] ksys_ioctl+0xab/0xd0 [ 1547.987387][ T1562] __x64_sys_ioctl+0x73/0xb0 [ 1547.987406][ T1562] do_syscall_64+0xfd/0x680 [ 1547.987428][ T1562] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1548.035299][ T1562] RIP: 0033:0x459519 [ 1548.046809][ T1562] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1548.046819][ T1562] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1548.046834][ T1562] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 18:02:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:02:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae19, 0x0) [ 1548.046843][ T1562] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1548.046852][ T1562] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1548.046862][ T1562] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 [ 1548.046871][ T1562] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 18:02:00 executing program 3: futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x20800, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r0, 0xc0385720, &(0x7f0000000040)={0x1, {0x77359400}, 0x6, 0xae7}) 18:02:00 executing program 1 (fault-call:8 fault-nth:94): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:02:00 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x0, 0x200000000000000}]) 18:02:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1548.448730][ T1688] FAULT_INJECTION: forcing a failure. [ 1548.448730][ T1688] name failslab, interval 1, probability 0, space 0, times 0 [ 1548.489676][ T1688] CPU: 1 PID: 1688 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 1548.497514][ T1688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1548.507591][ T1688] Call Trace: [ 1548.507621][ T1688] dump_stack+0x172/0x1f0 [ 1548.507657][ T1688] should_fail.cold+0xa/0x15 [ 1548.507677][ T1688] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1548.507700][ T1688] ? ___might_sleep+0x163/0x280 [ 1548.507723][ T1688] __should_failslab+0x121/0x190 [ 1548.507745][ T1688] should_failslab+0x9/0x14 [ 1548.507759][ T1688] kmem_cache_alloc+0x2af/0x6f0 [ 1548.507783][ T1688] ? alloc_pages_current+0x10f/0x210 [ 1548.550181][ T1688] mmu_topup_memory_caches+0x2bc/0x490 [ 1548.555646][ T1688] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1548.555666][ T1688] kvm_mmu_load+0x21/0x12e0 [ 1548.566404][ T1688] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1548.566425][ T1688] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1548.566441][ T1688] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1548.566458][ T1688] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1548.566484][ T1688] vcpu_enter_guest+0x3b21/0x5f40 [ 1548.594856][ T1688] ? emulator_read_emulated+0x50/0x50 [ 1548.600281][ T1688] ? lock_acquire+0x16f/0x3f0 [ 1548.604975][ T1688] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1548.610718][ T1688] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1548.616275][ T1688] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1548.622010][ T1688] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1548.626708][ T1688] ? kvm_set_memory_region+0x50/0x50 [ 1548.632008][ T1688] ? tomoyo_path_number_perm+0x263/0x520 18:02:00 executing program 5: futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) 18:02:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:02:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae1a, 0x0) [ 1548.637663][ T1688] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1548.643477][ T1688] ? __f_unlock_pos+0x19/0x20 [ 1548.648175][ T1688] ? __fget+0x35a/0x550 [ 1548.652350][ T1688] ? kvm_set_memory_region+0x50/0x50 [ 1548.657645][ T1688] do_vfs_ioctl+0xd5f/0x1380 [ 1548.662241][ T1688] ? ioctl_preallocate+0x210/0x210 [ 1548.667346][ T1688] ? __fget+0x381/0x550 [ 1548.671519][ T1688] ? ksys_dup3+0x3e0/0x3e0 [ 1548.675947][ T1688] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1548.682200][ T1688] ? fput_many+0x12c/0x1a0 [ 1548.686631][ T1688] ? tomoyo_file_ioctl+0x23/0x30 [ 1548.691608][ T1688] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1548.691622][ T1688] ? security_file_ioctl+0x8d/0xc0 [ 1548.691639][ T1688] ksys_ioctl+0xab/0xd0 [ 1548.691656][ T1688] __x64_sys_ioctl+0x73/0xb0 [ 1548.691674][ T1688] do_syscall_64+0xfd/0x680 [ 1548.691693][ T1688] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1548.691705][ T1688] RIP: 0033:0x459519 18:02:00 executing program 5: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000380), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xd2f, 0x46000) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@broadcast, @multicast2, 0x1}, 0x10) stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r0, 0x400454ce, r1) [ 1548.691722][ T1688] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1548.691730][ T1688] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1548.691743][ T1688] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 [ 1548.691750][ T1688] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1548.691767][ T1688] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1548.778870][ T1688] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 [ 1548.778879][ T1688] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 18:02:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:02:00 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x0, 0x300000000000000}]) 18:02:00 executing program 1 (fault-call:8 fault-nth:95): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:02:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1549.102299][ T1854] FAULT_INJECTION: forcing a failure. [ 1549.102299][ T1854] name failslab, interval 1, probability 0, space 0, times 0 [ 1549.135410][ T1854] CPU: 1 PID: 1854 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 1549.143252][ T1854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1549.153342][ T1854] Call Trace: [ 1549.156662][ T1854] dump_stack+0x172/0x1f0 [ 1549.161014][ T1854] should_fail.cold+0xa/0x15 [ 1549.165627][ T1854] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1549.171540][ T1854] ? ___might_sleep+0x163/0x280 [ 1549.176414][ T1854] __should_failslab+0x121/0x190 [ 1549.181369][ T1854] should_failslab+0x9/0x14 [ 1549.185902][ T1854] kmem_cache_alloc+0x2af/0x6f0 [ 1549.190774][ T1854] ? alloc_pages_current+0x10f/0x210 [ 1549.190798][ T1854] mmu_topup_memory_caches+0x2bc/0x490 [ 1549.190814][ T1854] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1549.190833][ T1854] kvm_mmu_load+0x21/0x12e0 [ 1549.190851][ T1854] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1549.190873][ T1854] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1549.201700][ T1854] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1549.201718][ T1854] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1549.201734][ T1854] vcpu_enter_guest+0x3b21/0x5f40 [ 1549.201758][ T1854] ? emulator_read_emulated+0x50/0x50 [ 1549.201778][ T1854] ? lock_acquire+0x16f/0x3f0 [ 1549.201793][ T1854] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1549.201814][ T1854] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1549.201829][ T1854] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1549.201852][ T1854] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1549.201868][ T1854] ? kvm_set_memory_region+0x50/0x50 [ 1549.201882][ T1854] ? tomoyo_path_number_perm+0x263/0x520 [ 1549.201903][ T1854] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1549.289318][ T1854] ? __f_unlock_pos+0x19/0x20 [ 1549.294007][ T1854] ? __fget+0x35a/0x550 [ 1549.298180][ T1854] ? kvm_set_memory_region+0x50/0x50 [ 1549.303464][ T1854] do_vfs_ioctl+0xd5f/0x1380 [ 1549.308305][ T1854] ? ioctl_preallocate+0x210/0x210 [ 1549.313500][ T1854] ? __fget+0x381/0x550 [ 1549.317661][ T1854] ? ksys_dup3+0x3e0/0x3e0 [ 1549.322065][ T1854] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1549.328299][ T1854] ? fput_many+0x12c/0x1a0 [ 1549.332721][ T1854] ? tomoyo_file_ioctl+0x23/0x30 [ 1549.337687][ T1854] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1549.343915][ T1854] ? security_file_ioctl+0x8d/0xc0 [ 1549.349026][ T1854] ksys_ioctl+0xab/0xd0 [ 1549.353197][ T1854] __x64_sys_ioctl+0x73/0xb0 [ 1549.357802][ T1854] do_syscall_64+0xfd/0x680 [ 1549.362319][ T1854] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1549.368321][ T1854] RIP: 0033:0x459519 [ 1549.372231][ T1854] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1549.391960][ T1854] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 18:02:01 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @loopback, 0x1, 0x1, [@loopback]}, 0x14) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x2, 0xc60a, 0x20, 0x7}) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3, 0x208000) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0xa) 18:02:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae1b, 0x0) 18:02:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1549.400380][ T1854] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 [ 1549.408336][ T1854] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1549.416397][ T1854] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1549.424375][ T1854] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 [ 1549.432341][ T1854] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 18:02:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:02:01 executing program 1 (fault-call:8 fault-nth:96): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:02:01 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x0, 0x400000000000000}]) 18:02:01 executing program 5: futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, &(0x7f0000000380), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) timer_create(0x7, &(0x7f0000000140)={0x0, 0x4, 0x4, @thr={&(0x7f0000000000)="96d9ca7533f48bca43610e111273250b76fc833dd3d1befde9d4e9fb000cc03d25fc747fe7fb9524d50c0d06fec16d1dbf4d1f474ac68ead663432798fd2eb23997d64b2bff49e09bf350e063a099e80628460304b54937afdca912f3022662aa9ee", &(0x7f0000000080)="d88938b52f9e9e426e1d059a67df7376c9602ff9274a2a69e6e47f7706af6e28070886b446d6aaf8994bf9e4c806f298e9fcf71685215944b47a463b71666dce3d4c78a7b8195a509ad873e48edb3569220ab8b90d25f18e8b34d4a7edee11798fb10efb3f7f4b3ee44194c0c8971589a308b3cf1535b8dc08425e7d62651acd0bb0db23353012f9e39c5bbcf33f89f8d0b69fd537ac27eda9c30545a7529fddc53b648f6a0f86c5fb9d91f82c4b3f4101b1a7"}}, &(0x7f0000000180)=0x0) timer_gettime(r0, &(0x7f00000001c0)) 18:02:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1549.729296][ T1957] FAULT_INJECTION: forcing a failure. [ 1549.729296][ T1957] name failslab, interval 1, probability 0, space 0, times 0 [ 1549.744777][ T1957] CPU: 0 PID: 1957 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 1549.752629][ T1957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1549.762696][ T1957] Call Trace: [ 1549.766007][ T1957] dump_stack+0x172/0x1f0 [ 1549.770866][ T1957] should_fail.cold+0xa/0x15 [ 1549.775488][ T1957] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1549.781357][ T1957] ? ___might_sleep+0x163/0x280 [ 1549.786251][ T1957] __should_failslab+0x121/0x190 [ 1549.791220][ T1957] should_failslab+0x9/0x14 [ 1549.795832][ T1957] kmem_cache_alloc+0x2af/0x6f0 [ 1549.800695][ T1957] ? alloc_pages_current+0x10f/0x210 [ 1549.806001][ T1957] mmu_topup_memory_caches+0x2bc/0x490 [ 1549.811481][ T1957] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1549.811504][ T1957] kvm_mmu_load+0x21/0x12e0 [ 1549.811522][ T1957] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1549.811545][ T1957] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1549.834974][ T1957] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1549.840184][ T1957] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1549.846445][ T1957] vcpu_enter_guest+0x3b21/0x5f40 [ 1549.851488][ T1957] ? emulator_read_emulated+0x50/0x50 [ 1549.851509][ T1957] ? lock_acquire+0x16f/0x3f0 [ 1549.851525][ T1957] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1549.851547][ T1957] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1549.873214][ T1957] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1549.873243][ T1957] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1549.883639][ T1957] ? kvm_set_memory_region+0x50/0x50 [ 1549.888947][ T1957] ? tomoyo_path_number_perm+0x263/0x520 [ 1549.894608][ T1957] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1549.900430][ T1957] ? __f_unlock_pos+0x19/0x20 [ 1549.900453][ T1957] ? __fget+0x35a/0x550 [ 1549.900474][ T1957] ? kvm_set_memory_region+0x50/0x50 [ 1549.900489][ T1957] do_vfs_ioctl+0xd5f/0x1380 [ 1549.900509][ T1957] ? ioctl_preallocate+0x210/0x210 [ 1549.909333][ T1957] ? __fget+0x381/0x550 [ 1549.909355][ T1957] ? ksys_dup3+0x3e0/0x3e0 [ 1549.909371][ T1957] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1549.909386][ T1957] ? fput_many+0x12c/0x1a0 [ 1549.909407][ T1957] ? tomoyo_file_ioctl+0x23/0x30 [ 1549.909428][ T1957] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1549.954763][ T1957] ? security_file_ioctl+0x8d/0xc0 [ 1549.959894][ T1957] ksys_ioctl+0xab/0xd0 [ 1549.964065][ T1957] __x64_sys_ioctl+0x73/0xb0 [ 1549.968667][ T1957] do_syscall_64+0xfd/0x680 [ 1549.973181][ T1957] entry_SYSCALL_64_after_hwframe+0x49/0xbe 18:02:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae1c, 0x0) 18:02:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1549.979078][ T1957] RIP: 0033:0x459519 [ 1549.982978][ T1957] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1550.002591][ T1957] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1550.011021][ T1957] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 [ 1550.011030][ T1957] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 18:02:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1550.011037][ T1957] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1550.011044][ T1957] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 [ 1550.011053][ T1957] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 18:02:02 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x0, 0x4000000000000000}]) 18:02:02 executing program 3: r0 = syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0x1000dd, 0x200000) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000000140)={0x200000000000000, 0x6000, 0x8, 0x0, 0x13}) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)={&(0x7f0000000180)='./file0\x00', 0x0, 0x8}, 0x10) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2000, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000040)=""/129) 18:02:02 executing program 1 (fault-call:8 fault-nth:97): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:02:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae1d, 0x0) 18:02:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:02:02 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x0, 0x8000000000000000}]) 18:02:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1550.517769][ T2191] FAULT_INJECTION: forcing a failure. [ 1550.517769][ T2191] name failslab, interval 1, probability 0, space 0, times 0 [ 1550.549318][ T2191] CPU: 0 PID: 2191 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 1550.557147][ T2191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1550.567211][ T2191] Call Trace: [ 1550.570514][ T2191] dump_stack+0x172/0x1f0 [ 1550.574862][ T2191] should_fail.cold+0xa/0x15 [ 1550.579468][ T2191] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1550.585317][ T2191] ? ___might_sleep+0x163/0x280 [ 1550.590183][ T2191] __should_failslab+0x121/0x190 [ 1550.595146][ T2191] should_failslab+0x9/0x14 [ 1550.599668][ T2191] kmem_cache_alloc+0x2af/0x6f0 [ 1550.599688][ T2191] ? alloc_pages_current+0x10f/0x210 [ 1550.599712][ T2191] mmu_topup_memory_caches+0x2bc/0x490 [ 1550.599736][ T2191] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1550.610044][ T2191] kvm_mmu_load+0x21/0x12e0 [ 1550.610063][ T2191] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1550.610087][ T2191] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1550.638258][ T2191] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1550.643474][ T2191] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1550.650406][ T2191] vcpu_enter_guest+0x3b21/0x5f40 [ 1550.650432][ T2191] ? emulator_read_emulated+0x50/0x50 [ 1550.650453][ T2191] ? lock_acquire+0x16f/0x3f0 [ 1550.660834][ T2191] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1550.660858][ T2191] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1550.660872][ T2191] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1550.660894][ T2191] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1550.660916][ T2191] ? kvm_set_memory_region+0x50/0x50 [ 1550.692489][ T2191] ? tomoyo_path_number_perm+0x263/0x520 [ 1550.698143][ T2191] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1550.703971][ T2191] ? __f_unlock_pos+0x19/0x20 [ 1550.708662][ T2191] ? __fget+0x35a/0x550 [ 1550.714336][ T2191] ? kvm_set_memory_region+0x50/0x50 [ 1550.714352][ T2191] do_vfs_ioctl+0xd5f/0x1380 [ 1550.714369][ T2191] ? ioctl_preallocate+0x210/0x210 [ 1550.714381][ T2191] ? __fget+0x381/0x550 [ 1550.714407][ T2191] ? ksys_dup3+0x3e0/0x3e0 [ 1550.737945][ T2191] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1550.744201][ T2191] ? fput_many+0x12c/0x1a0 [ 1550.748648][ T2191] ? tomoyo_file_ioctl+0x23/0x30 [ 1550.753609][ T2191] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1550.759882][ T2191] ? security_file_ioctl+0x8d/0xc0 [ 1550.765000][ T2191] ksys_ioctl+0xab/0xd0 [ 1550.769176][ T2191] __x64_sys_ioctl+0x73/0xb0 [ 1550.773787][ T2191] do_syscall_64+0xfd/0x680 [ 1550.778310][ T2191] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1550.784217][ T2191] RIP: 0033:0x459519 [ 1550.788125][ T2191] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1550.807742][ T2191] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1550.816171][ T2191] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 [ 1550.824165][ T2191] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1550.832145][ T2191] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1550.840132][ T2191] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 [ 1550.848127][ T2191] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 18:02:02 executing program 5: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000380), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x3, &(0x7f0000000040)={r0, r1+30000000}) 18:02:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:02:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae1e, 0x0) 18:02:02 executing program 1 (fault-call:8 fault-nth:98): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:02:03 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x0, 0x0, 0x2}]) 18:02:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1551.101651][ T2313] FAULT_INJECTION: forcing a failure. [ 1551.101651][ T2313] name failslab, interval 1, probability 0, space 0, times 0 [ 1551.172723][ T2313] CPU: 1 PID: 2313 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 1551.180567][ T2313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1551.190632][ T2313] Call Trace: [ 1551.193978][ T2313] dump_stack+0x172/0x1f0 [ 1551.198333][ T2313] should_fail.cold+0xa/0x15 [ 1551.202945][ T2313] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1551.208764][ T2313] ? ___might_sleep+0x163/0x280 [ 1551.213637][ T2313] __should_failslab+0x121/0x190 [ 1551.218586][ T2313] should_failslab+0x9/0x14 [ 1551.223097][ T2313] kmem_cache_alloc+0x2af/0x6f0 [ 1551.227967][ T2313] ? alloc_pages_current+0x10f/0x210 [ 1551.233270][ T2313] mmu_topup_memory_caches+0x2bc/0x490 [ 1551.238742][ T2313] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1551.244995][ T2313] kvm_mmu_load+0x21/0x12e0 [ 1551.249509][ T2313] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1551.255160][ T2313] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1551.261415][ T2313] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1551.266627][ T2313] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1551.272887][ T2313] vcpu_enter_guest+0x3b21/0x5f40 [ 1551.278008][ T2313] ? emulator_read_emulated+0x50/0x50 [ 1551.283388][ T2313] ? lock_acquire+0x16f/0x3f0 [ 1551.283405][ T2313] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1551.283424][ T2313] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1551.283439][ T2313] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1551.283459][ T2313] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1551.283475][ T2313] ? kvm_set_memory_region+0x50/0x50 [ 1551.283491][ T2313] ? tomoyo_path_number_perm+0x263/0x520 [ 1551.283508][ T2313] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1551.283528][ T2313] ? __f_unlock_pos+0x19/0x20 [ 1551.331334][ T2313] ? __fget+0x35a/0x550 [ 1551.335512][ T2313] ? kvm_set_memory_region+0x50/0x50 [ 1551.340808][ T2313] do_vfs_ioctl+0xd5f/0x1380 [ 1551.345410][ T2313] ? ioctl_preallocate+0x210/0x210 [ 1551.350532][ T2313] ? __fget+0x381/0x550 [ 1551.354697][ T2313] ? ksys_dup3+0x3e0/0x3e0 [ 1551.359132][ T2313] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1551.365379][ T2313] ? fput_many+0x12c/0x1a0 [ 1551.369798][ T2313] ? tomoyo_file_ioctl+0x23/0x30 [ 1551.374734][ T2313] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1551.380990][ T2313] ? security_file_ioctl+0x8d/0xc0 [ 1551.386105][ T2313] ksys_ioctl+0xab/0xd0 [ 1551.390268][ T2313] __x64_sys_ioctl+0x73/0xb0 [ 1551.394873][ T2313] do_syscall_64+0xfd/0x680 [ 1551.399386][ T2313] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1551.405273][ T2313] RIP: 0033:0x459519 [ 1551.409169][ T2313] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1551.428784][ T2313] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1551.437200][ T2313] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 [ 1551.445184][ T2313] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1551.453162][ T2313] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1551.461154][ T2313] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 [ 1551.469139][ T2313] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 18:02:03 executing program 3: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r0 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 18:02:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae21, 0x0) 18:02:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:02:03 executing program 1 (fault-call:8 fault-nth:99): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:02:03 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x0, 0x0, 0x3}]) 18:02:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1551.734519][ T2430] FAULT_INJECTION: forcing a failure. [ 1551.734519][ T2430] name failslab, interval 1, probability 0, space 0, times 0 [ 1551.804994][ T2430] CPU: 1 PID: 2430 Comm: syz-executor.1 Not tainted 5.2.0-rc7 #65 [ 1551.812837][ T2430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1551.824867][ T2430] Call Trace: [ 1551.824897][ T2430] dump_stack+0x172/0x1f0 [ 1551.824923][ T2430] should_fail.cold+0xa/0x15 [ 1551.824945][ T2430] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1551.824970][ T2430] ? ___might_sleep+0x163/0x280 [ 1551.832582][ T2430] __should_failslab+0x121/0x190 [ 1551.832601][ T2430] should_failslab+0x9/0x14 [ 1551.832614][ T2430] kmem_cache_alloc+0x2af/0x6f0 [ 1551.832632][ T2430] ? alloc_pages_current+0x10f/0x210 [ 1551.832657][ T2430] mmu_topup_memory_caches+0x2bc/0x490 [ 1551.832676][ T2430] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1551.832696][ T2430] kvm_mmu_load+0x21/0x12e0 [ 1551.832713][ T2430] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 1551.832728][ T2430] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1551.832743][ T2430] ? kvm_cpu_has_extint+0x125/0x1d0 [ 1551.832759][ T2430] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1551.832777][ T2430] vcpu_enter_guest+0x3b21/0x5f40 [ 1551.832800][ T2430] ? emulator_read_emulated+0x50/0x50 [ 1551.889677][ T2430] ? lock_acquire+0x16f/0x3f0 [ 1551.901095][ T2430] ? kvm_arch_vcpu_ioctl_run+0x240/0x1740 [ 1551.901120][ T2430] kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1551.901144][ T2430] ? kvm_arch_vcpu_ioctl_run+0x423/0x1740 [ 1551.901168][ T2430] kvm_vcpu_ioctl+0x4dc/0xf90 [ 1551.901188][ T2430] ? kvm_set_memory_region+0x50/0x50 [ 1551.949336][ T2430] ? tomoyo_path_number_perm+0x263/0x520 18:02:03 executing program 5: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000380), 0x0) futex(&(0x7f000000cffc), 0x5, 0x4, 0x0, 0x0, 0x0) 18:02:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae22, 0x0) 18:02:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) [ 1551.954977][ T2430] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1551.960795][ T2430] ? __f_unlock_pos+0x19/0x20 [ 1551.965481][ T2430] ? __fget+0x35a/0x550 [ 1551.969651][ T2430] ? kvm_set_memory_region+0x50/0x50 [ 1551.974961][ T2430] do_vfs_ioctl+0xd5f/0x1380 [ 1551.979565][ T2430] ? ioctl_preallocate+0x210/0x210 [ 1551.984686][ T2430] ? __fget+0x381/0x550 [ 1551.988858][ T2430] ? ksys_dup3+0x3e0/0x3e0 [ 1551.993287][ T2430] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1551.999538][ T2430] ? fput_many+0x12c/0x1a0 [ 1552.003974][ T2430] ? tomoyo_file_ioctl+0x23/0x30 [ 1552.008921][ T2430] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1552.008936][ T2430] ? security_file_ioctl+0x8d/0xc0 [ 1552.008966][ T2430] ksys_ioctl+0xab/0xd0 [ 1552.008983][ T2430] __x64_sys_ioctl+0x73/0xb0 [ 1552.009001][ T2430] do_syscall_64+0xfd/0x680 [ 1552.009021][ T2430] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1552.009033][ T2430] RIP: 0033:0x459519 [ 1552.009048][ T2430] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1552.009056][ T2430] RSP: 002b:00007fdd9d338c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1552.009077][ T2430] RAX: ffffffffffffffda RBX: 00007fdd9d338c90 RCX: 0000000000459519 [ 1552.079546][ T2430] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1552.087524][ T2430] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1552.095587][ T2430] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9d3396d4 [ 1552.103564][ T2430] R13: 00000000004c284e R14: 00000000004d5af8 R15: 0000000000000006 18:02:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:02:04 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x0, 0x0, 0x4}]) 18:02:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:02:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x80, 0x2, [0xc0010000], [0xc1]}) 18:02:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae23, 0x0) 18:02:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:02:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x2, 0x0) 18:02:04 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x0, 0x0, 0x300}]) 18:02:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:02:04 executing program 5: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000380), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x2a000, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 18:02:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x10, 0x0) 18:02:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae24, 0x0) 18:02:04 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000003a00)='/dev/input/event#\x00', 0x6, 0x0) ioctl$EVIOCSABS3F(r0, 0x401845ff, 0x0) 18:02:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x3) 18:02:04 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x0, 0x0, 0x4000}]) 18:02:05 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_open_dev$usbmon(0x0, 0x0, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x2, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x300) 18:02:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x227d, 0x0) 18:02:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae25, 0x0) 18:02:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x500) 18:02:05 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x0, 0x0, 0x1000000}]) 18:02:05 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x402000, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f00000000c0)={0x100, 0x3f}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f0000000040)={0x9, 0x20}) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) 18:02:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x80, 0x2, [0x4d0, 0x7fffd], [0xc1]}) 18:02:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x600) 18:02:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae26, 0x0) 18:02:05 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x0, 0x0, 0x2000000}]) 18:02:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x4c01, 0x0) 18:02:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x802) 18:02:06 executing program 5: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000380), 0x0) futex(&(0x7f0000000000)=0x2, 0x5, 0x2, 0x0, 0x0, 0x0) 18:02:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x80, 0x2, [0x40000092], [0xc1]}) 18:02:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x5407, 0x0) 18:02:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae27, 0x0) 18:02:06 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x0, 0x0, 0x3000000}]) 18:02:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x803) 18:02:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x804) 18:02:06 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000040)={0x0, @multicast2, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x60, &(0x7f0000000000)={0x0, @empty, 0x0, 0x0, 'dh\x00', 0x0, 0x400001, 0x400}, 0x2c) 18:02:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x5421, 0x0) 18:02:06 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x0, 0x0, 0x4000000}]) 18:02:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae28, 0x0) 18:02:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x805) 18:02:07 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @empty, @multicast1}, &(0x7f00000002c0)=0xc) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, 0x0) prctl$PR_GET_FP_MODE(0x2e) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x6, 0x0, [0x20000740, 0x0, 0x0, 0x20000994, 0x20000c20], 0x0, &(0x7f0000000440)}, 0x78) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) msgget(0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) creat(0x0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, 0x0) getuid() pipe2(&(0x7f00000004c0), 0x800) pread64(0xffffffffffffffff, 0x0, 0xc7, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000380), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) 18:02:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x806) 18:02:07 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x0, 0x0, 0x40000000}]) 18:02:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae29, 0x0) 18:02:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x5450, 0x0) 18:02:07 executing program 3: 18:02:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x807) 18:02:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x808) 18:02:07 executing program 3: 18:02:07 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x0, 0x0, 0x100000000000000}]) 18:02:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae2a, 0x0) 18:02:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x5451, 0x0) 18:02:07 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0x40000, 0x2) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000001c0)=ANY=[@ANYBLOB="04000000800000000000000000000000000000000000000800475a71c691aaef6056270124cec215b32b2daa466cf779e1b81d1e343abbf0e7084afee954495e811ddd7bbad442dfaef846239f51464ad872da9d55e78aa451da4b2fd58820f77664636e2fb6add46514a730cf288f781a59706288cb0a9ac3836b0cbb0d473eb631a6df8eba4f1bd436488e90bdf693839a00d3a947a7ac57fe8eca25fca155ac7f805a0c7873581500607fffb2d7f87be6282d3ebda05666d1aac431d9e4181a009b4a847b2e522b3446c5b4670f2a55d7e5ac7d04ee0d7f6dca2ad278c80fafd1d5d8a35857b3896a24b91d415a6b73643629a290b8b3d8b66339ba9a416c455d77e03d37215331d66dab6bc97062794c46f0c50ace999df160f3dd1ab00000000000000000000000000011b43a34c55a60d5378e8b55c85becd9d91fbd6c6939d6eba0ab62cd1382a03411b1cad6"]) futex(&(0x7f000000cffc)=0x4, 0x80, 0x2, 0x0, &(0x7f0000000380), 0xb) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x10001) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000040)=0x3, 0x8) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000080)="9ade93f6e2441d255ea1c0ac5e18c72e", 0x10) 18:02:07 executing program 3: 18:02:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x809) 18:02:07 executing program 3: 18:02:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae2b, 0x0) 18:02:07 executing program 5: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000380), 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VT_ACTIVATE(r0, 0x5606, 0x4e) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000140)={0x2, 0x0, [{0xc000001f, 0x0, 0x6, 0x800, 0x2, 0x62}, {0xa, 0x3ab8, 0x0, 0x10000, 0x0, 0xc6, 0x10001}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040), r1, 0x0, 0x1, 0x4}}, 0x20) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) 18:02:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x80a) 18:02:08 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x0, 0x0, 0x200000000000000}]) 18:02:08 executing program 3: poll(&(0x7f0000000080), 0x6, 0x800000000004c) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0x24f, 0x0, 0x0, 0x800e00500) shutdown(r0, 0x0) 18:02:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x5452, 0x0) 18:02:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x80b) 18:02:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae2c, 0x0) 18:02:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x80c) 18:02:08 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x0, 0x0, 0x300000000000000}]) 18:02:08 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000140)={0x0, 0x7ff}, 0x8) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x96ee, 0x2, 0x3f}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, 0x0, 0x0, 0x8e1fe51a6236e621, 0x0, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000180)={0x9, 0x0, 0x0, 0x0, 0xff, "e9666191b455d4cabf48e74ea8b9190b2394ab", 0x9, 0x2}) 18:02:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x5460, 0x0) 18:02:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x80e) 18:02:08 executing program 5: futex(&(0x7f000000cffc)=0x5, 0x80000000000b, 0x7, 0x0, &(0x7f0000000380)=0x4000000000, 0x0) futex(&(0x7f0000000000)=0x2, 0x5, 0x0, 0x0, 0x0, 0x40) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8000, 0x0) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000080)) 18:02:08 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x0, 0x0, 0x400000000000000}]) 18:02:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae2d, 0x0) 18:02:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x80f) 18:02:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x5502, 0x0) 18:02:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x810) 18:02:09 executing program 5: futex(&(0x7f0000000000)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000380)=0x4, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) 18:02:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x6364, 0x0) 18:02:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x811) 18:02:09 executing program 3: 18:02:09 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x0, 0x0, 0x4000000000000000}]) 18:02:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae2e, 0x0) 18:02:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x812) 18:02:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x8912, 0x0) 18:02:09 executing program 3: 18:02:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x813) 18:02:10 executing program 3: 18:02:10 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x0, 0x0, 0x8000000000000000}]) 18:02:10 executing program 5: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000380), 0x0) futex(&(0x7f0000000000)=0x2, 0xa, 0xfffffffffffffffd, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) 18:02:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x8914, 0x0) 18:02:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x814) 18:02:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae2f, 0x0) 18:02:10 executing program 3: 18:02:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x860) 18:02:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x8933, 0x0) 18:02:10 executing program 3: 18:02:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x900) 18:02:10 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 18:02:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae30, 0x0) 18:02:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0xa00) 18:02:11 executing program 5: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000380), 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x40000, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0xa0, "9cfd6fd054b9f8d6d5048fdb8a0bcbd5146d9c394891d76b28cb6d352238a7e4d9214ca2ef2a6629bd1613a4459f0f11cbebe900e1042e23f181d4f0aee5e84a4962026b19c56229903164a9c5eccf9bddae969bd9bcb7900e4b059adddcc3b8f2502607340ece8e2245d786e602b1517f89079e15b1efa1a0ec6764952d84c9ce1ef01dc439c7b5e1c5aa4752d0b62452d7d5ff1432572cf722bd0e87c8c457"}, &(0x7f0000000100)=0xa8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r1, 0x9}, &(0x7f0000000180)=0x8) futex(&(0x7f000000cffc), 0x8f, 0x0, 0x0, 0x0, 0x0) 18:02:11 executing program 3: 18:02:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae01, 0x0) 18:02:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0xb00) 18:02:11 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3}]) 18:02:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae31, 0x0) 18:02:11 executing program 3: 18:02:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0xc00) 18:02:11 executing program 3: 18:02:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x1100) 18:02:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae32, 0x0) 18:02:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae02, 0x0) 18:02:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x1200) 18:02:12 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x4}]) 18:02:12 executing program 5: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000380), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4800) getsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x4) 18:02:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae03, 0x0) 18:02:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae33, 0x0) 18:02:12 executing program 3: 18:02:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x1300) 18:02:12 executing program 3: 18:02:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x1400) 18:02:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae34, 0x0) 18:02:12 executing program 3: 18:02:12 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x300}]) 18:02:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x3900) 18:02:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae04, 0x0) 18:02:13 executing program 5: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000380), 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x240101, 0x0) write$P9_RLOCK(r0, &(0x7f0000000040)={0x8, 0x35, 0x2}, 0x8) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) 18:02:13 executing program 3: 18:02:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x4000) 18:02:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae35, 0x0) 18:02:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae05, 0x0) 18:02:13 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x4000}]) 18:02:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', 0xffffffffffffffbf, 0x14840) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000300), 0x0) r2 = accept4(r0, 0x0, &(0x7f0000000040), 0x80800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fe7000/0x13000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000feb000/0x1000)=nil, &(0x7f0000fea000/0x4000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000000140)="d83955733894a2a35ea70696056518ca15350b2f9a5f578b24a2dcb6fa096a80b175c2c7187c482d3de18a70e96c02e6be8bcbc1a0b89eebc1c5e69ee0f22f48bc70098a7de865fb905124d4f810e9c421a6a798277aec1914302eded82d704b906bfa415fd1f2a1a20ea940c165beaff58670982cb9254b3326a8cd48dfddb29efaa98725ae4d082318ef3007420f6a0dde23acb709c405d8fef828b6818fc2981721c5bda8d160854a5393bf9a20e36f45cd7f", 0xb4, r2}, 0x68) accept$alg(r2, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[]}}, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000000c0), 0x4) write$nbd(r2, &(0x7f0000000000)={0x67446698, 0x0, 0x1, 0x3, 0x3}, 0x10) 18:02:13 executing program 3: 18:02:13 executing program 3: 18:02:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae06, 0x0) 18:02:13 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1000000}]) 18:02:13 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r0 = getpid() prlimit64(r0, 0x1, &(0x7f0000000140)={0x0, 0x7fffffff}, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0) dup(0xffffffffffffffff) socket$bt_rfcomm(0x1f, 0x1, 0x3) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x800) 18:02:14 executing program 5: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000380), 0x0) r0 = getpgid(0xffffffffffffffff) r1 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x9, 0x200801) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000140)) poll(&(0x7f0000000040)=[{r1, 0x2020}, {r1, 0x2}, {r1, 0x8050}], 0x3, 0x9) ptrace$pokeuser(0x6, r0, 0x2, 0x7f) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x1, @broadcast}, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e20, @rand_addr=0x800}, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000180)='bond_slave_1\x00', 0x97af, 0x0, 0x7}) 18:02:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae36, 0x0) 18:02:14 executing program 3: 18:02:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001096144989b34dbb032f1bb30055a1000000000000000000020000", @ANYRES32=0x0, @ANYBLOB="43020000000000001800120100767469000c000200"/32], 0x38}}, 0x800) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x2040, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x100, 0x0, 0x10002, 0x1}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000100)={0x800, r2}) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) 18:02:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae07, 0x0) 18:02:14 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2000000}]) 18:02:14 executing program 3: 18:02:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) write$P9_RRENAME(r1, &(0x7f0000000000)={0x7, 0x15, 0xffff}, 0x7) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000000f003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="43020000000000001800120008000100767469000c00020008000400e0000002"], 0x38}}, 0x800) 18:02:14 executing program 3: 18:02:14 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3000000}]) 18:02:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae37, 0x0) 18:02:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae08, 0x0) 18:02:15 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x18f7d9c2, 0x8000) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000040)) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000080)=0x39, 0x4) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000380), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) 18:02:15 executing program 3: 18:02:15 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x800) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x41c300, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x40000, 0x0) accept$unix(r2, &(0x7f0000000280)=@abs, &(0x7f00000000c0)=0x6e) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0xffffffff, 0x8001, 0x7, 'queue1\x00', 0x401}) accept$unix(r2, &(0x7f0000000300), &(0x7f0000000380)=0x6e) 18:02:15 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x4000000}]) 18:02:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae38, 0x0) 18:02:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae09, 0x0) 18:02:15 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$KDSIGACCEPT(r1, 0x5393, 0x7008010824ffe4) 18:02:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="63a28bf2454effb365e889011a3d5143020000000000001800120008000100767469000c00020008004400e0000002"], 0x38}}, 0x800) 18:02:15 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x2000000000000000, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000000)='\\eth0mime_type$%\x00', 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) lsetxattr$trusted_overlay_nlink(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000102000007) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x11, 0x0, 0x0) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, 0x0) 18:02:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae0a, 0x0) [ 1563.316422][ T5523] __nla_validate_parse: 8 callbacks suppressed [ 1563.316433][ T5523] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 18:02:15 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x40000000}]) 18:02:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae39, 0x0) 18:02:15 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20000, 0x0) connect$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000380), 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000200)="b9800000c00f3235000100000f3048b8568b929eb42e3b020f23c00f21f835010003000f23f8440f01ca66b858008ec00f20d835200000000f22d866bad004ec650f01cf66baf80cb8bb6e038fef66bafc0cec363e450f3066b85e008ed8"}], 0x8b, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) lstat(0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x1040000004, 0x0, 0x0, 0x0, 0x4cc]}) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x28) write$eventfd(r4, &(0x7f0000000380)=0x1f, 0x8) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = semget(0x1, 0x2, 0x400) write$binfmt_misc(r2, &(0x7f0000000480)={'syz1', "2d2a3c2a0defcf54c8395ff1e9cac5cffd1beafa76de8727d9dd46827a170608a0232682c75eb484efd55dbb906fb4ab1bcbfa66c7fc57fcea9bb8a7f35bf3b315fef29d5c97c892d16a6225c572c17e7fb3c473d0a1e9690ab4aba49b67f998e040160184465a91de6b161c3ec528d23acc3c319f8441a616aedbf8bc307894d62420fd20d6fc4e8fbc3a963353fb"}, 0x93) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000003c0)=0x1, 0x4) semctl$IPC_RMID(r5, 0x0, 0x0) semtimedop(r5, &(0x7f0000000080), 0x0, &(0x7f00000000c0)={r6, r7+10000000}) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000400)=0x4) r8 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000200)={&(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3}) write$USERIO_CMD_SEND_INTERRUPT(r8, &(0x7f00000001c0), 0x2) clock_gettime(0x0, &(0x7f0000000100)) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x400, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r9, 0x29, 0x1, &(0x7f0000000080), 0x4) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) 18:02:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x800) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffff8, 0x20100) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x6, 0x8, [0x5, 0x43a, 0x100, 0x9, 0x9, 0x3, 0x10001, 0x1000]}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000140)={r2, 0x3, 0x30, 0xffffffffffffffff, 0x9bc5}, &(0x7f00000001c0)=0x18) 18:02:15 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x2000000000000000, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000000)='\\eth0mime_type$%\x00', 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) lsetxattr$trusted_overlay_nlink(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000102000007) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x11, 0x0, 0x0) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, 0x0) 18:02:15 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}]) 18:02:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae0b, 0x0) 18:02:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae3a, 0x0) 18:02:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x38}}, 0x800) 18:02:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x800) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f00000001c0)={0x2, "4046393f9510a3dc9ff682571dbba566588a8e23c0674207bfe59b461615f54f", 0x69, 0x7, 0x0, 0x8, 0x3}) [ 1564.151275][ T5717] kvm [5679]: vcpu0, guest rIP: 0x205 Hyper-V unhandled rdmsr: 0x40000004 18:02:16 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}]) 18:02:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae3b, 0x0) 18:02:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae0c, 0x0) 18:02:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800cc055e0bcfe87b0071") r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000140)) 18:02:16 executing program 5: r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, r0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000380), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0xf60, 0x8000) ioctl$TCGETX(r1, 0x5432, &(0x7f0000000040)) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r2) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x600, 0x0) prctl$PR_SET_ENDIAN(0x14, 0xfa38b8510dd6629c) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xfffffffffffffffe) 18:02:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000001c0)=""/231) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="4300000000ffffffff00120008000100767469000c00020008000400e0000002"], 0x38}}, 0x800) 18:02:16 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000002c0)='threaded\x00', 0xfffffd95) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff}, 0x8000000200000000, 0x800007f, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='trusted.overlay.u\xe0per\x00', 0x0, 0x0, 0x0) 18:02:16 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}]) 18:02:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae0d, 0x0) 18:02:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae3c, 0x0) [ 1564.935777][ T5899] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 18:02:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="43020000000000001800120008000100767469000cdb00020008000400e0000002"], 0x3}}, 0x800) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x10000, 0x800) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) [ 1565.022103][ T5991] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 18:02:17 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x2000000000000000, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000000)='\\eth0mime_type$%\x00', 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) lsetxattr$trusted_overlay_nlink(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000102000007) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)=@l2={0x1f, 0xffffca88}, 0x80, 0x0}, 0x0) ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000240)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 18:02:17 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}]) 18:02:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae0e, 0x0) 18:02:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae3d, 0x0) 18:02:17 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10001, 0x121) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000040)=0x9) r1 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/current\x00', 0x2, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000140)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f00000001c0)={0x401, 0x7, 0x5, 'queue0\x00', 0x1}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x800) 18:02:17 executing program 5: futex(&(0x7f0000000000), 0x80000000000b, 0x4, 0x0, &(0x7f0000000380), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000100)={0xfffffffffffffff7, 0xdca, 0x8001}, 0xc) 18:02:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3880000010003a0e000000000000000000001200a98c5d40296c33e7b32e91eb0d499599c7c4b8ed2e7d9f6198dd4753373bcad699fdb1b5a2", @ANYRES32=0x0, @ANYBLOB="43020000000000001800120008000100767469000c00020008000400e0000002"], 0x38}}, 0x800) r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x0, 0x2) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000100)={0x80000001, 0x3839, 0x1}) 18:02:17 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}]) 18:02:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae3e, 0x0) 18:02:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x238) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:02:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae0f, 0x0) 18:02:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff59, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="43020500000000001800120008000100767469000c00020008000400e0000002"], 0xa617966911da651c}}, 0x800) 18:02:18 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}]) 18:02:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x20c801, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x400, 0x9, 0x1, "b227d0c78eabe773d1f29e056703ee193a6b15180e32bf1d08fc57257a441514", 0x39565559}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="58d67085643800000010003b0e00080000000000124e179700", @ANYRES32=0x0, @ANYBLOB="43020000000000001800120008000100767469000c00020008000400e0000002"], 0x38}}, 0x800) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f00000000c0)=0x4, 0x4) 18:02:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae41, 0x0) 18:02:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae10, 0x0) 18:02:18 executing program 5: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x1, 0x0, &(0x7f0000000380), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) 18:02:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x800) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/cgroup\x00') r2 = open(&(0x7f00000000c0)='./file0\x00', 0x105000, 0x100) ioctl$KDADDIO(r2, 0x4b34, 0x800) 18:02:18 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") syslog(0x3, &(0x7f0000000180)=""/147, 0x93) 18:02:18 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000400)) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000290}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08032bbd7000fddbdf251400000038000600040002000800010000000080fa00010008000000080001001c694109040002000400020008000100010100000800010065000000280007000c00030003000000000000000c00030001000000000000004c000400ffffff7f00000000"], 0x74}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') io_setup(0x9, &(0x7f0000000440)) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x100, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8015) 18:02:18 executing program 5: futex(&(0x7f000000cffc)=0x4, 0x9, 0x8, 0x0, &(0x7f0000000380), 0x3) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) 18:02:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae42, 0x0) 18:02:18 executing program 5: clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x400000001}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, 0x1b) 18:02:18 executing program 2: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vfio/vfio\x00', 0x200000, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000040)=0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="43020000000000001840120008000b00767469002900020008000400e0000002"], 0x38}}, 0x800) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @pic={0x7, 0x5, 0x9, 0xffffffff, 0x8, 0x3, 0x9, 0x8000000000, 0x1, 0x7ff, 0x4, 0x7, 0x3, 0xda71, 0x5, 0x7f}}) 18:02:19 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socketpair(0x9, 0x803, 0x7, &(0x7f0000000080)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x100, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="43020000000000001800120008f30000767469000c0002f96896e4164af3634b"], 0x38}}, 0x800) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000140)=0x8) [ 1566.969950][ T6523] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1566.992832][ T6523] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 18:02:19 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000040)=0x2000000000000001, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @initdev}, 0x10) [ 1567.098480][ T6530] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 18:02:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae43, 0x0) 18:02:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae11, 0x0) [ 1567.236530][ T6530] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 18:02:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x800) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x101000, 0x0) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000040)) 18:02:19 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x800, 0x200000) setsockopt$inet_dccp_buf(r2, 0x21, 0xf, &(0x7f00000000c0)="00a26b243ed9cbfbaabaafba3adf7a3b2c53ad273bf677d80b4fd4de8242db978797974d0a158c45ed0020b0111a4ac6b6f4f90e74143d423b68b3a3d6bf8f9d20e06e6e948c89191a41f3c3fa2ccf06fbc4bcc52af073582a7675c009", 0x5d) 18:02:19 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000380)={[{0x2b, 'pids'}]}, 0x6) [ 1567.533140][ T6649] Unknown ioctl -2147199950 18:02:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae12, 0x0) 18:02:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae44, 0x0) 18:02:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000a000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f000, 0x2}) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:02:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x800) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'bridge_slave_1\x00', @random="479f6060b21b"}) 18:02:19 executing program 3: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x100000002, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(r0) signalfd(0xffffffffffffffff, &(0x7f0000000880), 0x8) io_setup(0x41, &(0x7f00000006c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f0000000540)={0x3000000, 0x0, 0x0, 0x800000000005, 0x0, r0, 0x0}]) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) 18:02:19 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000080)={0x2}) io_setup(0x3, &(0x7f00000001c0)=0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x2f, 0x4024c2) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000240)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2a}, 0x1, 0x3, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @local]}, 0x1c) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x2, 0x0) setsockopt$inet6_dccp_int(r3, 0x21, 0x1b, &(0x7f0000000280)=0x800, 0x4) r4 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000140)=r4, 0x1) 18:02:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x22100, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x38}}, 0x800) 18:02:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae45, 0x0) 18:02:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae13, 0x0) 18:02:20 executing program 3: [ 1568.257969][ T6890] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 18:02:20 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x61380, 0x200) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)) io_setup(0x3, &(0x7f00000001c0)=0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x120) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000100)=r4, 0x1) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:20 executing program 2: set_mempolicy(0x0, &(0x7f0000000100)=0x3ff, 0x4) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x6, 0x100, 0x401, 0x7fff, 0xffffffff, 0x1, 0x2, {0x0, @in={{0x2, 0x4e24, @multicast1}}, 0x4, 0x6, 0xfffffffeffffffff, 0x2, 0xffffffffffffffe1}}, &(0x7f0000000040)=0xb0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000000c0)={r1, 0x1}, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="ec00000010003b0e000200001000000000000000d81e", @ANYRES32=0x0, @ANYBLOB="43020000000000001800120008000100767469000c00020008000400e0000002"], 0x38}}, 0x800) 18:02:20 executing program 3: 18:02:20 executing program 5: 18:02:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae46, 0x0) 18:02:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae14, 0x0) 18:02:20 executing program 5: 18:02:20 executing program 3: 18:02:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x800) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200200, 0x0) recvmmsg(r0, &(0x7f0000005900)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001500)=""/176, 0xb0}, {&(0x7f00000015c0)=""/139, 0x8b}, {&(0x7f0000001680)=""/6, 0x6}, {&(0x7f00000016c0)=""/60, 0x3c}, {&(0x7f0000001700)=""/220, 0xdc}], 0x5, &(0x7f0000001880)=""/225, 0xe1}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001980)=""/91, 0x5b}, {&(0x7f0000001a00)=""/128, 0x80}, {&(0x7f0000001a80)=""/86, 0x56}], 0x3, &(0x7f0000001b40)=""/8, 0x8}, 0x7a64}, {{&(0x7f0000001b80)=@can={0x1d, 0x0}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000001c00)=""/6, 0x6}, {&(0x7f0000001c40)=""/121, 0x79}, {&(0x7f0000001cc0)=""/4096, 0x1000}, {&(0x7f0000002cc0)=""/133, 0x85}, {&(0x7f0000002d80)=""/140, 0x8c}, {&(0x7f0000002e40)=""/3, 0x3}, {&(0x7f0000002e80)=""/46, 0x2e}, {&(0x7f0000002ec0)}, {&(0x7f0000002f00)=""/43, 0x2b}], 0x9}, 0x6}, {{&(0x7f0000003000)=@ethernet, 0x80, &(0x7f0000005580)=[{&(0x7f0000003080)=""/110, 0x6e}, {&(0x7f0000003100)=""/100, 0x64}, {&(0x7f0000003180)=""/82, 0x52}, {&(0x7f0000003200)=""/232, 0xe8}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/145, 0x91}, {&(0x7f00000043c0)=""/131, 0x83}, {&(0x7f0000004480)=""/4096, 0x1000}, {&(0x7f0000005480)=""/220, 0xdc}], 0x9, &(0x7f0000005640)=""/113, 0x71}, 0x5}, {{&(0x7f00000056c0)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000005840)=[{&(0x7f0000005740)=""/247, 0xf7}], 0x1, &(0x7f0000005880)=""/120, 0x78}, 0x10000}], 0x5, 0x121, &(0x7f0000005a40)={0x77359400}) connect$packet(r1, &(0x7f0000005a80)={0x11, 0x16, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 18:02:20 executing program 5: 18:02:20 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) r1 = socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) r3 = syz_open_dev$vbi(&(0x7f0000000380)='/dev/vbi#\x00', 0x2, 0x2) ioctl$TIOCGPKT(r3, 0x80045438, &(0x7f00000003c0)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000280)=""/184, &(0x7f00000006c0)=0xb8) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000240)={'syzkaller0\x00', {0x2, 0x4e20, @loopback}}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000440)={0x0, 0x10000000, 0x6}, &(0x7f0000000740)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000400)={0x71, 0x81, 0x207, 0x2400000, 0x0, 0x9, 0x3, 0x800, r6}, &(0x7f0000000700)=0x20) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000480)={r7, 0x0, 0x30, 0x2, 0x51e}, &(0x7f00000004c0)=0x18) ioctl$PPPIOCSNPMODE(r4, 0x4008744b, &(0x7f0000000340)={0x2b, 0x3}) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x42100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="69bb39237e1b0fbe2b526eb08a678873b2478baffd1ce97631ac68be78405b8ea7dc1de78013e9d3b27f2e331e6e1bd6e9d381bd8651777278311a4874298b986c13c7cf812bd909c99eb3ae462cedd05880d6b7b3c3e6352065f4eec33df5bbb886eef8314680007fd98f20e03acf1564839cfa0d7e5a748440be8397b9a260534e21576ef170fb245b177448", @ANYRES16=r5, @ANYBLOB="08002dbd7000fcdbdf250e000000340004000c0007000800040008000000240007000800010019000000080003000100000008000200ff0300000800040000010000300005002c000200080002000600000008000300ff0f00000800010004000000080004000600000008000200030000005c000100100001006574683a63616966300000002c0004001400010002004e22ac1414aa00000000000000001400020002004e24ac1414bb00000000000000000c00020008000300080000000800030000000080080003000700000028000600040002000800010000000000080001002504000008000100050000000800010006000000"], 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000840) 18:02:21 executing program 3: 18:02:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae47, 0x0) 18:02:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x800) prctl$PR_SVE_GET_VL(0x33, 0x30b9) r1 = shmget$private(0x0, 0x4000, 0x1001, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f00000001c0)=""/217) 18:02:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae15, 0x0) 18:02:21 executing program 5: 18:02:21 executing program 3: 18:02:21 executing program 3: 18:02:21 executing program 5: 18:02:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'erspan0\x00', 0x3f}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='schedstat\x00') getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x2f94, 0xfffffffffffffffd, 0x6d5}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000001c0)={0x100, 0x8202, 0x1, 0x5, r2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x287, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x801) 18:02:21 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x7, 0x0, r0, 0x0, 0x0, 0xdf8f}]) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x6, 0x4a80) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x6, 0x1, 0x8000, 0x0, 0x13}) setsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000140)=0x1, 0x4) 18:02:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae48, 0x0) 18:02:21 executing program 5: 18:02:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae16, 0x0) 18:02:21 executing program 3: 18:02:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video36\x00', 0x2, 0x0) r1 = fcntl$getown(r0, 0x9) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x0, r1}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x800) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000040)=@gcm_128={{0x307}, "c469d1a3c3559a2e", "4df37d5b4e6d9a090c4b5c405cddbc7c", "fb3084f3", "4c7863d87016fc53"}, 0x28) 18:02:21 executing program 5: 18:02:21 executing program 3: 18:02:21 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) 18:02:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x800) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f00000003c0)) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x9, 0x10000) getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r3 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xce9, 0xba402) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f00000001c0)) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000300)={'filter\x00', 0x3, [{}, {}, {}]}, 0x58) 18:02:21 executing program 5: 18:02:22 executing program 3: 18:02:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae17, 0x0) 18:02:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae49, 0x0) 18:02:22 executing program 5: 18:02:22 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2\x00', 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x7f, 0x800}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000240)={0x80, 0x2, 0x2, 0x800, r2}, 0x10) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f00000001c0)={0x2, 0x3, @stop_pts=0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x800) 18:02:22 executing program 3: 18:02:22 executing program 5: 18:02:22 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) r1 = socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000080)=0x6, 0x4) 18:02:22 executing program 3: 18:02:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae4a, 0x0) 18:02:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000103102e08200"/20, @ANYRES32=0x0, @ANYBLOB="43020000000000001800120008000100767469000c00020008000400e0000002"], 0x38}}, 0x800) lseek(r0, 0x0, 0x1) 18:02:22 executing program 5: 18:02:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae18, 0x0) 18:02:22 executing program 3: 18:02:22 executing program 5: 18:02:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@getneightbl={0x14, 0x42, 0x800, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x800) 18:02:22 executing program 3: 18:02:22 executing program 0: socketpair$unix(0x1, 0x42, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=@known='trusted.overlay.redirect\x00', &(0x7f0000000200)=""/137, 0x89) 18:02:22 executing program 5: 18:02:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae4b, 0x0) 18:02:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae19, 0x0) 18:02:23 executing program 5: 18:02:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRESOCT=r0]], 0x3}}, 0x7ff) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x16000, 0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x0) 18:02:23 executing program 3: 18:02:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000000)={0x3, 0x7, 0x7fff, 0x0, 'syz1\x00', 0x2}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x800) 18:02:23 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000140)={0x0, 0x7ff}, 0x8) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, 0x0, 0x0, 0x8e1fe51a6236e621, 0x0, 0x0) 18:02:23 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) r2 = socket$netlink(0x10, 0x3, 0xc) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x204003, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000280)={0x9, 0xf, 0x2, "3f0d78b7247ba34f42ed55789d95f7d6551c5ff4bee717864cd8118c43afac30", 0x41416770}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20002010}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 18:02:23 executing program 3: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x3}]}, 0x20}}, 0x0) 18:02:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae4c, 0x0) 18:02:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae1a, 0x0) 18:02:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bcsf0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=@delqdisc={0xe8, 0x25, 0x401, 0x70bd29, 0x25dfdbff, {0x0, r1, {0xffed, 0xffe7}, {0xf, 0xfff3}, {0xf, 0xf}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x200}, @TCA_RATE={0x8, 0x5, {0x4, 0x8}}, @TCA_STAB={0x54, 0x8, [{{0x1c, 0x1, {0x8, 0x9, 0xfffffffffffffeff, 0x10001, 0x1, 0xf089, 0x9, 0x2}}, {0x8, 0x2, [0x1ff, 0x7]}}, {{0x1c, 0x1, {0x80000000, 0xd85c, 0x8001, 0x5, 0x1, 0x0, 0x3, 0x6}}, {0x10, 0x2, [0x8, 0x100000000, 0x2, 0x9, 0x6, 0x0]}}]}, @TCA_RATE={0x8, 0x5, {0x1, 0x8}}, @TCA_STAB={0x50, 0x8, [{{0x1c, 0x1, {0x5b, 0x80000001, 0x8, 0x1, 0x0, 0x2, 0xfff, 0x1}}, {0x8, 0x2, [0x2]}}, {{0x1c, 0x1, {0x8, 0x5, 0x80000001, 0x9, 0x2, 0x2, 0x8, 0x4}}, {0xc, 0x2, [0x0, 0x1f, 0x2, 0x1112d021]}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x800) 18:02:23 executing program 3: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r2, &(0x7f0000000700), 0x100000000000000d) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="5bc0415cf72a7566908244b54051b1c8f86fc8863be56dbf8c9ef4b74eb65df1a7e10bab3fd5e204403b997173b327154501a0e8f240b6793c209b95376c05a3758685ecd287921d2b1c0f5fc96c8d1e8f8ff902b9615ed5fb551bedcf29e6d07d09bb85269fce6c7d7d02a193ed0356949c7464b700"/132], 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000240)=0xc) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 18:02:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae4d, 0x0) 18:02:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000801}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipmr_getroute={0x1c, 0x1a, 0x0, 0x70bd2b, 0x25dfdbfd, {0x80, 0x80, 0x30, 0x7, 0xff, 0x0, 0xc8, 0xb, 0x200}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x48001) 18:02:23 executing program 0: syz_extract_tcp_res$synack(&(0x7f0000000180), 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f00000000c0)=""/66) rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00') openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0xc00, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae1b, 0x0) 18:02:24 executing program 2: prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x800) 18:02:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000740)={0x0, 0x0, 0x0, r2}) 18:02:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae4e, 0x0) 18:02:24 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000240)={{0x7f, 0x3, 0x5, 0xa7}, 'syz1\x00', 0x16}) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000140)={0xf, 0x8, 0xfa00, {r4, 0x13}}, 0x10) io_setup(0x3, &(0x7f00000001c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, &(0x7f0000000540)={0x8001, 0xa, 0x1, 0x401, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r6 = getpgid(0x0) fcntl$lock(r2, 0x24, &(0x7f0000000180)={0x3, 0x5, 0x5, 0x401, r6}) io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:24 executing program 2: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000001b0000000500ff0068040000d000000000000000000000000003000000030000d0030000d0030000d0030400d0030000d003000005000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/80], @ANYBLOB="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"], 0x4c8) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) listen(r1, 0x6) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000140)) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000040), 0xffb0, 0x0, 0x0, 0xffa8) pwritev(r1, &(0x7f0000000880), 0x5f9, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="699089b6", @ANYRES32=0x0, @ANYBLOB="4b020000000000001800120008000100767469000c00020008000400e00000023be7fb751dc7a831d29cd8515ff6e80f93dcf6acb9790f7deb91fabf75c9fd3ea8d61eacc2ca2f63b496eb514b7df6aa07ad623c85dcffa3059e52f587fd18c7f62bf2eb7edce86fb15ba0f27085b5339d23c69efb6cf8cf2ab1af"], 0x38}}, 0x800) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) io_uring_setup(0xd74, &(0x7f0000000800)={0x0, 0x0, 0x5, 0x1, 0x130}) 18:02:24 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r4, &(0x7f0000000700), 0x100000000000000d) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) 18:02:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae1c, 0x0) [ 1572.744547][ T7930] net_ratelimit: 2 callbacks suppressed [ 1572.744556][ T7930] dccp_xmit_packet: Payload too large (65456) for featneg. 18:02:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae1d, 0x0) [ 1572.873217][ T7992] dccp_xmit_packet: Payload too large (65456) for featneg. 18:02:25 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x800, &(0x7f00000001c0)=0x0) socket$unix(0x1, 0x5, 0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae4f, 0x0) 18:02:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="79eb3800000900000000000000ffffff000000000000eb91d42de6bd1ae902676edef51d70c227aee7023228b6383ba581b061fc0f61a4d4fd6eeabef3937b12d30c9352185d9d5e96719187c5efb6317dafbfdf27962975effb0efb84df5c10460572a8470859a00484091545436b8edf994d1b9bdfeb30263f7294f4b4633e9d49e2dc01648fab386aeb42e338094d027f0764d1473795854d6c344642e9ce0a503899fa2d7d5c2015a4e6e01f247466b9c5a2bc99ca11f82431ea16c8390407ae80f3f94930", @ANYRES32=0x0, @ANYBLOB="43020000000000001800120008000100767469000c00020008000400e0000002"], 0x38}}, 0x800) 18:02:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x0, 0x1, 0x8) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @broadcast}]}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="e654b3d17bd29e7050a93de2c60000000000", @ANYRES32=0x0, @ANYBLOB="43020000000000001800120008000100767469000c00020008000400e0000002"], 0x38}}, 0x800) 18:02:25 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x2, 0x80) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x2, 0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000740)={0x0, 0x0, 0x0, r2}) 18:02:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae1e, 0x0) 18:02:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001600)={0x0, 0xa3, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="00134000d9060000000000f8ffbb0000003700", @ANYRES32=0x0, @ANYPTR64=&(0x7f0000001640)=ANY=[@ANYRESDEC=r0, @ANYRES16=0x0, @ANYRES16=r0, @ANYRESOCT=r0]], 0x3}}, 0x800) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001680)='net/route\x00') ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f00000016c0)=[0x2, 0x200]) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000080)={'icmp6\x00'}, &(0x7f0000000180)=0x1e) pwritev(r0, &(0x7f0000001580)=[{&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="d84a498411b736df78fcb810ebff43ea8d5d3284255181a4b28ad63ea4e59a8f260576233b3b905cad733de3fbaa01271871fce7d1e62256f4a34e1f1c12f044d998729802580e600fa0bbe2dde48ee8907cafe44f42cf0bc971e3255378e1ae21d5e6c04e2bd27caf2ee96ecca5023d4ac4134c62e6b6ba14268637895a11ca200285bf6848a6d570fcd482c411f314fa11b15e3de72bdc7bd62c681a0b8a0cd6d30f099728a8da13c4931e7829363b85b920e4890fe1f2489dc5a22e27f7039a78bacdc96af74fb8d12cded263371dca15c4c6c13e2068c5336365f0a86e8a9a02797548765b67336fd92362450a78dce734a74e", 0xf5}, {&(0x7f00000012c0)="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", 0xfc}, {&(0x7f00000000c0)="40dcdee9b6d68bc57ed3edc99c608eb095aefea324", 0x15}, {&(0x7f00000013c0)="203fc9ec408eb16c6542396f9105bcb5e99b6fe456556e77898168b060101e5d1df58ba7dc75c74bdc3dab7a397c039b257259e0359f6f038a2af3b35c898053350a6dd76bb27e594cd96686c0bcc9be391eadc56fc8b8451f071c8e41a5b62595d0d62119c0b674b712046945f4ff7c644f761e971af9a74304a54b59ec90e1407be18732121320117aefaccc9555423c2810c70a81f0bd90c3f2706e55ea36818805e51acb13c59412de0ef58e014d2c6a4f88a84ae3f8e3ceef02cadadff187c0e950837bf47d0b8956597eb4f1c28f2dd09ee7515be3ed5c88ff20c1", 0xde}, {&(0x7f0000000100)="75615651e5a39e9395314e32d3", 0xd}, {&(0x7f00000014c0)="15f39231753d0f29056ffc62e00dc74b38f3d253ab4280f93273a0d24bf8157998fa97b5aa850125366f1841f43cda7fff6036a59475d63cbce4cea1097fa9f81f6e00f053d02e7e4c17cedd7f867b770ca7012f44b96c6630066f85797dd7be823520f0d05b67cd8a7c93957eb61441a42942b2b5fe17ad536d860f3575cf0817ab0fb8e329abd0bd53c39e9618c67b16f3f6bfea5d67670437a1735dc440ed9a03da874de47d53ca65178094f528a67d8621497028fb21", 0xb8}], 0x7, 0x0) 18:02:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae50, 0x0) 18:02:26 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) fstat(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f0000000240)) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@initdev}}, &(0x7f0000000380)=0xe8) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getgid() stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0, 0x0}, &(0x7f0000000600)=0xc) r12 = getgid() lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getgid() fsetxattr$system_posix_acl(r2, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000008c0)=ANY=[@ANYBLOB="02000000010001000000000002000700", @ANYRES32=r4, @ANYBLOB="02000200", @ANYRES32=r5, @ANYBLOB="02000300", @ANYRES32=r6, @ANYBLOB="02000500", @ANYRES32=r7, @ANYBLOB="040002000000000008000100", @ANYRES32=r8, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r9, @ANYBLOB="08000400", @ANYRES32=r10, @ANYBLOB="08000200", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r13, @ANYBLOB="88000400f7ee9dc2313b6f7759f180e1c5c5c434af245cbe5ea4833ccca6b62ec1091709", @ANYRES32=r14, @ANYBLOB="01000000000000000200000000000000a9c6b9bde664c6d57219eaca7be75fc61d98eb86a93d82a32a9ee9cb307a14e0b9320584512bee577d6d6df74f18a89c07e6cb1be311a4a235fdfbd3825499268033767bc5e9137c6c31918953743e8f77058c32f0eed126c1aabe9d86b1a7"], 0x7c, 0x1) chroot(&(0x7f0000000780)='./file1\x00') io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:26 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r4, &(0x7f0000000700), 0x100000000000000d) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) 18:02:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010003b0e000000000040000000000000aa07f90d9852339fb0b0897f98202c87991603ce972e9392c593be88847f2e05e87b378d3fa1313d38d4f729962feee7", @ANYRES32=0x0, @ANYBLOB="43020000000000001800120008000100767469000c00020008000400e0000002"], 0x38}}, 0x800) 18:02:26 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000100)=@md5={0x1, "d2877739fccd535ecd7a669331820256"}, 0x11, 0x3) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae51, 0x0) [ 1574.474111][ T8397] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 18:02:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae21, 0x0) 18:02:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x800) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) getsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 18:02:26 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000140)=r2) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x1, &(0x7f00000001c0)=0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$VIDIOC_ENUMAUDIO(r4, 0xc0345641, &(0x7f0000000100)={0x1, "ca8d79a5a288d04c122034ecab67aae5ff041cfef3821580dac3b00037fa37b7", 0x1, 0x11}) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self\x00', 0x800000020001, 0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae22, 0x0) 18:02:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000740)={0x0, 0x0, 0x0, r2}) 18:02:27 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xc0000000, 0x401) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x0, 0x1, &(0x7f00000000c0)=""/146, &(0x7f0000000040)=""/12, &(0x7f00000001c0)=""/116, 0xae49059992329520}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000010003b0e000000010000000000000000", @ANYRES32=0x0, @ANYBLOB="43020000000000009506ca2508000100767469000c00020104000000e0000002d15e87adf928f9e1735e309ac5465d48eb9c239c8f37b11e21674205b8af5428546da9440e45056e12bf53a96f863f7b710162430dec5c4e45a532f61df359b5add14556788a2dd5701f0be1ec08195d86a58bab04c0ce80b808a5cb86a0dd030493ae2fa774a781718b495031f80054a8a815423da1b3e0e7b31515eccc6445520640cb0c71088107f9a4d68014eb30d23392167a5998aeb230903e43372aefa43eee828d05a67667aed236111f242034a362f6191f3b02d52db29e11e72e130ef769447de4a4d816d78bb13494aedb55adac52ff49150cc61da83fe86d73bcd24d"], 0x38}}, 0x800) 18:02:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae52, 0x0) 18:02:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) [ 1575.241736][ T8629] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 18:02:27 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r4, &(0x7f0000000700), 0x100000000000000d) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) 18:02:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x800) r1 = dup2(r0, r0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8810010}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r2, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x800) 18:02:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae23, 0x0) 18:02:27 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x0, 0x420200) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f00000000c0)={0x1f, 0x5, 0x1}) close(r0) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x9, 0x3f}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000180)={r4, 0x32}, 0x8) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae53, 0x0) 18:02:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x800) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7f, 0x600800) fsetxattr$security_selinux(r1, &(0x7f0000000040)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:sshd_exec_t:s0\x00', 0x21, 0x3) 18:02:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000200)={0x9, 0x1f, 0x3}) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000000c0)={r1, 0xd, 0xd}, 0x0, &(0x7f0000000140)="6bf029d34467b80a88cdef7e50", &(0x7f00000001c0)=""/13) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x800) 18:02:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae24, 0x0) 18:02:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000740)={0x0, 0x0, 0x0, r2}) 18:02:28 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000080)={0x1, 0x8}) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae54, 0x0) 18:02:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x27}}, 0x800) 18:02:28 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000400)) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000290}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08032bbd7000fddbdf251400000038000600040002000800010000000080fa00010008000000080001001c694109040002000400020008000100010100000800010065000000280007000c00030003000000000000000c00030001000000000000004c000400ffffff7f00000000"], 0x74}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') io_setup(0x9, &(0x7f0000000440)) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x100, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8015) 18:02:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae25, 0x0) 18:02:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000880)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x37b, &(0x7f0000000180)={&(0x7f00000008c0)=@ipmr_delroute={0x0, 0x19, 0x4, 0x70bd26, 0x25dfdbfc, {0x80, 0x0, 0x20, 0xcc, 0x0, 0x0, 0xc8, 0x7, 0x500}, [@RTA_METRICS={0x0, 0x8, "e3ec9b5b8dc3a7eb46896bd17d8c8642c7c34be916ad8c14413cec1846312850f96b60812d60f13e3e645b4d10e99febb77187548075cf4dd3407a377e52dcf8fc79da40"}, @RTA_IIF={0x0, 0x1, r1}, @RTA_SRC={0x0, 0x2, @empty}, @RTA_METRICS={0x0, 0x8, "84387bf31610185ea7dfa0319af1e2bb668ac8212c8c033d0d40b4305e431872b0aef76401773d9a2454b464f3919ac2866a8252846426a1d18aa47d271c5278c9025a3029af1709aabcfafbc9ac7585708067f34f0bcf65eac787e024b74898d6b0a8abf18581215bcf51f77bf39341aa4718e4ed7f4e0737ad8824b0784036d60fa06e2ab4e3d1085ab9bfe75207527f49becbed5d734b5869fac8774d9232e5"}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000000000000}, 0x7ff) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000000)=0x8000, 0x4) 18:02:28 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3, &(0x7f00000001c0)=0x0) syncfs(r1) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae55, 0x0) 18:02:28 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000080)={@my=0x0}) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000), 0x80800) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) 18:02:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae26, 0x0) 18:02:28 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000400)) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000290}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08032bbd7000fddbdf251400000038000600040002000800010000000080fa00010008000000080001001c694109040002000400020008000100010100000800010065000000280007000c00030003000000000000000c00030001000000000000004c000400ffffff7f00000000"], 0x74}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') io_setup(0x9, &(0x7f0000000440)) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x100, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8015) 18:02:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) 18:02:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xffffffffffffffff}, 0x0) 18:02:29 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='\x00'}, 0x10) close(r0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'bpq0\x00', 0x400}) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000002c0)) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) r5 = syz_open_dev$cec(&(0x7f0000000300)='/dev/cec#\x00', 0x3, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ATTR(r5, &(0x7f0000000480)={0x78, 0xffffffffffffffda, 0x3, {0x8ae6, 0x2, 0x0, {0x1, 0x0, 0x7, 0x7, 0x4, 0x7fffffff, 0xff80, 0x6c, 0x8001, 0x0, 0x8, r6, r7, 0x2, 0x1}}}, 0x78) mq_unlink(&(0x7f0000000280)='trustedcpuset(\xb1!/[\\\x00') splice(r3, &(0x7f00000000c0), r1, &(0x7f0000000100), 0x7, 0xd) ioctl$int_in(r1, 0x5421, &(0x7f0000000140)=0x4) 18:02:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae56, 0x0) 18:02:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae27, 0x0) 18:02:29 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000400)) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000290}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08032bbd7000fddbdf251400000038000600040002000800010000000080fa00010008000000080001001c694109040002000400020008000100010100000800010065000000280007000c00030003000000000000000c00030001000000000000004c000400ffffff7f00000000"], 0x74}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') io_setup(0x9, &(0x7f0000000440)) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x100, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8015) 18:02:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x100, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@ipmr_delroute={0xac, 0x19, 0x0, 0x70bd2b, 0x25dfdbfc, {0x80, 0x30, 0x20, 0x4cf, 0xff, 0x0, 0xc8, 0x6, 0xe00}, [@RTA_FLOW={0x8, 0xb, 0xffffffffffffffff}, @RTA_SRC={0x8, 0x2, @local}, @RTA_OIF={0x8, 0x4, r2}, @RTA_GATEWAY={0x8, 0x5, @rand_addr=0x5}, @RTA_METRICS={0x70, 0x8, "182f5e089d3781f28287b8e6d041174ada5fe6a2eada1e7a3efde306d4881770958bbfd597896682cdfd0cbbc5aa8f46aabfc590becaf0087b1446f9fadebb75275257800fc25cae85becc99a2bdf0899a6cdc62cb0421790276f1399e10573fb15b7353f3d1a2be6a4d"}]}, 0xffffffffffffffea}}, 0x804) 18:02:29 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000400)) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000290}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08032bbd7000fddbdf251400000038000600040002000800010000000080fa00010008000000080001001c694109040002000400020008000100010100000800010065000000280007000c00030003000000000000000c00030001000000000000004c000400ffffff7f00000000"], 0x74}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') io_setup(0x9, &(0x7f0000000440)) 18:02:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae57, 0x0) 18:02:29 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x4, @mcast2, 0x1}}, 0x9, 0x2}, &(0x7f0000000180)=0x90) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000240)={r1, 0x7, 0x4, [0x400, 0x40d, 0x3, 0x1]}, &(0x7f0000000280)=0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r2) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r2, 0x0}]) 18:02:29 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) ioctl$TCSETXF(r0, 0x5434, &(0x7f0000000040)={0x4, 0x1, [0x4, 0xff, 0x4, 0x9], 0x4}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="43020000000000001800120008000100767469000c00020500000400e0000002"], 0x38}}, 0x800) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00000000c0)) 18:02:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae28, 0x0) 18:02:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) 18:02:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0xfffffffffffffda8}}, 0x8000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x40000, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000340)={0x6, &(0x7f0000000300)=[{0x0}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000400)={r2, &(0x7f0000000380)=""/105}) r3 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x7, 0x400000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000080)=0xe8) prctl$PR_GET_KEEPCAPS(0x7) ioctl$KDMKTONE(r1, 0x4b30, 0xe4) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x220100, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1b, 0x2, 0x4, 0x8, 0xc0, r3, 0x46, [], r4, r5, 0x0, 0x2}, 0x3c) 18:02:30 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000400)) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000290}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08032bbd7000fddbdf251400000038000600040002000800010000000080fa00010008000000080001001c694109040002000400020008000100010100000800010065000000280007000c00030003000000000000000c00030001000000000000004c000400ffffff7f00000000"], 0x74}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') 18:02:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae58, 0x0) 18:02:30 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/audio\x00', 0x4000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000a80)={0x1, 0x0, 0x1, 0x4, 0x10001, 0x6, 0x80000000, 0x8001, 0x0}, &(0x7f0000000ac0)=0x20) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000b00)={r4, @in6={{0xa, 0x4e22, 0x193c, @empty, 0x6}}, 0x29d, 0x6, 0x7, 0x1000, 0x7f}, &(0x7f0000000140)=0x98) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000080)={@host}) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) ioctl$PPPIOCSCOMPRESS(r3, 0x4010744d) prctl$PR_SET_SECUREBITS(0x1c, 0x0) 18:02:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae29, 0x0) 18:02:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff18, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x8040) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0xc0, 0x0) write$FUSE_DIRENT(r1, &(0x7f00000002c0)={0xf0, 0x0, 0x8, [{0x6, 0x2, 0xa, 0x3b, '/dev/dsp#\x00'}, {0x6, 0x7, 0x0, 0x2}, {0x4, 0x1, 0x15, 0x2, 'proc!vmnet1$-security'}, {0x6, 0x1, 0xa, 0x3f, '/dev/dsp#\x00'}, {0x1, 0x0, 0xa, 0x100, '/dev/dsp#\x00'}, {0x2, 0x0, 0x3, 0x8, 'lo/'}]}, 0xf0) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x5, 0x10040) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000040)=0x8d20, 0x4) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f00000001c0)=""/253) 18:02:30 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000400)) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000290}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08032bbd7000fddbdf251400000038000600040002000800010000000080fa00010008000000080001001c694109040002000400020008000100010100000800010065000000280007000c00030003000000000000000c00030001000000000000004c000400ffffff7f00000000"], 0x74}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae59, 0x0) 18:02:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae2a, 0x0) 18:02:30 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='schedstat\x00') ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = socket$inet6(0xa, 0xa, 0x98) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000100)={0xb81}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="4302000000000000134ee389211800120008000100767469000c00020008000400e00000021a1627dd61fff4e0e3dfdfbdb756323680795d3471cdce7f4931842d5b3650b5f534728524530d9ed206d52dd96378f3926fd16f2986da59ea5395ee65f188e00d1cecad675b512d5d408a5e2b8ff42a64c08d2f4c2f83814f0261904fa80056d2bc7145ef1d46489bf2f5a1a17feb65c5a7a8d2f2d1f90204"], 0x38}}, 0x800) r3 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x8000000000000006, 0x47fffe) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 1578.769910][ T9637] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1578.852189][ T9637] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 18:02:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) 18:02:31 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000400)) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000290}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08032bbd7000fddbdf251400000038000600040002000800010000000080fa00010008000000080001001c694109040002000400020008000100010100000800010065000000280007000c00030003000000000000000c00030001000000000000004c000400ffffff7f00000000"], 0x74}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) socket$vsock_dgram(0x28, 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae5a, 0x0) 18:02:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae2b, 0x0) 18:02:31 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x2, &(0x7f00000001c0)=0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000140)={[0x0, 0x4004, 0x2000, 0x102], 0xffffffffffffffff, 0x62, 0x6}) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000200)="160abed7ae031e7153cbb78027ddd96cca3f0188ad8a68179ee726e2bfa005894442cb929e980affbf77d720d19cc8f4cbe0479ad2957c6c31c04e47c3e86599005bcf5e095526da8ff0f84045ccd1660d6aef3c1c6728efc19867ba57f26e6d93034de33f91b8cc26db1581cc41104ab39170c10f3cfc47294e84f5eb49847597afe9b89b68b37821663c6545f3798f4b3ad34bda9c4b3b995c423c7c9babb79d693e9a53c5cea032b131d200b760e6a0250dace758bf11628e1f5a3a", 0xbd}, {&(0x7f00000002c0)="8345ea06bef31bd32464309f2574b24a3373c22edb161c96a46ea4b119c0b670451b867b580bff17d58dc7bf6ba23f7c7123665808c3d5b2ad847335f1ff64eab4f8977603272d30fff8d7970d449b3d1e15fe9fbb8de3db29a9feed00a03a0dde970d80d2de0e9672d538dcd7f3128aad97506a64a56d38d823f0cbb2406e371e51bba085262b6ad122492f55dfd512015bacc1bcd00d85051ee522a5055900b23dee718c1ec8b83f6a98be8c1463b35cb049967f31875a6da5c77a4673e9e23d858a73c606b5d3c5ba343208924181243aaff1cd22e050374ed23636465d2d9ea38ccd24958b4e6b6a42948677498d2944d615933c692eca", 0xf9}, {&(0x7f00000003c0)="9767d29287e2f8cb11875edccfe231c47de7448a7a525f42efec340c6895678a7f46284311645c65060158f7f1be37f1d9c025fd1a4811b04bc57c125479836a32751a64cada3cc6a8622bc18554ab40a7fb1e81aa37e14114e6fae1372b93f69bd35c94fa2f7759ac65987342309a732b950bc13fd208cda808269ed2a1fbfc4a799659b25004bf6363a327a03fc18709c1de02c58106fe44935dee638c1577a2b59deb1dbf335ac5da4261", 0xac}, {&(0x7f0000000480)="0cff7e722340b3c59bfbf535679f664d585e929da7f62842e82f8a3147d244c698170e68b4c384205d084373e6931402f81b6d2c42dcf498b946f4fc6f412f8f170208ac6b988edfa9344c854ce7d3249986f4e4dd90772715a74c098f09df2a64eda7b28524f8a407070dcf872a53d81d0d015cdc39640afaaba2645573a4faad7df8d6747de5b03702513df25333fbb48c8477c36659e265751a65afc386", 0x9f}, {&(0x7f00000000c0)="935bbb89d886231e67738d4fa4aee58554f4a2c7943da03530ba1e4568cbb96a4d1e", 0x22}, {&(0x7f0000000540)="5d536fc9fb3de2e7e1b433e10651dcc54e61d9a71ffb2b9a61669f8af5087c18a90c82391550ab1474b3876dab93fa5df80a2672c45ce63b2423bb3df2bc011b5eeee7a9b66b0a4faa9fac3a8c50bb4e33977a0a8ba73cd742244b711d4b3f4693a68e9cc2096ac21078d8864686057e25a58433ae4508dd4457d8f0802d9d89b655895479028e2652351d5c095fa886ff6cc7fd05c4b68091b1ade9a7418dda0da6472ea77635d15a71d8d689ef0bae6b6a0ebde095425f86e0af4f83", 0xbd}], 0x6, &(0x7f0000000680)=[@timestamping={{0x14, 0x1, 0x25, 0xffff}}, @mark={{0x14, 0x1, 0x24, 0x80000000}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x8000000000000000}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}], 0xa8}, 0x20000001) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$inet6_int(r1, 0x29, 0x5e, &(0x7f0000000040), &(0x7f00000001c0)=0xfffffffffffffcdf) 18:02:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x800) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x301000, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000001c0)=""/74) 18:02:31 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000400)) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000290}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08032bbd7000fddbdf251400000038000600040002000800010000000080fa00010008000000080001001c694109040002000400020008000100010100000800010065000000280007000c00030003000000000000000c00030001000000000000004c000400ffffff7f00000000"], 0x74}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) socket$vsock_dgram(0x28, 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae2c, 0x0) 18:02:31 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x400, 0x100) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x7}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={r2, 0x2d4e}, 0x8) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x200, 0x0) ioctl$CAPI_GET_ERRCODE(r4, 0x80024321, &(0x7f00000000c0)) 18:02:31 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="43020000000000001800120008000100760700000000000000000400e0000002eb78740b54801df89ca4c3d535b8fbcb23c31bdca0a0a85e4937d48d9ee1cacf0c7d6a39e12211d11e54e60c759c4305f70a32c463482c491a3a"], 0x38}}, 0x800) io_uring_setup(0xf1d, &(0x7f0000000000)={0x0, 0x0, 0x5, 0x0, 0x51}) 18:02:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae5b, 0x0) 18:02:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000740)={0x0, 0x0, 0x0, r2}) 18:02:31 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000400)) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000290}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08032bbd7000fddbdf251400000038000600040002000800010000000080fa00010008000000080001001c694109040002000400020008000100010100000800010065000000280007000c00030003000000000000000c00030001000000000000004c000400ffffff7f00000000"], 0x74}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) socket$vsock_dgram(0x28, 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010003b0e0000000000cbbf2d3251b48f7f41126e22fb00000000000000", @ANYRES32=0x0, @ANYBLOB="43020000000000001800120008000100767469000c00020008000400e0000002"], 0x38}}, 0x800) 18:02:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae2d, 0x0) 18:02:31 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0xa000, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000011}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x184, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x54, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9bcd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe17b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffff8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x2080, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r3, 0x8905, &(0x7f00000000c0)) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000100)={0x3, 0x0, 0x0, 0xff}) ioctl$DRM_IOCTL_AGP_UNBIND(r3, 0x40106437, &(0x7f0000000140)={r4, 0x7}) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae5c, 0x0) [ 1579.948219][ T9924] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 18:02:32 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000400)) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000290}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08032bbd7000fddbdf251400000038000600040002000800010000000080fa00010008000000080001001c694109040002000400020008000100010100000800010065000000280007000c00030003000000000000000c00030001000000000000004c000400ffffff7f00000000"], 0x74}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80240, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000000040)=[@exit_looper], 0x10, 0x0, &(0x7f0000000140)="b3a3182f5316c3aa6f520f83c11f8b9d"}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x800) 18:02:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000740)={0x0, 0x0, 0x0, r2}) 18:02:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae5d, 0x0) 18:02:32 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x8b5, 0x80002) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f00000000c0)={0x7b, 0x0, [0x9, 0x100, 0x5b4b, 0x9]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r1) socket$vsock_dgram(0x28, 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r1, 0x0}]) 18:02:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae2e, 0x0) 18:02:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x800) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x0, &(0x7f00000000c0)={@dev, 0x0}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@getstats={0x1c, 0x5e, 0x600, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x1}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000001) 18:02:32 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000400)) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000740)={0x0, 0x0, 0x0, r2}) 18:02:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae5e, 0x0) 18:02:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x800) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x200, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000040)=0x101) 18:02:32 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fsetxattr$security_selinux(r0, &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:mouse_device_t:s0\x00', 0x24, 0x0) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETVERSION(r2, 0x80044942, &(0x7f0000000100)) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae2f, 0x0) 18:02:32 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000400)) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000740)={0x0, 0x0}) 18:02:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x800) r1 = dup3(r0, r0, 0x80000) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000), 0x4) 18:02:33 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:33 executing program 2: r0 = socket$isdn_base(0x22, 0x3, 0x0) accept(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x800) 18:02:33 executing program 0: r0 = socket$tipc(0x1e, 0x7, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) socket$inet6(0xa, 0x0, 0x3) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000080)={0x3, {{0xa, 0x4e21, 0x100000001, @local, 0x8}}, {{0xa, 0x4e21, 0x80000000, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1}}}, 0x108) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r4, 0x0, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r1, 0x0}]) 18:02:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000740)={0x0, 0x0}) 18:02:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae5f, 0x0) 18:02:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae30, 0x0) 18:02:33 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) membarrier(0x45, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x2) write$uinput_user_dev(r1, &(0x7f0000000240)={'syz1\x00', {0x1000, 0x2, 0x48, 0x578}, 0x52, [0x7, 0x9, 0x80000000, 0x3, 0x7, 0x9, 0x1, 0x0, 0x7b1, 0xfffffffffffff32c, 0x8, 0x8000, 0xba, 0x9, 0x5, 0x3, 0x8, 0x5, 0x6, 0x4, 0x0, 0x11f, 0xffffffff, 0xffffffffffffff00, 0x3ff, 0x230000, 0x3, 0x5, 0x8, 0x3f, 0xa4ff, 0x3, 0x0, 0x80, 0x6078, 0x785c, 0x1f, 0xb5a, 0x6, 0x0, 0x4, 0x9, 0x9, 0x6, 0x65f, 0x1000, 0x6, 0x7ff, 0x9, 0x8, 0x7, 0x1, 0x3f, 0x7ee, 0x3, 0x7, 0x80000001, 0x3, 0x2, 0x0, 0x8, 0x8001, 0x3, 0x61d], [0x1f00000000, 0x0, 0x400, 0x1, 0x7b3, 0x2, 0x9, 0x6, 0x3ff, 0x4, 0x7f, 0x7, 0x13, 0x3, 0x2, 0x1, 0x6, 0xee, 0x8, 0x7fffffff, 0x2, 0x5, 0x3, 0x7fff, 0x3, 0xcd, 0x401, 0x8, 0x4ec, 0x3, 0x6, 0x8000, 0x8, 0x0, 0x7025, 0x8, 0x8001, 0x800, 0x9, 0x0, 0x4, 0x81, 0x9, 0x42, 0x7f, 0xd8d, 0x7, 0x742, 0x4, 0x68d, 0x9, 0x8d, 0xfff, 0x2, 0xe5ef, 0x7, 0x9, 0x2, 0xb8e, 0x100000001, 0x5, 0x7fff, 0x3ff, 0x8], [0x81, 0x3, 0x3f, 0xac, 0x7, 0x9, 0x1000, 0xfffffffffffffffb, 0x7, 0x40, 0x5, 0x81, 0x5, 0x5, 0x0, 0x0, 0x81, 0x9, 0x6, 0x7000000000, 0x1, 0x0, 0xb1, 0x1, 0x404, 0x3, 0x5, 0x40, 0x9, 0x7, 0x48, 0x0, 0xfff, 0x3, 0x4, 0x9, 0x807f, 0x3e, 0x7, 0x8, 0x8001, 0x1f, 0x1, 0x3, 0x401, 0x2, 0x0, 0x8, 0x9, 0x1, 0xff, 0x1, 0x7, 0x9, 0xff, 0x8, 0x2, 0xffffffff, 0x1f, 0x696, 0x3ff, 0x7c77dd52, 0x95, 0x3b563123], [0x0, 0x1, 0x100000001, 0x4e37, 0x1ff, 0x7, 0x3, 0x8, 0x5, 0x7, 0x800, 0x80000000, 0x52, 0x5, 0xa9b00000000, 0x5, 0x0, 0x80000001, 0xfff, 0x6, 0x99e, 0x101, 0x100000001, 0x4, 0x0, 0x8260, 0x3f, 0x1000, 0x2000000, 0x1f, 0x52d4, 0xf590, 0x6, 0xff, 0xcbe, 0x80, 0x4, 0x8000, 0x2, 0x7, 0x8, 0x200, 0x6, 0x9c38, 0x2, 0x7ff, 0x8c, 0x1, 0x8f61, 0x4, 0xfffffffffffffffc, 0x4, 0x4, 0xfffffffffffff135, 0x4, 0x3, 0x800, 0x2, 0x7ff, 0xaa, 0x7, 0x0, 0x1, 0x4]}, 0x45c) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1020}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r2, 0x420, 0x70bd25, 0x0, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x27}]}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000000000000000700000000000000", @ANYRES32=0x0, @ANYBLOB="43020000000000001800120008000100767469000c00020008000400e0000002"], 0x38}}, 0x4000000) 18:02:33 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x160, &(0x7f0000000040)) 18:02:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000740)={0x0, 0x0}) 18:02:33 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae60, 0x0) 18:02:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae31, 0x0) 18:02:33 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x40, 0x0) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f00000001c0)={0x5, 0x0, [{0x8000001b, 0x6, 0x4, 0x7, 0x100000001, 0x400, 0xe12}, {0xc0000001, 0x8000, 0x6, 0x3, 0xffff, 0xd1, 0xfffffffffffff955}, {0x80000000, 0x10000, 0x5, 0x2, 0x2, 0x10001, 0x9c8}, {0x80000001, 0x4, 0x4, 0x6e5, 0x100000001, 0xce, 0x9}, {0x7, 0x4, 0x1, 0x1, 0x1, 0x1000, 0x3}]}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x800) 18:02:33 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:33 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r0}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000740)={0x0, 0x0, 0x0, r0}) 18:02:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x800) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ptrace$getenv(0x4201, r1, 0x9, &(0x7f0000000040)) 18:02:33 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000080)={'teql0\x00', {0x2, 0x4e21, @loopback}}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) prctl$PR_GET_CHILD_SUBREAPER(0x25) 18:02:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae32, 0x0) 18:02:34 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x2) getsockopt$inet_dccp_int(r1, 0x21, 0x197c9d188c94360e, &(0x7f0000000040), &(0x7f00000000c0)=0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x800) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000140)=0x1) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) 18:02:34 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r0}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000740)={0x0, 0x0, 0x0, r0}) 18:02:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae61, 0x0) 18:02:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010023b0e0000000000fc000000fc0000fcc48b72bc4f", @ANYRES32=0x0, @ANYBLOB="43020000000000001800120008000100767469000c00020008000400e0000002"], 0x38}}, 0x800) 18:02:34 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r0}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000740)={0x0, 0x0, 0x0, r0}) 18:02:34 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) r1 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000000c0)={0xff, 0x1000, 0x3, 0x7, 0x1, [{0x2, 0x8749, 0x7f, 0x0, 0x0, 0x800}]}) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) r3 = dup3(r1, r1, 0x80000) openat(r3, &(0x7f0000000080)='./file0\x00', 0x180, 0x1c2) 18:02:34 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae33, 0x0) 18:02:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae62, 0x0) 18:02:34 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) ioctl$KVM_IOEVENTFD(r0, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000740)={0x0, 0x0, 0x0, r1}) 18:02:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x800) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x81}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r3, 0x3, 0x70bd25, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44001}, 0x20000000) 18:02:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae34, 0x0) 18:02:34 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:34 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:34 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) ioctl$KVM_IOEVENTFD(r0, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000740)={0x0, 0x0, 0x0, r1}) 18:02:34 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x220000, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x400000002) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="43020042affaf5c286119600000000001800120008000100767469000c000200"], 0x38}}, 0x800) [ 1582.997090][T10817] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 18:02:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae63, 0x0) 18:02:35 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) ioctl$KVM_IOEVENTFD(r0, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000740)={0x0, 0x0, 0x0, r1}) 18:02:35 executing program 3: close(0xffffffffffffffff) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, 0xffffffffffffffff, 0x0}]) 18:02:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae35, 0x0) 18:02:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1, 0x3fa13f7f7ee128d8) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000040)=0x2) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x800) 18:02:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000740)={0x0, 0x0, 0x0, r2}) 18:02:35 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000000c0)={0xb1f, 0x0, 0x4, 0x1, {}, {0x3, 0xc, 0x0, 0x2, 0x9, 0x3d1d, "e41f64c1"}, 0xff, 0x3, @planes=&(0x7f0000000080)={0x100000001, 0x7f, @fd=r1, 0x5}, 0x4}) write$binfmt_misc(r3, &(0x7f0000000140)={'syz0', "5fb154967da68f210937c5e2076083fb"}, 0x14) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:35 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) r1 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x1) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x4800000000000, 0x4) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f00000000c0)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f00000001c0)={0x7fff, 0xf7, 0x10001, {0x77359400}, 0x100000001, 0x40}) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000240)={0x7, 0x1, @start={0x100000001, 0x1}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[]}}, 0x24000000) 18:02:35 executing program 3: close(0xffffffffffffffff) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, 0xffffffffffffffff, 0x0}]) 18:02:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae64, 0x0) 18:02:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000740)={0x0, 0x0, 0x0, r2}) 18:02:35 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x800) write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0)={'#! ', './file0', [{}, {}, {0x20, 'vboxnet1md5sum'}, {0x20, 'vti\x00'}, {0x20, 'vti\x00'}, {0x20, 'security-nodev4\xd6,/:%trusted'}], 0xa, "2bec0b6befc6ba52ebb7d8be9631a3c0bcb7283be21f2c70ea52fc608fd5c31e5f874d1f4646cfd9629a11605e87b59a417c4c4c224c4577c22937d046747887f04072c15a841087bd680ffaa857dabba4ef84c63a037bdfc310271cd845ca488ced6d9b50aeb2017542e6612e264f2c3f126530caf1dc84260fa1772cf5403944"}, 0xc3) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xfffffffffffffffc, 0x200) futimesat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={{0x0, 0x2710}, {0x77359400}}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) 18:02:35 executing program 3: close(0xffffffffffffffff) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, 0xffffffffffffffff, 0x0}]) 18:02:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae36, 0x0) 18:02:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000740)={0x0, 0x0, 0x0, r2}) 18:02:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x800) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) 18:02:35 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r0, 0x0, 0x0, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r1) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r1, 0x0}]) 18:02:35 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae65, 0x0) 18:02:36 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) ioctl$KVM_IOEVENTFD(r0, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000740)={0x0, 0x0, 0x0, r1}) 18:02:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae37, 0x0) 18:02:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$dupfd(r0, 0x406, r0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="43020000000000001800120008000100020008009845e2050000fdc0060400e000354187855a27600002000000000000"], 0x38}}, 0x800) 18:02:36 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) ioctl$KVM_IOEVENTFD(r0, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000740)={0x0, 0x0, 0x0, r1}) 18:02:36 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:36 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x2, 0x151180) epoll_pwait(r1, &(0x7f00000000c0)=[{}, {}, {}], 0x3, 0xfffffffffffffff7, &(0x7f0000000100), 0x8) io_setup(0x3, &(0x7f00000001c0)) 18:02:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae66, 0x0) [ 1584.400517][T11208] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 18:02:36 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r1}) ioctl$KVM_IOEVENTFD(r0, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000740)={0x0, 0x0, 0x0, r1}) 18:02:36 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) [ 1584.540800][T11230] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 18:02:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae38, 0x0) 18:02:36 executing program 2: socket$nl_route(0x10, 0x3, 0x0) 18:02:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000740)={0x0, 0x0, 0x0, r2}) 18:02:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae67, 0x0) 18:02:36 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f0000000100)) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x800, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f00000000c0)) 18:02:36 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) close(0xffffffffffffffff) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, 0xffffffffffffffff, 0x0}]) 18:02:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae39, 0x0) 18:02:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x800) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 18:02:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000740)={0x0, 0x0, 0x0, r2}) 18:02:37 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) close(0xffffffffffffffff) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, 0xffffffffffffffff, 0x0}]) 18:02:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae68, 0x0) 18:02:37 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001380)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000000100)=""/149, 0x95}, {&(0x7f0000001240)=""/107, 0x6b}], 0x3, &(0x7f0000001300)=""/77, 0x4d}, 0x100) getsockopt$inet6_int(r1, 0x29, 0xd, &(0x7f00000013c0), &(0x7f0000001400)=0x4) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0xd43b, 0x42002) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000080)="10b89db2f452426c8379c63c3ba74313", 0x10) renameat(r1, &(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00') getsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000280)=""/116, &(0x7f0000000040)=0x74) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000010003bffffffff000000000000000000669e347ad2a09f90fba8b11dba4980a64f3df74d5f022920cffc9b07d8aa8946613f0bb0ae8819296f213543e559a6eb2e9edc06d419b1f094fa3f7159d4e65b9dcaeaa846a05e1a2c67faf9f07fea762369", @ANYRES32=0x0, @ANYBLOB="43020000000000001800120008000100767469000c00020008000400e0000002"], 0x3}}, 0x800) 18:02:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000740)={0x0, 0x0, 0x0, r2}) 18:02:37 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) close(0xffffffffffffffff) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, 0xffffffffffffffff, 0x0}]) 18:02:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae3a, 0x0) 18:02:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae69, 0x0) 18:02:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000740)={0x0, 0x0, 0x0, r2}) 18:02:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snapshot\x00', 0x3c602, 0x0) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000000)=0x7) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') fsetxattr$security_ima(r2, &(0x7f0000000040)='security.ima\x00', 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000004528b11599e89f3fa961cbdf43d602793c2e2a65d89d54a38a19741bc75bd44bbc1991b76369899084c895b1af74c17574789b412a1fe068c271f6bdffb74917ba33441c8340ce98f2e2ca0104cf21299e6f097aa70000", @ANYRES16=r3, @ANYBLOB="000827bd7000fbdbdf2501000000000000000b000000000c001473797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x24000011) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010003b3fa2625eec96580964ba0e0000", @ANYRES32=0x0, @ANYBLOB="43020000000000001800120008000100767469000c00020008000400e0000002"], 0x38}}, 0x800) 18:02:37 executing program 0: socketpair$unix(0x1, 0x202, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x90000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x4, 0x70bd29, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x400c0) io_setup(0x200, &(0x7f00000001c0)=0x0) io_getevents(r3, 0xfffffffffffffff8, 0x1, &(0x7f00000000c0)=[{}], &(0x7f0000000100)={0x0, 0x1c9c380}) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000080)=0xff) 18:02:37 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(0xffffffffffffffff) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:37 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x105000, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000200)) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x400000, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x2}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={r2, 0x1, 0x30}, &(0x7f0000000180)=0xc) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x88100) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r3, 0x4008ae48, &(0x7f0000000040)=0xf004) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 18:02:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000740)={0x0, 0x0, 0x0, r2}) 18:02:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae3b, 0x0) 18:02:38 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(0xffffffffffffffff) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae6a, 0x0) 18:02:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x80000000, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@ipv4={[], [], @multicast1}, 0x22, 0x3, 0xff, 0x1, 0x7}, 0x20) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0xfffffffffffffc00, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@setneightbl={0x34, 0x43, 0x8, 0x70bd2a, 0x25dfdbfd, {0x7}, [@NDTA_GC_INTERVAL={0xc, 0x8, 0x10000}, @NDTA_THRESH3={0x8, 0x4, 0x6}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x4}]}, 0x34}}, 0xc001) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000240)=""/109) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000010003b00"/20, @ANYRES32=0x0, @ANYBLOB="43020000000000001800120008000100767469000c00020008000400e0000002"], 0x3}}, 0x7fc) 18:02:38 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x800, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f00000000c0)) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, 0x0) ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000740)={0x0, 0x0, 0x0, r2}) 18:02:38 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(0xffffffffffffffff) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:38 executing program 2: r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1ff, 0x100) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000140)={0x5, &(0x7f0000000100)=[{0x3ff, 0x4a, 0xff, 0x9}, {0xb, 0x8, 0x9, 0x4}, {0x1, 0x4, 0xfff}, {0x4, 0x80000001, 0x2, 0xf5}, {0xd73, 0x3c, 0xfffffffffffffffd, 0xffffffffffffffff}]}, 0x10) r1 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) write$P9_RLOCK(r1, &(0x7f0000000000)={0x8, 0x35, 0x1, 0x2}, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3800000010003b0e00000000f7ff000000000000838335ae0d3511e7ef7a014d5512d7c3af4f8433d6e45d60520eac1797a191fc2418f5ebc4861983", @ANYRES32=0x0, @ANYBLOB="43020000000000001800120008000100767469000c00020008000400e0000002"], 0x38}}, 0x800) write$binfmt_elf64(r2, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x3, 0x100000000, 0x8f9, 0x1c3, 0x3, 0x3e, 0x0, 0x1bb, 0x40, 0x76, 0x8, 0x8, 0x38, 0x1, 0x8, 0x5, 0x3}, [{0x4, 0x1ff, 0x9, 0x9, 0x3ab400000, 0x100, 0x6, 0x7c}, {0x70000007, 0x3693, 0x9, 0x4, 0x8, 0x785b, 0x5, 0x10000}], "8ab1bdaf20f8717dd3a1681cb88a2bab99ad4b65a671ec7681c31d22dc5fd9123a6dd98b7fee3ba9bd22affb820516b438e247cbf3a6803f037641566b2bc5665e617aaa120bd05dcf68621863e03eee8eae06fc35ddda1b74fa2b5bae9a338df85aa8bf82ec0bad32e5b0c2271de2852a6246720f2e3b48337d57229f88d2b4008de234da7c1701902752af85c7f3c181b11134810e174ab61b056e8b45e0805b51c54cd03b9382eb1343e054fc6768198579a8527121", [[], [], [], [], [], [], []]}, 0x867) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f0000000040)={0x10000, 0x0, 0x1}) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e23, @broadcast}}, 0x0, 0x5, 0x0, "b85e14e5ea9228639f10cba132d88d3b4f800a5348b9f83c40dea433fc82d2ec0dc4c8d9cc6c72f611ac498da4e14ce60d53d475fc0ba2b21f54a27cfacf4f9cde2d2463f5519d2e71c91ea8b995a839"}, 0xd8) close(r2) 18:02:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae3c, 0x0) 18:02:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae6b, 0x0) 18:02:38 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(0x0, 0x0, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000740)={0x0, 0x0, 0x0, r2}) 18:02:38 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) getcwd(&(0x7f0000000080)=""/184, 0xb8) r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x1, 0x2) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) [ 1586.607505][T11847] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1586.713744][T11851] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 18:02:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae3d, 0x0) 18:02:38 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x10000, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000040)={0xd, 0x102, 0x4, {0x8001, 0x0, 0x8, 0x100}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x800) 18:02:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000740)={0x0, 0x0, 0x0, r2}) 18:02:38 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(0x0, 0x0, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae6c, 0x0) 18:02:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x210}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, r2, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, 0x0, 0xb, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x800) 18:02:39 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x404002) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)={&(0x7f0000000080)='./file0\x00', r2}, 0x10) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:39 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(0x0, 0x0, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000740)={0x0, 0x0, 0x0, r2}) 18:02:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xd80, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r2, 0x302, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x1) write$P9_RLCREATE(r1, &(0x7f0000000240)={0x18, 0xf, 0x1, {{0x4, 0x4}, 0x18d6}}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x800) 18:02:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae3e, 0x0) 18:02:39 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000740)={0x0, 0x0, 0x0, r2}) 18:02:39 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(r0) r1 = socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r1, 0x0, 0x7, &(0x7f0000000080)='md5sum\x00', 0xffffffffffffffff}, 0x30) getpgid(r3) 18:02:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae6d, 0x0) 18:02:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x800) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x202, 0x0) 18:02:39 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x0, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae41, 0x0) 18:02:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440)='/dev/snapshot\x00', 0x80, 0x0) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000005c0)={0x8, &(0x7f0000000140)=[{0x7e5, 0x10000}, {0x8e17, 0x2}, {0xb2e3, 0x2}, {0x401, 0x100}, {0xec7e, 0x9}, {0x1, 0x1}, {0x1, 0x4}, {0xe1, 0x9}]}) r2 = fcntl$getown(r0, 0x9) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in=@broadcast, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000740)=0x11) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000780)={0x7, 0x1, 0x9, 0x0, 0x7}) ioctl$KDDELIO(r1, 0x4b35, 0x96b) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000000c0)) fstat(r0, &(0x7f0000000000)) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)) getegid() fstat(r1, &(0x7f0000000600)) getresgid(&(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)) getgroups(0x0, &(0x7f00000000c0)) sendmsg$unix(r1, &(0x7f00000004c0)={&(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000240)="267afa1fdd79f2b675408e6715f14a287dc549f7246d0a6af06fb8f66dbfa8353eb4ac9986431b9276d3fd85e95594bce19fb760a3a9080a0c9bbf8bed822cfe9f98c95daf264450320754bd2f520955bd829b087576eac91498d9d20e7f0a0a91f7456b5d61", 0x66}], 0x1, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {r2, r3}}}], 0x20, 0x8000}, 0xc0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3802000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="4302000011000000de6cc9acdba01a14767469000c00020008000400e0000002"], 0x38}}, 0x800) 18:02:39 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000080)={'syz_tun\x00', 0x4}) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:39 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x0, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae6e, 0x0) 18:02:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000000)={0x7, 0x0, 0x2, 0x5}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000040)={r1, 0x7ff}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x800) 18:02:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae42, 0x0) 18:02:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000740)={0x0, 0x0, 0x0, r2}) 18:02:40 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x0, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:40 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0xffffffffffffff80, 0x40100) r2 = open(&(0x7f0000000140)='./file0\x00', 0x40000, 0x10) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x3001, &(0x7f0000000100), 0x0, r2, 0x4}) socket$bt_bnep(0x1f, 0x3, 0x4) socket$vsock_dgram(0x28, 0x2, 0x0) setrlimit(0xb, &(0x7f0000000080)={0x6, 0xf85c}) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae6f, 0x0) 18:02:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) accept$packet(0xffffffffffffff9c, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x800, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f00000002c0)={'filter\x00', 0x0, 0x3, 0x37, [], 0x8, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000280)=""/55}, &(0x7f0000000340)=0x78) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv6_newaddr={0x98, 0x14, 0x309, 0x70bd2b, 0x25dfdbfb, {0xa, 0x0, 0x200, 0xfe, r1}, [@IFA_LOCAL={0x14, 0x2, @empty}, @IFA_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IFA_CACHEINFO={0x14, 0x6, {0x101, 0x1ff, 0x3, 0x8c85}}, @IFA_CACHEINFO={0x14, 0x6, {0x400, 0x46dd, 0x4, 0x401}}, @IFA_FLAGS={0x8, 0x8, 0x2}, @IFA_CACHEINFO={0x14, 0x6, {0x1ff, 0x2, 0x200, 0x101}}, @IFA_LOCAL={0x14, 0x2, @rand_addr="832cde810ded5e4278ebb087b6bef78f"}]}, 0x98}}, 0x800) 18:02:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae43, 0x0) 18:02:40 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:40 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x6, 0x10000) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000240)={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xc}}, {0x306, @dev={[], 0x15}}, 0x10, {0x2, 0x4e20, @remote}, 'netdevsim0\x00'}) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00000001c0)={[0x5000, 0x103000, 0x1d000], 0x9a, 0x8, 0xaf}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$SIOCGETLINKNAME(r2, 0x89e0, &(0x7f00000000c0)={0x1}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="43020000000000001800120018fb149f9d12f775000100767469000c00020008000400e0000002"], 0x38}}, 0x800) 18:02:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae44, 0x0) 18:02:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae70, 0x0) [ 1588.875723][T12483] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 18:02:40 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fchdir(r0) close(r0) r1 = socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x3) 18:02:41 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) [ 1588.975221][T12489] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 18:02:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000740)={0x0, 0x0, 0x0, r2}) 18:02:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x800) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x17) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000040)={0x3b, 0x11, 0x0, 0x1f, 0x1, 0x81, 0x2, 0x139, 0xffffffffffffffff}) 18:02:41 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae71, 0x0) 18:02:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae45, 0x0) 18:02:41 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = pkey_alloc(0x0, 0x0) pkey_free(r1) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x0, 0x8000000000000000}]) 18:02:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffffc, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x800) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x2, 0x200000) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)={0x6d, 0x100000001, 0x3f, "59f43c9008d5e45f105da53b54e27471ceeec833cd8850dc8c82ce19491ccb4b08836c86271004e9b5d321f50aec3ad23f221532e34176c6501a45305956dd87099b38968cd1722fe480b7b075bec1915ee6f69719ba05c92e2c20011edfdde5a3e88be8aa41f28e9a615ae22e"}) 18:02:41 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:41 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) fsetxattr$security_selinux(r1, &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x3) 18:02:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae46, 0x0) 18:02:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae72, 0x0) 18:02:41 executing program 2: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x401, 0x200100) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa28044}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x2e8, r1, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x904}]}, @TIPC_NLA_MEDIA={0x108, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa824}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xaecb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x104, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x533a}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffff000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x94, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4000}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x10}, 0x8010) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x268}}, 0x800) 18:02:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="43020000000000001800120008000100767469000c00020008000400e0000002"], 0x38}}, 0x800) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000040), &(0x7f0000000140)=0x0, &(0x7f00000001c0)) getresuid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) write$P9_RSTATu(r1, &(0x7f0000000480)={0x56, 0x7d, 0x2, {{0x0, 0x41, 0x5fa8, 0x1f, {0x0, 0x2, 0x2}, 0x14800000, 0xfe, 0x9, 0x10001, 0xa, 'wlan1.(lo{', 0x0, '', 0x3, ':/}', 0x1, '+'}, 0x0, '', r2, r3, r4}}, 0x56) 18:02:42 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000740)={0x0, 0x0, 0x0, r2}) 18:02:42 executing program 0: socketpair$unix(0x1, 0x82, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) setxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@ng={0x4, 0xa, "be0704068e20e718cf4e"}, 0xc, 0x2) 18:02:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae47, 0x0) 18:02:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae73, 0x0) [ 1590.493380][T12854] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1590.578224][T12854] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 18:02:42 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYPTR64=&(0x7f0000000140)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYPTR, @ANYRES64=r0]], @ANYRES64=0x0, @ANYBLOB="43020000000000001800120002000000767469000c00020008000400e0000002"], 0x3}}, 0x4000000) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x529, 0x40000) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000000040)) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000000c0)={0x4, 0x800, 0x1, 0x0, 0x5e, 0x800, 0xb4ca, 0x8, 0x4, 0x4, 0x9, 0xfffffffffffffff7, 0x0, 0x4, 0x5, 0x7ff, 0x2, 0x401, 0x7ff}) 18:02:42 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syncfs(r0) close(r0) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x1, 0x0) io_uring_enter(r3, 0xffffffff, 0xff, 0x2, &(0x7f0000000280)={0xec4d}, 0x8) io_setup(0x3, &(0x7f00000001c0)=0x0) fcntl$dupfd(r1, 0x406, r2) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='limits\x00') ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r5, 0xc0505405, &(0x7f0000000100)={{0x3, 0x2, 0x100000000, 0x3, 0xffff}, 0x8, 0x400, 0x3}) close(r0) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}]) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000080)=0x200, 0x4) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000180), &(0x7f0000000240)=0x4) 18:02:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae74, 0x0) 18:02:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae48, 0x0) 18:02:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="430200000000000018f511000800010076746999289aa7fb5777d984a418000c0395369afad5b9ab343d5672557033"], 0x38}}, 0x800) 18:02:42 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x0, 0x0) 18:02:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae75, 0x0) [ 1591.059540][T13041] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 18:02:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000740)={0x0, 0x0, 0x0, r2}) 18:02:43 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000002c80)={r0}) r3 = syz_open_dev$swradio(&(0x7f0000002cc0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000002d00)={r1, r3}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) eventfd(0x8000) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x800) getsockopt$netlink(r0, 0x10e, 0x7, &(0x7f0000000040)=""/30, &(0x7f00000000c0)=0x1e) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={r0, 0x0, 0x5, 0x6, 0x4}) 18:02:43 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x0, 0x0) 18:02:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae49, 0x0) 18:02:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae76, 0x0) 18:02:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000011c0)=ANY=[@ANYBLOB="38f8ffff0100330e3d521d9a0006000000000000ea9f0e572e44942441883cc23e79b4791a", @ANYRES32=0x0, @ANYBLOB="43020000000000001800120008000100767469000c00020008000400e0000002"], 0x38}}, 0x800) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000001280)='/dev/zero\x00', 0x34933d, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r1, 0x28, &(0x7f0000000040)}, 0x10) setsockopt$inet_dccp_buf(r1, 0x21, 0x82, &(0x7f00000001c0)="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", 0x1000) ftruncate(r2, 0x7ff) fcntl$dupfd(r1, 0x406, r0) 18:02:43 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x0, 0x0) 18:02:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae77, 0x0) 18:02:43 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) r2 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x3, 0x100) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100), 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x400000, 0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae4a, 0x0) 18:02:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x800) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000001c0)={&(0x7f0000000040)=[0x1, 0x81], 0x2, 0x1, 0x0, 0x7, 0x6, 0x4, {0x4, 0x16cee26b, 0x7, 0x100, 0xb7, 0x5, 0x99, 0x1, 0xea6, 0x4, 0x9, 0x400000, 0x2, 0x8, "607b64667fffc5f90db353ae1c8929e28f7fda1407bc32f49c8b25f7594cf09e"}}) 18:02:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000740)={0x0, 0x0, 0x0, r2}) 18:02:44 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x0, &(0x7f0000000040)) 18:02:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffff9c, 0x0, 0x4, &(0x7f0000000000)='vti\x00', 0xffffffffffffffff}, 0x30) rt_sigqueueinfo(r1, 0x18, &(0x7f00000001c0)={0xf, 0x3, 0x80}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x800) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x200000, 0x0) ioctl$SG_GET_VERSION_NUM(r2, 0x2282, &(0x7f0000000240)) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000140)) 18:02:44 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x4540, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000000c0)={0x0, 0xae4, 0x34b, 'queue0\x00', 0xffffffff00000000}) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae78, 0x0) 18:02:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae4b, 0x0) 18:02:44 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r0 = getpid() prlimit64(r0, 0x1, &(0x7f0000000140)={0x0, 0x7fffffff}, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0) dup(0xffffffffffffffff) socket$bt_rfcomm(0x1f, 0x1, 0x3) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x800) 18:02:44 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x0, &(0x7f0000000040)) 18:02:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae79, 0x0) 18:02:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae4c, 0x0) 18:02:44 executing program 0: socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x5233, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:44 executing program 2: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r0 = getpid() prlimit64(r0, 0x1, &(0x7f0000000140)={0x0, 0x7fffffff}, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0) dup(0xffffffffffffffff) socket$bt_rfcomm(0x1f, 0x1, 0x3) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}}, 0x800) 18:02:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000740)={0x0, 0x0, 0x0, r2}) 18:02:45 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x0, &(0x7f0000000040)) 18:02:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae4d, 0x0) 18:02:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae7a, 0x0) 18:02:45 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @empty, @multicast1}, &(0x7f00000002c0)=0xc) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, 0x0) prctl$PR_GET_FP_MODE(0x2e) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x6, 0x0, [0x20000740, 0x0, 0x0, 0x20000994, 0x20000c20], 0x0, &(0x7f0000000440)}, 0x78) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) msgget(0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) creat(0x0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, 0x0) getuid() pipe2(&(0x7f00000004c0), 0x800) pread64(0xffffffffffffffff, 0x0, 0xc7, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000380), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) 18:02:45 executing program 0: syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x72, 0x80000) socketpair$unix(0x1, 0xfffffffffffffffe, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) lsetxattr$trusted_overlay_opaque(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000280)='y\x00', 0x2, 0x3) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x200000, 0x0) close(r0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x103800, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x4, 0x2, 0x6}}, 0x30) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x8, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x66f6c8ab, 0xd, 0x7, 0x6, 0x4, 0x5}, @map={0x18, 0x0, 0x1, 0x0, r1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9}, @ldst={0x3, 0x3, 0x0, 0xb3f279b5d2112f58, 0xf, 0xfffffffffffffffe, 0x14}, @generic={0x0, 0x4, 0x6, 0x401, 0x9}, @exit], &(0x7f0000000240)='GPL\x00', 0x4, 0x3a, &(0x7f0000000300)=""/58, 0x41100, 0x0, [], 0x0, 0x0, 0xffffffffffffff9c, 0x8, &(0x7f0000000340)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x8, 0x1, 0x3}, 0x10}, 0x70) 18:02:45 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[0x0]) 18:02:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae7b, 0x0) 18:02:45 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x5, 0x40) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2180}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r2, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0x4, 0x5, 0x7]}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x4048085) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "670cd7e27bf3e9fa", "c769d7fea13d223c37e5a26b67195e3f", "ecf1a810", "03355df211982fa7"}, 0x28) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) setsockopt$inet_udp_int(r1, 0x11, 0x0, &(0x7f0000000100)=0x1, 0x4) 18:02:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae4e, 0x0) 18:02:45 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x1, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @empty, @multicast1}, &(0x7f00000002c0)=0xc) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, 0x0) prctl$PR_GET_FP_MODE(0x2e) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000500)=@nat={'nat\x00', 0x19, 0x6, 0x0, [0x20000740, 0x0, 0x0, 0x20000994, 0x20000c20], 0x0, &(0x7f0000000440)}, 0x78) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) msgget(0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) creat(0x0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, 0x0) getuid() pipe2(&(0x7f00000004c0), 0x800) pread64(0xffffffffffffffff, 0x0, 0xc7, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000380), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) 18:02:45 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[0x0]) 18:02:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000740)={0x0, 0x0, 0x0, r2}) 18:02:46 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) chown(&(0x7f0000000080)='./file0\x00', r3, r4) 18:02:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae7c, 0x0) 18:02:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae4f, 0x0) 18:02:46 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[0x0]) 18:02:46 executing program 2: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000380), 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x92000) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, 0x0, 0x0) 18:02:46 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 18:02:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae7d, 0x0) 18:02:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae50, 0x0) 18:02:46 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:46 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 18:02:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae7e, 0x0) 18:02:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000740)={0x0, 0x0, 0x0, r2}) 18:02:47 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1000, 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000440)={0x13, 0x10, 0xfa00, {&(0x7f0000000240), r2, 0x1}}, 0x18) io_setup(0x3, &(0x7f00000001c0)=0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x3, 0x2) io_submit(r3, 0x3b, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x80000002, 0xfffffffffffffffc, r0, 0x0, 0x0, 0x100000000000000, 0x0, 0x1, r4}]) 18:02:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae51, 0x0) 18:02:47 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 18:02:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xaf01, 0x0) 18:02:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x800) 18:02:47 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, 0xffffffffffffffff, 0x0}]) 18:02:47 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000008, 0x0, r0, 0x0}]) 18:02:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae52, 0x0) 18:02:47 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x0, &(0x7f0000000040)) 18:02:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x400454ca, 0x0) 18:02:47 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000008, 0x0, r0, 0x0}]) 18:02:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) 18:02:48 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, 0xffffffffffffffff, 0x0}]) 18:02:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae53, 0x0) 18:02:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x40046411, 0x0) 18:02:48 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000008, 0x0, r0, 0x0}]) 18:02:48 executing program 0: close(0xffffffffffffffff) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, 0xffffffffffffffff, 0x0}]) 18:02:48 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000008, 0x0, r0, 0x0}]) 18:02:48 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, 0xffffffffffffffff, 0x0}]) 18:02:48 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x40000000000003, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae54, 0x0) 18:02:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x40049409, 0x0) 18:02:48 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000008, 0x0, r0, 0x0}]) 18:02:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) 18:02:49 executing program 3 (fault-call:4 fault-nth:0): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:49 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000008, 0x0, r0, 0x0}]) 18:02:49 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) r1 = socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x101200, 0x0) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r1, &(0x7f0000000180)={r5, r0, 0x5}) 18:02:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae55, 0x0) 18:02:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x4004ae8b, 0x0) [ 1597.139481][T14588] FAULT_INJECTION: forcing a failure. [ 1597.139481][T14588] name failslab, interval 1, probability 0, space 0, times 0 [ 1597.229301][T14588] CPU: 0 PID: 14588 Comm: syz-executor.3 Not tainted 5.2.0-rc7 #65 [ 1597.237236][T14588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1597.247295][T14588] Call Trace: [ 1597.247324][T14588] dump_stack+0x172/0x1f0 [ 1597.247348][T14588] should_fail.cold+0xa/0x15 [ 1597.247371][T14588] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1597.247409][T14588] ? ___might_sleep+0x163/0x280 [ 1597.259609][T14588] __should_failslab+0x121/0x190 [ 1597.259630][T14588] should_failslab+0x9/0x14 [ 1597.259655][T14588] kmem_cache_alloc+0x2af/0x6f0 [ 1597.270296][T14588] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1597.270311][T14588] ? _copy_from_user+0xdd/0x150 [ 1597.270329][T14588] io_submit_one+0x10f/0x2ef0 [ 1597.270343][T14588] ? mark_held_locks+0xf0/0xf0 [ 1597.270363][T14588] ? lookup_ioctx+0x1d7/0x830 [ 1597.309880][T14588] ? __might_fault+0x12b/0x1e0 [ 1597.314669][T14588] ? find_held_lock+0x35/0x130 [ 1597.319460][T14588] ? ioctx_alloc+0x1db0/0x1db0 [ 1597.324238][T14588] ? __might_fault+0x12b/0x1e0 [ 1597.329040][T14588] __x64_sys_io_submit+0x1bd/0x570 [ 1597.334185][T14588] ? __x64_sys_io_submit+0x1bd/0x570 [ 1597.339486][T14588] ? __ia32_sys_io_destroy+0x420/0x420 [ 1597.344957][T14588] ? rcu_read_lock_sched_held+0x110/0x130 [ 1597.350690][T14588] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1597.356169][T14588] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1597.361744][T14588] ? do_syscall_64+0x26/0x680 [ 1597.366434][T14588] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1597.372506][T14588] ? do_syscall_64+0x26/0x680 [ 1597.377186][T14588] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1597.382481][T14588] do_syscall_64+0xfd/0x680 [ 1597.382497][T14588] ? do_syscall_64+0xfd/0x680 [ 1597.382517][T14588] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1597.382536][T14588] RIP: 0033:0x459519 [ 1597.401486][T14588] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1597.421106][T14588] RSP: 002b:00007efcd8d95c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 18:02:49 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000008, 0x0, r0, 0x0}]) 18:02:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x4004ae99, 0x0) [ 1597.429533][T14588] RAX: ffffffffffffffda RBX: 00007efcd8d95c90 RCX: 0000000000459519 [ 1597.437510][T14588] RDX: 0000000020000040 RSI: 0000000000000001 RDI: 00007efcd8d75000 [ 1597.445558][T14588] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1597.453537][T14588] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efcd8d966d4 [ 1597.461515][T14588] R13: 00000000004c0898 R14: 00000000004d3548 R15: 0000000000000005 18:02:49 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) getpeername$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x1c) 18:02:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae56, 0x0) 18:02:49 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000008, 0x0, r0, 0x0}]) 18:02:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x40087705, 0x0) 18:02:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) 18:02:50 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000008, 0x0, r0, 0x0}]) 18:02:50 executing program 3 (fault-call:4 fault-nth:1): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae57, 0x0) 18:02:50 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setregs(0xf, r2, 0x400, &(0x7f00000000c0)="752ebf008698d872b771e2d68fd58c09f927de1fb5aa411fe2a989e37dd836a91cb35fad7b32e75bf4094e0c4f1598af8f8f07c1e79e6eca895d269fb1684ac50358fdb4583a1191334df7245895e7bd50a1b2980ba6af4ae6a6cadc4d94a1140fe6a15d1bd8a804d5046267aae108f51ba709647a8e39c66fc53ad3cfd7d9fd893ea440ebb3eeb0ae09a4a8c15b425d1e391040a1586dd210c984967bcd5b872e6f9134420fec90a85964aad7b65294340ecf8f7e9fcb8abd56780b539408c6272cf2b8c74e57104b0fe53de3eee7ff06fc76192275336d8a4562ba96686500a46aa49a5d") socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x4008af03, 0x0) 18:02:50 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000008, 0x0, r0, 0x0}]) 18:02:50 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x40106614, 0x0) 18:02:50 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000100)={0x0, 0x401, 0x9, [], &(0x7f00000000c0)=0x800}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000180)=0x5) close(r0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xc0000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x1c0, r3, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK={0xfc, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x46b4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x58, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffff5c01a9e}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfc95}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6eb}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x30}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xff}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x840}, 0x50) socket$vsock_dgram(0x28, 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae58, 0x0) 18:02:50 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000008, 0x0, r0, 0x0}]) 18:02:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000740)={0x0, 0x0}) 18:02:51 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x2, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:51 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000008, 0x0, r0, 0x0}]) 18:02:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x4020565a, 0x0) 18:02:51 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x5, &(0x7f00000001c0)=0x0) io_submit(r0, 0x0, &(0x7f0000000080)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000080)={0x8, 0x5, 0x60, 'queue0\x00', 0x9}) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000040)=@gcm_256={{0x304}, "fab8b86158d6f728", "5e50a4bde2e2f6b33a8bea83dc4a353ee3a4ad25440a6a0cbce505a637a44fb1", "6681f3e1", "2d5e39e221d0044d"}, 0x38) 18:02:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae59, 0x0) 18:02:51 executing program 2: close(0xffffffffffffffff) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000008, 0x0, 0xffffffffffffffff, 0x0}]) 18:02:51 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x4, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:51 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000140)={0x2, 0x2, 0x207, 0x6, 0x41c0, 0x5, 0x40, 0xffffffffc2294dfc, 0x0}, &(0x7f0000000180)=0x20) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000240)={r3, 0x2, 0x2}, 0x8) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)=0x3) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000280)={{0x84, @multicast2, 0x4e21, 0x3, 'lblc\x00', 0x5, 0x200, 0x2e}, {@broadcast, 0x4e23, 0x1, 0xffff, 0xffffffffffffff73, 0x800}}, 0x44) socket$vsock_dgram(0x28, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={r2, r2, 0xf, 0x3}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x4020940d, 0x0) 18:02:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae5a, 0x0) 18:02:51 executing program 2: close(0xffffffffffffffff) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000008, 0x0, 0xffffffffffffffff, 0x0}]) [ 1599.498786][T15210] QAT: Invalid ioctl 18:02:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000740)={0x0, 0x0}) 18:02:51 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x300, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x4020ae46, 0x0) 18:02:51 executing program 2: close(0xffffffffffffffff) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000008, 0x0, 0xffffffffffffffff, 0x0}]) 18:02:51 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f00000000c0)=0x40) 18:02:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae5b, 0x0) 18:02:52 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000008, 0x0, r0, 0x0}]) 18:02:52 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x4048ae9b, 0x0) 18:02:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae5c, 0x0) 18:02:52 executing program 0: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x240000, 0x0) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000100)=0x7) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f0000000080)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) epoll_create1(0x80000) 18:02:52 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000008, 0x0, r0, 0x0}]) 18:02:52 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000008, 0x0, r0, 0x0}]) 18:02:52 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x4, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:52 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x44000, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae5d, 0x0) 18:02:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000740)={0x0, 0x0}) 18:02:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x405c5503, 0x0) 18:02:53 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) close(0xffffffffffffffff) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000008, 0x0, 0xffffffffffffffff, 0x0}]) 18:02:53 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x4000, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x4090ae82, 0x0) 18:02:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae5e, 0x0) 18:02:53 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x2, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000180)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0), 0x2, {0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x29}, 0x16e}, r2}}, 0x38) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:53 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) close(0xffffffffffffffff) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000008, 0x0, 0xffffffffffffffff, 0x0}]) 18:02:53 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x1000000, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:53 executing program 2: socketpair$unix(0x1, 0x2, 0x0, 0x0) close(0xffffffffffffffff) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000008, 0x0, 0xffffffffffffffff, 0x0}]) 18:02:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x4138ae84, 0x0) 18:02:53 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(0xffffffffffffffff) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000008, 0x0, r0, 0x0}]) 18:02:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae5f, 0x0) 18:02:53 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)) ioctl$VIDIOC_DBG_G_CHIP_INFO(r2, 0xc0c85666, &(0x7f00000000c0)={{0x0, @name="711d2cf9d58499cb6b8dccb541c4e2e63d59a7ad1bb53dc3fc09cd33235d72b1"}, "280114ad89b82157c3c43d68c7dc31c86c2e6576c43a1d733477ad2209ff07e3", 0x3}) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:53 executing program 5 (fault-call:4 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000740)={0x0, 0x0, 0x0, r2}) 18:02:53 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x2000000, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x41a0ae8d, 0x0) 18:02:54 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(0xffffffffffffffff) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000008, 0x0, r0, 0x0}]) 18:02:54 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae60, 0x0) [ 1602.087587][T15948] FAULT_INJECTION: forcing a failure. [ 1602.087587][T15948] name failslab, interval 1, probability 0, space 0, times 0 [ 1602.139920][T15948] CPU: 0 PID: 15948 Comm: syz-executor.5 Not tainted 5.2.0-rc7 #65 [ 1602.147844][T15948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1602.157930][T15948] Call Trace: [ 1602.161238][T15948] dump_stack+0x172/0x1f0 [ 1602.165585][T15948] should_fail.cold+0xa/0x15 [ 1602.170199][T15948] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1602.176014][T15948] ? ___might_sleep+0x163/0x280 [ 1602.176036][T15948] __should_failslab+0x121/0x190 [ 1602.176059][T15948] should_failslab+0x9/0x14 [ 1602.190317][T15948] __kmalloc+0x2d9/0x740 [ 1602.194574][T15948] ? tomoyo_realpath_from_path+0xc0/0x7a0 [ 1602.200309][T15948] ? rcu_read_lock_sched_held+0x110/0x130 [ 1602.206039][T15948] ? tomoyo_realpath_from_path+0xcd/0x7a0 [ 1602.211768][T15948] tomoyo_realpath_from_path+0xcd/0x7a0 [ 1602.211784][T15948] ? tomoyo_path_number_perm+0x193/0x520 [ 1602.211810][T15948] tomoyo_path_number_perm+0x1dd/0x520 [ 1602.228420][T15948] ? tomoyo_path_number_perm+0x193/0x520 [ 1602.228441][T15948] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1602.228457][T15948] ? __f_unlock_pos+0x19/0x20 [ 1602.228477][T15948] ? __fget+0x35a/0x550 [ 1602.248712][T15948] ? __fget+0x381/0x550 [ 1602.252877][T15948] ? ksys_dup3+0x3e0/0x3e0 [ 1602.257293][T15948] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1602.257310][T15948] ? fput_many+0x12c/0x1a0 [ 1602.257332][T15948] tomoyo_file_ioctl+0x23/0x30 [ 1602.257351][T15948] security_file_ioctl+0x77/0xc0 [ 1602.277682][T15948] ksys_ioctl+0x57/0xd0 [ 1602.281852][T15948] __x64_sys_ioctl+0x73/0xb0 [ 1602.286457][T15948] do_syscall_64+0xfd/0x680 [ 1602.290976][T15948] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1602.296872][T15948] RIP: 0033:0x459519 [ 1602.300771][T15948] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1602.300780][T15948] RSP: 002b:00007fc309506c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1602.300794][T15948] RAX: ffffffffffffffda RBX: 00007fc309506c90 RCX: 0000000000459519 18:02:54 executing program 0: socketpair$unix(0x1, 0xa, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000080)=0xc) r4 = syz_open_procfs(r3, &(0x7f0000000180)='children\x00') ioctl$VIDIOC_G_STD(0xffffffffffffff9c, 0x80085617, &(0x7f00000000c0)=0x0) ioctl$VIDIOC_S_STD(r4, 0x40085618, &(0x7f0000000100)=r5) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) [ 1602.300804][T15948] RDX: 0000000020000140 RSI: 00000000c018aec0 RDI: 0000000000000004 [ 1602.300812][T15948] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1602.300820][T15948] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc3095076d4 [ 1602.300837][T15948] R13: 00000000004c276b R14: 00000000004d59f0 R15: 0000000000000006 [ 1602.381615][T15948] ERROR: Out of memory at tomoyo_realpath_from_path. 18:02:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x800454d2, 0x0) 18:02:54 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x40000000, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:54 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(0xffffffffffffffff) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000008, 0x0, r0, 0x0}]) 18:02:54 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae61, 0x0) 18:02:55 executing program 5 (fault-call:4 fault-nth:1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000740)={0x0, 0x0, 0x0, r2}) 18:02:55 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x100000000000000, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x80047456, 0x0) 18:02:55 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x0, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000008, 0x0, r0, 0x0}]) 18:02:55 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000080)={'teql0\x00', 0x2b40000000}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=0x0) write$FUSE_LK(r1, &(0x7f0000000140)={0x28, 0x0, 0x8, {{0x0, 0x418cea0, 0x0, r2}}}, 0x28) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae62, 0x0) [ 1603.170543][T16198] [ 1603.172914][T16198] ===================================================== [ 1603.179846][T16198] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1603.187294][T16198] 5.2.0-rc7 #65 Not tainted [ 1603.191790][T16198] ----------------------------------------------------- [ 1603.198728][T16198] syz-executor.0/16198 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1603.206779][T16198] 00000000f348d964 (&fiq->waitq){+.+.}, at: io_submit_one+0xefa/0x2ef0 [ 1603.215028][T16198] [ 1603.215028][T16198] and this task is already holding: [ 1603.222379][T16198] 00000000ffd906b2 (&(&ctx->ctx_lock)->rlock){..-.}, at: io_submit_one+0xeb5/0x2ef0 [ 1603.231744][T16198] which would create a new lock dependency: [ 1603.237616][T16198] (&(&ctx->ctx_lock)->rlock){..-.} -> (&fiq->waitq){+.+.} [ 1603.244810][T16198] [ 1603.244810][T16198] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1603.254242][T16198] (&(&ctx->ctx_lock)->rlock){..-.} [ 1603.254252][T16198] [ 1603.254252][T16198] ... which became SOFTIRQ-irq-safe at: [ 1603.267138][T16198] lock_acquire+0x16f/0x3f0 [ 1603.271725][T16198] _raw_spin_lock_irq+0x60/0x80 [ 1603.276665][T16198] free_ioctx_users+0x2d/0x490 [ 1603.281512][T16198] percpu_ref_switch_to_atomic_rcu+0x407/0x540 [ 1603.287744][T16198] rcu_core+0xba5/0x1500 [ 1603.292068][T16198] __do_softirq+0x25c/0x94c [ 1603.296654][T16198] irq_exit+0x180/0x1d0 [ 1603.300887][T16198] smp_apic_timer_interrupt+0x13b/0x550 [ 1603.306520][T16198] apic_timer_interrupt+0xf/0x20 [ 1603.311531][T16198] do_wait+0x15f/0x9d0 [ 1603.315674][T16198] kernel_wait4+0x171/0x290 [ 1603.320270][T16198] __do_sys_wait4+0x147/0x160 [ 1603.325021][T16198] __x64_sys_wait4+0x97/0xf0 [ 1603.329692][T16198] do_syscall_64+0xfd/0x680 [ 1603.334287][T16198] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1603.340270][T16198] [ 1603.340270][T16198] to a SOFTIRQ-irq-unsafe lock: [ 1603.347272][T16198] (&fiq->waitq){+.+.} [ 1603.347282][T16198] [ 1603.347282][T16198] ... which became SOFTIRQ-irq-unsafe at: [ 1603.359197][T16198] ... [ 1603.359214][T16198] lock_acquire+0x16f/0x3f0 [ 1603.366378][T16198] _raw_spin_lock+0x2f/0x40 [ 1603.370957][T16198] flush_bg_queue+0x1f3/0x3c0 [ 1603.375711][T16198] fuse_request_queue_background+0x2d1/0x580 [ 1603.381769][T16198] fuse_request_send_background+0x58/0x110 [ 1603.387654][T16198] fuse_fill_super+0x13b4/0x1720 [ 1603.392671][T16198] mount_nodev+0x66/0x110 [ 1603.397079][T16198] fuse_mount+0x2d/0x40 [ 1603.401311][T16198] legacy_get_tree+0x108/0x220 [ 1603.406166][T16198] vfs_get_tree+0x8e/0x390 [ 1603.410662][T16198] do_mount+0x138c/0x1c00 [ 1603.415086][T16198] ksys_mount+0xdb/0x150 [ 1603.419405][T16198] __x64_sys_mount+0xbe/0x150 [ 1603.424161][T16198] do_syscall_64+0xfd/0x680 [ 1603.428743][T16198] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1603.434701][T16198] [ 1603.434701][T16198] other info that might help us debug this: [ 1603.434701][T16198] [ 1603.444917][T16198] Possible interrupt unsafe locking scenario: [ 1603.444917][T16198] [ 1603.453231][T16198] CPU0 CPU1 [ 1603.458580][T16198] ---- ---- [ 1603.463931][T16198] lock(&fiq->waitq); [ 1603.467984][T16198] local_irq_disable(); [ 1603.474746][T16198] lock(&(&ctx->ctx_lock)->rlock); [ 1603.482453][T16198] lock(&fiq->waitq); [ 1603.489028][T16198] [ 1603.492470][T16198] lock(&(&ctx->ctx_lock)->rlock); [ 1603.497828][T16198] [ 1603.497828][T16198] *** DEADLOCK *** [ 1603.497828][T16198] [ 1603.505978][T16198] 1 lock held by syz-executor.0/16198: [ 1603.511421][T16198] #0: 00000000ffd906b2 (&(&ctx->ctx_lock)->rlock){..-.}, at: io_submit_one+0xeb5/0x2ef0 [ 1603.521228][T16198] [ 1603.521228][T16198] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1603.531624][T16198] -> (&(&ctx->ctx_lock)->rlock){..-.} { [ 1603.537161][T16198] IN-SOFTIRQ-W at: [ 1603.541136][T16198] lock_acquire+0x16f/0x3f0 [ 1603.547295][T16198] _raw_spin_lock_irq+0x60/0x80 [ 1603.553811][T16198] free_ioctx_users+0x2d/0x490 [ 1603.560218][T16198] percpu_ref_switch_to_atomic_rcu+0x407/0x540 [ 1603.568029][T16198] rcu_core+0xba5/0x1500 [ 1603.573914][T16198] __do_softirq+0x25c/0x94c [ 1603.580149][T16198] irq_exit+0x180/0x1d0 [ 1603.585950][T16198] smp_apic_timer_interrupt+0x13b/0x550 [ 1603.593136][T16198] apic_timer_interrupt+0xf/0x20 [ 1603.599718][T16198] do_wait+0x15f/0x9d0 [ 1603.605425][T16198] kernel_wait4+0x171/0x290 [ 1603.611567][T16198] __do_sys_wait4+0x147/0x160 [ 1603.617888][T16198] __x64_sys_wait4+0x97/0xf0 [ 1603.624131][T16198] do_syscall_64+0xfd/0x680 [ 1603.630281][T16198] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1603.637804][T16198] INITIAL USE at: [ 1603.641698][T16198] lock_acquire+0x16f/0x3f0 [ 1603.647846][T16198] _raw_spin_lock_irq+0x60/0x80 [ 1603.654253][T16198] free_ioctx_users+0x2d/0x490 [ 1603.660573][T16198] percpu_ref_switch_to_atomic_rcu+0x407/0x540 [ 1603.668282][T16198] rcu_core+0xba5/0x1500 [ 1603.674100][T16198] __do_softirq+0x25c/0x94c [ 1603.680179][T16198] irq_exit+0x180/0x1d0 [ 1603.685902][T16198] smp_apic_timer_interrupt+0x13b/0x550 [ 1603.693004][T16198] apic_timer_interrupt+0xf/0x20 [ 1603.699535][T16198] do_wait+0x15f/0x9d0 [ 1603.705164][T16198] kernel_wait4+0x171/0x290 [ 1603.711219][T16198] __do_sys_wait4+0x147/0x160 [ 1603.717453][T16198] __x64_sys_wait4+0x97/0xf0 [ 1603.723599][T16198] do_syscall_64+0xfd/0x680 [ 1603.729670][T16198] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1603.737105][T16198] } [ 1603.739608][T16198] ... key at: [] __key.53436+0x0/0x40 [ 1603.747044][T16198] ... acquired at: [ 1603.750874][T16198] lock_acquire+0x16f/0x3f0 [ 1603.755538][T16198] _raw_spin_lock+0x2f/0x40 [ 1603.760204][T16198] io_submit_one+0xefa/0x2ef0 [ 1603.765044][T16198] __x64_sys_io_submit+0x1bd/0x570 [ 1603.770318][T16198] do_syscall_64+0xfd/0x680 [ 1603.774992][T16198] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1603.781041][T16198] [ 1603.783353][T16198] [ 1603.783353][T16198] the dependencies between the lock to be acquired [ 1603.783359][T16198] and SOFTIRQ-irq-unsafe lock: [ 1603.796852][T16198] -> (&fiq->waitq){+.+.} { [ 1603.801278][T16198] HARDIRQ-ON-W at: [ 1603.805254][T16198] lock_acquire+0x16f/0x3f0 [ 1603.811416][T16198] _raw_spin_lock+0x2f/0x40 [ 1603.817560][T16198] flush_bg_queue+0x1f3/0x3c0 [ 1603.825472][T16198] fuse_request_queue_background+0x2d1/0x580 [ 1603.833096][T16198] fuse_request_send_background+0x58/0x110 [ 1603.840546][T16198] fuse_fill_super+0x13b4/0x1720 [ 1603.847126][T16198] mount_nodev+0x66/0x110 [ 1603.853100][T16198] fuse_mount+0x2d/0x40 [ 1603.858901][T16198] legacy_get_tree+0x108/0x220 [ 1603.865306][T16198] vfs_get_tree+0x8e/0x390 [ 1603.871365][T16198] do_mount+0x138c/0x1c00 [ 1603.877339][T16198] ksys_mount+0xdb/0x150 [ 1603.883223][T16198] __x64_sys_mount+0xbe/0x150 [ 1603.889549][T16198] do_syscall_64+0xfd/0x680 [ 1603.895702][T16198] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1603.903341][T16198] SOFTIRQ-ON-W at: [ 1603.907323][T16198] lock_acquire+0x16f/0x3f0 [ 1603.913469][T16198] _raw_spin_lock+0x2f/0x40 [ 1603.919611][T16198] flush_bg_queue+0x1f3/0x3c0 [ 1603.925926][T16198] fuse_request_queue_background+0x2d1/0x580 [ 1603.933633][T16198] fuse_request_send_background+0x58/0x110 [ 1603.941354][T16198] fuse_fill_super+0x13b4/0x1720 [ 1603.947953][T16198] mount_nodev+0x66/0x110 [ 1603.953927][T16198] fuse_mount+0x2d/0x40 [ 1603.959723][T16198] legacy_get_tree+0x108/0x220 [ 1603.966128][T16198] vfs_get_tree+0x8e/0x390 [ 1603.972194][T16198] do_mount+0x138c/0x1c00 [ 1603.978170][T16198] ksys_mount+0xdb/0x150 [ 1603.984052][T16198] __x64_sys_mount+0xbe/0x150 [ 1603.990369][T16198] do_syscall_64+0xfd/0x680 [ 1603.996515][T16198] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1604.004050][T16198] INITIAL USE at: [ 1604.007940][T16198] lock_acquire+0x16f/0x3f0 [ 1604.013996][T16198] _raw_spin_lock+0x2f/0x40 [ 1604.020054][T16198] flush_bg_queue+0x1f3/0x3c0 [ 1604.026287][T16198] fuse_request_queue_background+0x2d1/0x580 [ 1604.033820][T16198] fuse_request_send_background+0x58/0x110 [ 1604.041179][T16198] fuse_fill_super+0x13b4/0x1720 [ 1604.047670][T16198] mount_nodev+0x66/0x110 [ 1604.053551][T16198] fuse_mount+0x2d/0x40 [ 1604.059258][T16198] legacy_get_tree+0x108/0x220 [ 1604.065576][T16198] vfs_get_tree+0x8e/0x390 [ 1604.071547][T16198] do_mount+0x138c/0x1c00 [ 1604.077429][T16198] ksys_mount+0xdb/0x150 [ 1604.083228][T16198] __x64_sys_mount+0xbe/0x150 [ 1604.089461][T16198] do_syscall_64+0xfd/0x680 [ 1604.095532][T16198] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1604.102969][T16198] } [ 1604.105470][T16198] ... key at: [] __key.44051+0x0/0x40 [ 1604.112905][T16198] ... acquired at: [ 1604.116705][T16198] lock_acquire+0x16f/0x3f0 [ 1604.121369][T16198] _raw_spin_lock+0x2f/0x40 [ 1604.126033][T16198] io_submit_one+0xefa/0x2ef0 [ 1604.130872][T16198] __x64_sys_io_submit+0x1bd/0x570 [ 1604.136156][T16198] do_syscall_64+0xfd/0x680 [ 1604.140825][T16198] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1604.146869][T16198] [ 1604.149181][T16198] [ 1604.149181][T16198] stack backtrace: [ 1604.155070][T16198] CPU: 1 PID: 16198 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #65 [ 1604.162943][T16198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1604.172983][T16198] Call Trace: [ 1604.176268][T16198] dump_stack+0x172/0x1f0 [ 1604.180594][T16198] check_irq_usage.cold+0x711/0xba0 [ 1604.185787][T16198] ? check_usage_forwards+0x370/0x370 [ 1604.191161][T16198] ? __lock_acquire+0x54f/0x5490 [ 1604.196093][T16198] ? graph_lock+0x7b/0x200 [ 1604.200499][T16198] ? is_dynamic_key+0x1c0/0x1c0 [ 1604.205343][T16198] __lock_acquire+0x2469/0x5490 [ 1604.210186][T16198] ? __lock_acquire+0x2469/0x5490 [ 1604.215198][T16198] ? mark_held_locks+0xf0/0xf0 [ 1604.219957][T16198] ? mark_held_locks+0xf0/0xf0 [ 1604.224718][T16198] ? fuse_dev_poll+0x160/0x240 [ 1604.229471][T16198] ? find_held_lock+0x35/0x130 [ 1604.234230][T16198] ? kasan_check_write+0x14/0x20 [ 1604.239509][T16198] lock_acquire+0x16f/0x3f0 [ 1604.244004][T16198] ? io_submit_one+0xefa/0x2ef0 [ 1604.248850][T16198] _raw_spin_lock+0x2f/0x40 [ 1604.253346][T16198] ? io_submit_one+0xefa/0x2ef0 [ 1604.258185][T16198] io_submit_one+0xefa/0x2ef0 [ 1604.262854][T16198] ? mark_held_locks+0xf0/0xf0 [ 1604.267614][T16198] ? ioctx_alloc+0x1db0/0x1db0 [ 1604.272376][T16198] ? __might_fault+0x12b/0x1e0 [ 1604.277133][T16198] ? aio_setup_rw+0x180/0x180 [ 1604.281822][T16198] __x64_sys_io_submit+0x1bd/0x570 [ 1604.286936][T16198] ? __x64_sys_io_submit+0x1bd/0x570 [ 1604.292217][T16198] ? __ia32_sys_io_destroy+0x420/0x420 [ 1604.297671][T16198] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1604.303125][T16198] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1604.308582][T16198] ? do_syscall_64+0x26/0x680 [ 1604.313259][T16198] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1604.319324][T16198] ? do_syscall_64+0x26/0x680 [ 1604.323995][T16198] ? lockdep_hardirqs_on+0x418/0x5d0 [ 1604.329279][T16198] do_syscall_64+0xfd/0x680 [ 1604.333779][T16198] ? do_syscall_64+0xfd/0x680 [ 1604.338462][T16198] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1604.344345][T16198] RIP: 0033:0x459519 [ 1604.348237][T16198] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1604.367834][T16198] RSP: 002b:00007f9d3cacbc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1604.376246][T16198] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459519 [ 1604.384215][T16198] RDX: 0000000020000040 RSI: 0000000000000001 RDI: 00007f9d3caab000 [ 1604.392189][T16198] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1604.400171][T16198] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9d3cacc6d4 [ 1604.408134][T16198] R13: 00000000004c0898 R14: 00000000004d3548 R15: 00000000ffffffff 18:02:56 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x0, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000008, 0x0, r0, 0x0}]) [ 1604.420414][T16202] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1604.430907][T16203] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1604.452767][T16203] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1604.464040][T16202] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1604.481759][ T3878] kobject: 'loop2' (00000000eab85545): kobject_uevent_env [ 1604.487548][T16205] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1604.496155][T16205] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1604.505749][ T3878] kobject: 'loop2' (00000000eab85545): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1604.508816][T16196] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env 18:02:56 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x200000000000000, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:56 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x0, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000008, 0x0, r0, 0x0}]) [ 1604.526076][T16196] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1604.542754][T16204] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1604.555720][T16203] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1604.575712][T16204] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1604.579215][ T3878] kobject: 'loop3' (000000004abc59c2): kobject_uevent_env [ 1604.620073][T16203] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' 18:02:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x8004ae98, 0x0) [ 1604.636181][ T3878] kobject: 'loop3' (000000004abc59c2): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1604.671460][ T3878] kobject: 'loop2' (00000000eab85545): kobject_uevent_env 18:02:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae63, 0x0) 18:02:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000740)={0x0, 0x0, 0x0, r2}) [ 1604.684401][ T3878] kobject: 'loop2' (00000000eab85545): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1604.701363][ T3878] kobject: 'loop4' (0000000005a7f206): kobject_uevent_env [ 1604.708634][ T3878] kobject: 'loop4' (0000000005a7f206): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1604.723076][ T3878] kobject: 'loop1' (00000000b4f8d435): kobject_uevent_env 18:02:56 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) fcntl$notify(r1, 0x402, 0x20) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x80000, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f00000000c0)=0xfffffffffffffffc, 0x4) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:56 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000008, 0x0, r0, 0x0}]) 18:02:56 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x400000000000000, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) [ 1604.730379][ T3878] kobject: 'loop1' (00000000b4f8d435): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1604.755062][ T3878] kobject: 'loop5' (0000000066f4fdfa): kobject_uevent_env [ 1604.781732][T16320] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1604.793052][T16327] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1604.793311][ T3878] kobject: 'loop5' (0000000066f4fdfa): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1604.801962][T16326] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1604.810487][T16320] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1604.831529][T16327] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1604.845295][T16326] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1604.851458][T16319] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env 18:02:56 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000008, 0x0, r0, 0x0}]) [ 1604.882694][T16319] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1604.915866][T16320] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1604.922337][T16324] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env 18:02:57 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x4000000000000000, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:57 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000008, 0x0, r0, 0x0}]) [ 1604.971743][T16320] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1604.992170][T16324] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1605.003334][ T3878] kobject: 'loop3' (000000004abc59c2): kobject_uevent_env [ 1605.016897][T16323] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1605.026136][ T3878] kobject: 'loop3' (000000004abc59c2): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1605.051439][T16323] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1605.055004][T16320] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env 18:02:57 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000008, 0x0, r0, 0x0}]) [ 1605.072452][ T3878] kobject: 'loop2' (00000000eab85545): kobject_uevent_env [ 1605.082373][T16320] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1605.095186][T16327] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1605.100949][ T3878] kobject: 'loop2' (00000000eab85545): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1605.111746][T16327] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' 18:02:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x80081272, 0x0) [ 1605.127407][ T3878] kobject: 'loop2' (00000000eab85545): kobject_uevent_env [ 1605.136913][ T3878] kobject: 'loop2' (00000000eab85545): fill_kobj_path: path = '/devices/virtual/block/loop2' 18:02:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000200)={0x8, 0x120, 0xfa00, {0x3, {0x8, 0x80, "e56a551dc61bc7e2abef3aca4ab986ba964b6f3aa7342fe1f90b82260817f81dc4f2884eb72587c67152514eeeb8ad999c229e564c6f762d9a2b92cbf6ae70900f5d7f04c17457edecfb43146119cf69a4afd0da6823df4d0e8e09ab5474649a913421c1e149c267130d52f70a864017f2582b300f5dd754654b07157dabf0eea7f16ce04764069d06d769d80d590a611f7a7a6e158bd3f57f42737a289f932da41903742116f5b27c1e8a579c217bc45f535fde339fd3950f702b54942ff8f9e5ffe9528af1578c9969c23eb59a478d170bcbee9f2ce97a9ec5a9f96965779811ac7699675ece65613747b717a2ad842b913b81fbe0f529254dd34ff2aa51d0", 0xc2, 0xe83, 0xfffffffffffffffa, 0xf075, 0xffffffffffff2c40, 0xa27, 0xffffffffffffffff}, r3}}, 0x128) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000740)={0x0, 0x0, 0x0, r2}) 18:02:57 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x8000000000000000, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) [ 1605.199757][ T3878] kobject: 'loop4' (0000000005a7f206): kobject_uevent_env [ 1605.207758][ T3878] kobject: 'loop4' (0000000005a7f206): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1605.208613][T16453] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1605.228137][ T3878] kobject: 'loop5' (0000000066f4fdfa): kobject_uevent_env [ 1605.246362][ T3878] kobject: 'loop5' (0000000066f4fdfa): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1605.248028][T16327] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1605.265492][T16458] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1605.272730][T16453] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1605.278426][T16327] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1605.287222][T16451] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1605.302346][ T3878] kobject: 'loop3' (000000004abc59c2): kobject_uevent_env [ 1605.310461][T16458] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1605.320306][ T3878] kobject: 'loop3' (000000004abc59c2): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1605.323021][T16451] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1605.331961][ T3878] kobject: 'loop2' (00000000eab85545): kobject_uevent_env 18:02:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae64, 0x0) 18:02:57 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x18}, 0x10) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000100)={0xdd, 0x1000000000, 0x0, 0x8000000000000, 0x9, 0x636}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r1) socket$nl_xfrm(0x10, 0x3, 0x6) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r1, 0x0}]) 18:02:57 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000008, 0x0, r0, 0x0}]) [ 1605.349983][ T3878] kobject: 'loop2' (00000000eab85545): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1605.364032][T16457] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1605.371244][T16457] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1605.376999][T16465] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1605.391035][ T3878] kobject: 'loop1' (00000000b4f8d435): kobject_uevent_env 18:02:57 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x2, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) [ 1605.404945][ T3878] kobject: 'loop1' (00000000b4f8d435): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1605.410988][T16465] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1605.439938][T16464] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1605.445605][T16458] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1605.462243][T16453] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1605.468340][T16464] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1605.475300][T16458] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1605.483058][ T3878] kobject: 'loop3' (000000004abc59c2): kobject_uevent_env [ 1605.494607][T16453] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' 18:02:57 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000008, 0x0, r0, 0x0}]) [ 1605.506502][ T3878] kobject: 'loop3' (000000004abc59c2): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1605.532134][T16453] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1605.543521][T16458] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1605.546862][T16465] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env 18:02:57 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x4, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) [ 1605.559152][T16453] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1605.586910][T16465] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1605.595412][T16458] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' 18:02:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x80086301, 0x0) 18:02:57 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x0, 0x0) [ 1605.673525][ T3878] kobject: 'loop4' (0000000005a7f206): kobject_uevent_env [ 1605.689656][ T3878] kobject: 'loop4' (0000000005a7f206): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1605.716595][T16465] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env 18:02:57 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x7, 0x400000) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000000100)={0x6, 0x3, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3}) ioctl$KVM_IOEVENTFD(r2, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) fstat(r2, &(0x7f0000000000)) bind$vsock_stream(r1, &(0x7f0000000180)={0x28, 0x0, 0x2711}, 0x10) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000740)={0x0, 0x0, 0x0, r3}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000200)=0x1) [ 1605.720784][T16582] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1605.741725][T16465] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' 18:02:57 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x4000, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) [ 1605.769124][ T3878] kobject: 'loop5' (0000000066f4fdfa): kobject_uevent_env [ 1605.791256][T16588] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1605.802391][T16582] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' 18:02:57 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) r1 = socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) write$binfmt_script(r1, &(0x7f0000000240)={'#! ', './file0', [{0x20, '@-userppp0cgroup+trustedself%{/-wlan1cgroup'}, {0x20, '\\$-mime_type\x00'}, {0x20, '['}], 0xa, "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"}, 0x1047) 18:02:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae65, 0x0) [ 1605.813231][ T3878] kobject: 'loop5' (0000000066f4fdfa): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1605.832892][T16588] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1605.844145][T16581] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1605.851562][ T3878] kobject: 'loop3' (000000004abc59c2): kobject_uevent_env [ 1605.864149][ T3878] kobject: 'loop3' (000000004abc59c2): fill_kobj_path: path = '/devices/virtual/block/loop3' 18:02:57 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x0, 0x0) [ 1605.895762][ T3878] kobject: 'loop1' (00000000b4f8d435): kobject_uevent_env [ 1605.905807][T16581] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1605.914787][ T3878] kobject: 'loop1' (00000000b4f8d435): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1605.928178][T16598] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1605.940028][T16598] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1605.956220][ T3878] kobject: 'loop2' (00000000eab85545): kobject_uevent_env [ 1605.972892][T16582] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1605.979827][ T3878] kobject: 'loop2' (00000000eab85545): fill_kobj_path: path = '/devices/virtual/block/loop2' 18:02:58 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x1000000, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) [ 1605.982986][T16582] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' 18:02:58 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x0, 0x0) 18:02:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x80184947, 0x0) [ 1606.019514][T16597] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1606.024315][T16582] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1606.033714][T16582] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1606.038257][ T3878] kobject: 'loop3' (000000004abc59c2): kobject_uevent_env [ 1606.059539][T16597] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1606.102008][ T3878] kobject: 'loop3' (000000004abc59c2): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1606.135447][T16598] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1606.140567][T16587] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1606.145429][ T3878] kobject: 'loop4' (0000000005a7f206): kobject_uevent_env [ 1606.157923][T16685] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1606.160628][T16587] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1606.166181][ T3878] kobject: 'loop4' (0000000005a7f206): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1606.179163][T16685] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' 18:02:58 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x0, &(0x7f0000000040)) [ 1606.194962][T16598] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1606.204233][ T3878] kobject: 'loop2' (00000000eab85545): kobject_uevent_env [ 1606.212292][ T3878] kobject: 'loop2' (00000000eab85545): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1606.224343][T16662] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env 18:02:58 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) r2 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x100000001, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000080)=0x8, 0x4) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0x8, 0x101000) 18:02:58 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x2000000, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae66, 0x0) [ 1606.286392][T16598] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1606.305691][T16598] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1606.320918][T16662] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1606.373464][ T3878] kobject: 'loop1' (00000000b4f8d435): kobject_uevent_env [ 1606.411819][T16685] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1606.419240][ T3878] kobject: 'loop1' (00000000b4f8d435): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1606.424852][T16685] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1606.478800][T16748] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1606.490043][T16588] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1606.497771][T16748] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1606.508445][T16588] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1606.554731][ T3878] kobject: 'loop2' (00000000eab85545): kobject_uevent_env [ 1606.574537][ T3878] kobject: 'loop2' (00000000eab85545): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1606.583368][T16685] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1606.594694][T16685] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1606.606511][T16588] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1606.615445][T16746] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1606.631791][T16588] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1606.632587][T16746] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' 18:02:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) accept$inet(r2, 0x0, &(0x7f0000000180)) r3 = eventfd2(0x0, 0x0) r4 = msgget(0x1, 0x10) msgctl$IPC_STAT(r4, 0x2, &(0x7f0000000000)=""/74) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3}) ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x42000, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r5, 0xc0206416, &(0x7f0000000100)={0x2, 0x6f, 0xc997, 0x1fb, 0x8, 0x5}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000740)={0x0, 0x0, 0x0, r3}) 18:02:58 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x4000000, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:58 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x0, &(0x7f0000000040)) 18:02:58 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80041272, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000180)=0x1) timer_create(0x0, 0x0, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000380), 0xa7) getpgrp(0xffffffffffffffff) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x404040, 0x0) ioctl$SG_GET_PACK_ID(r3, 0x227c, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0xfffffffff0010000}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000700)={"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"}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x8090ae81, 0x0) [ 1606.652569][ T3878] kobject: 'loop3' (000000004abc59c2): kobject_uevent_env [ 1606.660110][ T3878] kobject: 'loop3' (000000004abc59c2): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1606.684840][T16748] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1606.689755][ T3878] kobject: 'loop4' (0000000005a7f206): kobject_uevent_env [ 1606.706130][T16839] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1606.707109][T16748] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1606.717259][ T3878] kobject: 'loop4' (0000000005a7f206): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1606.743704][T16839] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1606.745498][T16841] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1606.776824][T16748] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1606.786572][T16841] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1606.796841][T16748] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' 18:02:58 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x0, &(0x7f0000000040)) 18:02:58 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x40000000, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) [ 1606.801628][ T3878] kobject: 'loop5' (0000000066f4fdfa): kobject_uevent_env [ 1606.822725][T16840] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1606.834094][T16838] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env 18:02:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae67, 0x0) [ 1606.851592][T16840] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1606.864455][ T3878] kobject: 'loop5' (0000000066f4fdfa): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1606.877803][T16838] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1606.903629][T16853] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1606.904390][T16841] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1606.914122][ T3878] kobject: 'loop3' (000000004abc59c2): kobject_uevent_env [ 1606.926063][T16841] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1606.938282][T16853] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' 18:02:58 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x100000000000000, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:59 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[0x0]) [ 1606.951743][T16839] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1606.958718][T16839] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1606.968588][ T3878] kobject: 'loop3' (000000004abc59c2): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1606.991781][ T3878] kobject: 'loop2' (00000000eab85545): kobject_uevent_env [ 1607.000986][T16841] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env 18:02:59 executing program 0: mq_unlink(&(0x7f0000000080)='&#)-vmnet1\x00') syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:59 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x200000, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={0x0, 0xce, 0xffffffffffff7fff}, &(0x7f0000000300)=0xc) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e22, 0xdfe, @local, 0x4}}, 0x1, 0x3ff}, 0x90) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x400400, 0x0) r3 = eventfd2(0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000180)={0x0, 0x5e, "6b824437ab69da197b2cb353b7a3e97e383eebbeb15c7d43ef064744503426cd7ccc72d1189024a48cd17cdf971a669a1a660cd086297970d6790e2f303ad5efbac46b192ff7b2f3c38bc2399bad4c7290cb6e62c73d075cacbe165cc6f7"}, &(0x7f0000000100)=0x66) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={r4, @in={{0x2, 0x4e23, @empty}}, 0x7, 0x4, 0x7, 0x1ff, 0x40}, 0x98) ioctl$KVM_IOEVENTFD(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000400)=0x0) sched_getattr(r5, &(0x7f0000000440), 0x30, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$KVM_IOEVENTFD(r6, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000740)={0x0, 0x0, 0x0, r3}) [ 1607.023605][T16841] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1607.030868][T16852] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1607.040431][ T3878] kobject: 'loop2' (00000000eab85545): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1607.063226][ T3878] kobject: 'loop1' (00000000b4f8d435): kobject_uevent_env 18:02:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x2, 0x0, 0x0, r0}) ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000740)={0x0, 0x0, 0x0, r2}) [ 1607.073895][T16839] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1607.081262][T16852] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1607.091726][ T3878] kobject: 'loop1' (00000000b4f8d435): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1607.102194][T16839] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' 18:02:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x8138ae83, 0x0) [ 1607.122960][T16853] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1607.127696][ T3878] kobject: 'loop3' (000000004abc59c2): kobject_uevent_env [ 1607.140629][ T3878] kobject: 'loop3' (000000004abc59c2): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1607.153402][T16853] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' 18:02:59 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[0x0]) 18:02:59 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x200000000000000, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) [ 1607.172750][T16969] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1607.185018][T16969] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1607.188502][ T3878] kobject: 'loop2' (00000000eab85545): kobject_uevent_env [ 1607.228233][ T3878] kobject: 'loop2' (00000000eab85545): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1607.247312][T16853] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1607.248493][T17073] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1607.261329][T16853] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1607.262587][T16968] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env 18:02:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae68, 0x0) 18:02:59 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x4, 0x101001) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000000c0)=0x100, 0x4) close(r1) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) [ 1607.281620][ T3878] kobject: 'loop5' (0000000066f4fdfa): kobject_uevent_env [ 1607.288950][T16968] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1607.298812][T17073] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1607.308694][ T3878] kobject: 'loop5' (0000000066f4fdfa): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1607.331484][ T3878] kobject: 'loop5' (0000000066f4fdfa): kobject_uevent_env [ 1607.341187][ T3878] kobject: 'loop5' (0000000066f4fdfa): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1607.343370][T17080] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1607.351585][T17056] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env 18:02:59 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x400000000000000, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:02:59 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[0x0]) [ 1607.374089][T17080] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1607.401308][ T3878] kobject: 'loop4' (0000000005a7f206): kobject_uevent_env [ 1607.408488][ T3878] kobject: 'loop4' (0000000005a7f206): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1607.411437][T16969] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1607.417967][T17056] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1607.442489][ T3878] kobject: 'loop2' (00000000eab85545): kobject_uevent_env [ 1607.449849][ T3878] kobject: 'loop2' (00000000eab85545): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1607.455766][T17076] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1607.462638][ T3878] kobject: 'loop1' (00000000b4f8d435): kobject_uevent_env [ 1607.472698][T16969] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1607.485490][T17073] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1607.486294][T17076] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1607.493101][T17073] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1607.513498][ T3878] kobject: 'loop1' (00000000b4f8d435): fill_kobj_path: path = '/devices/virtual/block/loop1' 18:02:59 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) [ 1607.535739][ T3878] kobject: 'loop2' (00000000eab85545): kobject_uevent_env [ 1607.549314][T16969] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1607.551247][ T3878] kobject: 'loop2' (00000000eab85545): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1607.557193][T16969] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' 18:02:59 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x4000000000000000, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) [ 1607.582852][T17080] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1607.600671][T17073] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1607.602860][T17080] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1607.615839][ T3878] kobject: 'loop3' (000000004abc59c2): kobject_uevent_env 18:02:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000080)='/dev/kvm\x00'}, 0x30) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000002c0)={0x2, 0x70, 0x5, 0xffffffffffffffb0, 0x8001, 0x9, 0x0, 0x4, 0x100, 0xc, 0x0, 0x419a, 0x4, 0x9, 0x3, 0xe0, 0xa9, 0x100000001, 0x1, 0x8000, 0x8, 0x4, 0x96d, 0x2, 0x381, 0x40, 0x1ff, 0xc4b5, 0x7, 0x4, 0x2, 0x7, 0x7, 0x4, 0xfff, 0xffff, 0x9, 0x0, 0x0, 0xc6a, 0x0, @perf_config_ext={0x1ff, 0x3}, 0x404, 0x1f, 0x3, 0x8, 0x3, 0x4, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) r4 = accept$inet(0xffffffffffffff9c, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10) setsockopt$inet_MCAST_LEAVE_GROUP(r4, 0x0, 0x2d, &(0x7f0000000200)={0x200, {{0x2, 0x4e24, @multicast1}}}, 0x88) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000740)={0x0, 0x0, 0x0, r2}) 18:02:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0x81a0ae8c, 0x0) [ 1607.626875][T17073] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1607.641373][ T3878] kobject: 'loop3' (000000004abc59c2): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1607.666516][ T3878] kobject: 'loop2' (00000000eab85545): kobject_uevent_env [ 1607.686983][T17195] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1607.690184][ T3878] kobject: 'loop2' (00000000eab85545): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1607.702561][T17080] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1607.705887][ T3878] kobject: 'loop3' (000000004abc59c2): kobject_uevent_env [ 1607.711968][T17195] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1607.720103][T17197] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env 18:02:59 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x10, &(0x7f0000000040)={&(0x7f00000000c0)=""/115, 0x73, 0xffffffffffffffff}}, 0x10) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=r1, 0x4) close(r0) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x200, 0x0) ioctl$KVM_GET_XCRS(r4, 0x8188aea6, &(0x7f00000002c0)={0x2, 0x1000, [{0x957c, 0x0, 0x4}, {0x7, 0x0, 0x2}]}) io_setup(0x7, &(0x7f0000000240)=0x0) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f00000001c0)=0x5, 0x4) io_submit(r5, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000880000000005, 0x40, r3, 0x0, 0x0, 0x3}]) 18:02:59 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) [ 1607.735646][ T3878] kobject: 'loop3' (000000004abc59c2): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1607.746284][T17080] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1607.747469][ T3878] kobject: 'loop5' (0000000066f4fdfa): kobject_uevent_env [ 1607.763540][T17197] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' 18:02:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae69, 0x0) [ 1607.779663][ T3878] kobject: 'loop5' (0000000066f4fdfa): fill_kobj_path: path = '/devices/virtual/block/loop5' 18:02:59 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x8000000000000000, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) [ 1607.808372][T17196] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1607.833943][T17196] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1607.845572][ T3878] kobject: 'loop4' (0000000005a7f206): kobject_uevent_env [ 1607.860201][ T3878] kobject: 'loop4' (0000000005a7f206): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1607.880697][T17235] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1607.884677][T17197] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1607.902159][ T3878] kobject: 'loop2' (00000000eab85545): kobject_uevent_env [ 1607.905545][T17235] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1607.913274][T17197] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1607.931284][ T3878] kobject: 'loop2' (00000000eab85545): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1607.945600][T17203] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1607.948007][ T3878] kobject: 'loop1' (00000000b4f8d435): kobject_uevent_env 18:02:59 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 18:03:00 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x2, 0x1000800000000005, 0x0, r0, 0x0}]) [ 1607.956684][T17203] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1607.973487][T17197] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1607.993831][ T3878] kobject: 'loop1' (00000000b4f8d435): fill_kobj_path: path = '/devices/virtual/block/loop1' 18:03:00 executing program 0: socketpair$unix(0x1, 0x4000008, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) close(r0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x8}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000003c0)={0x6, 0x3567, 0x8009, 0x7ff, 0x7f, 0xfffffffffffffff7, 0xc27, 0x40, r2}, &(0x7f0000000400)=0x20) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) socketpair(0xb, 0x5, 0x8, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_mreq(r5, 0x29, 0x1f, &(0x7f0000000100)={@ipv4={[], [], @multicast2}}, &(0x7f0000000140)=0x14) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x41, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = accept$inet6(r4, 0x0, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) write(r10, &(0x7f0000000480)="569b7ae1ca214cd016507b1b3f6599db543d1244a49345e0d0afcda1d261ef8bcd72a8e959f2a4f0628e1661", 0x2c) setsockopt$SO_TIMESTAMPING(r11, 0x1, 0x25, &(0x7f0000000240)=0xa3, 0x4) setsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, &(0x7f0000000040)='dummy0\x00', 0x10) connect$inet(r11, &(0x7f00000004c0)={0x2, 0x20000004e21, @empty}, 0x1c8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r11, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) recvfrom(r11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, 0x0, 0x3c854bbdaaa57fb0, 0x46, 0x0, 0x188) readlinkat(r6, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=""/177, 0x4c) io_setup(0x0, &(0x7f0000000440)) [ 1607.993920][T17197] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1608.025173][T17235] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1608.034334][ T3878] kobject: 'loop3' (000000004abc59c2): kobject_uevent_env [ 1608.038202][T17235] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1608.058963][ T3878] kobject: 'loop3' (000000004abc59c2): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1608.083889][T17317] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1608.094685][ T3878] kobject: 'loop2' (00000000eab85545): kobject_uevent_env 18:03:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xc0045878, 0x0) [ 1608.104029][T17317] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1608.115591][T17235] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1608.119008][ T3878] kobject: 'loop2' (00000000eab85545): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1608.133181][T17235] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1608.146904][T17194] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env 18:03:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae6a, 0x0) 18:03:00 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000008, 0x0, 0xffffffffffffffff, 0x0}]) [ 1608.155885][ T3878] kobject: 'loop3' (000000004abc59c2): kobject_uevent_env [ 1608.186442][T17194] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1608.191765][ T3878] kobject: 'loop3' (000000004abc59c2): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1608.236156][T17422] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1608.245784][ T3878] kobject: 'loop4' (0000000005a7f206): kobject_uevent_env [ 1608.254715][T17424] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1608.258020][T17422] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1608.266875][T17424] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1608.285454][ T3878] kobject: 'loop4' (0000000005a7f206): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1608.294808][T17195] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1608.297366][ T3878] kobject: 'loop2' (00000000eab85545): kobject_uevent_env [ 1608.310960][T17195] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1608.313567][ T3878] kobject: 'loop2' (00000000eab85545): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1608.351204][T17381] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1608.352035][T17316] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1608.358202][T17381] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1608.367066][T17423] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1608.379740][ T3878] kobject: 'loop1' (00000000b4f8d435): kobject_uevent_env [ 1608.387841][T17195] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1608.391624][ T3878] kobject: 'loop1' (00000000b4f8d435): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1608.407003][T17316] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1608.420059][T17422] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1608.420860][ T3878] kobject: 'loop3' (000000004abc59c2): kobject_uevent_env [ 1608.427034][T17422] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1608.427209][T17195] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1608.436312][ T3878] kobject: 'loop3' (000000004abc59c2): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1608.459369][T17423] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1608.478156][T17381] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1608.478254][ T3878] kobject: 'loop2' (00000000eab85545): kobject_uevent_env 18:03:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x20002, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000180)='trusted.overlay.upper\x00', &(0x7f00000002c0)={0x0, 0xfb, 0x3e, 0x4, 0x7f, "2d801d48e1e1c9954f199fd3313bfce3", "0059576df6717a00f7dedfb83cc634909ac7c4f9096ced6afa071bc5fe2bfac5cb3a62612fde3e56b6"}, 0x3e, 0x1) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x10) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000740)={0x0, 0x0, 0x0, r2}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rfkill\x00', 0x2000, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x20800, 0x0) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000040)={0x1f, 0x96, &(0x7f0000000200)="7871ba55729602d8bbddda6f966f7a5012c1285df079a305158ff6ff70e462829caacf5e6aab8f97821426921d89e9c8813f16caba9b9a4e7e4e00ca289ac7e3fa134c0a3f6e83b495147f1df914d7d271a786ecc7781cf40205ef3886d3ca0582fc8e82ad47c7a0059e97a548c508c9fb14b62ea1008970c4db35fcc449e202041d69f0e6271bf5e812fa04f916c2287d106ad0f86c"}) 18:03:00 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x4, 0x1000800000000005, 0x0, r0, 0x0}]) 18:03:00 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000008, 0x0, 0xffffffffffffffff, 0x0}]) 18:03:00 executing program 0: socketpair$unix(0x1, 0x31c16c14677dc5b4, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)={0x4, 0x4, 0x420, 0x369, 0x8000, 0x8}) [ 1608.495311][ T3878] kobject: 'loop2' (00000000eab85545): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1608.498990][T17381] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1608.545740][T17424] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1608.568026][T17424] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' 18:03:00 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000008, 0x0, 0xffffffffffffffff, 0x0}]) 18:03:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xc0045878, 0x0) 18:03:00 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x4000, 0x1000800000000005, 0x0, r0, 0x0}]) [ 1608.723464][T17442] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1608.734310][T17424] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1608.761482][ T3878] kobject: 'loop3' (000000004abc59c2): kobject_uevent_env [ 1608.787045][T17442] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1608.797510][T17424] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1608.808768][T17452] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env 18:03:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae6b, 0x0) 18:03:00 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000008, 0x0, 0xffffffffffffffff, 0x0}]) [ 1608.822054][ T3878] kobject: 'loop3' (000000004abc59c2): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1608.832669][T17452] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1608.840522][T17441] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1608.856458][T17441] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' 18:03:00 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x1000000, 0x1000800000000005, 0x0, r0, 0x0}]) [ 1608.974207][T17442] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1608.981029][T17533] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1609.011876][T17447] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env 18:03:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae6a, 0x0) [ 1609.060170][T17533] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1609.064156][T17442] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1609.075735][T17447] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' 18:03:01 executing program 0: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x800, 0x0) write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r1) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') accept4$packet(r0, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x14, 0x0) clock_gettime(0x0, &(0x7f0000001cc0)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000001c40)=[{{&(0x7f0000000800)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000880)=""/8, 0x8}, {&(0x7f00000008c0)=""/26, 0x1a}], 0x2, &(0x7f0000000940)=""/254, 0xfe}, 0x4}, {{&(0x7f0000000a40)=@caif=@dbg, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000ac0)=""/112, 0x70}, {&(0x7f0000000b40)=""/74, 0x4a}, {&(0x7f0000000bc0)=""/4096, 0x1000}], 0x3, &(0x7f0000001c00)=""/10, 0xa}, 0x20}], 0x2, 0x1, &(0x7f0000001d00)={r6, r7+10000000}) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000001dc0)={@empty, @empty, 0x0}, &(0x7f0000001e00)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000003400)={{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000003500)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000003540)={'vcan0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003580)={{{@in=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @empty}}}}, &(0x7f0000003680)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000036c0)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f00000037c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000003840)={'team0\x00', 0x0}) accept4$packet(r0, &(0x7f00000038c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000003900)=0x14, 0x80800) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000003980)={0x0, @loopback, @local}, &(0x7f00000039c0)=0xc) accept$packet(r0, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000003b00)=0x14) accept$packet(r0, &(0x7f0000003c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000003c80)=0x14) getpeername$packet(r0, &(0x7f0000006340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000006380)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f00000063c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000006400)=0x14) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000006500)={@local, 0x0}, &(0x7f0000006540)=0x14) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000007080)={0x0, @dev, @local}, &(0x7f00000070c0)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000071c0)={'gre0\x00', 0x0}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000007200)={0x0, @multicast1, @broadcast}, &(0x7f0000007240)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000007280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f00000078c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000007880)={&(0x7f00000072c0)={0x594, r4, 0x104, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r5}, {0x7c, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x1ac, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r13}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}]}}, {{0x8, 0x1, r15}, {0x130, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x1720000000000}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xff}}, {0x8, 0x6, r18}}}]}}, {{0x8, 0x1, r19}, {0xe4, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r20}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r21}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r22}, {0x44, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r23}, {0x88, 0x2, [{0x84, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x54, 0x4, [{0x7, 0x1d6, 0x2, 0x1}, {0x5, 0x9, 0x0, 0xffff}, {0xd4e9, 0x5, 0x3}, {0x3f, 0x121, 0x5, 0x2}, {0x81, 0xfffffffffffffffb, 0x2, 0x9}, {0x1000, 0x1, 0x4, 0x37dc87b}, {0x0, 0x800, 0x0, 0x1ff}, {0x401, 0x6, 0x3, 0x2}, {0x675, 0x9, 0x8, 0xffff}, {0xd1cf, 0x8, 0x5, 0x5}]}}}]}}, {{0x8, 0x1, r24}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r25}}}]}}]}, 0x594}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000040) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r1, 0x0}]) [ 1609.173704][T17576] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1609.193495][T17467] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1609.213089][T17452] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1609.213712][T17576] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1609.247962][T17467] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1609.267542][T17442] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1609.267748][T17452] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1609.280749][T17442] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1609.323519][T17533] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1609.342696][T17533] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1609.366735][T17575] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env 18:03:01 executing program 5: io_setup(0x4, &(0x7f0000000040)=0x0) io_destroy(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r3, 0x44, 0x1, r3}) ioctl$KVM_IOEVENTFD(r2, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000740)={0x0, 0x0, 0x0, r3}) 18:03:01 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x2000000, 0x1000800000000005, 0x0, r0, 0x0}]) [ 1609.395283][T17575] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1609.422484][ T3878] kobject: 'loop5' (0000000066f4fdfa): kobject_uevent_env [ 1609.423219][T17452] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1609.437607][ T3878] kobject: 'loop5' (0000000066f4fdfa): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1609.457834][T17452] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1609.477965][T17533] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env 18:03:01 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x40000, 0x0) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000040)) io_setup(0x5, &(0x7f00000001c0)=0x0) io_submit(r2, 0x0, &(0x7f0000000040)) 18:03:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xc008ae67, 0x0) [ 1609.491429][T17533] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1609.520654][T17692] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env 18:03:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae6c, 0x0) 18:03:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae6a, 0x0) 18:03:01 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x4000000, 0x1000800000000005, 0x0, r0, 0x0}]) [ 1609.541039][T17692] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1609.561852][ T3878] kobject: 'loop4' (0000000005a7f206): kobject_uevent_env [ 1609.584755][ T3878] kobject: 'loop4' (0000000005a7f206): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1609.636162][ T3878] kobject: 'loop1' (00000000b4f8d435): kobject_uevent_env [ 1609.671120][T17765] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1609.683078][T17803] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1609.684021][T17788] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1609.699077][T17788] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1609.701775][ T3878] kobject: 'loop1' (00000000b4f8d435): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1609.712139][T17765] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' 18:03:01 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1040800000000005, 0x0, r0, 0x0}]) [ 1609.731947][T17803] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1609.745293][ T3878] kobject: 'loop3' (000000004abc59c2): kobject_uevent_env [ 1609.761902][ T3878] kobject: 'loop3' (000000004abc59c2): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1609.771528][T17801] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env 18:03:01 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x40000000, 0x1000800000000005, 0x0, r0, 0x0}]) [ 1609.829309][T17801] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1609.838500][T17687] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1609.848446][T17687] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1609.887788][T17764] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1609.919786][T17803] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1609.936030][T17764] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1609.954004][T17786] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1609.962130][T17803] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' 18:03:02 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x100000000000000, 0x1000800000000005, 0x0, r0, 0x0}]) [ 1609.981185][T17786] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1609.994006][T17765] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1610.014905][T17765] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1610.028580][T17803] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env 18:03:02 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) 18:03:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae6a, 0x0) [ 1610.047343][ T3878] kobject: 'loop3' (000000004abc59c2): kobject_uevent_env [ 1610.062785][ T3878] kobject: 'loop3' (000000004abc59c2): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1610.063763][T17803] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1610.122671][ T3878] kobject: 'loop1' (00000000b4f8d435): kobject_uevent_env [ 1610.133937][T17765] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1610.136885][T17690] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1610.143690][ T3878] kobject: 'loop1' (00000000b4f8d435): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 1610.161583][T17765] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1610.165817][ T3878] kobject: 'loop2' (00000000eab85545): kobject_uevent_env [ 1610.174259][T17925] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1610.179300][ T3878] kobject: 'loop2' (00000000eab85545): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1610.187998][T17690] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1610.240913][T17925] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1610.261372][ T3878] kobject: 'loop4' (0000000005a7f206): kobject_uevent_env [ 1610.280913][ T3878] kobject: 'loop4' (0000000005a7f206): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1610.293296][T17690] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1610.317335][T17690] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' 18:03:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x2000, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000200)=0x80) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3}) ioctl$KVM_IOEVENTFD(r2, 0xc018aec0, &(0x7f0000000140)={0x0, 0x0}) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x400000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000240)='/dev/kvm\x00') ioctl$EVIOCGREP(r4, 0x80084503, &(0x7f0000000100)=""/28) accept(r4, 0x0, &(0x7f0000000040)) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000740)={0x3, 0x0, 0xfffffffffffffff8, r2}) 18:03:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae6d, 0x0) 18:03:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xc0189436, 0x0) 18:03:02 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x200000000000000, 0x1000800000000005, 0x0, r0, 0x0}]) 18:03:02 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x80000, 0x0) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f00000000c0)=0x7) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) r4 = dup2(r1, r1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) setsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000180)={@loopback, @loopback, r5}, 0xc) [ 1610.377122][T17922] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1610.388235][T17922] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1610.404154][ T3878] kobject: 'loop5' (0000000066f4fdfa): kobject_uevent_env [ 1610.424291][T18032] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1610.444168][ T3878] kobject: 'loop5' (0000000066f4fdfa): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1610.448808][T18032] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1610.454724][T18036] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env 18:03:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) [ 1610.485411][T18083] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1610.507754][T18036] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' 18:03:02 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x400000000000000, 0x1000800000000005, 0x0, r0, 0x0}]) [ 1610.545221][ T3878] kobject: 'loop2' (00000000eab85545): kobject_uevent_env [ 1610.556559][T18034] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1610.557148][T18031] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1610.563936][ T3878] kobject: 'loop2' (00000000eab85545): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 1610.577366][T18083] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1610.590015][T18034] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1610.592726][T18031] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1610.613967][T18146] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1610.625324][T18146] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1610.632446][ T3878] kobject: 'loop3' (000000004abc59c2): kobject_uevent_env [ 1610.645411][T18036] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1610.645835][T18083] QAT: Invalid ioctl [ 1610.653093][T18036] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1610.671722][T18032] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1610.673580][ T3878] kobject: 'loop3' (000000004abc59c2): fill_kobj_path: path = '/devices/virtual/block/loop3' 18:03:02 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r0) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000140)=0x4a90fc8b, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x0, 0x51, 0x3, 0xffffffffffff480d}]}, 0x10) socket$vsock_dgram(0x28, 0x2, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000005, 0x0, r0, 0x0}]) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) [ 1610.699838][T18144] QAT: Invalid ioctl [ 1610.723949][T18032] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1610.746336][T18036] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1610.751876][T18145] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1610.761899][T18038] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env 18:03:02 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close(r0) syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x4000000000000000, 0x1000800000000005, 0x0, r0, 0x0}]) [ 1610.779530][T18145] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1610.784915][T18038] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1610.806490][T18036] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1610.818713][T18032] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1610.829767][ T3878] kobject: 'loop3' (000000004abc59c2): kobject_uevent_env [ 1610.836915][ T3878] kobject: 'loop3' (000000004abc59c2): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1610.841670][T18083] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1610.852483][T18032] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1610.858256][T18144] QAT: Invalid ioctl [ 1610.869951][T18149] QAT: Invalid ioctl 18:03:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xae6e, 0x0) [ 1610.888352][T18083] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1610.914067][ T3878] kobject: 'loop1' (00000000b4f8d435): kobject_uevent_env 18:03:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @pic={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f004}) ioctl$KVM_RUN(r2, 0xc018ae85, 0x0) [ 1610.932431][T18263] kobject: 'kvm' (00000000babc13c5): kobject_uevent_env [ 1610.939624][T18263] kobject: 'kvm' (00000000babc13c5): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1610.941878][ T3878] kobject: 'loop1' (00000000b4f8d435): fill_kobj_path: path = '/devices/virtual/block/loop1' 18:03:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1,