cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 577.310895] RSP: 002b:00007f10c0528c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 577.318671] RAX: ffffffffffffffda RBX: 00007f10c0528c90 RCX: 0000000000457569 [ 577.325996] RDX: 0000000020000040 RSI: 0000000000000008 RDI: 0000000000000003 [ 577.333312] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 22:12:17 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[], 0x5, 0x9, 0x6, 0x3, 0x4b, r2}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000080), 0x4) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000480)=0x7ff, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) clock_getres(0x7, &(0x7f00000004c0)) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) openat$md(0xffffffffffffff9c, &(0x7f0000000500)='/dev/md0\x00', 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e20, 0x12226344, @dev={0xfe, 0x80, [], 0x13}, 0xffffffffffffdf78}}, [0x0, 0x4, 0x7332, 0x4b9, 0xfffffffffffffe01, 0x400, 0x8001, 0x3, 0x1, 0x10001, 0x5, 0x19777932, 0x5, 0x1000, 0x2]}, &(0x7f00000001c0)=0x100) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000380)=ANY=[@ANYRES32=r4, @ANYBLOB="f1000000c25e1245c6d3042d9ff2a9e06d2a359e132582eeb0bc062e9f30b5736df977fe27f09cd317d2794e23bdb424d684323fcd4c60a69cfc70935589204268cddff53380b9cad41c93ce60bdc1ba5a88c99bdcc714d6a4cfe798daf02ba8abf3e2690b63976cf610b3c9a051ed7c98453b33ed75c1aca645f92ea9eb5944312122bd531133508afefd05446e35f296521f2385857de24c45786bd7fbca14b18cc47dcae8a7323915a11b627cc99f3fb6543648b0bf9e9e12eb1b3743b65d6fdec785ad6497ae1ee6f09e838b0064f2503d5613f4539cac340da3ca9640000000833bd30000"], &(0x7f0000000200)=0xf9) close(r0) [ 577.340621] R10: 0000000000008001 R11: 0000000000000246 R12: 00007f10c05296d4 [ 577.347930] R13: 00000000004c34d0 R14: 00000000004d5298 R15: 0000000000000009 22:12:17 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4020100}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="e00000001200010300000000000000000a7263333200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1}}, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x8, 0x30}, &(0x7f0000000300)=0xc) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000003c0)={r1, 0x1554, 0x8, 0x100000000}, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000400)) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x310, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) 22:12:17 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0xfffffffffffffffe, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r0) 22:12:17 executing program 3: r0 = socket$inet6(0xa, 0x1000080000002, 0x400002) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_procfs(0x0, &(0x7f0000000380)='personality\x00') r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000811}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044}, 0x4000000) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)=ANY=[], 0x0, 0x0) mq_unlink(&(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000080)=0x5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$TIOCSTI(r0, 0x5412, 0x3f) 22:12:17 executing program 2: r0 = socket$packet(0x11, 0xffffffffffffffff, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) r2 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x200000005, 0xfffc) r3 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x6, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000040)=0x200, 0x4) mq_notify(r3, &(0x7f0000000080)={0x0, 0x5, 0x2, @tid=r1}) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x2e8) close(r3) 22:12:18 executing program 5: r0 = socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f00000000c0)=0xe8) r4 = dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR(r4, 0x114, 0x2, &(0x7f0000000180)={{&(0x7f00000005c0)=""/222, 0xde}, &(0x7f0000000140), 0x10}, 0x20) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) 22:12:18 executing program 0 (fault-call:8 fault-nth:7): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r4, &(0x7f0000000040)=0x100000, 0x8001) 22:12:18 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000100)={0x6, 0x70, 0x81, 0x2, 0x0, 0x1, 0x0, 0x4, 0x20, 0x1, 0xffff, 0xfff, 0x8, 0x100, 0x40, 0xe2, 0x4, 0x4, 0xaf, 0x7, 0x4, 0xfffffffffffffffe, 0xc4d, 0x0, 0x30, 0x40, 0x200, 0x9, 0x0, 0x653, 0x6, 0xf, 0x8000, 0x80, 0x0, 0x10000, 0x1f, 0xd2fe, 0x0, 0x9, 0x7, @perf_config_ext={0x2, 0x98}, 0x8331, 0x81, 0xb7, 0x5, 0x4, 0xffffffff, 0x6}) syz_emit_ethernet(0x1fa, &(0x7f0000000040)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4029, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 22:12:18 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) r1 = syz_open_dev$adsp(&(0x7f00000001c0)='/dev/adsp#\x00', 0x7, 0x101c00) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000080)={0x80000001, 0xd9, 0x401}) [ 578.209513] x86/PAT: syz-executor0:17992 map pfn RAM range req write-combining for [mem 0x675d0000-0x675d3fff], got write-back 22:12:18 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) sendmsg$nl_crypto(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="e00000001200010300000000000000000a72633332000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008c7c000004c068"], 0xe0}}, 0x0) rt_sigpending(&(0x7f0000000000), 0x8) [ 578.277861] FAULT_INJECTION: forcing a failure. [ 578.277861] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 578.289740] CPU: 0 PID: 17992 Comm: syz-executor0 Not tainted 4.19.0-rc7+ #69 [ 578.297052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 578.306434] Call Trace: [ 578.309080] dump_stack+0x306/0x460 [ 578.312756] should_fail+0x1170/0x1350 [ 578.316718] __alloc_pages_nodemask+0x6ec/0x64d0 [ 578.321519] ? INIT_INT+0xc/0x30 [ 578.324926] ? __kernel_text_address+0x250/0x350 [ 578.329720] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 578.335201] ? __save_stack_trace+0x9ec/0xc60 [ 578.339757] ? kmsan_set_origin+0x83/0x140 [ 578.344058] kmsan_internal_alloc_meta_for_pages+0x9f/0x720 [ 578.349856] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 578.355352] ? get_page_from_freelist+0x1694/0x1d20 [ 578.360435] kmsan_alloc_page+0x7f/0xe0 [ 578.364449] __alloc_pages_nodemask+0x127c/0x64d0 [ 578.369318] ? do_sendfile+0x109f/0x1dd0 [ 578.373409] ? __se_sys_sendfile64+0x1d2/0x3a0 22:12:18 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r0) [ 578.378026] ? __x64_sys_sendfile64+0x56/0x70 [ 578.382555] ? do_syscall_64+0xbe/0x100 [ 578.386564] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 578.391959] ? kmsan_set_origin_inline+0x6b/0x120 [ 578.396833] ? __msan_poison_alloca+0x17a/0x210 [ 578.401537] ? kmsan_set_origin_inline+0x6b/0x120 [ 578.406871] ? kmsan_set_origin_inline+0x6b/0x120 [ 578.411812] alloc_pages_current+0x519/0x760 [ 578.416275] push_pipe+0x660/0xc00 [ 578.419887] iov_iter_get_pages_alloc+0x1885/0x1f00 [ 578.424973] default_file_splice_read+0x2dd/0x1260 [ 578.429977] ? security_file_permission+0x43d/0x480 [ 578.435053] ? rw_verify_area+0x35e/0x580 [ 578.439245] ? INIT_BOOL+0x30/0x30 [ 578.442826] splice_direct_to_actor+0x4b3/0x1000 [ 578.447615] ? do_splice_direct+0x580/0x580 [ 578.452006] do_splice_direct+0x342/0x580 [ 578.456213] do_sendfile+0x109f/0x1dd0 [ 578.460183] __se_sys_sendfile64+0x1d2/0x3a0 [ 578.464650] __x64_sys_sendfile64+0x56/0x70 [ 578.469003] do_syscall_64+0xbe/0x100 [ 578.472848] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 578.478057] RIP: 0033:0x457569 [ 578.481274] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 578.500199] RSP: 002b:00007f10c0528c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 578.507945] RAX: ffffffffffffffda RBX: 00007f10c0528c90 RCX: 0000000000457569 [ 578.515238] RDX: 0000000020000040 RSI: 0000000000000008 RDI: 0000000000000003 [ 578.522539] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 578.529833] R10: 0000000000008001 R11: 0000000000000246 R12: 00007f10c05296d4 [ 578.537128] R13: 00000000004c34d0 R14: 00000000004d5298 R15: 0000000000000009 [ 578.546015] netlink: 192 bytes leftover after parsing attributes in process `syz-executor1'. [ 578.600059] netlink: 192 bytes leftover after parsing attributes in process `syz-executor1'. 22:12:18 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl(r0, 0xc1004111, &(0x7f0000000000)="3716b4d3ade4386097307bc1f5") 22:12:18 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400000, 0x0) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000080)={0x4, 0x84, 0x4, 0x100000000}, 0x10) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r0) 22:12:18 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x20000, 0x0) getsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 22:12:19 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) sendmsg$nl_crypto(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@upd={0xe0, 0x12, 0x301, 0x0, 0x0, {{'\nrc32\x00'}}}, 0xe0}}, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0xa462d7e3822bcd80) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000080)={0x80000001, 0x1, 0x33, 0x0, 0x81, 0xaae1, 0x911, 0x8, 0x4, 0x20, 0x6, 0x4, 0x0, 0x0, 0x2, 0x5, 0xc5, 0x3f, 0x101}) 22:12:19 executing program 3: unshare(0x20400) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x401, 0x2080) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="ed000000452cb97051932a1b918c7b63a20043091bb990570dc6043c8a8648433b334674251bfbed53a66739ae7eabf81f2551aff267c7d62e5089c491c8df12cae6e8a15cfd651663e3634a87c042d426f8bd9fa0aa6f7b4bd0915101451910c8ae2abd134facc7f972ae93c9579403ba9c9c9d2252d09e7d473ed97576310573468a7391c779877f4f1563e0437ae3910500d1eef9bb4c3df4f9d985d03abd9c9135cecbccdf6634d7b7cb4809a8dfb9c440d71616e0832d1c17e7ccc0b2cd60487722b36ea21eeb33430f7dad63e29ffcde32421e5f1ff621c14c6bbb88d489b974ca960d23534b7ab1a14c0139af4c"], &(0x7f0000000040)=0xf5) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x7fffffff, 0x200, 0x66b100, 0x9, r1}, &(0x7f00000000c0)=0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000002c0)={0x1}, 0x4) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000100)=""/35) syz_open_pts(r0, 0x20400) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000300)={0x27f, 0x1, 0x3f, 0x48d3, 0x1, 0x5}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) [ 579.244343] netlink: 192 bytes leftover after parsing attributes in process `syz-executor1'. [ 579.278387] netlink: 192 bytes leftover after parsing attributes in process `syz-executor1'. 22:12:19 executing program 5: socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) 22:12:19 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='bcsf0\x00', 0x10) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req={0x5, 0x1000, 0x1, 0x7}, 0xc) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x81, 0x341000) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000080)=""/37) close(r0) socket$inet_smc(0x2b, 0x1, 0x0) fsetxattr$security_selinux(r0, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:init_var_run_t:s0\x00', 0x24, 0x0) 22:12:19 executing program 0 (fault-call:8 fault-nth:8): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r4, &(0x7f0000000040)=0x100000, 0x8001) 22:12:19 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200400, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x295, 0x9d, 0x400, 0x9, 0x2d}, &(0x7f0000000140)=0x98) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={r2, 0x8, 0x10}, 0xc) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x204200, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@dev, @broadcast, 0x0}, &(0x7f00000003c0)=0xc) connect$packet(r1, &(0x7f0000000400)={0x11, 0xe, r3, 0x1, 0x34, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r0) 22:12:19 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) sendmsg$nl_crypto(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="e00000001200010300000000000000000a72633332000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000049d200"], 0xe0}}, 0x0) 22:12:19 executing program 3: r0 = inotify_init1(0x0) r1 = creat(&(0x7f0000000200)='./control\x00', 0x0) mount$fuseblk(&(0x7f0000000140)='/dev/loop0\x00', &(0x7f0000000180)='./control\x00', &(0x7f00000001c0)='fuseblk\x00', 0x1012, &(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0]) inotify_add_watch(r1, &(0x7f0000000000)='./control\x00', 0x4000800) inotify_add_watch(r0, &(0x7f00007a7000)='./control\x00', 0xa4000960) [ 579.890237] x86/PAT: syz-executor0:18050 map pfn RAM range req write-combining for [mem 0x68510000-0x68513fff], got write-back [ 579.904969] netlink: 192 bytes leftover after parsing attributes in process `syz-executor1'. [ 579.946435] FAULT_INJECTION: forcing a failure. [ 579.946435] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 579.958296] CPU: 0 PID: 18050 Comm: syz-executor0 Not tainted 4.19.0-rc7+ #69 [ 579.965584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 579.974949] Call Trace: [ 579.977570] dump_stack+0x306/0x460 [ 579.981243] should_fail+0x1170/0x1350 [ 579.985194] __alloc_pages_nodemask+0x6ec/0x64d0 [ 579.989991] ? INIT_INT+0xc/0x30 [ 579.993395] ? __kernel_text_address+0x250/0x350 [ 579.998188] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 580.003693] ? __save_stack_trace+0x9ec/0xc60 [ 580.008261] ? kmsan_set_origin+0x83/0x140 [ 580.012532] kmsan_internal_alloc_meta_for_pages+0x10b/0x720 [ 580.018397] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 580.023872] ? get_page_from_freelist+0x1694/0x1d20 [ 580.028953] kmsan_alloc_page+0x7f/0xe0 [ 580.032962] __alloc_pages_nodemask+0x127c/0x64d0 [ 580.037854] ? do_sendfile+0x109f/0x1dd0 [ 580.041956] ? __se_sys_sendfile64+0x1d2/0x3a0 [ 580.046567] ? __x64_sys_sendfile64+0x56/0x70 [ 580.051093] ? do_syscall_64+0xbe/0x100 [ 580.055103] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 580.060499] ? kmsan_set_origin_inline+0x6b/0x120 [ 580.065379] ? __msan_poison_alloca+0x17a/0x210 [ 580.070063] ? kmsan_set_origin_inline+0x6b/0x120 [ 580.074935] ? kmsan_set_origin_inline+0x6b/0x120 [ 580.079857] alloc_pages_current+0x519/0x760 [ 580.084329] push_pipe+0x660/0xc00 [ 580.087942] iov_iter_get_pages_alloc+0x1885/0x1f00 [ 580.093031] default_file_splice_read+0x2dd/0x1260 [ 580.098033] ? security_file_permission+0x43d/0x480 [ 580.103092] ? rw_verify_area+0x35e/0x580 [ 580.107286] ? INIT_BOOL+0x30/0x30 [ 580.110860] splice_direct_to_actor+0x4b3/0x1000 [ 580.115644] ? do_splice_direct+0x580/0x580 [ 580.120028] do_splice_direct+0x342/0x580 [ 580.124238] do_sendfile+0x109f/0x1dd0 [ 580.128205] __se_sys_sendfile64+0x1d2/0x3a0 [ 580.132669] __x64_sys_sendfile64+0x56/0x70 [ 580.137034] do_syscall_64+0xbe/0x100 [ 580.140874] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 580.146090] RIP: 0033:0x457569 [ 580.149310] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 580.168236] RSP: 002b:00007f10c0528c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 580.175974] RAX: ffffffffffffffda RBX: 00007f10c0528c90 RCX: 0000000000457569 [ 580.183264] RDX: 0000000020000040 RSI: 0000000000000008 RDI: 0000000000000003 22:12:20 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req={0x7ff, 0x400, 0x401, 0xbaf}, 0x141) close(r0) 22:12:20 executing program 3: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x232, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00') rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0/file1\x00') ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) [ 580.190554] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 580.197847] R10: 0000000000008001 R11: 0000000000000246 R12: 00007f10c05296d4 [ 580.205138] R13: 00000000004c34d0 R14: 00000000004d5298 R15: 0000000000000009 [ 580.225333] netlink: 192 bytes leftover after parsing attributes in process `syz-executor1'. 22:12:20 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='ifb0\x00') setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r0) 22:12:20 executing program 1: setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x2) r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) sendmsg$nl_crypto(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@upd={0xe0, 0x12, 0x301, 0x0, 0x0, {{'\nrc32\x00'}}}, 0xe0}}, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400000, 0x0) write$P9_RRENAME(r1, &(0x7f0000000080)={0x7, 0x15, 0x2}, 0x7) 22:12:20 executing program 5: socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0xffff, 0x20000) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) fstat(r3, &(0x7f0000000140)) 22:12:20 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'ip6tnl0\x00', {0x2, 0x4e24}}) [ 580.672957] netlink: 192 bytes leftover after parsing attributes in process `syz-executor1'. [ 580.727038] netlink: 192 bytes leftover after parsing attributes in process `syz-executor1'. 22:12:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffe}}, 0xe8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r1, &(0x7f0000000000), 0x1c) write$binfmt_elf32(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000e94ea815b4e1b5fddb9ad62146000000380000000000000000000000000020000000000000000000000000000012a64062cc1ade0100000000000000000000"], 0x58) 22:12:20 executing program 0 (fault-call:8 fault-nth:9): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r4, &(0x7f0000000040)=0x100000, 0x8001) 22:12:20 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x1c) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f00000000c0)={0x1f}, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r0) 22:12:21 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000003f00), &(0x7f0000004100)=0x30) recvmmsg(r0, &(0x7f0000003f40)=[{{&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000001740)=[{&(0x7f0000000100)=""/71, 0x47}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000000)=""/49, 0x31}, {&(0x7f0000001340)=""/91, 0x5b}, {&(0x7f00000013c0)=""/240, 0xf0}, {&(0x7f00000014c0)=""/183, 0xb7}, {&(0x7f0000001580)=""/201, 0xc9}, {&(0x7f0000001680)=""/163, 0xa3}], 0x8, &(0x7f0000001f00)=""/4096, 0x1000, 0x3f}, 0x40}, {{&(0x7f00000017c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000001880)=[{&(0x7f00000002c0)=""/29, 0x1d}, {&(0x7f0000001840)=""/40, 0x28}], 0x2, 0x0, 0x0, 0x9}, 0x8001}, {{&(0x7f00000018c0)=@can, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001940)=""/29, 0x1d}, {&(0x7f0000001980)=""/147, 0x93}, {&(0x7f0000001a40)=""/231, 0xe7}, {&(0x7f0000001b40)=""/239, 0xef}, {&(0x7f0000001c40)=""/38, 0x26}, {&(0x7f0000001c80)=""/25, 0x19}, {&(0x7f0000001cc0)=""/2, 0x2}, {&(0x7f0000001d80)=""/9, 0x9}], 0x8, &(0x7f0000002f00)=""/207, 0xcf, 0xfffffffffffffffa}, 0x1000}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000004300)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/64, 0x40}], 0x2, &(0x7f0000003000)=""/212, 0xd4, 0x7}, 0x6}, {{&(0x7f0000003100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f00000035c0)=[{&(0x7f0000003180)=""/117, 0x75}, {&(0x7f0000003200)=""/231, 0xe7}, {&(0x7f0000003300)=""/117, 0x75}, {&(0x7f0000003380)=""/164, 0xa4}, {&(0x7f0000003440)=""/81, 0x51}, {&(0x7f00000034c0)=""/236, 0xec}], 0x6, &(0x7f0000003640)=""/119, 0x77, 0x53e}, 0xffffffff80000001}, {{&(0x7f00000036c0)=@sco, 0x80, &(0x7f0000003ec0)=[{&(0x7f0000003740)=""/222, 0xde}, {&(0x7f0000003e00)=""/177, 0xb1}], 0x2, &(0x7f0000003f00), 0x0, 0x7f}, 0x7}], 0x6, 0x140, &(0x7f00000040c0)={0x0, 0x989680}) sendmsg$nl_crypto(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@upd={0xe0, 0x12, 0x301, 0x0, 0x0, {{'\nrc32\x00'}}}, 0xe0}}, 0x0) sendmsg$kcm(r0, &(0x7f00000056c0)={&(0x7f0000005300)=@ll={0x11, 0xf6, r1, 0x1, 0x1000, 0x6, @local}, 0x80, &(0x7f0000004140)=[{&(0x7f0000005380)="a80a3b15aa2f56c455a121b39cec5af25cae55024b388263da70148ba8cce0fdabd22042092450bda05f6bf5db90959e8277bfdb8c7caaccb0cf8945299d84b8b5e47288b84724db59b1922c6e0d9219bac2a240fec30d456c169efbda54613f6abefa69b4b252a9c276b6190e2ba7df229c7e2210546b0bf1b2c0b6b043e9bf7857bbf1c777be64ee922bbd2ab5fa40870d206e9f8d37bad539933aacb3d76b7a46e6c35a06eec533faa511a189695e9bc2e9e8c1c684e9cb844988cda3232e9b96af47a9956d8720d70ac99ec13ee2d0874fd0d555602a85bd95d94558712ce8c9", 0xe2}, {&(0x7f0000005480)="9a5ff30d02dad22916bc4774ded748f18f2b1ee0a3b0e8598c674a99918c427e9c9ef4521de12063a17464ee8614b89b5aabb651feeabced3d752e1838aa880540be5c80d89324edfa4487ad0d1393ca10b37881f254b924518c2896cf1d0dbd0f219f3336ec8f1afdab305eb1374605e131f8154ab26d73939330f53ef3e9de5a577535431b56fbfe1d70000ed4c4f7bea13ad96d40bf4a92f2ef63ec50f1be4e1ca91205fedef4516c7ee47b885b83393dfd284da58cc83fc67dd4a5f5cc0219ee1ffd46290f2ed3edaf85f373e9eeeb0fbbcd62ca56dce067bb8beddfffa3061d628c35a08f3a2be49d43ef6bbc10ac184e1fb460ab81", 0xf8}, {&(0x7f0000005580)="42d67b8f3e4a854211d4910b9160fcecd3398b78bcd396546b1000802a1fc59b744f1617103219886ef5bfd3aba26bf9134baf8886076e58f8d0da2adaaff0b3f3f01eebfd5c8e", 0x47}], 0x3, &(0x7f0000005600)=[{0x28, 0x11f, 0x1, "6062416b730c028422616f64ecbec3b533efe66b"}, {0x68, 0x100, 0x4200dcd7, "529635596c79e0543b99c6e2755ca5879a36fd4e5ace85f0df4a413f2260be31e64acfc322dbfcc9432150dee9487c419a44621c4fdf31756622c7dd6d691bcd789c4b277b790a2162570440a3a71596aeba"}], 0x90, 0x1}, 0x4801) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x0, 0x4) 22:12:21 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x58, &(0x7f0000000080)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, [], 0x13}, 0x6}, @in6={0xa, 0x4e20, 0xfff, @remote, 0xffffffff}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={r2, 0xfffffffffffffffc, 0x30}, 0xc) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r0) [ 581.259940] x86/PAT: syz-executor0:18094 map pfn RAM range req write-combining for [mem 0x66200000-0x66203fff], got write-back [ 581.343202] FAULT_INJECTION: forcing a failure. [ 581.343202] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 581.355377] CPU: 1 PID: 18094 Comm: syz-executor0 Not tainted 4.19.0-rc7+ #69 [ 581.362712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 581.372133] Call Trace: [ 581.374881] dump_stack+0x306/0x460 [ 581.378619] should_fail+0x1170/0x1350 [ 581.382627] __alloc_pages_nodemask+0x6ec/0x64d0 [ 581.387466] ? do_sendfile+0x109f/0x1dd0 22:12:21 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) wait4(r1, &(0x7f00000000c0), 0x81000004, &(0x7f0000000100)) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x80000, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000280)={0x0, 0x1000, "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"}, &(0x7f0000000200)=0x1008) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000012c0)=@assoc_value={r3, 0x1}, &(0x7f0000001300)=0x8) [ 581.391682] ? __se_sys_sendfile64+0x1d2/0x3a0 [ 581.396371] ? __x64_sys_sendfile64+0x56/0x70 [ 581.400951] ? do_syscall_64+0xbe/0x100 [ 581.404999] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 581.410423] ? kmsan_set_origin_inline+0x6b/0x120 [ 581.415374] ? __msan_poison_alloca+0x17a/0x210 [ 581.420139] ? kmsan_set_origin_inline+0x6b/0x120 [ 581.425087] ? kmsan_set_origin_inline+0x6b/0x120 [ 581.430042] alloc_pages_current+0x519/0x760 [ 581.434565] push_pipe+0x660/0xc00 [ 581.438224] iov_iter_get_pages_alloc+0x1885/0x1f00 22:12:21 executing program 2: socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = memfd_create(&(0x7f0000000000)="776c616e3173656c696e7578b800", 0x7) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={0xfffffffffffffffa}, 0x8) mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) read(r2, &(0x7f0000e6d000)=""/384, 0x180) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000100)=0x4) close(r2) r3 = inotify_init1(0x0) fcntl$setstatus(r3, 0x4, 0x72109c5fef5d34d3) r4 = gettid() ioctl$sock_bt(r1, 0xdd1f, &(0x7f0000000140)="6d47b83648e9f9b7") fcntl$setown(r2, 0x8, r4) rt_sigprocmask(0x0, &(0x7f000003b000)={0xbffffffffffffffe}, 0x0, 0x8) fcntl$setsig(r3, 0xa, 0x21) inotify_add_watch(r3, &(0x7f00007a7000)='./control\x00', 0xa4000960) rmdir(&(0x7f00000000c0)='./control\x00') setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x17) close(r0) [ 581.443379] default_file_splice_read+0x2dd/0x1260 [ 581.448445] ? security_file_permission+0x43d/0x480 [ 581.453564] ? rw_verify_area+0x35e/0x580 [ 581.457825] ? INIT_BOOL+0x30/0x30 [ 581.461460] splice_direct_to_actor+0x4b3/0x1000 [ 581.466311] ? do_splice_direct+0x580/0x580 [ 581.470732] do_splice_direct+0x342/0x580 [ 581.474977] do_sendfile+0x109f/0x1dd0 [ 581.478983] __se_sys_sendfile64+0x1d2/0x3a0 [ 581.483518] __x64_sys_sendfile64+0x56/0x70 [ 581.487904] do_syscall_64+0xbe/0x100 [ 581.491785] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 581.497026] RIP: 0033:0x457569 [ 581.500284] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 581.519249] RSP: 002b:00007f10c0528c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 581.527044] RAX: ffffffffffffffda RBX: 00007f10c0528c90 RCX: 0000000000457569 [ 581.534373] RDX: 0000000020000040 RSI: 0000000000000008 RDI: 0000000000000003 22:12:21 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x58, &(0x7f0000000080)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, [], 0x13}, 0x6}, @in6={0xa, 0x4e20, 0xfff, @remote, 0xffffffff}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={r2, 0xfffffffffffffffc, 0x30}, 0xc) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r0) [ 581.541695] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 581.549021] R10: 0000000000008001 R11: 0000000000000246 R12: 00007f10c05296d4 [ 581.556352] R13: 00000000004c34d0 R14: 00000000004d5298 R15: 0000000000000009 22:12:21 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) sendmsg$nl_crypto(r0, &(0x7f0000000300)={&(0x7f0000000040), 0x8, &(0x7f0000000280)={&(0x7f0000000180)=@delrng={0x0, 0x14, 0x300, 0x70bd26, 0x25dfdbfb, "", ["", ""]}, 0xfffffffffffffda2}}, 0x0) 22:12:21 executing program 5: socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x400000, 0x0) 22:12:22 executing program 3: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) waitid(0x2, r0, &(0x7f0000000140), 0x1, &(0x7f0000000180)) r1 = socket$inet_sctp(0x2, 0xfffffffffffffd, 0x84) setxattr$trusted_overlay_upper(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.upper\x00', &(0x7f00000002c0)={0x0, 0xfb, 0x1015, 0x1, 0x280000000000000, "638019fd638e5a9ae6a73d08527ac094", "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"}, 0x1015, 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000100)=0x90) 22:12:22 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x200, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x7) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r0) 22:12:22 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) mlockall(0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r0) 22:12:22 executing program 0 (fault-call:8 fault-nth:10): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r4, &(0x7f0000000040)=0x100000, 0x8001) 22:12:22 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x7fffffff}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e20}}}, &(0x7f0000000180)=0x84) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000000)=0x6, 0x4) 22:12:22 executing program 5: socket$inet6(0xa, 0x7ffffffffffff, 0x8) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) [ 582.474646] x86/PAT: syz-executor0:18137 map pfn RAM range req write-combining for [mem 0x62510000-0x62513fff], got write-back [ 582.533635] FAULT_INJECTION: forcing a failure. [ 582.533635] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 582.545470] CPU: 0 PID: 18137 Comm: syz-executor0 Not tainted 4.19.0-rc7+ #69 [ 582.552756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 582.562152] Call Trace: [ 582.564817] dump_stack+0x306/0x460 [ 582.568506] should_fail+0x1170/0x1350 [ 582.572471] __alloc_pages_nodemask+0x6ec/0x64d0 [ 582.577296] ? INIT_INT+0xc/0x30 [ 582.580752] ? __kernel_text_address+0x250/0x350 [ 582.585578] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 582.591063] ? __save_stack_trace+0x9ec/0xc60 [ 582.595625] ? kmsan_set_origin+0x83/0x140 [ 582.599894] kmsan_internal_alloc_meta_for_pages+0x9f/0x720 [ 582.606220] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 582.611694] ? get_page_from_freelist+0x1694/0x1d20 [ 582.616809] kmsan_alloc_page+0x7f/0xe0 [ 582.620842] __alloc_pages_nodemask+0x127c/0x64d0 [ 582.625708] ? do_sendfile+0x109f/0x1dd0 [ 582.629811] ? __se_sys_sendfile64+0x1d2/0x3a0 [ 582.634421] ? __x64_sys_sendfile64+0x56/0x70 [ 582.638943] ? do_syscall_64+0xbe/0x100 [ 582.642950] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 582.648475] ? kmsan_set_origin_inline+0x6b/0x120 [ 582.653405] alloc_pages_current+0x519/0x760 [ 582.657872] push_pipe+0x660/0xc00 [ 582.661469] iov_iter_get_pages_alloc+0x1885/0x1f00 [ 582.666569] default_file_splice_read+0x2dd/0x1260 [ 582.671589] ? security_file_permission+0x43d/0x480 [ 582.676650] ? rw_verify_area+0x35e/0x580 [ 582.680851] ? INIT_BOOL+0x30/0x30 [ 582.684421] splice_direct_to_actor+0x4b3/0x1000 [ 582.689208] ? do_splice_direct+0x580/0x580 [ 582.693604] do_splice_direct+0x342/0x580 [ 582.697873] do_sendfile+0x109f/0x1dd0 [ 582.701880] __se_sys_sendfile64+0x1d2/0x3a0 [ 582.706349] __x64_sys_sendfile64+0x56/0x70 [ 582.710707] do_syscall_64+0xbe/0x100 [ 582.714546] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 582.719756] RIP: 0033:0x457569 [ 582.723010] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 582.741933] RSP: 002b:00007f10c0528c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 582.749673] RAX: ffffffffffffffda RBX: 00007f10c0528c90 RCX: 0000000000457569 [ 582.756961] RDX: 0000000020000040 RSI: 0000000000000008 RDI: 0000000000000003 [ 582.764255] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 582.771545] R10: 0000000000008001 R11: 0000000000000246 R12: 00007f10c05296d4 22:12:22 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r0) 22:12:22 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x40, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x420c}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffffffe}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x87e}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000005}, 0xc811) r3 = accept(r0, &(0x7f0000000080)=@nl=@unspec, &(0x7f0000000000)=0x80) socket$key(0xf, 0x3, 0x2) getsockname$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r0) 22:12:22 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x200, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x500, 0x70bd2a, 0x100000000, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}]}, 0x24}, 0x1, 0x0, 0x0, 0x4801}, 0x20040094) r2 = socket(0x10, 0x2, 0x0) recvmmsg(r2, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) sendmsg$nl_crypto(r2, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@upd={0xe0, 0x12, 0x301, 0x0, 0x0, {{'\nrc32\x00'}}}, 0xe0}}, 0x0) [ 582.778841] R13: 00000000004c34d0 R14: 00000000004d5298 R15: 0000000000000009 22:12:23 executing program 3: r0 = socket$inet6(0xa, 0x40001ffffffe, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x2081, 0x0) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x2e3) setsockopt$sock_timeval(r0, 0x1, 0x1000000000015, &(0x7f0000000000)={0x0, 0x7530}, 0x10) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x101, 0x4000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000280), &(0x7f00000002c0)=0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xc8, r3, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x5c, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x12}}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, [], 0xc}}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000001}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80000000}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7fffffff}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x1d}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4}, 0x1) sendto$inet6(r0, &(0x7f0000000080), 0xfffffffffffffdb0, 0x20000005, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 583.065983] nla_parse: 2 callbacks suppressed [ 583.066010] netlink: 192 bytes leftover after parsing attributes in process `syz-executor1'. 22:12:23 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x10000, 0x0) ioctl$RTC_UIE_OFF(r1, 0x7004) close(r0) 22:12:23 executing program 0 (fault-call:8 fault-nth:11): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r4, &(0x7f0000000040)=0x100000, 0x8001) 22:12:23 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) 22:12:23 executing program 1: r0 = socket(0x10, 0x2, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x800) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x7) write$binfmt_aout(r1, &(0x7f0000000340)={{0x10b, 0x8, 0x6, 0xab, 0xa, 0x5, 0x24b, 0x2}, "8e094e03652b652427aa68d29a9d0922d5a02ae06028eea62e8b4ec03361c44ee785949f50f23c0281ff1266414455e63d7b6e3e7243c66b75722376a8fbce3f6fb82414132be0a240a2cfd87d5a646d71cc395486d83aca27f941484a2f48340b9503a0a5b43d10ac18516aa7a3ebd28e67652c1a68fd83704f0a4e3e5cdadefbf7a81bad48b7b85b6c15f6fb7ea4063742ae4391ae1aa5065fd397b5d1ff3ec6a197e8e826f9eb0128261b78c67d65401d0d3163bd3eb55065bd471850c7889572508a96727967dd5b944cb9f01079669cf3494a5e9148ea94d1c0f93b50bfcbb99786cb31bc1186f26b8ec2", [[], [], [], [], [], [], []]}, 0x80d) recvmmsg(r0, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) sendmsg$nl_crypto(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@upd={0xe0, 0x12, 0x301, 0x0, 0x0, {{'\nrc32\x00'}}}, 0xe0}}, 0x0) [ 583.644087] x86/PAT: syz-executor0:18168 map pfn RAM range req write-combining for [mem 0x61a70000-0x61a73fff], got write-back 22:12:23 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x8001, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x200, 0x0) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8000, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000340), &(0x7f00000002c0)=0x4) sendto$inet(r1, &(0x7f0000000140)="3ddb39ee3d1f0300b8ed2623cd269f0502fee478aa370281a52e23212b10969677bdc2a5d35de6111c236f7fd244506d41ac5a5a22d502e7f6cb9e73f0be7c8a3205e4391a03c9002bdea167ed34088c2aba1ce8f6504869c1a76e3c297b737e3f0de83512cd7bdeeddac198d86e8df16c6cb0a6e8061f55ffc039b3370d0f2a7815f86f37dc51f6dd4086111309a1b5f4120611b07ec0eb0a03862bff2b8dd32a382033c63c0850ba8a7cd99af8f70967aa600b62976cd0a8d8b176cafba06bd1936112b8c7858eefffa829ce6f7f3c06f98279f9a0bd3575954850b464fd092cb51f3177132b4070c4c559", 0xec, 0x20000000, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="d4", 0x1}], 0x1) 22:12:23 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x6, 0x86800) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, 0x8f, 0x3, 0x4, &(0x7f0000ffa000/0x4000)=nil, 0x400}) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) name_to_handle_at(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000140), 0x0) close(r0) 22:12:24 executing program 5: socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x4000002, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0x20, 0xffffffff, 0x4, 0x5, 0x1}) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x74, &(0x7f00000004c0)=[@in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e21, 0x9, @loopback, 0xffff}, @in6={0xa, 0x4e20, 0xfbd, @ipv4={[], [], @multicast2}, 0x3}, @in={0x2, 0x4e22}, @in6={0xa, 0x4e20, 0xfffffffffffffffa, @loopback, 0x40}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000540)={r5, 0xfffffffffffffff8, 0x45, "c48d5321631924354b151b60ea9a9eec8719f1c2576f90b62d46d4296e18b834939239d34afb91f993e5a37cc0f8d91ccdfb778e1dc91295cb9dfa68dceea78dac46786d17"}, 0x4d) fchmodat(r4, &(0x7f0000000140)='./file0\x00', 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000011000/0x1000)=nil, 0x1000}, 0x1}) [ 583.971406] netlink: 192 bytes leftover after parsing attributes in process `syz-executor1'. 22:12:24 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xffffffffffffdc90, 0x1) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r0) 22:12:24 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x400000, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000080)=0x100) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r5, &(0x7f0000000040)=0x100000, 0x8001) 22:12:24 executing program 1: r0 = socket(0x10, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) sendmsg$nl_crypto(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="e00000001200010300000000000000000a726333320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xe0}}, 0x0) 22:12:24 executing program 4: r0 = socket$packet(0x11, 0x1, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x8, 0x0) readlinkat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/94, 0x5e) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 22:12:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x2b, 'rdma'}, {0x2f, 'pids'}, {0x2d, 'io'}, {0x2b, 'io'}, {0x2f, 'pids'}, {0x2f, 'io'}, {0x2b, 'cpu'}]}, 0x23) ioctl$sock_ifreq(r1, 0x89b3, &(0x7f0000000040)={'veth0\x00', @ifru_mtu}) [ 584.589689] x86/PAT: syz-executor0:18196 map pfn RAM range req write-combining for [mem 0x624b0000-0x624b3fff], got write-back 22:12:24 executing program 2: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000240)=0x742, 0xbf81650cf37939e9) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x7fff, 0x400) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x10000, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000001c0)="0f01f26766c7442400000000006766c7442402114b00006766c744240600000000670f011424ba210066ed3e0f01dfb813018ec866b9b708000066b86778000066ba000000000f300f08640f212b0fae4765d0973961", 0x56}], 0x1, 0x10, &(0x7f00000002c0)=[@vmwrite={0x8, 0x0, 0x7, 0x0, 0x4, 0x0, 0xed65, 0x0, 0x2}], 0x1) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x40600, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e20, 0x3, @remote, 0x80}, @in={0x2, 0x4e21, @remote}], 0x4c) close(r0) [ 584.694805] x86/PAT: syz-executor0:18206 map pfn RAM range req write-combining for [mem 0x624b0000-0x624b3fff], got write-back 22:12:24 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @local}}, 0x6000, 0xffffffffffffffc0, 0x1ff, 0x0, 0x1}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYBLOB="0100022000808e00"], &(0x7f0000000200)=0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000240)={'filter\x00'}, 0xffffffffffffffff) 22:12:25 executing program 1: r0 = socket(0x10, 0x2, 0x5) recvmmsg(r0, &(0x7f0000001700)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001680)=[{&(0x7f0000000080)=""/92, 0x5c}, {&(0x7f0000000340)=""/222, 0xde}, {&(0x7f0000000440)=""/189, 0xbd}, {&(0x7f0000000100)=""/106, 0x6a}, {&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/223, 0xdf}], 0x7, &(0x7f0000001ec0)=""/50, 0x32, 0x3}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa, 0x0, 0x0, 0x80000000000000}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) sendmsg$nl_crypto(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@upd={0xe0, 0x12, 0x301, 0x0, 0x0, {{'\nrc32\x00'}}}, 0xe0}}, 0x0) 22:12:25 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xffffffdb) close(r0) 22:12:25 executing program 5: socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) munmap(&(0x7f0000009000/0x2000)=nil, 0x2000) dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) 22:12:25 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x41, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x30, r1, 0x24) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r3, &(0x7f0000000040)=0x100000, 0x8001) 22:12:25 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = getpid() sched_setscheduler(r1, 0x7, &(0x7f00000000c0)=0xfffffffffffffff7) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x3, 0x253a498c37cb9b2f) ioctl$BLKBSZSET(r2, 0x40081271, &(0x7f0000000080)) close(r0) 22:12:25 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000008031, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x3) move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f000093c000/0x1000)=nil], &(0x7f00000000c0), &(0x7f00000001c0), 0x2) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)) 22:12:25 executing program 1: r0 = socket(0x15, 0x2, 0x0) recvmmsg(r0, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) dup2(r0, r0) sendmsg$nl_crypto(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="e000000012020103000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xe0}}, 0x0) 22:12:25 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200000, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000080)=0x99) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r1) accept4(r1, &(0x7f0000000100)=@alg, &(0x7f0000000180)=0x80, 0x800) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0)={0x0, 0x3}, 0x2) 22:12:25 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) ioctl$sock_ifreq(r2, 0x891c, &(0x7f0000000000)={'team_slave_1\x00', @ifru_ivalue=0x7}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r4, &(0x7f0000000040)=0x100000, 0x8001) 22:12:25 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = msgget(0x0, 0x2) socket$bt_hidp(0x1f, 0x3, 0x6) msgsnd(r1, &(0x7f0000000080)={0x0, "0a9123aad6e7518c79631857783c6e92444233366acdc15cdab9fc5d07495084aac634f575f99a3db5f2f54a158e848cef6217f95d4246c8059f27f953dee45d7e877781ab0846e0d9ff0608b5651511c1fa4108c78552c98888c793f29fc7"}, 0x67, 0x800) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r0) [ 585.925024] x86/PAT: syz-executor0:18251 map pfn RAM range req write-combining for [mem 0x61c10000-0x61c13fff], got write-back [ 586.027551] x86/PAT: syz-executor0:18256 map pfn RAM range req write-combining for [mem 0x61c10000-0x61c13fff], got write-back 22:12:26 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) sendmsg$nl_crypto(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@upd={0xe0, 0x12, 0x301, 0x0, 0x0, {{'\nrc32\x00'}}}, 0xffffffffffffff75}}, 0x0) 22:12:26 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x10000, 0x103) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getegid() write$FUSE_ATTR(r1, &(0x7f0000000280)={0x78, 0x0, 0x3, {0x384e, 0x800, 0x0, {0x6, 0x4, 0x4, 0x0, 0x9, 0x6, 0x100000001, 0x1000, 0x5, 0x0, 0x8, r2, r3, 0x2, 0xf82}}}, 0x78) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000440)='./file0\x00') setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000300)={0x5, {{0xa, 0x4e20, 0xffff, @ipv4={[], [], @local}, 0xffffffffffffffff}}, {{0xa, 0x4e21, 0x0, @empty, 0x9}}}, 0x108) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80100, 0x110) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/attr/current\x00', 0x2, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000080)={0x0, @dev, @local}, &(0x7f00000000c0)=0xc) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000100)=r5) 22:12:26 executing program 5: socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r4, 0x80dc5521, &(0x7f0000000140)=""/119) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f00000000c0)={0x2, 0x4, 0x101}) 22:12:26 executing program 2: r0 = socket$packet(0x11, 0x2000000000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r0) 22:12:26 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x4012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r4, &(0x7f0000000040)=0x100000, 0x8001) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000000)={'team0\x00', {0x2, 0x4e23, @broadcast}}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e22, @remote}}, 0x9, 0x1ff, 0x2, 0x3, 0x13}, &(0x7f0000000080)=0x98) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f00000000c0)={r5, 0x1, 0x4, [0xfffffffffffffffd, 0x1, 0xffffffff, 0x9]}, &(0x7f0000000200)=0x10) 22:12:26 executing program 4: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x8, 0x240) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x10000, 0x20, 0x9, 0x9}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={r1, 0xa8}, &(0x7f0000000140)=0x8) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xffffffffffffffab) close(r2) [ 586.753374] x86/PAT: syz-executor0:18280 map pfn RAM range req write-combining for [mem 0x63a50000-0x63a53fff], got write-back 22:12:26 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f0000000080)=""/200, &(0x7f0000000000)=0xc8) close(r0) [ 586.874222] x86/PAT: syz-executor0:18285 map pfn RAM range req write-combining for [mem 0x63a50000-0x63a53fff], got write-back 22:12:28 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0xffffffffffffff59, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000240)={0x5, 0x1, 0x1, r2}) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x480000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000000c0)=0x8) syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x349101) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000140)={r4}, &(0x7f0000000180)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r5, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r6, &(0x7f0000000040)=0x100000, 0x8001) 22:12:28 executing program 3: socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) munmap(&(0x7f0000009000/0x2000)=nil, 0x2000) dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) 22:12:28 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x2, 0x8000800000000000, 0x10000, 0x0, 0x5, 0xc8dd, 0x3}, 0x179) close(r0) 22:12:28 executing program 5: socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f00000000c0)=0x80000000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) 22:12:28 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) clock_gettime(0x0, &(0x7f0000000c40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000100)=""/76, 0x4c}, {&(0x7f0000000180)=""/160, 0xa0}, {&(0x7f0000000280)=""/123, 0x7b}, {&(0x7f0000000000)=""/50, 0x32}, {&(0x7f0000000300)=""/62, 0x3e}, {&(0x7f0000000340)=""/39, 0x27}, {&(0x7f0000000380)=""/90, 0x5a}, {&(0x7f0000000400)=""/77, 0x4d}], 0x8, &(0x7f0000000500)=""/102, 0x66}, 0x9}, {{&(0x7f0000000580)=@generic, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000600)=""/243, 0xf3}, {&(0x7f0000000700)=""/101, 0x65}, {&(0x7f0000000780)=""/157, 0x9d}, {&(0x7f0000000840)=""/197, 0xc5}, {&(0x7f0000000940)=""/248, 0xf8}], 0x5, &(0x7f0000000ac0)=""/219, 0xdb, 0x2}, 0xffff}], 0x2, 0x10000, &(0x7f0000000c80)={r1, r2+10000000}) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) exit_group(0x101) close(r0) 22:12:28 executing program 1: r0 = socket(0x10, 0x2, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) recvmmsg(r0, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) sendmsg$nl_crypto(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1400000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) setxattr$security_ima(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='security.ima\x00', &(0x7f0000000380)=@md5={0x1, "05b029fc70ad662e5d76c172f841a940"}, 0x11, 0x2) getcwd(&(0x7f00000000c0)=""/75, 0x4b) getsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000000), &(0x7f0000000080)=0x4) [ 588.907938] x86/PAT: syz-executor0:18311 map pfn RAM range req write-combining for [mem 0x63870000-0x63873fff], got write-back 22:12:29 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000080)={{0x1, 0x3, 0x0, 0x2, 0x800}}) close(r0) 22:12:29 executing program 2: r0 = socket$packet(0x11, 0x10000003, 0x300) socket$unix(0x1, 0x7, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) close(r0) 22:12:29 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) fcntl$getown(r2, 0x9) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r4, 0x0) r5 = gettid() ptrace$pokeuser(0x6, r5, 0x5e8, 0x7) r6 = getpgid(0x0) r7 = syz_open_procfs(r6, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r7, &(0x7f0000000040)=0x100000, 0x8001) [ 589.439457] x86/PAT: syz-executor0:18332 map pfn RAM range req write-combining for [mem 0x62da0000-0x62da3fff], got write-back 22:12:29 executing program 3: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffc}, &(0x7f0000000240)=0x20) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="26410f300f01c90f06643e400f01c9420f758e000000002ef3400fb8e566baf80cb8ac8abd80ef66bafc0cedd2fe0f01ca66ba4000ec", 0x36}], 0x1, 0x0, &(0x7f0000000180), 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef0f23f5", 0x23}], 0x1, 0x0, &(0x7f0000000140), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000001c0)="0f0f280dbaf80c66b8561eac8666efbafc0cecd8d80f01720cbad10466ed26900f019d848066b92902000066b80800000066ba000000000f300f01d10f013b", 0x3f}], 0x1, 0x0, &(0x7f0000000300), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 589.538244] x86/PAT: syz-executor0:18332 map pfn RAM range req write-combining for [mem 0x63970000-0x63973fff], got write-back 22:12:29 executing program 2: r0 = socket$packet(0x11, 0x200000003, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000100), 0x1) lsetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@random={'user.', 'systemtrusted#^lowlan1*posix_acl_access\x00'}, &(0x7f0000000200)='vboxnet0\x00', 0x9, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000000)='md5sumem1eth0-ppp0.-\x00', 0xffffffffffffffff}, 0x30) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='net/sctp\x00') close(r0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000140)=0x3, 0x8) 22:12:29 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x81, 0x101) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f0000000080)={0xd1, 0x6}) 22:12:29 executing program 5: socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup(0xffffffffffffffff) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) 22:12:29 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) sendmsg$nl_crypto(r0, &(0x7f0000000080)={&(0x7f0000000040), 0xc, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[]}}, 0x4000000) 22:12:29 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r4, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f0000000380)="6e65742f69636d7036002f5a77d67b1aa9f8c6eba070124788b6dcbbcce3cef2965f045b9682c96f023759ae0295647518a8824b3d6e25ff0497df8530ccf3993d4a3556fde62f29f291bc1d2129ab6f9254cdfe2738a8143699ec378f906580197c00e8895cc62e1cf75cc36b52a37db4c9d7f2f5032bc416bb610ca29981d0f74a2260f1") sendfile(r0, r6, &(0x7f0000000040)=0x100000, 0x8001) 22:12:30 executing program 4: openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0xc0000, 0x0) r0 = socket$packet(0x11, 0x2000009, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x105000, 0x0) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000500)) r2 = accept4$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14, 0x800) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000001c0)=r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x58, &(0x7f0000000280)=[@in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}, @in6={0xa, 0x4e20, 0x4, @empty, 0xf4d}, @in6={0xa, 0x4e24, 0xa53a, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x19}}}]}, &(0x7f0000000200)=0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r5, 0x8910, &(0x7f0000000180)=@buf={0xa9, &(0x7f00000005c0)="907f3d87a2a8af6d4dc560eaa10cd5d1b7a52eb0619b6339e93c861374a1106b3e812ae5f0dd8fad2d6428b8d5cb1340f7d0775104b92473021c5479daba495fe45583cdf959c62a154e2a1c46b1b43269d14034a35369c128e37b20e73d544409b135b68aa5cd3e6d6691044b6ba1d1c1431f7160e50642a7d36fcad62fdde41907341b65d459283f13ef1112b99ea62d1ba0e7a087bf9ba35d9f08ca6e952d3b4f2733edbd0588ac"}) getsockname(r5, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000001c0)=0x80) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r6, 0x111, 0x5, 0x2, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000000)=0x13, 0x4) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000540)={0x5, [0x8, 0x200, 0xfff, 0x6, 0x10]}, 0xe) sendmsg$nl_generic(r5, &(0x7f0000000140)={&(0x7f0000000480)={0x10, 0xbbf4}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000100b17d709ede3c8a0400000000"], 0x1c}}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000380)={r4, 0x70000000000}, 0x8) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) accept$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000006c0)=0x14) fcntl$getownex(r2, 0x10, &(0x7f00000004c0)={0x0, 0x0}) accept$packet(r7, 0x0, &(0x7f0000000580)) ioprio_get$pid(0x3, r8) connect$vsock_dgram(r7, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000003c0)={0x3, &(0x7f0000000300)=[{}, {}, {0x0}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r7, 0xc010641d, &(0x7f0000000480)={r9, &(0x7f0000000400)=""/79}) [ 590.088050] x86/PAT: syz-executor0:18358 map pfn RAM range req write-combining for [mem 0x62370000-0x62373fff], got write-back [ 590.170174] x86/PAT: syz-executor0:18361 map pfn RAM range req write-combining for [mem 0x62370000-0x62373fff], got write-back 22:12:30 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0xfffffffffffffdc6) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r0) 22:12:30 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x5, 0x7, 0x100000000, 0x9, 0x3ff, 0x2, 0x800, {0x0, @in={{0x2, 0x4e20, @broadcast}}, 0x200, 0x9, 0x2bb, 0x7ff, 0x6}}, &(0x7f0000000000)=0xb0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000200)={r1, @in6={{0xa, 0x4e23, 0xfffffffffffffffd, @dev={0xfe, 0x80, [], 0xf}, 0xfffffffffffffff7}}}, &(0x7f0000000080)=0x84) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mkdirat(r3, &(0x7f0000000300)='./file0\x00', 0x10) syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x40, 0x40) r4 = syz_open_dev$usb(&(0x7f00000002c0)='/dev/bus/usb/00#/00#\x00', 0x7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x10001) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r5, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r6, &(0x7f0000000040)=0x100000, 0x8001) 22:12:30 executing program 5: socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f00000004c0)={0x9, 0x0, [{0x8000000e, 0x7, 0x9, 0x8, 0x2}, {0x40000001, 0x80000000, 0xfffffffffffff418, 0x2, 0xfffffffffffffff9}, {0x40000001, 0x400, 0x10001, 0x3c6, 0x10000}, {0x80000019, 0x1, 0x100000001, 0x6, 0x4}, {0x4, 0x8f19, 0x4, 0x4, 0x3}, {0x4, 0xcf9, 0x1, 0x4, 0x6}, {0x1, 0x70de, 0x4, 0x100000000, 0x2}, {0xc0000006, 0x1c9d, 0x5, 0x0, 0x5}, {0x0, 0x2, 0x2, 0x101, 0x80000000}]}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup(0xffffffffffffffff) r4 = socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000140)={[0x8, 0x8, 0xffffffff, 0x5, 0x4, 0x6440000000000, 0x7, 0x2, 0x1, 0x7ff, 0x3, 0x1, 0x3, 0x7f, 0xa1e, 0x8], 0x2000, 0x10}) socket(0x8, 0xa, 0x40000000a63b) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f00000000c0)=0x10001) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) 22:12:30 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req={0x1ff, 0x100000000, 0x0, 0xd52a}, 0x18) close(r0) [ 590.686051] x86/PAT: syz-executor0:18374 map pfn RAM range req write-combining for [mem 0x16b8a0000-0x16b8a3fff], got write-back 22:12:30 executing program 2: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(0xffffffffffffffff) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0x0) [ 590.804502] x86/PAT: syz-executor0:18383 map pfn RAM range req write-combining for [mem 0x16b940000-0x16b943fff], got write-back 22:12:31 executing program 1: r0 = socket(0x20000010, 0x2, 0x0) r1 = getuid() lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000002c0)='./file0\x00', r1, r2) recvmmsg(r0, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) sendmsg$nl_crypto(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xe0}}, 0x0) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000080)=@l2, 0x80, &(0x7f0000000600)=[{&(0x7f0000000340)=""/161, 0xa1}, {&(0x7f0000000000)=""/32, 0x20}, {&(0x7f0000000540)=""/161, 0xa1}, {&(0x7f0000000100)=""/114, 0x72}], 0x4, &(0x7f00000004c0)=""/60, 0x3c, 0x10001}, 0x12100) 22:12:31 executing program 3: syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000100)={'mangle\x00', 0x3, [{}, {}, {}]}, 0x58) r2 = socket(0xa, 0x5, 0x3) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000080)={'veth1_to_bond\x00', {0x2, 0x4e24, @broadcast}}) accept4$packet(r2, 0x0, &(0x7f0000000000), 0x80000) 22:12:31 executing program 4: socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000080)=""/28, &(0x7f00000000c0)=0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r2 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0xffffffff, 0x101200) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000140)={[0x2000, 0x1, 0x2], 0x3ff, 0x8, 0x100000001}) getsockname$netlink(r2, &(0x7f00000001c0), &(0x7f0000000200)=0xc) close(r2) 22:12:31 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x9, 0x101000) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000080)) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) getrusage(0x0, &(0x7f00000000c0)) 22:12:31 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/prev\x00') sendfile(r0, r3, &(0x7f0000000040)=0x100000, 0x8001) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000080)={0x1, 0x2000}) 22:12:31 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140), &(0x7f00000002c0)=0xc) sendmsg$nl_generic(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8010000}, 0xc, &(0x7f00000005c0)={&(0x7f0000004300)={0x1240, 0x27, 0x1, 0x70bd2c, 0x25dfdbff, {0xd}}, 0xfffffffffffffdbe}, 0x1, 0x0, 0x0, 0x4000814}, 0x4004000) fstatfs(r0, &(0x7f00000003c0)=""/61) sendmsg$nl_crypto(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@upd={0xe0, 0x12, 0x301, 0x0, 0x0, {{'\nrc32\x00'}}}, 0xe0}}, 0x0) 22:12:31 executing program 4: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)=0xffffffffffffffff, 0x4) r1 = socket(0x10, 0x0, 0x800) r2 = mq_open(&(0x7f00000001c0)='/dev/audio\x00', 0x2, 0x4, &(0x7f0000000200)={0x7, 0xe60, 0x75c317a50000000, 0x0, 0x4, 0x0, 0x1000, 0x4}) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0), &(0x7f0000000300)=0x1c) r5 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x9, 0x60000) r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x4, 0x2, 0x6, 0x0, 0x0, [{r1, 0x0, 0xdb}, {r2, 0x0, 0x400}, {r3, 0x0, 0x100000000}, {r4, 0x0, 0x200}, {r5, 0x0, 0xffffffffffffffc1}, {r6, 0x0, 0x5}]}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$LOOP_SET_FD(r5, 0x4c00, r5) close(0xffffffffffffffff) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80, 0x0) ioctl$TUNGETFILTER(r7, 0x801054db, &(0x7f0000000080)=""/244) 22:12:31 executing program 2: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/mcfilter6\x00') close(r0) [ 591.804390] netlink: 192 bytes leftover after parsing attributes in process `syz-executor1'. 22:12:31 executing program 5: socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x500, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000180)={0x34, 0x0, &(0x7f0000000140)}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) [ 591.872151] netlink: 192 bytes leftover after parsing attributes in process `syz-executor1'. 22:12:32 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x5, 0x3ff, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f00000005c0)="1d", &(0x7f0000000040)}, 0x20) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x10d100, 0x0) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0xfffffffffffffffe, 0x2, {0x7, 0x1b, 0x4, 0x218008, 0x7, 0x0, 0x8000, 0x81}}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, &(0x7f0000000180), &(0x7f0000000300)=""/161}, 0x18) [ 592.054339] QAT: Invalid ioctl 22:12:32 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000000)=0x2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r5, &(0x7f0000000040)=0x100000, 0x8001) 22:12:32 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req={0x8001, 0x7f, 0xd0, 0x6}, 0x1af) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x80, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000040)) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) close(r0) 22:12:32 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r0) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10f, 0x7, 0x16, 0x1cf, 0x2bd, 0x62, 0x5c, 0x180000000000000}, "435fad292636a4546db16854232d19b21af660d04e51d559735d3f29158fc2e411c75d67fb90131fa9e72f15fc7f0e56b24edae6f500d88e8184890139ee5ced50269a0f60654fe06f02e1ac7ea152aaa78c7eebad3d3c1e958ab650219983c81041f11c1463e728fc3009fc", [[], [], [], [], [], [], []]}, 0x78c) [ 592.296969] x86/PAT: syz-executor0:18443 map pfn RAM range req write-combining for [mem 0x186450000-0x186453fff], got write-back [ 592.299814] QAT: Invalid ioctl 22:12:32 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rfkill\x00', 0x20000, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000340)={0x57, 0x1, 0x200, {0xb90, 0x94}, {0x1, 0xfffffffffffffff7}, @cond=[{0x8a5, 0xc00000000000, 0x8000, 0x1e2, 0x7, 0x1}, {0x700000000000000, 0x401, 0x7, 0x0, 0x46f, 0x12}]}) sendmsg$nl_crypto(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="e00000001200010300000000000000000a72633332000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0a6e75f4e25bb3d00000000000000000000000000000000000000000000000000000000000000000000000000d09699fece3153da08a78c959ff252c909eec1ed4772a974128021be28312897ea92928c834cfc7683ea9a9d5ddb95461bbc8c3c2455b1b72117a3b2f12ce52f59687c294a60f8d176ab7c5205050d6d5a36c263af0d5da67d941052ebb7248dd883b45ae6305e05607ea2acbe4cd3635db0710b18b2e046cc0d5faf31fc70b56391e117c93157ab4709192691da61fdc0e44955ac4bdc2c0bf886e5839cd645ae661c1e4cc22ed3584046b9454f658c264560a2dfe81fb209"], 0xe0}}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000000)=0xffffffffffffffff, 0x8) write$P9_RUNLINKAT(r1, &(0x7f0000000380)={0x7, 0x4d, 0x2}, 0x7) ioctl$sock_netdev_private(r0, 0x89fc, &(0x7f0000000080)="a47bf63645119ac2a518b629ceda43a9b2b5087bb717bcd01ddd8940581208f184a5a9eb405816b2b6aa8ac0f16e799683ffa625bddd50ee1217771ba591ceb40a0c595e720d5121f7b10570ae211171da4377dac539756c107194671bca142fec78fb287a29681ad382b5bec79e0dd0ccbe9802dbab12aeb587528bbaea06202afe66deea5384516d4d159c2cad11287269a012e444ae0df6309ee845b196fd1550bac943151f23aaeb710692764da2335e91b8a341f28da52db4d6f9936a253ba3be46ef8ff83cc2076afb577d5aa3e1a1898fea74b403eab036742d0762fa122d1293336f998cc037a4bd5d910b") ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f00000003c0)) [ 592.423597] x86/PAT: syz-executor0:18451 map pfn RAM range req write-combining for [mem 0x186450000-0x186453fff], got write-back 22:12:32 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000240)="d7", 0x1, 0x40, &(0x7f00000002c0)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e24, @multicast1}}, [0x5, 0x2, 0x1, 0x100000001, 0x7, 0x0, 0x0, 0x30e9, 0x8, 0x4, 0x185, 0x101, 0x4, 0x4cfb6439, 0x1]}, &(0x7f0000000080)=0x100) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={r1, @in={{0x2, 0x4e24, @multicast1}}}, &(0x7f0000000200)=0x84) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000280)) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x7fff, @remote, 0xfffffffffffff801}, 0x1c) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x9}, 0x8) close(r0) 22:12:32 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) fallocate(r0, 0x42, 0x3, 0x101) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r0) r1 = dup3(r0, r0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000000)={0xf95f, 0x8734, 0x9}, 0x10) [ 592.616354] netlink: 192 bytes leftover after parsing attributes in process `syz-executor1'. [ 592.685922] netlink: 192 bytes leftover after parsing attributes in process `syz-executor1'. 22:12:32 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r4, &(0x7f0000000040)=0x100000, 0x8001) 22:12:32 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r0) 22:12:33 executing program 1: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x4, 0x200) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0) fstat(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@dev}}, &(0x7f0000000140)=0xe8) write$P9_RSTATu(r1, &(0x7f00000004c0)={0x59, 0x7d, 0x1, {{0x0, 0x40, 0x2, 0x8, {0x8, 0x2}, 0x100000, 0x5, 0x71000, 0x1, 0x1, ':', 0x6, '\nrc32\x00', 0x6, '\nrc32\x00'}, 0x4, '$*#]', r2, r3, r4}}, 0x59) recvmmsg(r0, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) sendmsg$nl_crypto(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="e00000001200010300000000000080000a726333320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ee3d719c4776d2b2000000000000000000000000000000000000000000000000150f000000000000000000000000000000000000000000000000"], 0xe0}}, 0x0) 22:12:33 executing program 5: socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x8440, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f00000009c0)={0x6, 0x118, 0xfa00, {{0x1, 0x100000001, "1a061dc00b25eda59bbfeb930637aa93fb32d023fe1b9c3884c587b9092912a17a8718d4995de81dcd841fdb5eb6b6b742bf6c906824c0c336f11b76ec0b6768648f5632dda979851be83ac3db5dd019e4a7851269d8240a7dfff3863fe61ba676269bf724ca4ad1c669a461eb16432dba88e36fbda6d1df668f92b78e0ac16471bb7ca6612071be15120b5e4e2c0bd07ad5a7e41369423046016df07a680938d2c97273686477c3f21e711065f333016f92eb5268962c0b30485160c813aa6e4fed5d023bfa391407d3e896f4243d7ed32eda14ec1b7bfc90767c5147f675ff10ff177289e94999c2e2ac75b54789c23cfc3d815db8ca3f429d535717bb3d05", 0x6c, 0x4, 0x1f, 0x7, 0x2, 0x7b5, 0x7fff, 0x1}, r4}}, 0x120) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x7, 0x4, 0x4a8, 0x2a0, 0x0, 0x140, 0x3c0, 0x3c0, 0x3c0, 0x4, &(0x7f0000000140), {[{{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={[], 0x10}, @mac=@remote, @local, @dev={0xac, 0x14, 0x14, 0xe}, 0x1, 0x1}}}, {{@uncond, 0xf0, 0x160}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7ff, 0x781, 0x7, 0x0, 0x0, "c8089229d19a11a30787a098226e150560efa5e7e51abd03961e05a132be08413644b8cac9605836f1d00ca5283584c682f626c73a97ee8d04335108c2210b43"}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x19}, 0x0, 0xff000000, @mac=@remote, {[0x0, 0xff, 0xff, 0xff, 0xff]}, @empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, 0x2, 0x4, 0x4, 0x2, 0x20000000000, 0x4, 'ifb0\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x0, 0x2}, 0xf0, 0x120}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xba, 0x4, 0x400, 0x1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4f8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) [ 593.040689] x86/PAT: syz-executor0:18469 map pfn RAM range req write-combining for [mem 0x61a50000-0x61a53fff], got write-back [ 593.124031] x86/PAT: syz-executor0:18479 map pfn RAM range req write-combining for [mem 0x61a50000-0x61a53fff], got write-back 22:12:33 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x4003, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={0x0, 0x8}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r2, 0x800}, &(0x7f00000001c0)=0x8) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 22:12:33 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r0) [ 593.221593] netlink: 192 bytes leftover after parsing attributes in process `syz-executor1'. 22:12:33 executing program 3: syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x5, 0x80041) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) ioctl$NBD_DO_IT(r0, 0xab03) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xfffffffffffffffd, 0x8fffc) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x20, 0x80800) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xd}}}}, &(0x7f0000000000)=0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000200)={r2, 0x4, 0x3, [0x3, 0x5, 0x1]}, 0xe) 22:12:33 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='personality\x00') fstat(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) write$P9_RGETATTR(r4, &(0x7f00000001c0)={0xa0, 0x19, 0x2, {0x400, {0xa, 0x3, 0x6}, 0x40, r5, r6, 0x10000, 0x7fffffff, 0x1, 0x3, 0x5, 0x5, 0x5, 0xd243, 0x4, 0x7, 0xd35, 0x3, 0x1, 0x4, 0xffffffffffffa589}}, 0xa0) r7 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') getsockopt$IP_VS_SO_GET_VERSION(r7, 0x0, 0x480, &(0x7f00000002c0), &(0x7f0000000300)=0x40) ioctl$BLKBSZSET(r2, 0x40081271, &(0x7f0000000280)=0xffffffffffffffc1) sendfile(r0, r7, &(0x7f0000000040)=0x100000, 0x8001) 22:12:33 executing program 1: r0 = socket(0x10, 0x2, 0x7) recvmmsg(r0, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) sendmsg$nl_crypto(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@upd={0xe0, 0x12, 0x301, 0x0, 0x0, {{'\nrc32\x00'}}}, 0xe0}}, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000080)) 22:12:33 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) [ 593.647921] x86/PAT: syz-executor0:18496 map pfn RAM range req write-combining for [mem 0x199910000-0x199913fff], got write-back 22:12:33 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = fcntl$dupfd(r0, 0xdf2314818278acc, r0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x440800, 0x0) write$uinput_user_dev(r2, &(0x7f0000000280)={'syz1\x00', {0x6, 0x180e06b8, 0x7, 0x4}, 0x3, [0x7, 0x8, 0x2, 0x8, 0x6, 0x7, 0x200, 0x40000000000000, 0x3f, 0x1, 0x80000000, 0x3f, 0x8, 0x400, 0x7fff, 0x3, 0x3, 0x0, 0x4, 0x7fff, 0x400, 0x53d, 0x6, 0x3, 0xffffffff00000000, 0xffffffff, 0x6, 0x81, 0x30000, 0xc0c, 0xb62, 0x7, 0x80, 0xd3, 0x7, 0x8, 0xfffffffeffffffff, 0x5c8, 0x4, 0x0, 0x100000000, 0x7ff, 0xfffffffffffff24a, 0x7, 0x10000, 0x3d7, 0x0, 0x9, 0x0, 0x72f, 0xffffffffffffffff, 0x6ab, 0x5, 0x1, 0x1, 0x6, 0x7, 0x8, 0x400, 0x3f, 0x7, 0x7ff, 0x8, 0x6], [0xc1, 0xfffffffffffffe54, 0x100, 0x1, 0x0, 0x1, 0x0, 0x0, 0x18704523, 0x4, 0x6, 0x7fffffff, 0xfffffffffffffffd, 0x2, 0x9, 0x4, 0x3, 0xab9, 0x3, 0x1, 0x7a, 0x6, 0xffffffffffffff5c, 0x7, 0x6, 0x80000000, 0x4, 0x7, 0x3, 0x1, 0x1, 0xd3d, 0x7f00000000000000, 0x3, 0x0, 0x2, 0x8, 0x7fffffff, 0x330, 0x100000001, 0x2, 0x5, 0x80000000, 0x83, 0x0, 0x6c, 0x32, 0x5, 0xfffffffffffffffa, 0x62, 0x0, 0x2, 0x5, 0x8, 0x5, 0xfffffffffffeffff, 0x3c, 0x800, 0x3, 0x200, 0x80000001, 0x8, 0x3, 0x1], [0x3, 0x1, 0x101, 0xe4, 0x4, 0x80000000, 0x401, 0x9, 0x2, 0xffffffff8f06e408, 0x1, 0x100000000, 0x0, 0x2, 0x5, 0x2, 0x9, 0x6, 0x0, 0x5, 0x1ff, 0x8, 0x6, 0xffffffffffff6fdc, 0x3ff, 0x3, 0xab, 0x3ff, 0x7f, 0x93b, 0x20, 0x1, 0xff, 0x1, 0x2, 0x1, 0x123, 0x23c3, 0x80000001, 0x3ff, 0x8, 0x8000, 0x7, 0x1, 0x781d, 0x2, 0x4, 0x5, 0x47, 0xffffffff, 0x2, 0x7, 0x10000, 0x7ec, 0x4, 0x9, 0xfff, 0x5be4, 0x3, 0x3, 0xffffffff, 0x4, 0x8, 0x81fb], [0x7f, 0x486a, 0x5, 0x200, 0xef3, 0x1536, 0x9, 0x1e00000000000000, 0xcf, 0x7f, 0x70ad, 0xc842, 0xa71f, 0x2, 0x1, 0x0, 0xff, 0x6, 0x3, 0x8001, 0x4, 0x1, 0x80000001, 0x101, 0x0, 0x0, 0x5, 0x5, 0x8, 0x0, 0x22, 0x2, 0xca, 0x200, 0x9, 0x9, 0xa3c, 0xb4, 0x0, 0xadf0, 0x22ddb25d, 0x1, 0x4, 0xffffffff, 0x4, 0x6, 0x28, 0x54d, 0x1, 0x809, 0x1, 0x7, 0x6, 0x400, 0xfff, 0x10000, 0x4, 0xfffffffffffffff8, 0x2, 0x101, 0x4, 0x9, 0x100000000]}, 0x45c) close(r0) [ 593.843163] x86/PAT: syz-executor0:18506 map pfn RAM range req write-combining for [mem 0x199910000-0x199913fff], got write-back [ 593.875389] Unknown ioctl 8841 22:12:34 executing program 5: socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000180)={r5, 0x10001}, 0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) 22:12:34 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev}, 0x1c) getegid() stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) getresgid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc) ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f0000000e40)={0x0, @remote}) getresgid(&(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)) r1 = openat$cgroup_ro(r0, &(0x7f0000000580)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f00000005c0)=0xe8, 0x2) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000000)=0x7f) fstat(r0, &(0x7f0000000cc0)) setgroups(0x0, &(0x7f0000000040)) sendto$inet6(r0, &(0x7f0000000c00)="b0f3bfc1f751c39956d5c194a4b2c7e194878c6bfcfbbf4e809d5bf6adc3ecbb8ec9f60b77b5244094cad9595b82420bd1832cf75646dc2a7a91c951f849369c1afac84af4983b7ed24779b9ec5e47847828", 0x52, 0x0, 0x0, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000d40)=""/164) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000680)="0100752e7374617400", 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b40), 0x0, 0x0, 0x282, 0x40}, 0x800) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000001380)='./file0\x00', 0x0) mount(&(0x7f00000012c0), &(0x7f0000001300)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, &(0x7f0000000140)="b4fb5b1caef4a9da31238cf5c953b7ae8fa0d3e0f85c12aef20d757c22f527721ef031826885879b723f37c290251ab95490c92c") 22:12:34 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r0) 22:12:34 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x3c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ion\x00', 0x2000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r2 = syz_open_dev$mouse(&(0x7f0000000380)='/dev/input/mouse#\x00', 0x0, 0x20001) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x20fb61) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f00000003c0)=0xdc5f, 0x8) mmap(&(0x7f0000001000/0x13000)=nil, 0x13000, 0x0, 0x6012, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f00000004c0)=[@in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e21, @rand_addr=0xc8}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e23, 0x1, @ipv4={[], [], @remote}, 0x85}], 0x4c) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x8, 0x7}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e22, 0x9e, @mcast1, 0x81}}, 0x6, 0x7}, &(0x7f0000000200)=0x90) getresgid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={r4, 0x8000, 0x8, 0x9, 0x8001, 0x29e5, 0x40, 0x8, {r5, @in={{0x2, 0x4e24, @rand_addr=0xb207}}, 0x5, 0xb2, 0x9, 0x38}}, &(0x7f0000000340)=0xb0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') sendfile(r0, r6, &(0x7f0000000040)=0x100000, 0x8001) 22:12:34 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r0) [ 594.479670] tmpfs: No value for mount option '´û[®ô©Ú1#ŒõÉS·® Óàø\®ò u|"õ'rð1‚h…‡›r?7Â%¹TÉ' 22:12:34 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x200, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x1f}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000180)={r1, 0x1}, &(0x7f00000001c0)=0x8) r2 = socket(0xa, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x2f, &(0x7f0000000000), 0x20a154cc) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x2) 22:12:34 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x2, r1, 0x1c, 0x1, @in={0x2, 0x4e22}}}, 0xa0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xffffffe8) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) [ 594.552839] tmpfs: No value for mount option '´û[®ô©Ú1#ŒõÉS·® Óàø\®ò u|"õ'rð1‚h…‡›r?7Â%¹TÉ' [ 594.585535] Unknown ioctl 8841 22:12:34 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x46cb, 0x500) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)={0x0, r1, 0xffffffff, 0xf4, 0xffffffff, 0x10001}) r2 = socket(0x10, 0x2, 0x0) recvmmsg(r2, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) sendmsg$nl_crypto(r2, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@upd={0xe0, 0x12, 0x301, 0x0, 0x0, {{'\nrc32\x00'}}}, 0xe0}}, 0x0) 22:12:34 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r4, &(0x7f0000000040)=0x100000, 0x8001) 22:12:35 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x191800, 0x0) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000080)) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r0) 22:12:35 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000080)=0x2, 0x3) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x27) close(r1) 22:12:35 executing program 5: socket$inet6(0xa, 0x7ffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x8000, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) [ 595.161245] x86/PAT: syz-executor0:18562 map pfn RAM range req write-combining for [mem 0x63be0000-0x63be3fff], got write-back [ 595.173537] netlink: 192 bytes leftover after parsing attributes in process `syz-executor1'. [ 595.310585] x86/PAT: syz-executor0:18571 map pfn RAM range req write-combining for [mem 0x63be0000-0x63be3fff], got write-back 22:12:35 executing program 3: setrlimit(0xc00000000000007, &(0x7f0000000040)) userfaultfd(0x0) clock_gettime(0x7, &(0x7f0000000000)) 22:12:35 executing program 1: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000080)) r1 = socket(0x10, 0x2, 0x0) recvmmsg(r1, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) sendmsg$nl_crypto(r1, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="e00000001200010300000000000015000a7263333000000000000000000000020000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c96708db18aed2db000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000004e760a4572fff278580037beba77ace84352c07055e724f6f6ba6f445d518e13bbd7a04d3cb9befd7e2dbbbcc5bf234f35ffbae8476d2c94a3b64adc1768976e32d55aeda10460c79e6f3a0ad93ad9f6d75aa6e27e1e42e8a6b05d42c35fc7afa01d597e5fe38ef679644ed8b16d064826f2e1f99ec273e90ca1266902473f6661b8a6095f8132856abaffdaaeb3f929d4dfa149d09c1efadc11fbb28da43c78dc5ee99716001a9bec480f2b6d489803d47d8952a2df479a3a07aaa3be45ea10b74a8debae19077b0956e098a5104a1648d34ee61e1cc4606166e91416f8faaf3c70e0b48bdd6bb67188e95b655ee84548a07df69867b3003a1078d5a266963c4f20c347ee0ea8877aa1fb51dad0f751f9aa106383b10dc933f4cfb6e4fc9408dccc2aaec8ecf7fe704bf8dd48830f84ab2fae259631d6e33be7afa4d79f381078a664708e312d5789b037dbab88eb44b22a607c4c5d1ac043e6bb9bef646e003babe4a594ebb86298c93a2569d2882baf6757a01d32e1d22e21903f920933118e2c97f3ceaf3ccb9b885e03b95a4003752e1404c5fa50ee124554652728ea1b508108b1d83c28d19c2ca110"], 0xe0}}, 0x0) 22:12:35 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r0) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x4) 22:12:35 executing program 3: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000c35ffc), &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000080)={0x920, 0x3, 0x3, 0x8000}, 0x8) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2, 0x0) 22:12:35 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0xb1b, 0x20800) r1 = accept4(r0, &(0x7f0000000140)=@nl, &(0x7f0000000300)=0xffffffffffffffec, 0x800) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)=0x0) sched_getparam(r2, &(0x7f00000000c0)) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r3 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x30, r0, 0x0) close(r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x148, 0x0, &(0x7f0000000440)=[@release={0x40046306, 0x1}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x30, 0x10, &(0x7f00000001c0)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}, @flat={0x77622a85, 0x1, r3, 0x1}], &(0x7f0000000200)=[0x78, 0x78]}, 0x8}}, @decrefs, @clear_death={0x400c630f, 0x0, 0x2}, @decrefs={0x40046307, 0x2}, @reply_sg={0x40486312, {{0x3, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000240)=[@flat={0x73622a85, 0x1, r3, 0x3}], &(0x7f0000000280)=[0x78, 0x48, 0x28]}, 0x4}}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000340)=[@fda={0x66646185, 0x7, 0x4, 0x36}], &(0x7f0000000380)=[0x18]}}, @reply={0x40406301, {0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, &(0x7f00000003c0), &(0x7f0000000400)=[0x38, 0x0, 0x0, 0x38]}}], 0xd3, 0x0, &(0x7f00000005c0)="838f9093845feca0c89bf3f2632371a5f9c5c3bbba866e21dc8226184ae94ad0f3185b38ffe8f92dd43d64a00083e57473b3504cdcf1cbaa5d82b490cd05d95e8740c998b899bd7df3c2b87f2d29ab508b0b3fa89bd1b901bd4089e4aae7e078bc8f9623c812fe93a9eca81ae9b362a9049e3720b8de567db472d060afe440821c954f45f8d289156cab524209f9eb60a9480a1c2f75c4596edc22ca4e73bde14d95d4a942d2cc9e0214c2aacd014906ed53d1574d01e8551725a1b1b109c847feaaac1910ea1dbc8516aecfb9cdfdac8a39ac"}) fcntl$getflags(r0, 0x409) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f0000000080)={"1a2bc7ff7f0000000000000d00", 0x2}) [ 595.733449] netlink: 192 bytes leftover after parsing attributes in process `syz-executor1'. 22:12:35 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r3, &(0x7f0000000040)=0x100000, 0x8001) [ 595.898343] netlink: 192 bytes leftover after parsing attributes in process `syz-executor1'. 22:12:36 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/dev_mcast\x00') readv(r0, &(0x7f0000000040)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/38, 0x26}, {&(0x7f0000000080)=""/207, 0xcf}, {&(0x7f00000001c0)=""/106, 0x6a}], 0x3) 22:12:36 executing program 5: r0 = socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0x10000}) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x7d, 0x440040) ioctl$RTC_UIE_OFF(r4, 0x7004) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x7df) dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0xfffffffffffffffc, 0x0) [ 596.116005] x86/PAT: syz-executor0:18602 map pfn RAM range req write-combining for [mem 0x62200000-0x62203fff], got write-back [ 596.211170] x86/PAT: syz-executor0:18608 map pfn RAM range req write-combining for [mem 0x63f40000-0x63f43fff], got write-back 22:12:36 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000080)="8247ccd313e588edeb395c6cc096daa5d29486a14c06081454626ca319b38e60cb990dc17b5586e31f48e19ede0ea22f975d26595d1e5f98ef2b0f1c065df7d787f615a95dccacd47e50a1892a3ce0f7de79983e92c2688be56266ba7b9dabbeb1c02563e2b4fb1dfc23924bd587ba033c1b7f0ddf4a1f070b5f875fa06cce42ddac8112f8695bfd8a462ff8ba3e7805f0dd512c3828c29cbcf1fde7512527b9c42ab5dd89220163ca29706ecd9fce91703033434c5d9d7dca", 0xb9}, {}, {&(0x7f0000000140)="57d16ddb7f1c45e0be5967294929494c06852a2a5c9e5308d1e1c4f18a419c393ce81cf30667bbb91531f7cf42e3b40725246534282e1e19d40a0a66b72d23db5174231507fdfac780fc7223eb7ce55ccd45b39e6f861b3f941d88caf6aa31102e55636ecaf2d4becf815d1c5e6c1071aff75dc0306734ddc74365c6148bb6edbcf610eefcd8e990aa83fdda944b388f78914095c6dbfca8313a5540159cd2fd4b17", 0xa2}, {&(0x7f0000000280)="b3cf4cf8e44451d9e84025af30026526278fc4c5be36b4557da90b4994cfa0dffa7f13bafbfdc2abd145669305986708801945de23a29118428a31906029dc392566fcff005cf281ccc698db091006a7a9338084175af676482c270f5b09e8cd01ca50603549f714017eecae967909ad391e0321473e111029a206dc9da9f33c5a32fdf57afbada5eceba1d77309d4d2", 0x90}, {&(0x7f0000000340)="2be592a7b38265d19d756a5e07b2438ac5274c1460a28dcc245c90528bcb5668a3a2c7c196a85e32f2a1eef5703c251e5356c855cb40b01e6300acb070b247ece471330e2627b30f1b5b106daa4d23baf376121e941137402769b731dbf6f93ad735c42d863290f112bf5e14a8ab63", 0x6f}, {&(0x7f00000003c0)="97c201ac7777d0df9e6d6897bbe3a05a51e86a8c77a0f0483ec3e17cad73e30e9fd5926420d9a3a7ba28fdfd5a1702e60a1ac808c81ded891b42c4d52ceec42ec42cbc5523821009f9676ffc8ef2e16267176e1e78854a9c2f73e85ba5507ca8aaa6ccfe022f632ada17c7", 0x6b}, {&(0x7f0000000440)="5bbfbda99781d0c0ca5a188b0116951b8d677737cb4fa2a8f7b9eed52b651cceb9e777e2ffca14a4650129e65ef45e4939545500745351f741cea8aeab644fc0558e11a241c244e59d9238106fd1ab14c20acc11ebe0f465b81ccb4a94c445f700174752976879ec0780f3b2182b6b5d1edb4075f1db2ed9348190389bc866f8c4fedcca4bb7ed89b44b7fbe2ed5be7a364a58afa96c8f5d36c55dcd9bc4ebf8071c358e6c32bda5cd334e68603d558b65fd77af547bfe26974d086e2b165974b749d5b4604851dccfb395b701e68e049b", 0xd1}], 0x7) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r0) 22:12:36 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0xd13}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) sendmsg$nl_crypto(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@upd={0xe0, 0x12, 0x301, 0x0, 0x0, {{'\nrc32\x00'}}}, 0xe0}}, 0x0) 22:12:36 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000880)=ANY=[]) r2 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xcac1, 0x412000) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000100)=0x4) clone(0x10000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) request_key(&(0x7f00000003c0)='asymmetric\x00', &(0x7f0000001ffb), &(0x7f0000001fee)="520972757374e363757367725665783a4465", 0x0) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000040)={0x90000, 0x0, [0x6, 0x3, 0x9, 0x0, 0x9, 0x7, 0x6, 0x1ba]}) 22:12:36 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) socket$inet6(0xa, 0x6, 0x1) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r4, &(0x7f0000000040)=0x100000, 0x8001) [ 596.532163] netlink: 192 bytes leftover after parsing attributes in process `syz-executor1'. [ 596.553261] netlink: 192 bytes leftover after parsing attributes in process `syz-executor1'. 22:12:36 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) memfd_create(&(0x7f0000000000)='ifb0\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@nat={"6e6174000000000000000300", 0x19, 0x1, 0x138, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x2b0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x52200, 0x0) [ 596.798621] x86/PAT: syz-executor0:18630 map pfn RAM range req write-combining for [mem 0x62d90000-0x62d93fff], got write-back 22:12:36 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r0) fsetxattr$security_smack_transmute(r0, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x1) 22:12:36 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) sendmsg$nl_crypto(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@upd={0xe0, 0x12, 0x301, 0x0, 0x0, {{'\nrc32\x00'}}}, 0xe0}}, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x1, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x7fff) [ 597.063212] x86/PAT: syz-executor0:18630 map pfn RAM range req write-combining for [mem 0x62260000-0x62263fff], got write-back 22:12:37 executing program 5: socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0xf8, 0x101000) ioctl$DRM_IOCTL_GET_UNIQUE(r3, 0xc0106401, &(0x7f0000000440)={0x52, &(0x7f0000000180)=""/82}) dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) write$binfmt_aout(r4, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x7d5) ioctl$DRM_IOCTL_GET_UNIQUE(r4, 0xc0106401, &(0x7f00000000c0)={0xfffffffffffffd8f, &(0x7f00000004c0)=""/187}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) [ 597.118508] kernel msg: ebtables bug: please report to author: Wrong len argument [ 597.136273] netlink: 192 bytes leftover after parsing attributes in process `syz-executor1'. 22:12:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = dup2(r0, r0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000000280)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f00000003c0)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000400)={{{@in=@dev={0xac, 0x14, 0x14, 0x1e}, @in6=@dev={0xfe, 0x80, [], 0xe}, 0x4e24, 0x5, 0x4e21, 0x65882da6, 0xa, 0x20, 0xa0, 0x2f, r2, r3}, {0xfffffffffffffff8, 0x8, 0x10000, 0x8001, 0x3, 0x4, 0x8, 0x4}, {0x4, 0x800, 0xfffffffffffffffc, 0x2}, 0x7, 0x6e6bb8, 0x1, 0x0, 0x3, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0x10}, 0x4d5, 0x3c}, 0xa, @in=@broadcast, 0x3500, 0x4, 0x0, 0x1, 0xcac, 0x6, 0x2}}, 0xe8) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="6d616e676c6500008084866fb0003e00000000000000e1ffffea4680a356d1b0a5f51e78000000d8705e63c4c01092"], &(0x7f0000000540)=0x31) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000180)={0x1, 0x0, @pic={0x0, 0x7, 0x0, 0x4}}) ioctl$KVM_IRQ_LINE(r4, 0x4008ae61, &(0x7f0000000040)={0x2, 0x1}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000580)=""/169) 22:12:37 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x3ffd}}, 0x50) r1 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000003000), 0x1000) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0x0, 0x3}, 0x20) write$FUSE_ENTRY(r0, &(0x7f0000000580)={0x90, 0x0, 0x2}, 0x90) getdents(r2, &(0x7f0000000240)=""/185, 0xb9) fcntl$dupfd(r1, 0x0, r0) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_POLL(r0, &(0x7f0000000080)={0x18, 0x0, 0x4}, 0x18) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000640)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x0, 0x118, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000140), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x7837, 0x4, 0x2}}}, {{@arp={@empty, @multicast2, 0x0, 0xffffffff, @empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}, @empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}, 0x100000, 0xffff, 0x7, 0x835f, 0x7, 0x6, 'vlan0\x00', 'syz_tun\x00', {0xff}, {}, 0x0, 0x40}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @empty, @broadcast, 0x7}}}, {{@arp={@loopback, @local, 0xff, 0xffffffff, @empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}, @mac=@broadcast, {[0xff, 0xff, 0x0, 0xff, 0xff]}, 0x3a6e9d47, 0x4, 0x9b51, 0x7, 0x9, 0x1f, 'vlan0\x00', 'dummy0\x00', {0xff}, {}, 0x0, 0x8}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @empty, @local, 0xf, 0xffffffff}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) [ 597.183158] netlink: 192 bytes leftover after parsing attributes in process `syz-executor1'. 22:12:37 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x40) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000000)) getpgid(0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000080)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) fcntl$getown(r3, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, 0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000002c0)='bdevselinuxproc{\x00'}, 0x30) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x7, 0x1, 0x80000000, 0x7, 0x9}, &(0x7f0000000440)=0x98) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000480)=@assoc_id=r5, 0x4) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000140)={0x6b6c, 0x800f, 0x6d800000, 0x7, 0x0}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={r6, 0x9}, &(0x7f0000000340)=0x8) r7 = syz_open_procfs(r4, &(0x7f0000000200)="7070000040000000127c75f7e37b85ab2d307a8f6f892a7ae6729756fc26cdb0f5d2edd6a8ece24cd7d9b18fc7bbfde41fd9d023ba23656869139f83c2baefdda0058004c2809e1706e685168c42c4a6b8cd26b80ca6b1c53dcd34d411ae99ed53f7dffef4c2aa6e7cbb45487c29d1b632a1f9ad555600886ae3426de76c4ce8f3b379a8521334d09854f3d4aff535aea9fa22749cc596a58fea0256f113570cf2d09f") sendfile(r0, r7, &(0x7f0000000040)=0x100000, 0x8001) 22:12:37 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000080)=[0x7, 0x7]) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x60) close(r0) 22:12:37 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x48}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) sendmsg$nl_crypto(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@upd={0xe0, 0x12, 0x301, 0x0, 0x0, {{'\nrc32\x00'}}}, 0xe0}}, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000080)) [ 597.631186] x86/PAT: syz-executor0:18671 map pfn RAM range req write-combining for [mem 0x629c0000-0x629c3fff], got write-back [ 597.763213] netlink: 192 bytes leftover after parsing attributes in process `syz-executor1'. [ 597.811099] Unknown ioctl -2147199785 22:12:37 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0xffffffffffffff8d) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x2f8) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x220001, 0x88) close(r0) syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x8041) 22:12:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = dup2(r0, r0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000000280)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f00000003c0)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000400)={{{@in=@dev={0xac, 0x14, 0x14, 0x1e}, @in6=@dev={0xfe, 0x80, [], 0xe}, 0x4e24, 0x5, 0x4e21, 0x65882da6, 0xa, 0x20, 0xa0, 0x2f, r2, r3}, {0xfffffffffffffff8, 0x8, 0x10000, 0x8001, 0x3, 0x4, 0x8, 0x4}, {0x4, 0x800, 0xfffffffffffffffc, 0x2}, 0x7, 0x6e6bb8, 0x1, 0x0, 0x3, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0x10}, 0x4d5, 0x3c}, 0xa, @in=@broadcast, 0x3500, 0x4, 0x0, 0x1, 0xcac, 0x6, 0x2}}, 0xe8) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="6d616e676c6500008084866fb0003e00000000000000e1ffffea4680a356d1b0a5f51e78000000d8705e63c4c01092"], &(0x7f0000000540)=0x31) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000180)={0x1, 0x0, @pic={0x0, 0x7, 0x0, 0x4}}) ioctl$KVM_IRQ_LINE(r4, 0x4008ae61, &(0x7f0000000040)={0x2, 0x1}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000580)=""/169) [ 597.861262] netlink: 192 bytes leftover after parsing attributes in process `syz-executor1'. [ 597.883856] x86/PAT: syz-executor0:18680 map pfn RAM range req write-combining for [mem 0x629c0000-0x629c3fff], got write-back 22:12:38 executing program 4: r0 = socket$inet(0x2, 0x6000000000000003, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept$unix(r1, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) sendto$inet(r0, &(0x7f0000000100)="fba02488a71a5f8e1221deeb9a70ead0d97298cd560900000000000000155865bb5b2cd5", 0x24, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 22:12:38 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xc200, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000080)) sendmsg$nl_crypto(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@upd={0xe0, 0x12, 0x301, 0x0, 0x0, {{'\nrc32\x00'}}}, 0xe0}}, 0x0) 22:12:38 executing program 5: r0 = socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) 22:12:38 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2400, 0x0) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f0000000080)={0x1, 0x0, 0x7, 0x200, 0x100}) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req={0x8, 0x8, 0x3, 0x3305}, 0x6) close(r0) kexec_load(0x2, 0x0, &(0x7f0000000000), 0x1) 22:12:38 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x38b500, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r4, &(0x7f0000000040)=0x100000, 0x8001) sendto$inet6(r4, &(0x7f0000000140)="cce6422bf32322c087e653a3e907d6e6848e81a73ab4d3b5e050952a9a18e6ca6e2eb7525dae05fec453ab5b10fa64b41ffcbd776ca4f2560f05e4587a8029993fa9b547153d985bcd1eef7ac75d0e4513ab31593e806b0b12b5f601ad576f18813bd0189cc441c404d4056c88a3a42dc428a599c8044ff8c183c5972fa78b2eafd35beb4132ff69b8928a26882acb75c0d2dcf63808e9b618f96597a63517e4a6120871a55ece93ba1cd1f6fd50fa93caed8ec35117d31a5ebbc9c703623e7141341eade0296ad30cda5c0498bebb6efc6eade2fcd1ca88abe6c03c2febdc427c4b47d543824b341a4a3fb0412f627b8623b478c27ea7", 0xf7, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @local, 0x3ff}, 0x1c) [ 598.454318] netlink: 192 bytes leftover after parsing attributes in process `syz-executor1'. 22:12:38 executing program 4: r0 = memfd_create(&(0x7f00000003c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) connect$bt_rfcomm(r0, &(0x7f0000000240)={0x1f, {0x7, 0x1, 0xeed, 0x200, 0x6, 0x7}, 0x6dc5}, 0xa) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0xfffffffffffffd6a) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000100)={0x6, 0x118, 0xfa00, {{0x1, 0x3ff, "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", 0xe7, 0x2, 0x401, 0x5, 0xfff, 0xffff, 0x0, 0x1}, r1}}, 0x120) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000300), &(0x7f0000000300), 0x1000) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x10) [ 598.535593] netlink: 192 bytes leftover after parsing attributes in process `syz-executor1'. 22:12:38 executing program 3: epoll_create1(0x80000) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001200)='/dev/urandom\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2001) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x10, &(0x7f0000000080)={&(0x7f0000000040)=""/12, 0xc, 0xffffffffffffffff}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=r1, 0x4) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x88000, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x14) 22:12:38 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xeb, 0x42002) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000080)=0xad) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]) 22:12:39 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000)=0x8, 0x4) sendmsg$nl_crypto(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@upd={0xe0, 0x12, 0x301, 0x0, 0x0, {{'\nrc32\x00'}}}, 0xe0}}, 0x0) 22:12:39 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r4, &(0x7f0000000040), 0x8001) 22:12:39 executing program 4: mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) [ 599.259416] netlink: 192 bytes leftover after parsing attributes in process `syz-executor1'. [ 599.259610] x86/PAT: syz-executor0:18735 map pfn RAM range req write-combining for [mem 0x61d90000-0x61d93fff], got write-back 22:12:39 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") lseek(r0, 0x0, 0x0) syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0xa, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x29, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 22:12:39 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40000, 0x0) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000080)=""/250) close(r0) 22:12:39 executing program 5: socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)={0x0, 0x1}) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) mq_open(&(0x7f0000000440)='\x00', 0x40, 0x7c, &(0x7f0000000540)={0x3b, 0x8, 0x118, 0xffffffff, 0x1f, 0x8, 0xff, 0x7}) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup(0xffffffffffffffff) mq_open(&(0x7f0000000580)='\x00', 0x40, 0x4, &(0x7f00000005c0)={0x80000001, 0x6, 0x8, 0x1842, 0x3, 0xff, 0x200, 0xfffffffffffffffb}) socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = shmget$private(0x0, 0x2000, 0x7c000813, &(0x7f000000b000/0x2000)=nil) statfs(&(0x7f00000001c0)='./file0\x00', &(0x7f00000004c0)=""/98) shmctl$SHM_STAT(r4, 0xd, &(0x7f0000000700)=""/76) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x1b}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000600)={0x6, 0x82, 0x8, 0x8, 0x140, 0x200, 0x6, 0x1, r5}, &(0x7f0000000640)=0x20) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000000c0)=0x0) sched_setattr(r6, &(0x7f0000000080)={0x30, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) [ 599.417657] x86/PAT: syz-executor0:18741 map pfn RAM range req write-combining for [mem 0x61d90000-0x61d93fff], got write-back [ 599.485446] sit: non-ECT from 172.20.255.187 with TOS=0x2 [ 599.528112] sit: non-ECT from 172.20.255.187 with TOS=0x2 22:12:39 executing program 4: socketpair(0x0, 0x800, 0xfffffffffffffffb, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)={0x0, 0xa3, "b663c9603cc8053c3d0cef66afeb8a8d1c7a2f6e925fd8a4d3b106a9b5c20fc1ba0cc368b4baa23fc4f2b1d938f71c130934805e7c8492c8081f513a6b1d0d5998739233f34e0044e4e4ceee4e3fdc42d77f7a45a4bb7f7d9327629a40a06b16d24670f26eda85bc23280d6039531791422f7c0d087f3f3e91d50ae79cea9735a3007ee6abef8fb6ff048dd945a7eddb49a7acbdb24c3497e18ec434f6c09f18fd3d6a"}, &(0x7f0000000240)=0xab) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000280)=r1, 0x4) unshare(0x28020400) mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x3, 0xffffffffffffffff) execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f00000000c0)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8200, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xa40, 0x0) 22:12:39 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000004500)={0xffffffffffffffff, r0, 0x0, 0x3, &(0x7f00000044c0)='#\'\x00'}, 0x30) stat(&(0x7f0000004540)='./file0\x00', &(0x7f0000004580)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r3, &(0x7f0000004600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = gettid() r8 = getuid() fstat(r1, &(0x7f0000004680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000004700)=0x0) getresuid(&(0x7f0000004740), &(0x7f0000004780), &(0x7f00000047c0)=0x0) getresgid(&(0x7f0000004800), &(0x7f0000004840)=0x0, &(0x7f0000004880)) r13 = getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000048c0)={{{@in6, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f00000049c0)=0xe8) stat(&(0x7f0000004a00)='./file0\x00', &(0x7f0000004a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r16 = getpgid(0xffffffffffffffff) getresuid(&(0x7f0000005240), &(0x7f0000005280)=0x0, &(0x7f00000052c0)) getresgid(&(0x7f0000005300), &(0x7f0000005340)=0x0, &(0x7f0000005380)) sendmmsg$unix(r3, &(0x7f0000005400)=[{&(0x7f0000003140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004440)=[{&(0x7f00000031c0)="b8c6fb713ae4be55173d0d24fce9682dfcc5070c8c3197c32f73dbdb29eb", 0x1e}, {&(0x7f0000003200)="bf160e0f9211c4d640a9f129c53d3117351013a2a539fdf56ee73c5c88422582e2530fce246e513e2776455a55178e284b596ccef826a91d67fbfa999e48b8c5f110d0b6fe260057d4711607c4db1846f5e560cc726dd00ce26f47bee920a7ef3ea89270e91fb9381aac37799710b6cbc09311740132458da748c0929bb1216594428c7bcd51486682aa1c7ceb69b5d2bf19f790461a4dbca158839c8a9ef6", 0x9f}, {&(0x7f00000032c0)="3a0700217f2c69fcb8e8be618aaf022c87f6ba6616c5d983217892f83bb94484e3ab5aadc6a5a9ff3fd16a8585ea62dc50b97300ce3e948cc7e6b99ce66a7bcaa230dd85cb7faa2ecaebb252a131b54ee87b3937948268408947103c004e2f9d4f21268c67deb45d69838ceb5f67810f5f808a26f52a757a2629c93634392a579cddb42d049e407e0199064fca98787048b1e172506d0a58c3562be499dae69192734d", 0xa3}, {&(0x7f0000003380)="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", 0x1000}, {&(0x7f0000004380)="9eb36ac63c1f34c83bf2a9defb18346768b9e1502c55fab520bbd8099a39adb4e072fd36abfd26fdee46082c516261cb1389197c58c94d78cad4dfda86e677e2f6659bbd565c52e672e35c31c1b5d18647f2f8cba6091269c4938200b4d8d3d6d0db688b6e034b1664a98cd8ddaf2d6b59b77fc8157a5cb6149b8f9edd2ec75605bee0d2dec8f19ae40948a5e6c1e7f2c055e19f7bc99e649b3d3a60582f7f6c344c0e756a95db28", 0xa8}], 0xdd, &(0x7f0000004ac0)=[@cred={0x20, 0x1, 0x2, r4, r5, r6}, @cred={0x20, 0x1, 0x2, r7, r8, r9}, @cred={0x20, 0x1, 0x2, r10, r11, r12}, @cred={0x20, 0x1, 0x2, r13, r14, r15}], 0x80, 0x4000010}, {&(0x7f0000004b40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000051c0)=[{&(0x7f0000004bc0)="1ef6123f83411d49f06e0cc323f6f6540c6776614d69c8fe4d8d1c3bc8c4edf1e83c1320301fc0f2d08279ba8bbd56373cd3b1209c388ae1180595cef230a1ef57e859b5f22869aa0e81ad6a847386a0d1b9e5cfcfbc22a5f2677d2ad41b61dbb1430a9a9d1beb5beca19cca1aa9412ce6b68fc9dea2ef04e9c86fc9f8cd27feaca6bbe5d17c03faaae7f57457324068bc25ddeb3c83e002", 0x98}, {&(0x7f0000004c80)="4af71d5c22399eb2ecc0ab75132dc38486482f52e28af7f894ac7f7b82e624e36c25a5479037a548ea9508c17a15d1b89a7c762f471f6e88fd41fec5fe6074762687798f5a6d3d8a2925a867e2f259e4a13cf025c5b4820ec84f39c04372a9121a7d945e9d5c530b97272fa36d1cfbefd86220ba4cb0525e7af96492499feb232d7efc00918dba1b57d44a9f74fb748b0b81d0f13f53490826a9499b18bc1efb438e6b97dd1eb3b6a78638f5e03e6aec07b24e6262a5286fa1a7eaf30fb421eb71fe06733a78a58fb5aa384791a93e7ee1", 0xd1}, {&(0x7f0000004d80)="3e8adfae63521de400d64958b165a9481f5aae0d9587bf74cdcddb6354d240730ec094997c3ab21c7ec3494c90b2919398973c9212384af84b979b8da41615b73e1686b7a0adb5f603f5da723c168b16732abf1cb82e8efed84817f15e6488f91c1478a2b72b1df6fab91c82d09774a4f78da2ea4d4d65d189287cd7516b627ef530edd201e9f64cbf379bc3bea6dafefdc710fb296f7027f19faa2af70b9c156d630680983b1ad3ad662072b4e1e9709b45b4f38ebf165f75a038ff7e8ba9af167b8741098fb6fdec21c7325cd254ea8c7221ec9c9257294eb379f7b05d4746654016287b84b635bd06dbdb62e403e68159b7", 0xf3}, {&(0x7f0000004e80)="c434e37ec1e40e67f55b80a1ef06dd1e7336951fc67946a6c151dc7b9dffde83120fb5834f03e46ebce084f30ccea9cd11a18cd262aa55847430caf719498ca4a35d2a0070b4d104383264527c0b61ce5bf0ebb315c561c078f06881202154bb9811e2a492a58de658b7fd29b988fa5a1d92e8a0b7e1e92b8c87a6c3cf5d74332e17a1e1ae90da02d8dc601d6a8e27d12d6791eefac7ce6fc884b793e2d993ac5f097982bb220bedf9bd88f4c0a4a8a8ebf20e1583164f9c532c4d12acf015a1fd94e87e1fbbef2b1131900acdb2348c8514c0ea175f87f71b031c5305b166b2f698", 0xe2}, {&(0x7f0000004f80)="686e4cf719", 0x5}, {&(0x7f0000004fc0)="ea3bd6539b9bf8c5947545bce5a2b84bae4faa272452b9f5b43e829e4f97d4b7326057750ed3cea1ee630a6786e83abd46db27bee73209abd1fb179801a52584c4a9281e2acbd37f93914f069aff38a9b354e2c3f1dff7bf695ca4e7d6d5f366baf07698b3114bebe2b2d87872aa09e132b59915ed992932f699c2b4b67a473084", 0x81}, {&(0x7f0000005080)="99e72bfc430b362f7812ab364e0fbaceeb5fc4030cb32a9e9a473a5d4c982650addbeb2e3f436b9571749daf7dc671c979ff2c7b9fdee326079b3e4a828648a362ff53f5f83996046ce7481178d236a7c33b2607e17ad7967041c5b4631c3398f74d0500ef5363cf09be32f51aff9a5e0e3c3cc268cbe97610330a26079b5cfeb6cf8c09c30f494af4e1af0aaa5aacfe443b4522bc9f125b2948a938e4e9697d", 0xa0}, {&(0x7f0000005140)="2caa9627f33a944bc746f276b7ebaf0bce20790cba7e02707cc7d69125aa09f93b07a350022474c712205701516ddd45cb30f1d9956bda166024380b1881f8bbd3214e608b68308d5b589db5ab7c31d32ffa4aa733f8149a10be5128d0ab0c5fa3789d5b14903118470f078581551d372fe1b2", 0x73}], 0x8, &(0x7f00000053c0)=[@cred={0x20, 0x1, 0x2, r16, r17, r18}], 0x20, 0x20000040}], 0x2, 0xe35180149b164924) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r19, 0x0) r20 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000640)='/proc/self/attr/current\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000006c0)={0x0, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000680)='#\'\x00'}, 0x30) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f00000007c0)=[0xee00, 0x0]) ioctl$TIOCGPGRP(r19, 0x540f, &(0x7f0000000800)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000840)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f0000000940)=0xe8) getresgid(&(0x7f0000000980), &(0x7f00000009c0)=0x0, &(0x7f0000000a00)) sendmmsg$unix(r19, &(0x7f0000003080)=[{&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000000)="75b7d2577807cec9c5198a8ab1144a882fe27c9621a1fdbba5c6ba0d9e18eb83f67ade479c4d3e024903ab8f3d8c8b6090af644c298365", 0x37}, {&(0x7f0000000140)="e8043a49a431c7590a9b8b9a43ac5edf4aa01e2352d95a90d19f0968476bbfd659fb216ee42ce7b4aa1583a0c04a7068ba2ce70db9fac493bab6b7da", 0x3c}, {&(0x7f0000000180)="9a4d673b7f96b942261d347b8c805db3ad4f57de4fd44a2b451e7bbf1a5ca049f7f34b874ceee8a5fade1c3c7d4f271e3f8040b0ff9dadc5d847a45ba3cbd4658c7d263993422a512f870d994e44e6da68cc80e454c18679c180a638f568ebb8a0282e366e7a864ee77670e1ac59ef1301b1d672869a83f787a0f410d449fcc99349c9e4f64a9a55b4f9eaa0a2f8e2dde9637347d0b9b40b89b9116a007c503140105771f3403dab51a2037d7445e7c27bad3e9b20c02537ca2fbf973277d81a2fcd1abef5dee80e96ad289fd4de76c702f00801f7c110d6b9af1aa070f2bd2d87788949d36a6816f2", 0xe9}, {&(0x7f0000000280)="f9e20fc8ce1b6da652c722ad53bfbcca79a26ea2e0813c67b72556be0658be8abc47553f8ec81290e0195fbe911fdfb74024b0053edbff2b3a3a167d2aafd70e4a40e4ca156cb41e644326f08eb1f615a115f55d36232753b870430c936c02c12d9ac8245f1f4814c75693412549e5c86316474819da0db40201a1b0e4958c8095f901aa740e249de3507758186f2156a1e888dbef432d21b95cdd0542bbbb3e4f858b2c2c0fd0ed996f0d18fd84089608815d5595fcf4485859507beb9a", 0xbe}, {&(0x7f0000000340)="f0832ce6fe4b7e209a12a5fb09b7bd6bae5a0d60fe6b886d6c206b8fcdd62a288a63d8d85b5827eee2ffbad5ab74ba0bf325ef7221e2374e2f36c8a81128226f3ab8d6b8122a9d945c9a4b93890d40bbb488d683dbba8591d5be9c8b9a5c0a087ceb714d70bec8f317b60522538242f089e5912892025b3411e0b9c92dab79fbed828f4fdffa237d1394a64ecab93f56b500bb24108d2202902bda9ba43496d6ec865e17620a350db335d6c64a23dd8ec9836372c75ac8ab8198b95f59c47249c1c9f59870b85c894d2de7ce5f54a7dd3543f89ebf96718bcbf5723635ac9fa5c907c85b30f32cbf6722b6", 0xeb}, {&(0x7f0000000480)="5e0923ea17a95348642fc3c03ca00a1d57daee5cc52116", 0x17}, {&(0x7f0000000500)="dfd312fb91d370e1d7", 0x9}, {&(0x7f0000000540)="1435b9f9a7e9f91b6bea64175bc15bbe3670f222f164a70c84ddaa732454f622a13f4f728937b3b3c04b16b3edd10e52e569b3f0023abf81b97b289ebf6cf8e70f831eded108eced96078285a2760383c277da46", 0x54}], 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="38000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r19, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r19, @ANYRES32=r3, @ANYRES32=r19, @ANYRES32=r3, @ANYRES32=r0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r19, @ANYRES32=r2, @ANYRES32=r19, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000030000000000000090100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r19, @ANYRES32=r19, @ANYRES32=r1, @ANYRES32=r19, @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="28000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r20, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r19, @ANYRES32=r2, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r21, @ANYRES32=r22, @ANYRES32=r23, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="0000000020000000000000000100080000000100", @ANYRES32=r24, @ANYRES32=r25, @ANYRES32=r26, @ANYBLOB], 0x130, 0x4010}, {&(0x7f0000000b80)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001d00)=[{&(0x7f0000000c00)="1042660a462dc10c407e255afc32661921eb52f7338ea4b9f07703f5a5547331e0b0d702ef4ae44766229d56a2755918e5b96e76988f1d95a696fbf72705fe4b4656c30a6467e229520d90ab91053d55248fd31d3276bd2a2831bd11a02e4466aa3b02aa911747b5a8c2c918f662772a24b6dcd79d1cbcd91168938fb1c7c5690a7530a52de08b4cc1c4095884b80cf3198915e7cbbb1906", 0x98}, {&(0x7f0000000cc0)="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", 0x1000}, {&(0x7f0000001cc0)="db710f61919c23b6290e39588099b7d9a33b46d6a4f556777bfe127ec4a04e41fa4bf862677c", 0x26}], 0x3, &(0x7f0000001d40)=[@rights={0x10}, @rights={0x28, 0x1, 0x1, [r3, r19, r3, r0, r3, r3]}], 0x38, 0x20000810}, {&(0x7f0000001d80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003000)=[{&(0x7f0000001e00)="3ac538a62d1b35", 0x7}, {&(0x7f0000001e40)="49585f761679fa0d999d302978b767df6f5311f4146805eb1d5c451820771ee07fd78cd6211b2ded32426558658d132ba0405690732140dd31e561ac219b33a240ca5b271dc4baa5d3633c83c381fc7294d75e7cd5050dfa7525250d4fa03417c1456010fd0e958d00b547bf46ae91ea4ef1983e1a40b87235", 0x79}, {&(0x7f0000001ec0)="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", 0x1000}, {&(0x7f0000002ec0)="221453972032d84715995bd01b84ea8da863003bf7e15049717a94e4659e397c37a070f60812228cc91187caa04b10195daac78772f58ef4a2124de21ccb314d11d18f814cbe4638067f627bab830daa6a26d6e9d3208ffa8ad140abc01ea18a12a0ccf310a3805d309600c7c347f637d5cc14e719283fbba76ab7", 0x7b}, {&(0x7f0000002f40)="409e742d3dcaf8386c91da5b47d849fa56cbcb8575cef6d04c9f74a26b629bac0546a13e662dac2239cf9eb4772d385d43f4df43b085cf7d1ba4387c89e836a91b31baf059d2821e288aa7f37685ae25f024beae9326d27bedda1371570f63d29f0207cc1ca2aa7e558f3d1d53f08e3ea3b33179bf5667a3a15e72ca575478727a45963f809614132d2768f42294fc130e95ab", 0x93}], 0x5}], 0x3, 0x4000000) r27 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r27, &(0x7f0000000040)=0x100000, 0x8001) 22:12:39 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2e0000, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000340)={r2, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}}, [0x9, 0x400, 0x1, 0xffffffff, 0x8, 0x2, 0xffffffffffffff7f, 0x6, 0x3, 0x10001, 0x9fc, 0x7, 0x4, 0x2, 0x7]}, &(0x7f0000000100)=0x100) sendmsg$nl_crypto(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@upd={0xe0, 0x12, 0x301, 0x0, 0x0, {{'\nrc32\x00'}}}, 0xe0}}, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000002c0)={r3, 0x80000, r1}) 22:12:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000017c0)={{}, 'syz0\x00'}) ioctl$UI_DEV_SETUP(r1, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup3(r1, r2, 0x0) [ 599.995107] x86/PAT: syz-executor0:18762 map pfn RAM range req write-combining for [mem 0x622e0000-0x622e3fff], got write-back [ 600.024640] netlink: 192 bytes leftover after parsing attributes in process `syz-executor1'. [ 600.077503] netlink: 192 bytes leftover after parsing attributes in process `syz-executor1'. 22:12:40 executing program 2: r0 = socket$packet(0x11, 0x20000000005, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r0) [ 600.142103] input: syz0 as /devices/virtual/input/input14 [ 600.190743] x86/PAT: syz-executor0:18762 map pfn RAM range req write-combining for [mem 0x622e0000-0x622e3fff], got write-back [ 600.254837] input: syz0 as /devices/virtual/input/input15 22:12:40 executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000a83000)={0xfffffffffffffffc, {{0xa, 0x0, 0x0, @ipv4={[], [], @local}, 0x100}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) 22:12:40 executing program 1: r0 = socket(0xf, 0x7, 0xfffffffffffffffa) recvmmsg(r0, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000000)={0x3f, @multicast2, 0x4e22, 0x3, 'wlc\x00', 0x3, 0x10000, 0x2}, 0x2c) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_crypto(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@upd={0xe0, 0x12, 0x301, 0x0, 0x0, {{'\nrc32\x00'}}}, 0xe0}}, 0x0) 22:12:40 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000080)={{0xa, 0x4e24, 0x0, @loopback, 0x97}, {0xa, 0x4e21, 0x27, @loopback, 0x9}, 0x0, [0x50, 0x4, 0x4, 0x10000, 0x1, 0x0, 0x0, 0x9]}, 0x5c) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x400, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = memfd_create(&(0x7f00000003c0)='/dev/full\x00', 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000400)=0xe8) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000700)={&(0x7f0000000480)={0x1d, r4}, 0x10, &(0x7f00000006c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES64=r5, @ANYRES64=r6/1000+10000, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="02000020010000000100006016010000bbdd669806399727456e042eb13366fe738a19f33aa0c030318baf98b67c0cba1afcf0bfd4ee925ad181c8d634f289948d92f4cdbc99c6233c2c4d390bdbdb61"], 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x40000, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x1f, 0x5e8b2179}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={r8, 0x4c, &(0x7f0000000200)=[@in={0x2, 0x6}, @in6={0xa, 0x4e24, 0x100000001, @ipv4={[], [], @loopback}, 0x2}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000002c0)=0x10) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r9, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r10, &(0x7f0000000040)=0x100000, 0x8001) 22:12:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000240)="290000002000190710003fffffffda0602000080ff0f0001040000040d000600000000000000000001", 0x29}], 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) write$eventfd(r1, &(0x7f00000000c0)=0x10001, 0x8) syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x240) 22:12:40 executing program 5: socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000000c0)=0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000140)=0x0) setpgid(r5, r6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) 22:12:40 executing program 3: r0 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x8000000000000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000001c0), &(0x7f0000000280)=0x8) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x2, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x14040000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x74, r3, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'irlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @local}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000) ioctl(r2, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") sendmsg$nl_route(r1, &(0x7f0000000000)={&(0x7f0000000080), 0xc, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x13}]}}}]}, 0x3c}}, 0x0) [ 600.854645] x86/PAT: syz-executor0:18795 map pfn RAM range req write-combining for [mem 0x62630000-0x62633fff], got write-back 22:12:40 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x100, 0x0) write$UHID_CREATE(r0, &(0x7f0000001480)={0x0, 'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000480)=""/4096, 0x1000, 0xaf, 0x4, 0x4, 0x4, 0x1}, 0x120) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x28a, &(0x7f0000000000)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f00000001c0)='bond0\x00') [ 600.901952] netlink: 'syz-executor2': attribute type 6 has an invalid length. [ 600.946906] x86/PAT: syz-executor0:18800 map pfn RAM range req write-combining for [mem 0x623d0000-0x623d3fff], got write-back [ 600.963263] netlink: 'syz-executor2': attribute type 6 has an invalid length. [ 601.013932] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 601.022515] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 22:12:41 executing program 1: r0 = socket(0x10, 0x2, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000080)={0x0, 0xf2, "2dd54e6341552636b4f4411a57b3eb5630670641f723e25759df77efa3782bd92af923c3177890b1b83a736fef510edac5d026aa172410df1061202342c3bdb305cebc9479834f6859bc61f89d5ca04c011c191bb84da164b6b939e2cbe9dc6fb1acec1343dfe49c0aa123f3699de7f222d794d59b31f103dce55da43c471eeed13a7b57e6c9a3641b2d68edd2062fac8e1ff71a8f0a8d0351ae80715e13115eed9681c5d8eedcbddacf387c8225861bf8002d6f6f78b98984fb6769469e85d2e10a45931948ade66bcfda438181144c36a61da3df8e97d6c8d27f517101da67ee5ceca52a6181510f6174ffd3b5d6e771bf"}, &(0x7f0000000180)=0xfa) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000001c0)={r1, 0x7fff}, 0x8) recvmmsg(r0, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) sendmsg$nl_crypto(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="10010000100000082cbd7000fbdbdf25647262675f70725f686d61635f736861333834000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000002400000000000000000000080001000400000008000100ff07000008000100ff03000008000100ff07000008000100030000000800010000000000000000000000"], 0xfffffffffffffe37}, 0x1, 0x0, 0x0, 0x4000}, 0x0) [ 601.183085] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 601.191363] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 22:12:41 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0xa0000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x1, 0x0, 0x8}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r3, &(0x7f0000000040)=0x100000, 0x8001) 22:12:41 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = dup3(r0, r0, 0x80000) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x35284e54) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) alarm(0x0) 22:12:41 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0xd, 0x3}, 0x8) socketpair$inet(0x2, 0x3, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet(r1, &(0x7f0000000040)="970d7889db7ce38c9cca003a1a373728efc6fd787f4f2abb732f321131c6490b75d25046579d667c61cbc5cb4163fa33ea6588e8dc7bfd90bd8f412573439ad5e58f72b249bbe8a0c9b004d297587a6efdad8b4beffed4a520f8f41d44834431d54a1d5c1887eefecb1a8c2b", 0x6c, 0x4044045, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000200)={'broute\x00', 0x0, 0x4, 0x2d, [], 0x5, &(0x7f0000000140)=[{}, {}, {}, {}, {}], &(0x7f00000001c0)=""/45}, &(0x7f0000000280)=0x78) close(r0) 22:12:41 executing program 3: r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x413, 0x40) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000100)=0x4) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x100000000, &(0x7f0000ffc000/0x1000)=nil, 0x6) [ 601.510651] Unknown ioctl 35090 [ 601.576011] Unknown ioctl 35090 22:12:41 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, &(0x7f0000003280)) read(0xffffffffffffffff, &(0x7f0000000080)=""/115, 0x73) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000a00)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000b00)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x4, 0x2, &(0x7f0000000180)=@raw=[@generic={0x68b, 0x89, 0x200, 0x5}], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x56, &(0x7f0000000200)=""/86, 0x41f00, 0x1, [], r0}, 0x48) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000040)={0x103dd}) syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x19f, 0x0) 22:12:41 executing program 5: socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x40000, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000500)={@ipv4={[], [], @broadcast}, r4}, 0x14) r5 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x1) ioctl$GIO_SCRNMAP(r5, 0x4b40, &(0x7f0000000140)=""/32) dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000180)={0x5, 0x0, &(0x7f0000014000/0x3000)=nil}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000640)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000440)=0xe8) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) 22:12:41 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)="a967ca611569e866295a5a59b1986c7a7c573eb17bb193610ff93916f023ca7802880395735240023adb646b13", 0x2d, 0xfffffffffffffff8) r3 = add_key(&(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$link(0x8, r2, r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r5, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r6, &(0x7f0000000040)=0x100000, 0x8001) 22:12:42 executing program 4: seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_execute_func(&(0x7f0000000100)="65d9f136f3da1e7f7f8fa978db77e4c4a2ebf7172e66430f5e14f6f2a5c4e2ed039e080000000f381cb9aea2e1228fa9789a02") r0 = memfd_create(&(0x7f0000000080)='bdev\x00', 0x2) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000140)={'security\x00', 0xb6, "fb72c783aaee34dbdbdaadee52084397c05d843ae6f26fe0af23dcd66494a70f40ef234ca6537dd4d815977d24804a644da02e64cf60bc28930a2103b90035c1e8740720ffcae1bb13b1ca5838bb76aa4fff104ac807d3bac61a74e0e9d84b2e1426e75a41fa3369006e3e338c0f5ddaa488503275b7ccf016ad19d31a47b51fd141c338f7e7830554e1a8f7266cebfaac927a893ccab36c83a37e0c08cf82c6ddc57132603a52dddca4677e10ab18ccd3e39a08db6a"}, &(0x7f0000000040)=0xda) 22:12:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x2}, &(0x7f0000000080)=0x8) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000280)={0x2, 0x2}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}}}, &(0x7f0000000100)=0x84) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000340)={0x7ffd, 0x6, 0x100672}) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x4e20}}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0xfffffffffffffffd, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f00000000c0)={0x7fff, 0x1}) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) [ 602.105153] vhci_hcd: default hub control req: dd03 v0001 i0000 l0 [ 602.170489] x86/PAT: syz-executor0:18849 map pfn RAM range req write-combining for [mem 0x64040000-0x64043fff], got write-back [ 602.206127] vhci_hcd: default hub control req: dd03 v0001 i0000 l0 22:12:42 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000140)=0x1, 0x4) r1 = memfd_create(&(0x7f0000000000)='keyring,selinux&em0\'\x00', 0x7) sendmsg$nl_crypto(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="e00000001200010300000000000000000a726333320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xe0}}, 0x0) r2 = fcntl$getown(r0, 0x9) readlinkat(r1, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340), 0x0) sched_getattr(r2, &(0x7f0000000080), 0x30, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000100)=0x1, 0x4) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x1, 0x7}, 0xb) [ 602.269819] x86/PAT: syz-executor0:18849 map pfn RAM range req write-combining for [mem 0x606c0000-0x606c3fff], got write-back 22:12:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x40000400, &(0x7f0000000680), &(0x7f000084effc), &(0x7f0000000200), &(0x7f00000000c0)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fstatfs(r0, &(0x7f0000000000)=""/144) 22:12:42 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x200200, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x6, 0x4081) renameat2(r0, &(0x7f0000000140)='./file1\x00', r1, &(0x7f00000001c0)='./file1\x00', 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./file1\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000040)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400203) fchmodat(r2, &(0x7f0000000000)='./file1\x00', 0x0) [ 602.493166] netlink: 192 bytes leftover after parsing attributes in process `syz-executor1'. 22:12:42 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000000c0)={0x86, 0x8002, 0x4, 0x1f, r5}, &(0x7f0000000140)=0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r6, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x48}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xc36}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendfile(r0, r4, &(0x7f0000000040)=0x100000, 0x8001) 22:12:42 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl(r0, 0x2, &(0x7f0000000180)="6401d8e2eedaa05618af44b01cf81dba6da2de6664fc3b9061c3cc8b676a52508cd26ae375ccbc5f5ccdfab909dac6c81744663a4bc9308dbbfa8e926917936777b0de91fd068fb2109f22d8fbb328204d27b53d4634a122440937b39c42fedc2415df68d23944fa13a2b9e1") ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000000c0)={0x7ff, 0xc42f, 0x7, 'queue0\x00', 0x1000}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x1, 0xa2, 0x8, 'queue0\x00', 0x7ff}) semop(0x0, &(0x7f0000000080)=[{0x0, 0x6, 0x1000}, {0x0, 0x1ff, 0x1800}], 0x2) syz_execute_func(&(0x7f0000000040)="26d85af8f00fbb1bc42145f4aa08000000c44215a76f05806a2df466440f380bb600000000f28035f4efffffbaf33edabdabda0000f3dcecec") socketpair$packet(0x11, 0x2, 0x300, &(0x7f00000002c0)) [ 602.603218] netlink: 192 bytes leftover after parsing attributes in process `syz-executor1'. [ 602.844453] IPVS: ftp: loaded support on port[0] = 21 [ 602.890627] x86/PAT: syz-executor0:18882 map pfn RAM range req write-combining for [mem 0x64070000-0x64073fff], got write-back 22:12:43 executing program 1: r0 = socket(0x10, 0x1ffffffffffe, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) recvmmsg(r0, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000014}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x1c}}, 0x8890) r2 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x400, 0x80000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e20, 0x9, @loopback, 0xdc}}, 0x8, 0x8000, 0x9, 0x8001, 0x7}, &(0x7f0000000400)=0x98) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000440)={r3, 0x1f}, &(0x7f0000000480)=0x8) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000004300)={0x0, 0x0, 0x2080}) sendmsg$nl_crypto(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@delrng={0x10, 0x14, 0x700, 0x70bd2c, 0x25dfdbfb, "", [""]}, 0x10}}, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x8d96, 0x40a00) ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae05, &(0x7f00000000c0)=""/3) 22:12:43 executing program 3: r0 = socket$inet6(0xa, 0x81000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000024000), 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x18, 0x20000032, 0x201, 0x0, 0x0, {}, [@nested={0x4, 0x1}]}, 0x18}}, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x400002, 0x0) [ 603.010588] x86/PAT: syz-executor0:18889 map pfn RAM range req write-combining for [mem 0x64070000-0x64073fff], got write-back 22:12:43 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") r1 = memfd_create(&(0x7f0000000100)="885d292b00", 0x0) write(r1, &(0x7f0000000080)=')', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) ftruncate(r1, 0x7ffd) sendfile(r1, r1, &(0x7f0000000040), 0xff8) write$uinput_user_dev(r1, &(0x7f00000003c0)={'syz0\x00'}, 0x45c) stat(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)) perf_event_open(&(0x7f0000000140)={0x2000000000000002, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x20000004e20}, 0x1c) recvmmsg(r3, &(0x7f0000004400)=[{{&(0x7f0000001180)=@pppol2tp, 0x80, &(0x7f00000012c0), 0x3f9, &(0x7f0000001300)=""/255, 0xff}}], 0x1, 0x0, &(0x7f00000045c0)={0x77359400}) syz_emit_ethernet(0x437, &(0x7f0000000700)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x401, 0x11, 0x0, @dev, @local, {[], @dccp={{0x0, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}, "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"}}}}}}, &(0x7f0000001780)) sendto$inet6(r3, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendmsg$nl_generic(r2, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x2e, 0x119, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) [ 603.233307] tc_dump_action: action bad kind [ 603.255920] tc_dump_action: action bad kind 22:12:43 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x100, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r5, &(0x7f0000000040)=0x100000, 0x8001) 22:12:43 executing program 1: r0 = socket(0x15, 0x3, 0x4) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x2) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000080)=""/156) recvmmsg(r0, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) sendmsg$nl_crypto(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xe0}}, 0x0) 22:12:43 executing program 5: r0 = socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f00000000c0)={@multicast2, @empty, 0x0}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000180)={@mcast1, 0x7a, r1}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r4, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) 22:12:43 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x8, &(0x7f0000000140)=0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x400000, 0x0) ioctl$PIO_UNISCRNMAP(r3, 0x4b6a, &(0x7f00000001c0)="988eda6b33dc486b630f067e5c0e388d09fe21f702a1329677ba48907d2758ce3bb457340e3c2ec92550f2003e8a0286ea05f13e4e89133edfed8f1d978dfaa84cba2c7688edc76e97f18a0984") fcntl$setsig(r3, 0xa, 0x39) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0x9) close(r0) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000140), 0x700000000000}]) [ 603.680633] IPVS: ftp: loaded support on port[0] = 21 [ 603.722040] x86/PAT: syz-executor0:18912 map pfn RAM range req write-combining for [mem 0x635d0000-0x635d3fff], got write-back [ 603.792625] x86/PAT: syz-executor0:18917 map pfn RAM range req write-combining for [mem 0x635d0000-0x635d3fff], got write-back 22:12:43 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f00000003c0)="ac3072774484b011fa1377baab4a5070ad1e3fd19326e8d7b87378f0cb5ae95ba88e2443216e8cae599c94c1d2c01760789e3ffa86fcd3f10ba785f11d1e9423386ceb1be6eb20930c1204f92f6000639251b5d84e6c2ea4835d0f54ee528ab60066cb1a3deb1aaac0a910c2ec00573a25b433a4fbafe89586262ff0e1851c7c7e223b3d13a6198cc3a1c5990e5d958a97da3bd297cd9f9a7180fbeb4aa7fc3fdf0aba991c657941da6db8785d0bc75ec7f87120e3a94d0a0e92bb8be9b7b99b983cc8a525c13cba5738325d47b151a2b8035416d0b1c5438053f06eb9229b", 0xdf) r1 = socket(0x10, 0x2, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x55}, 0x80) recvmmsg(r1, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r0, 0x28, &(0x7f00000000c0)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={r3, 0x3, 0x8}, 0xc) sendmsg$nl_crypto(r1, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="e00000001200010300000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f04000000000000000000000000000000000000000000000000000000000000000000000077e0334fb6a6ac2a101bb95d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000ee089564659b4b0b0000000000000000"], 0xe0}}, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000340)) [ 604.153243] netlink: 192 bytes leftover after parsing attributes in process `syz-executor1'. [ 604.237228] netlink: 192 bytes leftover after parsing attributes in process `syz-executor1'. 22:12:45 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000440)='/dev/snd/controlC#\x00', 0x4000007, 0x0) perf_event_open(&(0x7f0000001000)={0x10, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = accept$inet(r1, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x1, 0x5fe7, 0x6, 0x1065, 0x3, 0xa80d, 0xb5e1, {0x0, @in={{0x2, 0x4e24, @remote}}, 0x100000000, 0x81, 0x0, 0x8, 0x6}}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000180)={r3, @in={{0x2, 0x4e20, @multicast1}}, 0xcde, 0x1}, &(0x7f0000000240)=0x90) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc4c85512, &(0x7f0000000040)) 22:12:45 executing program 4: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000002c0)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000000c0)="bd2da453f568ada14adacb60ec721e0a9e7cc39eb1707355fee737885c169cade5940a1a0dd0520eb190340fb75774cd31479cb5747b80681d0811ae946d8183d05eb24436a886e3eeb46833f96ca9292f3ce3c3c2de375bcf606f780516c43dab12ae305922846fba6addcfb294d1bdf5f4491c8a853638b83bd2e62b63bd9005771ad8c6011c6ccc7538104e9590748603954ee414f8ac6486534bd776eb2883f49bc13a84e2d2e0d7787cab3092f657daf3a7df7680b28ff01f836549d4611d0e4219da2b5d29ba80fcecef19c9490ac2bd2a6d1f287e57a8bfdd8b3f744f130edeb0b00db8", 0x39d) r1 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000500)={'syz'}, &(0x7f0000000540)="670e1cc292", 0x5, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000400)=""/240, 0xf0, 0x0) 22:12:45 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x88) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d5c6070") r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet6_buf(r0, 0x29, 0xdf, &(0x7f00000004c0)=""/81, &(0x7f0000000540)=0x51) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@rand_addr, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@remote}}, &(0x7f00000000c0)=0xe8) signalfd(r1, &(0x7f0000000240)={0x2}, 0x8) stat(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ATTR(r1, &(0x7f00000003c0)={0x78, 0x0, 0x3, {0x140, 0x6, 0x0, {0x2, 0xdd, 0x8, 0x400, 0x23ca, 0x3, 0x8000, 0xffffffff, 0x69, 0x3, 0x40, r2, r3, 0x8, 0x100000000}}}, 0x78) r4 = socket$packet(0x11, 0x2000000008003, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000180)={r5, 0x1, 0x6}, 0x10) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000440)="660f71d674baf80c66b812a6e48666efbafc0ced0f20d86635080000000f22d8b80d0e8ed00f71e0000f01df2e260f320f20e06635010000000f22e00f20d86635200000000f22d80f58856a52", 0x4d}], 0x1, 0x50, &(0x7f0000000240), 0x0) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000000)={r5, 0x1, 0x6}, 0x10) 22:12:45 executing program 1: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$KVM_SET_CPUID(r1, 0x80085504, &(0x7f00000000c0)=ANY=[]) r2 = getpid() syz_open_procfs(r2, &(0x7f0000000000)='net/sockstat\x00') ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x6, 0x4, 0x4931}) recvmmsg(r0, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) sendmsg$nl_crypto(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="e00000001200010300000000000000000a726333320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000f9ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xe0}}, 0x0) 22:12:45 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000000)={0x0, @speck128}) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040)=0x100000, 0x8001) 22:12:45 executing program 5: socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000440)={0x101, 0x401}) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0), 0x4, {0xa, 0x4e23, 0x6, @empty, 0x546}, r4}}, 0x38) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) [ 605.654637] usb usb3: usbfs: process 18934 (syz-executor1) did not claim interface 0 before use [ 605.691166] x86/PAT: syz-executor0:18942 map pfn RAM range req write-combining for [mem 0x5ff80000-0x5ff83fff], got write-back [ 605.733277] netlink: 192 bytes leftover after parsing attributes in process `syz-executor1'. [ 605.773693] x86/PAT: syz-executor0:18948 map pfn RAM range req write-combining for [mem 0x5ff80000-0x5ff83fff], got write-back [ 605.793778] usb usb3: usbfs: process 18947 (syz-executor1) did not claim interface 0 before use 22:12:45 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000055c0)='/dev/sequencer2\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000100)={{0x7fffffff, 0x3}, {0x80000001}}) setns(r0, 0x20000) readv(r0, &(0x7f0000001780)=[{&(0x7f0000000000)=""/208, 0xd0}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/138, 0x8a}, {&(0x7f0000001240)=""/96, 0x60}, {&(0x7f00000012c0)=""/159, 0x9f}, {&(0x7f0000001380)=""/173, 0xad}, {&(0x7f0000001440)=""/230, 0xe6}, {&(0x7f0000001540)=""/216, 0xd8}, {&(0x7f0000001640)=""/171, 0xab}, {&(0x7f0000001700)=""/71, 0x47}], 0xa) 22:12:46 executing program 4: prctl$intptr(0x8, 0x100000000) dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x8000, 0x0) 22:12:46 executing program 2: unshare(0x22020400) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x7a, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x0, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f00000000c0)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x0, "020003fe040000000000031703ffffe78be5e600000000000000030809a7e633"}) 22:12:46 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) sendmsg$nl_crypto(r0, &(0x7f0000000080)={&(0x7f0000000040), 0xfffffe21, &(0x7f0000000000)={&(0x7f0000000340)=@upd={0xe0, 0x12, 0x301, 0x0, 0x0, {{'\nrc32\x00'}}}, 0xe0}, 0x1, 0x0, 0x0, 0x800000000}, 0x0) 22:12:46 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0x734) 22:12:46 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e21, 0xb1ad, @dev={0xfe, 0x80, [], 0x18}, 0x1}, {0xa, 0x4e23, 0x2, @mcast2, 0x2}, 0x1, [0x3, 0x10001, 0xfffffffffffffffe, 0x3f, 0x7f, 0x7ff, 0x400, 0x100000000]}, 0x5c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x800, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x600200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$KVM_DEASSIGN_PCI_DEVICE(r4, 0x4040ae72, &(0x7f0000000000)={0x3ff, 0x7, 0x7, 0x4, 0x4}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r5, &(0x7f0000000040)=0x100000, 0x8001) 22:12:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x2f) r1 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f0000000000)={0x28, 0x0, 0x2711, @reserved}, 0x10, 0x800) r2 = getpgid(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={r2, r3, r4}, 0xc) 22:12:46 executing program 2: chdir(&(0x7f0000000100)='./file0\x00') r0 = socket$inet6(0xa, 0x1, 0x72e2) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0xffffffffffffffe2) listen(r0, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000080)={'HL\x00'}, &(0x7f00000000c0)=0x1e) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x600, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x800080, 0x4, 0x3ff}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f00000002c0)={r3, 0xcb0, 0x8}, 0x8) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet(0x2, 0x80005, 0x6) r4 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @dev}}, 0x8}}, &(0x7f0000000000)=0xb0) [ 606.617606] x86/PAT: syz-executor0:18973 map pfn RAM range req write-combining for [mem 0x5fe20000-0x5fe23fff], got write-back [ 606.727979] x86/PAT: syz-executor0:18973 map pfn RAM range req write-combining for [mem 0x61980000-0x61983fff], got write-back 22:12:46 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000000) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x8, 0x0) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f00000000c0)) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003dc0)={0x0, 0x0, 0x2080, {0x100000, 0x5000, 0x1}, [], "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", "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"}) r3 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f0000000040)=0x100000000001f, 0x87) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 22:12:46 executing program 5: r0 = socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ppp\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ashmem\x00', 0x101000, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000840)=ANY=[@ANYBLOB="0000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000e400000045ffffffffffffffbd0000000000000000f8ffffffffffff040000000000000000000000000000000000bceb45bc000000000000000000000000000000f0ffff03000000010000000000000000000000000000000001000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000"]) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = dup(0xffffffffffffffff) fcntl$setflags(r1, 0x2, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000005c0)={0x0, 0x10001, 0x40, 0x80000000, 0x4, 0xa2, 0x1f, 0x5, {0x0, @in6={{0xa, 0x4e22, 0x8000, @mcast2, 0x17c4}}, 0x1, 0x800, 0xa8, 0xff, 0x8}}, &(0x7f0000000040)=0xb0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f0000000680)={r7, @in6={{0xa, 0x4e20, 0x3a1, @empty, 0x6}}, [0xfffffffffffffff9, 0x8c8a, 0x9, 0x6, 0x3, 0x100000000, 0x6, 0xfffffffffffeffff, 0x6, 0x7, 0x7fffffff, 0x8, 0x7ff, 0x0, 0x100000000]}, &(0x7f0000000780)=0x100) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setlease(r4, 0x400, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r6, 0x800448d2, &(0x7f00000001c0)={0x8, &(0x7f0000000980)=[{}, {}, {}, {}, {}, {}, {}, {}]}) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000180)='trusted.overlay.origin\x00', &(0x7f0000000800)='y\x00', 0x801, 0x2) ioctl$EVIOCGSND(r4, 0x8040451a, &(0x7f00000000c0)=""/11) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) 22:12:47 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x400000002, 0x0) ioctl$int_in(r0, 0xc00008c004500a, &(0x7f0000000000)) r1 = geteuid() r2 = geteuid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f00000000c0)=0xe8) r4 = geteuid() getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@dev, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}}}, &(0x7f0000000100)=0xe8) r6 = getuid() getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000480)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@rand_addr, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f00000005c0)=0xe8) r9 = geteuid() fstat(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getgid() fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000680)={{}, {0x1, 0x6}, [{0x2, 0x0, r1}, {0x2, 0x1, r2}, {0x2, 0x4, r3}, {0x2, 0x0, r4}, {0x2, 0x7, r5}, {0x2, 0x1, r6}, {0x2, 0x4, r7}, {0x2, 0x0, r8}, {0x2, 0x1, r9}], {}, [{0x8, 0x1, r10}, {0x8, 0x4, r11}], {0x10, 0x4}, {0x20, 0x1}}, 0x7c, 0x3) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040), 0x237) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xa, 0x12, r0, 0x0) 22:12:47 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) fcntl$setsig(r2, 0xa, 0xf) r5 = dup3(r3, r3, 0x80000) getsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f0000000080)=0x8, &(0x7f00000000c0)=0x1) fstat(r5, &(0x7f0000000240)) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r4, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000140)) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r6, &(0x7f0000000040)=0x100000, 0x8001) 22:12:47 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) sendmsg$nl_crypto(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@upd={0xe0, 0x12, 0x301, 0x0, 0x0, {{'\nrc32\x00'}}}, 0xe0}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0x4, @ipv4={[], [], @multicast1}, 0xa0}}, [0xc4c, 0x4, 0x6, 0x5, 0x7, 0x8ec2, 0xa596, 0xff, 0x9, 0x1000, 0x3, 0x4, 0x7, 0x7, 0x10000]}, &(0x7f0000000000)=0x100) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000002c0)={0x0, 0x5, 0x20, 0x5, 0x9}, &(0x7f0000000340)=0x18) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000380)={r1, 0x200, 0x8, 0xffffffffffffff80, 0x101, 0x81, 0x2723ef06, 0x5, {r2, @in6={{0xa, 0x4e24, 0x5, @remote, 0x40}}, 0x1, 0xb46, 0x5, 0x10001, 0x6}}, &(0x7f0000000440)=0xb0) [ 607.429249] x86/PAT: syz-executor0:19009 map pfn RAM range req write-combining for [mem 0x62cf0000-0x62cf3fff], got write-back 22:12:47 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a", 0x4) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x800, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x4, 0x70, 0x3bb49719, 0x3f, 0xe5, 0x20, 0x0, 0x1, 0x28108, 0xb, 0x1, 0x5, 0x3, 0x101, 0x3, 0x80000000, 0x7f, 0x9, 0x3, 0x2, 0x0, 0x1, 0x1, 0x5, 0x6, 0x1000, 0x9, 0x916, 0x6, 0x8, 0x8000, 0x9, 0x3, 0x80000000, 0x0, 0x2, 0x7f, 0x400, 0x0, 0x1, 0x2, @perf_config_ext={0x100000000, 0x3ff}, 0x1000, 0xe67, 0x1, 0x7, 0x9, 0x1, 0x2}, r1, 0xc, 0xffffffffffffff9c, 0x2) 22:12:47 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x30}, 0xc) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="80"], 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280), 0xc) sendmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="ad", 0x1}], 0x1, &(0x7f0000001440)}, 0x0) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) [ 607.508172] netlink: 192 bytes leftover after parsing attributes in process `syz-executor1'. [ 607.566468] netlink: 192 bytes leftover after parsing attributes in process `syz-executor1'. [ 607.576339] x86/PAT: syz-executor0:19009 map pfn RAM range req write-combining for [mem 0x62fe0000-0x62fe3fff], got write-back 22:12:47 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x400000002, 0x0) ioctl$int_in(r0, 0xc00008c004500a, &(0x7f0000000000)) r1 = geteuid() r2 = geteuid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f00000000c0)=0xe8) r4 = geteuid() getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@dev, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}}}, &(0x7f0000000100)=0xe8) r6 = getuid() getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000480)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@rand_addr, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f00000005c0)=0xe8) r9 = geteuid() fstat(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getgid() fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000680)={{}, {0x1, 0x6}, [{0x2, 0x0, r1}, {0x2, 0x1, r2}, {0x2, 0x4, r3}, {0x2, 0x0, r4}, {0x2, 0x7, r5}, {0x2, 0x1, r6}, {0x2, 0x4, r7}, {0x2, 0x0, r8}, {0x2, 0x1, r9}], {}, [{0x8, 0x1, r10}, {0x8, 0x4, r11}], {0x10, 0x4}, {0x20, 0x1}}, 0x7c, 0x3) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040), 0x237) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xa, 0x12, r0, 0x0) 22:12:47 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000000080)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0x94}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f00000003c0)={@vsock={0x28, 0x0, 0x0, @my=0x0}, {&(0x7f0000000340)=""/90, 0x5a}, &(0x7f0000000000), 0x54}, 0xa0) sendmsg$nl_crypto(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@upd={0xe0, 0x12, 0x301, 0x0, 0x0, {{'\nrc32\x00'}}}, 0xfffffffffffffe5f}}, 0x0) 22:12:48 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r4, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r5, 0xc0305302, &(0x7f00000000c0)={0x7, 0x2, 0x8a, 0x51, 0x4, 0xff}) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r2, &(0x7f0000000000)=0x20000000100200, 0x7fff) 22:12:48 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x3) lsetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)=@known='system.posix_acl_default\x00', &(0x7f00000003c0)="0200000008000000000000000200f30000000000", 0xfee4, 0x0) 22:12:48 executing program 5: socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x40, 0x480000) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000100)={0x0, 0x0, 0x1}) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) 22:12:48 executing program 4: r0 = memfd_create(&(0x7f0000000000)='posix_acl_access{Y\x00', 0x0) lseek(r0, 0x7ffffffffffffff8, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000826fe0)={0x0, 0x1, 0x0, 0x81}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x10, 0x0, 0x100000000, 0x3, 0x20, 0x1, 0x8}, 0x2c) openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) 22:12:48 executing program 2: r0 = memfd_create(&(0x7f00000001c0)="23656d31232b00946ae5bf51f898f0871e69e88d72c744575c37d5591bd30057d1401601822e0d953173370445ec34c2c99af005298c5282f11523e4c7e98b32d9059d825cb14a67e2dddd8f2bd26b035e5b3c9adc5319c21070714ebfc700623a7116c4ff007696a882795db9f55bf42e013d5d9e642e540f8966c6ab1855bca254e80915abdaac7a2891920fda6405dc8d92c5772b626c63ee1aee240571635d9301754b86e3576d", 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000), 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) [ 608.366605] x86/PAT: syz-executor0:19040 map pfn RAM range req write-combining for [mem 0x61150000-0x61153fff], got write-back 22:12:48 executing program 3: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x420002, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000080)) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$getreaper(0x2f, &(0x7f0000000200)) [ 608.537125] x86/PAT: syz-executor0:19048 map pfn RAM range req write-combining for [mem 0x61150000-0x61153fff], got write-back 22:12:48 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x2000, 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0xfffffffffffffffc, 0x4031, 0xffffffffffffffff, 0x200000000000) futex(&(0x7f0000000040), 0x9, 0x0, &(0x7f00000000c0)={0xffff, 0x4}, &(0x7f0000000000)=0x1, 0x0) 22:12:48 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="73797a311c705623181016c0120994a405279a888f1c3d00089dd62a093cc1cc34946363"], 0x24) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xffffffff, 0x0) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000080)) 22:12:49 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r5, &(0x7f0000000040)=0x100000, 0x8001) r6 = shmget(0x2, 0x4000, 0x0, &(0x7f0000004000/0x4000)=nil) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000140)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f0000000240)=0xe8) getresgid(&(0x7f0000000280), &(0x7f00000002c0)=0x0, &(0x7f0000000300)) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000340)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000000480)=0xe8) r10 = getegid() r11 = gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500)={0x0}, &(0x7f0000000540)=0xc) shmctl$IPC_SET(r6, 0x1, &(0x7f0000000580)={{0x6, r7, r8, r9, r10, 0x4, 0x7}, 0x6d794836, 0x4, 0x7fffffff, 0x5, r11, r12, 0x8}) 22:12:49 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) sendmsg$nl_crypto(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@upd={0xe0, 0x12, 0x301, 0x0, 0x0, {{'\nrc32\x00'}}}, 0xe0}}, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x101800, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000080)={r0, r1}) 22:12:49 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) unshare(0x600) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000080)={0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x4) [ 609.204253] x86/PAT: syz-executor0:19069 map pfn RAM range req write-combining for [mem 0x62f90000-0x62f93fff], got write-back 22:12:49 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2276, 0x7fffffffefff) setxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=@random={'user.', '/dev/snd/pcmC#D#p\x00'}, &(0x7f0000000140)="6b657972696e6776626f786e6574303a2b776c616e312f776c616e315d883a6367726f757000", 0x26, 0x2) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x7, 0xa00) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000080)=0x3) [ 609.291878] netlink: 192 bytes leftover after parsing attributes in process `syz-executor1'. [ 609.316629] x86/PAT: syz-executor0:19073 map pfn RAM range req write-combining for [mem 0x62f90000-0x62f93fff], got write-back 22:12:49 executing program 5: socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000000c0)) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) [ 609.417547] netlink: 192 bytes leftover after parsing attributes in process `syz-executor1'. 22:12:49 executing program 4: r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x2, 0x5}) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {r2, 0xe}}, 0x10) mq_timedsend(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) mq_notify(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, @thr={&(0x7f0000000100), &(0x7f0000000380)}}) mq_timedsend(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000000)={0x77359400}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x400000, 0x0) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f0000000140)=0x4) 22:12:49 executing program 1: r0 = socket(0x10, 0x6, 0xff) recvmmsg(r0, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x100, 0x50, 0x4, 0x81}, 0x8) sendmsg$nl_crypto(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@upd={0xe0, 0x12, 0x301, 0x0, 0x0, {{'\nrc32\x00'}}}, 0xe0}}, 0x0) 22:12:49 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xfff8, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r4, &(0x7f0000000040)=0x100000, 0x8001) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000000)={'syzkaller1\x00', {0x2, 0x4e21, @multicast1}}) 22:12:49 executing program 2: utimes(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)={{}, {0x0, 0x2710}}) r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000300)={0x0, 0xffff}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000380)={r2, @in6={{0xa, 0x4e22, 0x8f3d, @ipv4={[], [], @multicast2}, 0x4d2}}, 0x2, 0x401, 0x800, 0x1, 0x8}, &(0x7f0000000440)=0x98) keyctl$restrict_keyring(0x4, 0x0, &(0x7f0000000240)='c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000140)="008594327353cec4169149743fc6dd864019efbbe4082214a625edef03401ecb3a9693d3a61765dca0689375ea92dc2b14ea8f9075521c49b450a6ef7e5edb4556d78329f44f703bedc23638d7f89c7521581633ab3ae46b91ee0c1fbceebaeecd19a99b6177276f7fe0f14a83eaacf4a7ea0684419def95d062d77bb243400bd05cc6aaba1f4b5ddfe2ce0f80607e079474c9cbae181e92e8cd08c4c7346c14fce4269a4c0beda0d73b21b4bb96f575952ae20fb5a1956fa169c0f80b38d049578a815482efc6f037e1a13a4fab3070f2e9d2010b4b75633e2626b2d6c28f8db17fc45ca47bbe3f0c86ced361d9acf60323103c1a") 22:12:49 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x400, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x50000, 0x0) syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x389a, 0x800) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x4e24}}, 0x0, 0x4, 0xfff, "c2ba7771c3dff276bfe4c0b43b305f2386ed86937d7c56f8a6ba9e90490ef171cd6fe4d6dbc27c40224bb525c7761756d510def8dce03b19e99ff190bde07f5300f62a8c51bffa87ac12eda114d31cec"}, 0xd8) mmap(&(0x7f00006ac000/0x4000)=nil, 0x4000, 0x6, 0x32, r0, 0x2) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r2, 0x0, 0x16, &(0x7f0000000340), 0x4) 22:12:50 executing program 4: r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x2, 0x5}) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {r2, 0xe}}, 0x10) mq_timedsend(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) mq_notify(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, @thr={&(0x7f0000000100), &(0x7f0000000380)}}) mq_timedsend(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000000)={0x77359400}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x400000, 0x0) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f0000000140)=0x4) [ 610.070177] x86/PAT: syz-executor0:19106 map pfn RAM range req write-combining for [mem 0x5d8d0000-0x5d8d3fff], got write-back 22:12:50 executing program 1: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='\nrc32\x00', r0}, 0x10) r1 = socket(0x10, 0x2, 0x0) recvmmsg(r1, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xd) sendmsg$nl_crypto(r1, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="e00000001200010300000000000000000a726333320000000000000000000000000000000000000000000000000000000000000000000000000073d601075ca66ab859d98c230000000000000000000000000000000000000000000000000000000000000000000000000000000000d019000000000000000000000000000000000000000000000000000000000000000000000000008000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xffffffffffffffc1}}, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000000)) [ 610.178344] x86/PAT: syz-executor0:19115 map pfn RAM range req write-combining for [mem 0x5d8d0000-0x5d8d3fff], got write-back 22:12:50 executing program 0: r0 = socket$inet6(0xa, 0xffffffffffffffff, 0x10001) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r4, &(0x7f0000000040)=0x100000, 0x8001) 22:12:50 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffefffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$inet6(0xa, 0x80003, 0x800000000000006) r3 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x1, 0x100) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f0000000180)={0xffff, 0x10, [0x40, 0x2495, 0x2, 0x2]}) ioctl(r2, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") r4 = semget(0x3, 0x7, 0x402) semctl$IPC_RMID(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x30}, 0xc) sendmmsg(r1, &(0x7f0000007ac0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)='A', 0x1}], 0x1, &(0x7f0000000540)}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000280)={@local, @remote, @empty, 0x1, 0x4, 0x2, 0x500, 0x3c15, 0x1, r5}) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200), 0x20) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='s'], 0x1) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 22:12:50 executing program 2: r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x7f4, 0x8000) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) ioctl$TUNSETLINK(r1, 0x5101, 0x0) 22:12:50 executing program 5: socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup(0xffffffffffffffff) r3 = getpgrp(0xffffffffffffffff) tkill(r3, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) [ 610.583855] x86/PAT: syz-executor0:19124 map pfn RAM range req write-combining for [mem 0x62fd0000-0x62fd3fff], got write-back 22:12:50 executing program 4: r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x2, 0x5}) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {r2, 0xe}}, 0x10) mq_timedsend(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) mq_notify(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, @thr={&(0x7f0000000100), &(0x7f0000000380)}}) mq_timedsend(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000000)={0x77359400}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x400000, 0x0) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f0000000140)=0x4) [ 610.684359] x86/PAT: syz-executor0:19132 map pfn RAM range req write-combining for [mem 0x62fd0000-0x62fd3fff], got write-back 22:12:51 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x9, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioperm(0x9, 0x6, 0x10000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r4, &(0x7f0000000040)=0x100000, 0x8001) 22:12:51 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x4032, 0xffffffffffffffff, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000000)=""/75) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x100000000) 22:12:51 executing program 3: r0 = socket$inet(0x2, 0x2, 0x20000000000) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0), 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="06f8f6b15f736c6176655f3100000008", 0x37) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x11}, @rand_addr=0x6, @local}, 0xc) [ 611.201850] x86/PAT: syz-executor0:19151 map pfn RAM range req write-combining for [mem 0x64030000-0x64033fff], got write-back 22:12:51 executing program 4: r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x2, 0x5}) r1 = memfd_create(&(0x7f0000000180)='\x00', 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {r2, 0xe}}, 0x10) mq_timedsend(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) mq_notify(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, @thr={&(0x7f0000000100), &(0x7f0000000380)}}) mq_timedsend(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000000)={0x77359400}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x400000, 0x0) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f0000000140)=0x4) 22:12:51 executing program 5: socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000011000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000140)="6566360f01c8640f01bda5500000ea0c000000ca00b9800000c00f3235000100000f300f2023b9024d564b0f320f00d5660f388081d10219a9c744240059810000c744240200800000c7442406000000000f011c2464660f3835d1", 0x5b}], 0x1, 0x52, &(0x7f00000001c0)=[@cstype3={0x5, 0x8}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000440)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) [ 611.346393] x86/PAT: syz-executor0:19154 map pfn RAM range req write-combining for [mem 0x60770000-0x60773fff], got write-back 22:12:51 executing program 2: socketpair$unix(0x1, 0x8000020000005, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x100, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x2) ioctl$RTC_AIE_ON(r1, 0x7001) r2 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) r4 = gettid() kcmp(r3, r4, 0x4, r0, r1) r5 = dup(r2) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x1, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r6 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) sendfile(r5, r6, &(0x7f0000000600), 0x800100000000) connect$netlink(r5, &(0x7f0000000100)=@unspec, 0xc) 22:12:51 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1a}, 0x10}, 0x1c) sendto$inet6(r1, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000004300)={0x1, 0x0, 0x2080, {0xf000, 0x5002, 0x2}, [], "d4dfcafa3f3f526150b32ce35c94d6ab192ad2ece28c089c1dfaff7e99791041b873ba7336671f95ae8f6bec428e06c1f9fe26b27c0bacdf37980ced6205a2f68237701fa25ac1b02f5069c63e97a80d1b4c5bcf4bcd446330ac06910a15baf4eb92c2920e6ed50074a53e9e681cc2bee11f3fc114b8a04e331f033a5a736280efbb2cb8225b244d70ffb70b50d4e67f19d28bb2bdcd600e497fb58a8fe1f39a5f54fbf6bf2ca356a6719d377c7bf373953bdaaeb6280456372495b2893d1a8fea55119073ce0ebb3313b15f28f8303a6aede2a16589dc11b39c3e15ed2480b33a15b4bbdcd09e0647a93be25fefc1db36cf26a38a9aef8c4575278f59f78b1515955ce121544b7ee8ef2cd1a18bf6c1fa0303a8af1c6b9f5dca6c73298bc476204da5f053ea3492384f3c938295de296c7c597b03a2cacff2f5c80def2ae428691af055b99c3d7738cc6c3ba044843fffcd50a3f40cc3ea567e14fdcc5b8b593ca2a5c5baa6d3fe4a02b53c11713f0d9869e9bc324b32842b048e7f314dac2d583ad3c78eff26ed46717242b294717e6e88ad0cbc52b23a8b0901470f256a7d7f2fa63bc47b7b69e06b679565b025c3b30e34aa02818b8b616d78fea437fddb0e10aeb1b0be84abc0f07e6e3fac0795c029d8d497f64907b7d4278890a74604c90640a2f2f6abdc6ab86d142a4ff462749344dbdd94c9a3934ac5e11fd9fe2fed7ac051479b28de0b9e723f6db26ff5fd38a5592eb06b937dcda6a4aebcfad8b91d2d0f3628281e1ceef0e1dc09b5b39e2aaeb28b7dd6ed2ceec1d1b5c9d9690ae1368644e32b99beb743a066f43fc6ee82d448ecbfb79966034ad68ba20b581ecac88fe3476d149e83617092a206a4830e8e8751c342f0f94a814fb521b2f88153dd1f2351e0e11396f1d10d380fa52c7fec50d23adf5d86535ed447548bf4b6dfa74f667e03e18af5cf3fdfb73285cadafff20909deab15e6fc72aa1fa5105675a14219d882ff319f0ce11b66f6dffb4ed2c36a500cb8cac42ad8e2a12df750ede2fa2fbb44ba066ee0775c77275fd654b8fd705205f55c1f42fcf51eea54b76f89030780eb6f143082425c134c946bc728767a4cf26003a150fb7d87425a4b0fc819283c6c9fa72e2dce9cdef665c69bbf92981239dcba5a03de055cbcf0c953e68a8329831e9767d020c077a40f393184c021336f710fe6469d97f109545b4a63f69d373ea08893d4ec618264055c227377ac4ee6cadf0af68bfc571826f229fee27186557b3f35de03e4944b1e74dbcfe0c2ee21d3d7dba3e0fbf16078bf1dd5a5ed10b1172af28efe19cc948bc106829c5b2a6859609ef39c9b6a116f276fa0b998dc0729aeca230ee3ea2d3e7a4032d38d4c5dad04bf1e3e2fc7944f19cf1560c2903e53293c06dd6d53209c80fdf99e4de1f6d0c407b6ef9dc6f5a68f7d907d79ebbbe560c4b4a8ad1ae19d63eb1a8c85920c4cdd8d2f26795aee5aa41a78d934fff7b35081108fa8851d038323e3600f72432374ceb7be76e2e3bf6b063eb18944efa394286f2e2efabf31830d2fc31f4ccd16685d49f0f9bea7918af983cc5c49127b0f8226b45007e7078d01a492a708cabb6d2f3782a85b5a1e238932a9a0d46c03b9d0ebd395b20ab751a0dc895f48738269000794ccbdfe55ffab6114c3ed88e08a1b7c09d53ab74efa9465c165a4aa181b74c919a12525b3558a9665e4c83f06dcc10f863ea10f957db6f7f27ddacc01742f19d83096e2ae92575f56256e2d7044f5902b763e6dc0cf0520e89aa2edc5a687114e31f847d67b274d601d50c380c6944695a7d04cbf818f6f99865896d1cc5d365fc7532b3813042d346508923debea6e4b8d7039eaa877dde32a41b7c2777b5af231d57c6ef0651e131c542d4992544613369d42ba142404af048e394bc3d725654c184f76a10d1136440abce147eb9fa60346521259b370fd184ea9151d607da33c93613217561acdce13a772ea9bfdd3619fc121bae21ccabcd9b0275ebcaff12f51a3d30a372b5fb3e2670bea3a21c70c71cd3787846b8248335e97c6d1b813fbdf8f13995e8b02f9a34432abef602a9b062b81d6c80243b3cb931f11d34d0cdd56c801be7b986978d2560b375233fe6d7bb45789623821444642054ce8d58c1dd6b62ddda4ab0df84cb917b834862b1ac68309ddfdc4a88b86aa231fb930e200b83f742f214907758e82449cef6b1a49f491a57846d8bb80c2b596fc0a289d1321bf53babed7a0736894e1fe7d58c8455171fc6cea046bf41224f1514844e3da2b44d237a4a27d9ac0739a10787fd37f2eb6b361bc9a96c950579a6f77111900f2a1f72cd28ca4fc1001f9972df025285996e455fbb62a3f12371b40a25a74b6445f2d27f994a50fab7d4550cdebdeecef8327e139fb4aac80f9d068332b1a85b30357310a50c8cc5aaf6e19ed86091ae2e61c153ef0320ac45fb261e3720986f6244e0b0872a21820ce4ceffca6e2bee80e19a29b05f8b1ec55bf0c3ee7ffbb6bd1b402eb76fc0fcc26cd20c9f1abc6d524b1c2426610b2a364d58c814e27514079d9937363a871cb8c86e52e406e830f4ebc2a2613c6e24190f774b6c89bb02ba324fcd89cfd2aae33fa8b8d359edc81e28f58daa67142612d3a6910cc8ac18d27ec24b94b21bbb792eb8597deecb427ebc561a73d29d6319140f746d74626ab66cab78ff0ff9e5b8d4284dec39e8a3add496e09b5b6e5b4d27875f21f21fba5c88749730ed27f6c5bca6f86b59012f9fe74512ba8983449f7411c753237f73c652534f2704055696241bb08d92e61d8c55c0aa10768167570ccce9791c29c7c15fe72300bbf46b1364a4e5fb6d3a94717df3128d32e7bc9482c099fedd63461bc1951cdfbb8da18f73ffa2d05f37188a358386d6dbf2f6e64ed9ed9dced8a55e8be104d445fb4f7d510c4edabe92d7cc14fa195b7167305eb9d59323b1ec54c110d38c38f8c99384dc749a7b4351765822c8634fae1446cb380e26119537492aec03303e89fbdfc79e56fef3be650459604eae862d7a765dbb2a4b57adfa4f39b1ae7aaaeb2b759752d306361213bb750df108f4b70c154f28a4dac7cd6c04a8e980846a9281e7a96d1f6cdba65736ca234724edf03e5a45eac13b46a90bb56cb3518f4a94358a8e307b99b48b265adefc7e1cf893a90ac03d1b8cc21da2102d0f22e96460479186f07fabebdba1c33606af9285b4bd17dcd76eca8d36c1808743ed8c5cee2daf90e98faf57ddac5b7899e534c18a839d4e8607325488ba774dfd46288353a19dfdc7edb24e2f7d07172fefc00804f2413a937f437f732df52cbcd581438cf374252db9a0014f906d366b3a83dbb4178eef85a0631a76fa0e81a8517fd3009ae6b39d349d40ce0289944710399149a4222d10567bd178c26ca1e2a784d91d4a334ecc0e0e424fdeef3b0c641fa7191f44750e9e3f8ff124ddedc4db7ad8d751ef54f7d17834b5857a2d9e672aeb7ec8a4cb500e2c2577bf29a59c6eebe6f9abb788fe344f1a01eb8a71b2ddd561d8074e9e8db4e91e16e5dcc78a756d2ce28961eef88b07c6bac15fe4b3ffce34d2cb94c91e4f919e0b85fe4baaade07fbdab82d473cfda239e665167dc66a815d022bd23a2a0e2d2c74162adcbd90c38c6e119b16a4684d54a9646cd0ea766af14caf8aacab156ce77e73e56fe42e08c0c6005a5ef897aa0ba07af631fcf62b43b398806f5c7a88d6485bc3edb780a3f5965a702ef2870b2518f8444052f385bc60781259d8ac25c29735115754bf48f9c891183396f213a74409e81ac0c0306404d98ed246f21c03e94aff00e88ad1870aca410f9a91972d1778d00b6282b28fd1e2d17531df31d6bfeb06630cea5b4e75e8033224ef1da9a8c0899f43af51951700962a3499bed1451253c103d88b09d5d9ea17183fb0b21d26aeac8937a242907c88a93c352c522bf6a3965385a60c6ca6501d87b2b47e532501192df8bd0ae17e16da5af06833f53c314c95bb14c4b5aa0fdaf4c556df922206f1be8d19fe1d1a156dce708a2875ac355fff81bc6f6b641f91a669d32603b2d450690d89539244cdd14aa16b1723a9ef350ac2c40e1eada7186951f7629bffe5624004994b2f6b43d0a117d097cc8dd818a3db28bfd540549134fc8e1d9209a70f54553f971ddc3b4f27cde9458697d4b672d4f8ff9c472c696d46071609bdb0b2a8254612fff8c29b15cb3807ceff9255235fb3bc3d3c1ba5be05ec11fe592f7866a6fff59098b90999e207aad072deb418914125394bed560b19bebcbf38c21a02fe491dfd1d29d4fa113fc2fffb02fc6336c4176185cb06c0bf8084aacecf8a09023d9296b95b50ff4a092f71ee7ec808eb6758c6590dfa1f4c9186eb9c585e29ebd894399f93eb2985a7c53d5f9aad48905b41943c0a9d1d4bdc363d74f7745be2cee829b7f6048bc04a8c86e86c7e2e7109630cc08b0acfeddb517c3926b69f8b20c63af0e8d127967e6c79c6dca3f20491075dca81e739ef6c7afc385dc28e0dcd756f5fedffa7a0e30d9077788c3d5c150598783a34e7d2d98abf7dc8d1ac9d18ac981cb688e3f51d4f72cdaa68334c1bdc6d7027b42321f051ff1240e548a91b14345095f351e4c783470fb18337ae9fc787a9cc4ffbac894cb3b98c9f7448f546ffc71e3349271ca807bf38aaa4d38553e73f2cc365923f563bd007657e16c696fa33fafde5f1953f6fb131dc756451b37a99eb80401df3b1effb8dc27859817f595c834294de1dd6983f5d5b37b5f4ad6d23b6ab2ad937c4eceb0b23e4ead3ecbe1de547d34a9d072de10b4bf901ef3b8f79d57db63f3f9db187019a76eb7ceae2239ae6fb3720d08dae85bb71b350d57149cbdc977d76108e7fb89b300c02af2272385058c417e12631985d444b7d38da8ff193697ac7e7bf64c8e299c7b0a849664985d552e9fc33aeb3d29371ab365a3f351fdadb58b84f572feb6ccc984a48b041c8ccf4b9bcded82be3c17168f15488e1caf0e0015a8dee1e05d87645bda3c2f9f41ce5f210e3886ffe736d48918d2b318b7a503d2665b772e0d0eae6854caadb428f9d9a0d55cd252ac432d203d315d8b903d20394989e299882745ae14b33a2856347c8c423ceafa653b97ebaca46b38e5b529bdd0e5b59605980d2f2cb97f7b1bc699c37c0efe76f5aa90234728a23a60653ce48d6fc6c154e379385f4ebc9d4c8c06eb18b30500985de434243f01dba338cbd0b6de60dafa74a4889750434f4613f43b370282c012b8c4e97eb2c10569b34fb55561ea6f3401333a6f0d0937d54b4064dcf2ce3f653a32bbd68d5711872b0a366365a64525eb438e52642115cb65847d17f2cfa22effed3f515c9987bb8396eb5f53c9abaf18ee6d8514188886bd4ed92d2057b5c62ee7cde35def6e0c6f670b18eab5a1c9c8b1ae1ae43b4158097a0aff3101fa52decc753f5735efe637fee992095b26dd4e046065369092a9dca564aa44a226146223ce18b18829e32ed937c7db06d24ef49ff7e82e97afcb577faa29d4605fe33ded4ba31f75a5c43fbbfd707c8546685203ffc686d8709979c933efa08d9e17a9fea0e1fdf6c09f2bb725eac19f3c862075d9d9ec732b2985162564aca4144649cf8b5ad2bb05ece98042f9f7b4c10ebff780db4d073e4a0393c2936616aa0f52f4ec21fc54e4abc9351b8d5d0c659e2cf8d0de002bc6c5092813114bc16d606ae89a92ff11ea9da2c69d65038c72a2ff2adf5684e19f13fcf1a95e78d99df05", "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"}) r3 = socket(0x10, 0x40000000002, 0x800000000) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000340)=0x80, 0x4) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'user.', 'nodev\x00'}, &(0x7f00000000c0)='\nrc32\x00', 0x6, 0x3) recvmmsg(r3, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) 22:12:51 executing program 0: connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(0xffffffffffffffff, r3, &(0x7f0000000040)=0x100000, 0x8001) 22:12:51 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x40, 0x31, 0x0, 0xffffffffffffffff}) ppoll(&(0x7f0000000000)=[{r1}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000100), 0x8) [ 611.929885] x86/PAT: syz-executor0:19174 map pfn RAM range req write-combining for [mem 0x5d660000-0x5d663fff], got write-back 22:12:52 executing program 4: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001a000500000000000000000002d2783c5682df4f586f0000"], 0x1}, 0x1, 0x0, 0x0, 0x3}, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000021000008912, &(0x7f0000000100)="0a5c2d0c3c126205718070") sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 611.965236] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 611.999361] x86/PAT: syz-executor0:19174 map pfn RAM range req write-combining for [mem 0x5cca0000-0x5cca3fff], got write-back 22:12:52 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x40, 0x31, 0x0, 0xffffffffffffffff}) ppoll(&(0x7f0000000000)=[{r1, 0x1}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000100), 0x8) 22:12:52 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffff9c, 0xae41, 0x2) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000240)={[], 0x1f, 0xfffffffffffffff8, 0x5, 0x0, 0x3, 0xf000}) r4 = accept(r2, &(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000000)=0xffffffffffffffdf) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x803}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000001c0)={r5}, &(0x7f0000000200)=0x8) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r6, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r7, &(0x7f0000000040)=0x100000, 0x8001) 22:12:52 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) dup3(r1, r0, 0x0) 22:12:52 executing program 5: socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet(0x2, 0x5, 0x2) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f00000004c0)="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", 0x1000) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PIO_UNISCRNMAP(r4, 0x4b6a, &(0x7f0000000140)="9f79302adf4a065aee6cbffa42bef64452742fb838991ead420565c159810f3584c7dcb401c8ea6c8f48645058aaa795e00bb235d52a600ba0125ca6ceab337ff532e34e96") dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) 22:12:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140), 0xc, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[]}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000300)=0x8) [ 612.462117] x86/PAT: syz-executor0:19195 map pfn RAM range req write-combining for [mem 0x85cd0000-0x85cd3fff], got write-back [ 612.579630] x86/PAT: syz-executor0:19195 map pfn RAM range req write-combining for [mem 0x5cce0000-0x5cce3fff], got write-back 22:12:52 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001fc0)={'ip_vti0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000001c0)={@ipv4={[], [], @multicast2}, 0x0, r2}) 22:12:53 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r4, &(0x7f0000000040)=0x100000, 0x8001) 22:12:53 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x1000000010, 0x802, 0x0) sendmmsg(r1, &(0x7f0000006440), 0x0, 0x0) write(r1, &(0x7f00000001c0)="240000001a0025e0046bbc04fef7001c020b49ff00000000800008000800030001000000", 0x24) [ 613.168451] x86/PAT: syz-executor0:19219 map pfn RAM range req write-combining for [mem 0x5da80000-0x5da83fff], got write-back 22:12:53 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$negate(0xd, r1, 0xa000000000000, r2) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000380)=0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000003c0)=r3) sendmsg$nl_crypto(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@upd={0xe0, 0x12, 0x301, 0x0, 0x0, {{'\nrc32\x00'}}}, 0xe0}}, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.SMACK64TRANSMUTE\x00', &(0x7f00000000c0)='TRUE', 0x4, 0x1) 22:12:53 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") unshare(0x400) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0xfffb, 0x1b, 0x0, 0xffffffffffffffff}) fcntl$getflags(r2, 0x1) 22:12:53 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000480)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2e975afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") r2 = creat(&(0x7f0000000f00)='./bus\x00', 0x0) pread64(r1, &(0x7f0000000180)=""/184, 0x1c, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000100)={0x10}, 0x1) getuid() lstat(&(0x7f0000000240)='./bus\x00', &(0x7f0000000280)) getresuid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in=@local, @in6=@dev}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000600)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000740)={{{@in=@local, @in6=@remote}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f00000006c0)=0xe8) stat(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000900)={{{@in6=@ipv4={[], [], @dev}, @in=@multicast2}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000a00)=0xe8) fstat(r1, &(0x7f0000000a40)) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="5f000000ff7f0000000000000600000000000000030000000000000046000000040000002f6578650000c10000000000e9ff0700000000000054fa07424adee916d2e975afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e3"], 0x66) uname(&(0x7f0000000140)=""/48) fcntl$setstatus(r2, 0x4, 0x6100) sendfile(r2, r1, &(0x7f0000000040), 0x1000003fb) [ 613.302194] x86/PAT: syz-executor0:19227 map pfn RAM range req write-combining for [mem 0x5da80000-0x5da83fff], got write-back 22:12:53 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000280)={@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast2}, 0x0, 0x0, 0x1, 0x2}}, {&(0x7f00000001c0)=""/143, 0x8f}, &(0x7f00000000c0), 0x2}, 0xa0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000001140)='./file0\x00', 0x3) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x104) close(0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140), &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000040)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000000000)=0xe8) ioprio_get$uid(0x3, r2) 22:12:53 executing program 5: r0 = socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x10000) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) 22:12:53 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x200000, 0x0) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r5, &(0x7f0000000040)=0x100000, 0x8001) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x807, 0x3ff, 0x8, 0x6, 0x1}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000180)={r6, 0x9}, 0x8) [ 613.672829] netlink: 192 bytes leftover after parsing attributes in process `syz-executor1'. 22:12:53 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xfffb, 0x1}) [ 613.886499] x86/PAT: syz-executor0:19248 map pfn RAM range req write-combining for [mem 0x5db00000-0x5db03fff], got write-back [ 614.089667] x86/PAT: syz-executor0:19256 map pfn RAM range req write-combining for [mem 0x5db00000-0x5db03fff], got write-back 22:12:54 executing program 1: r0 = socket(0x11, 0x2, 0x7fffffff) recvmmsg(r0, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) acct(0x0) sendmsg$nl_crypto(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@upd={0xe0, 0x12, 0x301, 0x0, 0x0, {{'\nrc32\x00'}}}, 0xe0}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x2, 0x6bec2e20, 0xa5, 0x5, 0x8}, 0x14) 22:12:54 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0xfffb, 0x1b, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x5) 22:12:54 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) syz_extract_tcp_res(&(0x7f0000000000), 0x2, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r4, &(0x7f0000000040)=0x100000, 0x8001) 22:12:54 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000280)={@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast2}, 0x0, 0x0, 0x1, 0x2}}, {&(0x7f00000001c0)=""/143, 0x8f}, &(0x7f00000000c0), 0x2}, 0xa0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000001140)='./file0\x00', 0x3) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x104) close(0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140), &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000040)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000000000)=0xe8) ioprio_get$uid(0x3, r2) 22:12:54 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socket$inet(0x2, 0x3, 0x2) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xcd, &(0x7f0000000000), 0x3c) 22:12:54 executing program 5: socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f00000000c0)={0xb5d, 0x3, 0xfffffffffffffffc, 0x1, 0x7}) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) [ 614.658461] x86/PAT: syz-executor0:19273 map pfn RAM range req write-combining for [mem 0x91200000-0x91203fff], got write-back [ 614.740406] ion_buffer_destroy: buffer still mapped in the kernel [ 614.774444] x86/PAT: syz-executor0:19281 map pfn RAM range req write-combining for [mem 0x91200000-0x91203fff], got write-back 22:12:54 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) 22:12:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f0000000440), 0xc, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="00005a8a0a000200000000f7ffffff0004f69a0dc814d6f8ca577c269b8ca2ed7429da43c7de1ae544872b31801424a4507d4a795f1cd98849a328e28ee6ebe9a419492fae557d3947fe0d71ca97d40dfe4014a61012b9a999985b1698671471b765aaa0a3853efc7408491922ef528ffc5f14e93b9ddfe5a97b339d80e00fcd666f8e98b8cd9a3bc4000001004ab96e915253296dff1d9a87b8837706"], 0x1}}, 0x0) 22:12:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)}) [ 615.173335] ptrace attach of "/root/syz-executor3"[6558] was attempted by "/root/syz-executor3"[19288] 22:12:55 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e27, 0xfffffffffffffffe, @local, 0x8001}, 0x13) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x240000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r4, &(0x7f0000000040)=0x100000, 0x8001) [ 615.414156] binder: 19297:19306 transaction failed 29189/-22, size 8358680908399640576-0 line 2855 [ 615.443926] ptrace attach of "/root/syz-executor3"[6558] was attempted by "/root/syz-executor3"[19288] 22:12:55 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) poll(&(0x7f0000000380)=[{}], 0xf, 0x4) [ 615.456017] x86/PAT: syz-executor0:19303 map pfn RAM range req write-combining for [mem 0x17c1b0000-0x17c1b3fff], got write-back [ 615.564258] x86/PAT: syz-executor0:19303 map pfn RAM range req write-combining for [mem 0x85830000-0x85833fff], got write-back 22:12:55 executing program 5: socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$getenv(0x4201, r3, 0x8, &(0x7f0000000140)) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r4, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) 22:12:55 executing program 1: r0 = socket(0x4, 0x3ffffffff, 0x2) acct(&(0x7f0000000480)='./file0\x00') getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000080)=0x8) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000380), 0x4) lsetxattr$security_capability(&(0x7f00000003c0)='.\x00', &(0x7f0000000400)='security.capability\x00', &(0x7f0000000440)=@v2={0x2000000, [{0x1, 0x1}, {0x3, 0x400}]}, 0x14, 0x1) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000002c0), &(0x7f0000000340)=0x8) recvmmsg(r0, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x20, &(0x7f0000009440)={0x77359400}) sendmsg$nl_crypto(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@upd={0xe0, 0x12, 0x301, 0x0, 0x0, {{'\nrc32\x00'}}}, 0xe0}}, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000000c0)={0x4, {{0x2, 0x4e21, @remote}}}, 0x88) 22:12:55 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x4000, 0x0) 22:12:55 executing program 3: r0 = socket$inet6(0xa, 0x81000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket(0x0, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='pids.current\x00', 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r3, &(0x7f0000000200), 0xfffffffffffffeb4, 0x2000800e, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000400)='vegas\x00', 0x6) recvfrom(r3, &(0x7f0000f9cf9b)=""/101, 0x389756b1353686c0, 0x120, 0x0, 0xffffffffffffffeb) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0x8) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000002c0)={{0xffffffff, 0xff00000000000000, 0x4, 0x1}, 'syz1\x00', 0x13}) sendto$inet(r3, &(0x7f0000000080)="89", 0x1, 0x41, &(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000140)={r4, 0x4}, &(0x7f00000001c0)=0x8) write(r1, &(0x7f00000004c0), 0x0) 22:12:56 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x482, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x40, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0x40) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r4, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') 22:12:56 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x66, &(0x7f0000015e15)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x11, 0x0, @remote={0xfe, 0x80, [0xf5ffffff], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x14, 0xfffffff5], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x58]}, @mcast2}}}}}}}, 0x0) [ 616.221060] x86/PAT: syz-executor0:19333 map pfn RAM range req write-combining for [mem 0x832f0000-0x832f3fff], got write-back 22:12:56 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) read$FUSE(r0, &(0x7f00000020c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x10800}}, 0x50) readlink(&(0x7f0000001580)='./file0/file0\x00', &(0x7f0000000480)=""/4096, 0x1000) write$FUSE_DIRENT(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="90000000000000000200000000000000010000000045000000000000000000000b08956d069e000000002066ce654d316e6f646576656d3100f9ff00000000000000000000000000000000000001000000000000002c00000000000008000000000000000000000000000000001c00000000000051a717000418b9b3cc002b737973740400000065746367726f757024"], 0x90) 22:12:56 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) fdatasync(0xffffffffffffff9c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB='\x00\x00\x00\n@\x00\x00'], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xfffffffffffffffd) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000280)=0x400) fcntl$setstatus(r3, 0x4, 0x4800) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, &(0x7f0000000040)) write$P9_RXATTRCREATE(r1, &(0x7f00000000c0)={0x7, 0x21, 0x1}, 0x7) r5 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r4, 0x6) setsockopt(r5, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) r6 = accept(r4, 0x0, &(0x7f0000000080)=0xfe0f) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f00000001c0)) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x2710}, 0x10) syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x101, 0x40000) inotify_add_watch(r5, &(0x7f0000000180)='./file0\x00', 0x9) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffffffffffe69) sendmmsg(r5, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000100)='erspan0\x00', 0xfc) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) sendmmsg(r5, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1, &(0x7f00000098c0), 0x0, 0x1}}], 0x1, 0x0) 22:12:56 executing program 1: r0 = socket(0x0, 0x3, 0xfffffffffffffffa) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000080)=0x68) r1 = socket(0x10, 0x2, 0x0) recvmmsg(r1, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) [ 616.317868] x86/PAT: syz-executor0:19337 map pfn RAM range req write-combining for [mem 0x832f0000-0x832f3fff], got write-back 22:12:56 executing program 5: socket$inet6(0xa, 0x7ffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.current\x00', 0x0, 0x0) getsockname$unix(r0, &(0x7f0000000140), &(0x7f00000001c0)=0x6e) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000500)={0x0, 0x4, 0x10}, &(0x7f0000000540)=0xc) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000580)={r4, 0x8000, 0x1, [0x81]}, &(0x7f00000005c0)=0xa) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) timer_create(0x5, &(0x7f00000004c0)={0x0, 0x36, 0x0, @thr={&(0x7f0000000440)="af1638932012ddc776ced9b9b00ad9ed69b2e1c3a7e953b46f894519d55ca0c9d4390e76c4127d38d879835140ee7c0f31762c5b7d72c6a874dee2", &(0x7f0000000600)="a74155ba688d1bb3e41d64323848cfa1c0f55747dc83a76162340a4f5236f7ce4f7a099ec14ffe493f108b8fe83e6245cb434b5c7edb69172e7f380798e6e9344b3bf2490c570914f7"}}, &(0x7f0000000680)=0x0) timer_settime(r5, 0x1, &(0x7f00000006c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000700)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) 22:12:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="faff1a267a4dc5a20e43c2853ff14f7c0100000000000000d789a9e2c6beb8b0484e51e39b13c89cbc407cc816c3aa3c4fe1fe87abd1799e5100acdc61ff369a584d596c5a868098d2bffd33411d41fab9b0723b51625138d9af215f01b7808dc627c2989cb8981f4bf194b32c8b9635b41aa8956908aca6df8706f8016695eeea0a0a60ce48cd83bd3e04694994b0c445cefe2c423e44938ebfb5903f16785134c4da0b4bfd701dd47e2820babb"], 0xae) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9b4b62b}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}) 22:12:56 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x100, 0x88000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x34, r3, 0x301, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xeca9076}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x1ffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0xc) remap_file_pages(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x1000000, 0x3ff, 0x2000) fcntl$lock(r0, 0x6, &(0x7f0000000300)={0x3, 0x0, 0x0, 0x3ff, r5}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r6, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$KVM_GET_MSR_INDEX_LIST(r7, 0xc004ae02, &(0x7f0000000080)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) sendfile(r0, r7, &(0x7f0000000040)=0x100000, 0x8001) uselib(&(0x7f0000000000)='./file0\x00') [ 617.060660] x86/PAT: syz-executor0:19363 map pfn RAM range req write-combining for [mem 0x5cd70000-0x5cd73fff], got write-back 22:12:57 executing program 5: socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)={0x3}) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) 22:12:57 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) set_tid_address(&(0x7f0000000080)) 22:12:57 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') pread64(r1, &(0x7f0000000140)=""/199, 0xc7, 0x0) sendfile(r0, r4, &(0x7f0000000040)=0x100000, 0x8001) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r4, 0x0, 0x1, &(0x7f0000000000)='\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=r5, 0x4) 22:12:57 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r2, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000040)=0x300000) [ 617.686186] x86/PAT: syz-executor0:19380 map pfn RAM range req write-combining for [mem 0x85cf0000-0x85cf3fff], got write-back 22:12:57 executing program 1: r0 = socket(0x10, 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x181040, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000080)) recvmmsg(r0, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) sendmsg$nl_crypto(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@upd={0xe0, 0x12, 0x301, 0x0, 0x0, {{'\nrc32\x00'}}}, 0xe0}}, 0x0) 22:12:57 executing program 3: perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000002c0), &(0x7f0000000300)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000940)="4dd4152849b8788b62423ce144fe3e726f62238f6371cbb545e516db3bcd6f234d98a6764a6d7607561963d4fe6d0fa22b004fd0a3b09d8fe478e03df2417f70603ee9d5a2114758c81c19a37fa1283767d627baae5b2aeef732aabd247684cd1251a45140e743651ef5abdce2dad3a70b3a7590e4f66ae987c551fdda75", 0x7e}], 0x1, &(0x7f0000000140)}, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000013c0)=""/4096, 0x200023c0}], 0x1, &(0x7f0000000040)=""/16, 0x10}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0x80089203, &(0x7f0000000200)) [ 617.895212] x86/PAT: syz-executor0:19386 map pfn RAM range req write-combining for [mem 0x85cf0000-0x85cf3fff], got write-back 22:12:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000001000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x17) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9b4b62b}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x17}) [ 618.317554] netlink: 192 bytes leftover after parsing attributes in process `syz-executor1'. [ 618.365173] netlink: 192 bytes leftover after parsing attributes in process `syz-executor1'. 22:12:58 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x1, 0x8000) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0x484c, 0x1, 0x0, r3}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r4, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000000)=0x1, 0x4) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f00000000c0)={0x7, 0x4, 0xffff, 0x3, 0x1f}) poll(&(0x7f0000000140)=[{r0, 0x20}], 0x1, 0x3) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x8000000000000) sendfile(r0, r5, &(0x7f0000000180), 0x8001) 22:12:58 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) sendmsg$nl_crypto(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="e00000001200010300000000000000000a7263333200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000078b900000000000000000000000000000000000000000000000000000000000000"], 0xe0}}, 0x0) 22:12:59 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040)=0x100000, 0x8001) [ 619.307364] netlink: 192 bytes leftover after parsing attributes in process `syz-executor1'. [ 619.354528] x86/PAT: syz-executor0:19418 map pfn RAM range req write-combining for [mem 0x889c0000-0x889c3fff], got write-back 22:12:59 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000240)=0x52) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={@multicast1, @multicast2, 0x0}, &(0x7f00000001c0)=0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)={@multicast2, @remote, r1}, 0xc) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x0, 0x0, @local, 0x800000000}, {0xa, 0x4e22, 0x40, @mcast1}, 0x7ff}, 0x5c) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x1, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f00000003c0)=""/225, 0xe1, 0x40012003, 0x0, 0x0) fstat(r0, &(0x7f0000000600)) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000380)={0x0, &(0x7f0000000340)}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000280)={0x0, 0x0, 0x2, 0xdd51, "8cff2574fc6d9664c3ea8583b04a793f07222df046f256ce005658b5c4496b0a"}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000580)={0x200, 0x28, 0x101, 0x80, 0x8}) fstat(0xffffffffffffffff, &(0x7f0000000000)) setxattr$trusted_overlay_nlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000680)='trusted.overlay.nlink\x00', &(0x7f00000006c0)={'U-', 0x100000001}, 0xfffffffffffffe51, 0x1) ioctl$int_in(r3, 0x5452, &(0x7f00000000c0)=0x36034632) seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x58fe4}]}) [ 619.457436] x86/PAT: syz-executor0:19419 map pfn RAM range req write-combining for [mem 0x889c0000-0x889c3fff], got write-back 22:12:59 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) sendmsg$nl_crypto(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@upd={0xe0, 0x12, 0x301, 0x0, 0x0, {{'\nrc32\x00'}}}, 0xe0}}, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) [ 619.977289] netlink: 192 bytes leftover after parsing attributes in process `syz-executor1'. [ 620.005980] netlink: 192 bytes leftover after parsing attributes in process `syz-executor1'. [ 620.929541] clocksource: timekeeping watchdog on CPU0: Marking clocksource 'tsc' as unstable because the skew is too large: [ 620.940977] clocksource: 'acpi_pm' wd_now: 7ab69d wd_last: dbe6d8 mask: ffffff [ 620.950370] clocksource: 'tsc' cs_now: 151c5125d42 cs_last: 15036776cf1 mask: ffffffffffffffff [ 620.961129] tsc: Marking TSC unstable due to clocksource watchdog [ 620.968102] TSC found unstable after boot, most likely due to broken BIOS. Use 'tsc=unstable'. [ 620.977632] sched_clock: Marking unstable (621026504030, -58419927)<-(621089678692, -121593831) [ 621.032861] clocksource: Switched to clocksource acpi_pm 22:13:01 executing program 5: socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x7}, 0x8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) 22:13:01 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000080), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bind(r0, &(0x7f0000000400)=@hci={0x1f, 0x0, 0x2}, 0x80) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000480)=[0xabdd, 0x9]) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='pagemap\x00') getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x0, 0x8000, 0x100000001, 0xdea, 0x4, 0x3f, 0x7, 0x0}, &(0x7f0000000140)=0x20) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180)={r5, 0xfffffffffffffffd, 0xaa, 0x401, 0x8001, 0xff}, &(0x7f0000000600)=0x2f9) sendfile(r0, r4, &(0x7f0000000040)=0x100000, 0x8001) recvmmsg(r4, &(0x7f0000000580)=[{{&(0x7f00000002c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/83, 0x53}], 0x1, &(0x7f00000004c0)=""/139, 0x8b, 0x6}, 0x80000000}], 0x1, 0x12002, &(0x7f00000005c0)={0x0, 0x989680}) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000200)={r5, 0x9}, &(0x7f0000000240)=0x8) 22:13:01 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x200000, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000240)=0x4f13) r1 = socket(0x10, 0x2, 0x0) syz_open_dev$sndtimer(&(0x7f0000000540)='/dev/snd/timer\x00', 0x0, 0x80) recvmmsg(r1, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) write$P9_RSTATFS(r0, &(0x7f00000004c0)={0x43, 0x9, 0x2, {0xffffffffffffffff, 0x5, 0x9, 0x196fc3bf, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x7}}, 0x43) sendmsg$nl_crypto(r1, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="e00000001200010301000000000000000a7263333200000000000000000000000000000000000000000000000000000000000000000000ca25481647391502000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007e8d33f680c732c3a06a5feba192243d2312255b645efa9dfcfa34ba8079588025d938875c1ff38fcd9db17a84925966088ea91e2b263b739b31bb828e9b90e1749ff9403c0ee43f375e2796507ba9322831bf4a9e3cc53c810e46aecfe35423179c40f8525545041290e0000000000006c6a1c9dacd0dc7249ef756e5d1f7d9e933681d5d456f5ec5eecb3"], 0xe0}}, 0x0) fchdir(r0) r2 = dup2(r1, r1) syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7, 0x42000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x0, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000100)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0xffffffffffffff18) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x482001, 0x0) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000180)='trusted.overlay.redirect\x00', &(0x7f00000001c0)='./file0\x00', 0x8, 0x1) ioctl$KDMKTONE(r2, 0x4b30, 0x8000) 22:13:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") 22:13:01 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x40, 0x31, 0x0, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000080)) [ 621.338189] Unknown ioctl 1074283780 [ 621.404584] Unknown ioctl 1074283780 [ 621.445951] netlink: 192 bytes leftover after parsing attributes in process `syz-executor1'. [ 621.519546] *** Guest State *** [ 621.523247] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 621.532333] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 621.541215] CR3 = 0x0000000000000000 [ 621.545296] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 621.551974] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 621.558506] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 621.564757] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 621.570800] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 621.577987] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 621.586290] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 621.594545] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 621.602797] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 621.610849] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 621.619125] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 621.627328] GDTR: limit=0x00000000, base=0x0000000000000000 [ 621.635583] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 621.643974] IDTR: limit=0x00000000, base=0x0000000000000000 [ 621.652244] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 621.660276] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 621.667028] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 621.674735] Interruptibility = 00000000 ActivityState = 00000000 [ 621.681047] *** Host State *** [ 621.684563] RIP = 0xffffffff812bde4b RSP = 0xffff8800853ff428 [ 621.690632] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 621.697366] FSBase=00007f7fe686e700 GSBase=ffff88021fc00000 TRBase=fffffe0000003000 [ 621.705437] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 621.712059] CR0=0000000080050033 CR3=000000005c12d000 CR4=00000000001426f0 [ 621.719147] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ac01260 [ 621.726119] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 621.732379] *** Control State *** [ 621.735885] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 621.743244] EntryControls=0000d1ff ExitControls=002fefff [ 621.748751] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 621.755974] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 621.762868] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 621.769495] reason=80000021 qualification=0000000000000000 [ 621.776065] IDTVectoring: info=00000000 errcode=00000000 [ 621.781558] TSC Offset = 0xfffffeadfb32fa4c [ 621.786228] EPT pointer = 0x000000005c0d901e 22:13:02 executing program 3: 22:13:02 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x5) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={r2}) setsockopt$inet_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f0000000080), 0x4) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r5, &(0x7f0000000040)=0x100000, 0x8001) 22:13:02 executing program 4: 22:13:02 executing program 1: r0 = socket(0x10, 0x2, 0x0) dup(r0) recvmmsg(r0, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) sendmsg$nl_crypto(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@upd={0xe0, 0x12, 0x301, 0x0, 0x0, {{'\nrc32\x00'}}}, 0xe0}}, 0x0) 22:13:02 executing program 2: [ 622.319332] x86/PAT: syz-executor0:19477 map pfn RAM range req write-combining for [mem 0x5c180000-0x5c183fff], got write-back [ 622.381048] netlink: 192 bytes leftover after parsing attributes in process `syz-executor1'. 22:13:02 executing program 5: socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f00000000c0)={0x0, @speck128}) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000140)=0x7fff) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = dup(r1) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{}]}) socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r4, 0x540b, 0x1) 22:13:02 executing program 4: [ 622.449110] x86/PAT: syz-executor0:19477 map pfn RAM range req write-combining for [mem 0x619d0000-0x619d3fff], got write-back 22:13:02 executing program 3: 22:13:02 executing program 2: 22:13:02 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f0000000140)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000000080)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) sendmsg$nl_crypto(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x1}}, 0x800) 22:13:03 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x400, 0x0) write$FUSE_POLL(r3, &(0x7f0000000200)={0x18, 0xfffffffffffffff5, 0x7, {0x20}}, 0x18) accept$packet(0xffffffffffffff9c, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000000c0)={@mcast2, 0x1a, r4}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r5, 0x0) modify_ldt$read(0x0, &(0x7f0000000140)=""/95, 0x5f) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r6, &(0x7f0000000040)=0x100000, 0x8001) 22:13:03 executing program 4: 22:13:03 executing program 3: 22:13:03 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0xd3c9) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000480)=0x80, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000000)=@dstopts, 0x8) 22:13:03 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000013c0)=""/4096, 0x200023c0}], 0x1, &(0x7f0000000040)=""/16, 0x10}, 0x0) [ 623.282608] x86/PAT: syz-executor0:19507 map pfn RAM range req write-combining for [mem 0x85d50000-0x85d53fff], got write-back [ 623.412655] x86/PAT: syz-executor0:19510 map pfn RAM range req write-combining for [mem 0x85d50000-0x85d53fff], got write-back 22:13:03 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0xfffb, 0x1b, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000040)=0x2) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x5) 22:13:03 executing program 5: socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) 22:13:03 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000040)="153f5a00418dd25d766070") clock_gettime(0xb, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x100}, 0x1c) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r4, 0x0) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000000)={0x4, 0x57, &(0x7f0000000140)="3e325ebf2e6219eedd67b3d8371bbc50e6134b0558a8a7bea5bfecb41b83e165e73a7179a6a0b498b7f2527fbdf88ebc7745b949ef61cc75d67438f9f4456c6801e0506a00e08c851433a59b209bf82d0d9c77d78336db"}) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r5, &(0x7f0000000040)=0x100000, 0x8001) 22:13:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000013c0)=""/4096, 0x200023c0}], 0x1, &(0x7f0000000040)=""/16, 0x10}, 0x0) [ 624.026517] x86/PAT: syz-executor0:19533 map pfn RAM range req write-combining for [mem 0x65260000-0x65263fff], got write-back [ 624.065625] x86/PAT: syz-executor0:19533 map pfn RAM range req write-combining for [mem 0x5b660000-0x5b663fff], got write-back 22:13:04 executing program 3: syz_emit_ethernet(0xff27, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x36, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x883e, 0x8}}}}}, 0x0) 22:13:04 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000040)=0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x20000, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) 22:13:04 executing program 4: socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)={0x3}) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) [ 624.333210] ip_tunnel: non-ECT from 172.20.255.187 with TOS=0x2 [ 624.383490] ip_tunnel: non-ECT from 172.20.255.187 with TOS=0x2 22:13:04 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r4, &(0x7f0000000040)=0x100000, 0x8001) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x8400, 0x0) 22:13:04 executing program 3: socket$inet6(0xa, 0x7ffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.current\x00', 0x0, 0x0) getsockname$unix(r0, &(0x7f0000000140), &(0x7f00000001c0)=0x6e) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000500)={0x0, 0x4, 0x10}, &(0x7f0000000540)=0xc) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000580)={r4, 0x8000, 0x1, [0x81]}, &(0x7f00000005c0)=0xa) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) timer_create(0x5, &(0x7f00000004c0)={0x0, 0x36, 0x0, @thr={&(0x7f0000000440)="af1638932012ddc776ced9b9b00ad9ed69b2e1c3a7e953b46f894519d55ca0c9d4390e76c4127d38d879835140ee7c0f31762c5b7d72c6a874dee2", &(0x7f0000000600)="a74155ba688d1bb3e41d64323848cfa1c0f55747dc83a76162340a4f5236f7ce4f7a099ec14ffe493f108b8fe83e6245cb434b5c7edb69172e7f380798e6e9344b3bf2490c570914f7"}}, &(0x7f0000000680)=0x0) timer_settime(r5, 0x1, &(0x7f00000006c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000700)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) 22:13:04 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e27, 0xfffffffffffffffe, @local, 0x8001}, 0x13) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x240000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r4, &(0x7f0000000040)=0x100000, 0x8001) [ 624.799304] x86/PAT: syz-executor0:19563 map pfn RAM range req write-combining for [mem 0x5edd0000-0x5edd3fff], got write-back 22:13:04 executing program 5: socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) [ 624.903867] x86/PAT: syz-executor0:19566 map pfn RAM range req write-combining for [mem 0x5edd0000-0x5edd3fff], got write-back [ 625.040734] x86/PAT: syz-executor2:19571 map pfn RAM range req write-combining for [mem 0x5b780000-0x5b783fff], got write-back 22:13:05 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendto$inet(r1, &(0x7f0000000100)="5b420c3a681e3dce106cb80c04f169f2f94254b3b89c750ae4e99c8078dfd7b4b8306f9e47a164e3fa34f9bd35fd952229c9a935b570c5da52662c3ca2d80301f41d4faef408f7a4861970e3a035163df89afd3e2282f02946566c78764ce88f5682df5d4e9aec2dd2f83b5e189c622d51c7c552cb3a97591425c27d49c9c9bca969490ceecced39ab4478c093765455521809f4db75da", 0x97, 0x0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) clock_getres(0x9, &(0x7f0000000040)) 22:13:05 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e24, 0x6e3, @mcast2, 0x9}, {0xa, 0x4e23, 0x8, @mcast1, 0x1ff}, 0x5, [0x6, 0x1, 0x8, 0x2, 0x8, 0x5f0b, 0x17c]}, 0x5c) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r4, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x4}, 0x8) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r5, &(0x7f0000000040)=0x100000, 0x8001) 22:13:05 executing program 2: memfd_create(&(0x7f0000000000)='#mime_type[usersecurity\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x6, 0x4, 0x2ed3, 0x1, 0x0, 0x1}, 0x2c) 22:13:05 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/ppp\x00', 0x420000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x4) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x1, 0x6, @broadcast}, 0x10) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000001700), 0x4) r2 = socket(0x8, 0x200000002, 0x43) recvmmsg(r2, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) sendmsg$nl_crypto(r2, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xe0}}, 0x0) [ 625.545620] x86/PAT: syz-executor0:19584 map pfn RAM range req write-combining for [mem 0x5ecb0000-0x5ecb3fff], got write-back 22:13:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000340)={0x4, 0xffffffffffffffff}) unshare(0x20020400) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000040)) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000000)={0x0, 0x2000000001, 0x0, &(0x7f0000000080)}) [ 625.628445] x86/PAT: syz-executor0:19584 map pfn RAM range req write-combining for [mem 0x5edf0000-0x5edf3fff], got write-back 22:13:05 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000540)='./file0\x00', &(0x7f00000003c0)='bdev\x00', 0x100000, &(0x7f0000000380)='em0vmnet1\x00') r0 = syz_open_dev$vcsn(&(0x7f0000000340)='/dev/vcs#\x00', 0x0, 0x400000) connect$bt_rfcomm(r0, &(0x7f0000000480)={0x1f, {0xe1e, 0x8, 0x90b, 0x97e, 0x2, 0x6}, 0x7a4}, 0xa) mount(&(0x7f0000000240)=ANY=[@ANYBLOB="9b82625830754bf0c0baa5069c29e5a6abb3a5000275cd79c46167a5b1555e8aa7122e96980593f852d8ad57b7cc704e2d5e639be573d6bacc1bf63cacf8e3fe7583d2341d437243df9c053ec6a3deb0243419977d0026"], &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)="760001b076", 0x3080, &(0x7f0000000200)) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="825cb808d855b6e80f8f011a1c7a95c10d91b1fd5424d2687b4e7313248791b8d93f5732f41505a0d424cd93b37e4fb85f247f3f446d1d6aecf1bfd0e7d55d6f44ce47d2cb3873e6043ef68b720bc5bbcd82dabf5c221ea006c30680cb1e5708db8c068065180589df04e439cab39e4b457851b03a8b22204bd6e412716eb981dd75907282f91c7a5dfa42d6282b61e5d3a36741a519c3ce8ae4e2c4171a573b9d05a84105007e64b5f809d69b4bf7210608d040"], &(0x7f0000000080)='.', &(0x7f0000000040)="045b898f73", 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000580)) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) umount2(&(0x7f00000004c0)='./file0\x00', 0x1) mount$fuseblk(&(0x7f00000002c0)="2f6465762f6c6f6f703004", &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='fuseblk\x00', 0x0, &(0x7f0000000700)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xfffffffffffffffe}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000500)) open(&(0x7f0000000100)='./file0\x00', 0x40080, 0x20) ioctl$sock_netdev_private(r1, 0x89fa, &(0x7f0000000580)="96e8efe13b9077a78d132e93d2b2c52011f8383b5224c880c4f0ec2858880e4f4053848c584892be4631fa7a980e853fc934240d21ed26e50c3d62a11af132716e1f750b2e78b264d729e4b0454c9c8460f5226aa4b511816a996ff4c06e504439f7a748167ca869ee8776260797be0a2e51acf1969bd7bb6bdb74db8095ee3d69b23c63fd312564c6ad3f25b89b1e7f9a831e300299a2f7ef4c82b858db567128bbc6f84650728783d0f51cee4eca91c78b3189a0e12215") chdir(&(0x7f0000000200)='./file0\x00') socket$inet_tcp(0x2, 0x1, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 22:13:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xfffffffffffffe87, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="00002b5ab438d08731040c000100626f6e64000000000cfa010008001800000000004008da335641e6d2f1476bf81ae3275584ebd98de32c69"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x200000) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000000c0)=0x200, 0x4) openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x2000, 0x0) 22:13:06 executing program 5: socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x20000) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) ioctl$KDSKBLED(r3, 0x4b65, 0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) 22:13:06 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40000, 0x0) sendmsg$nl_crypto(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="e000000012000103000000004645796a4684aaa2a67afc67000000000a726333320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xe0}}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000080)={0x0, 0x70, 0x9, 0xa0000000, 0x1, 0x4, 0x0, 0x1f, 0xea13, 0x4, 0xfffffffffffffffe, 0xc55, 0xed5, 0x1, 0x20, 0x3, 0xfff, 0x8, 0x9, 0x2, 0x3, 0x8, 0x4, 0x2, 0x101, 0x28000000000, 0x4, 0x2, 0xffffffff, 0x100000000, 0xee43, 0xd4, 0x5, 0x3, 0x9, 0x1, 0x7, 0x7, 0x0, 0x9, 0x2, @perf_config_ext={0x7, 0x3}, 0x208, 0x3c, 0x6, 0x7, 0x3, 0x7, 0x1fa1}) syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x6, 0x8000) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x8) 22:13:06 executing program 0: r0 = socket$inet6(0xa, 0x4, 0xfffffffffffffffd) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x80002, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x5, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r5, 0x0) getpgid(0x0) gettid() ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000180)=0x0) r7 = syz_open_procfs(r6, &(0x7f0000000280)="737461746d003a4297c24133728a66390106610e2684d696120b55733ce81c52f55f6ecbab36ee9cdb1c37811a057366196a451c9a0e5749bc509eb2738484a1bc17c529b82591d0c282892db047e5bd3210460a4498dd3c6995fa6bb35ee2214239aeb97c5eff2aa2df3fc6c9c23404779debb26fc32ebe5fa45e4d2bb150e54322b04e7a2d8502658134a79a20171c4a5ba9d9b717e82ab73ff24d3734040f559228f1bc23129de889c511cd941ee23f7b") sendfile(r0, r7, &(0x7f0000000040)=0x100000, 0x8001) [ 626.277608] netlink: 140 bytes leftover after parsing attributes in process `syz-executor1'. [ 626.286490] netlink: 140 bytes leftover after parsing attributes in process `syz-executor1'. [ 626.357219] netlink: 140 bytes leftover after parsing attributes in process `syz-executor1'. 22:13:06 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/qat_adf_ctl\x00', 0x600000, 0x0) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000080)=0xe8) fstat(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000280)={{{@in=@multicast2, @in6=@dev={0xfe, 0x80, [], 0xc}, 0x4e22, 0x8000, 0x4e23, 0x4f4, 0xa, 0x20, 0xa0, 0x1, r3, r4}, {0x1, 0x1, 0x3, 0x36, 0x7f, 0x5, 0x9, 0x9}, {0xf400000000000000, 0x8000000000000000, 0x1ff, 0x80}, 0x7f, 0x6e6bb7, 0x0, 0x0, 0x2, 0x3}, {{@in6=@local, 0x0, 0x3c}, 0xa, @in=@broadcast, 0x3500, 0x3, 0x1, 0x3f, 0x6dac, 0xff, 0x3}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000008380)=[{{&(0x7f0000000000)=@in={0x2, 0x4e22, @dev}, 0x80, &(0x7f0000001180), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1000000000000000000000000700000010000000000000000000000007800000"], 0x20}}], 0x1, 0x0) connect$inet6(r2, &(0x7f0000000400)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}, 0x4}, 0x3df) socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg(r2, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) [ 626.439327] netlink: 140 bytes leftover after parsing attributes in process `syz-executor1'. [ 626.446087] x86/PAT: syz-executor0:19620 map pfn RAM range req write-combining for [mem 0x5c3b0000-0x5c3b3fff], got write-back 22:13:06 executing program 2: r0 = socket$inet(0x2, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0xfffffffffffffffe, 0x181000) acct(&(0x7f0000000080)='./file0\x00') ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000000c0)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x14) getpeername(r0, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80) [ 626.486398] netlink: 140 bytes leftover after parsing attributes in process `syz-executor1'. [ 626.495427] netlink: 140 bytes leftover after parsing attributes in process `syz-executor1'. [ 626.524981] x86/PAT: syz-executor0:19620 map pfn RAM range req write-combining for [mem 0x85350000-0x85353fff], got write-back 22:13:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x16, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socketpair$unix(0x1, 0x4000000005, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f00000001c0)=""/4, &(0x7f0000000100)=0x4) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f00000003c0)) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f0000000080)={'nat\x00'}, &(0x7f0000000140)=0x78) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000380)={0x7, 0x0, &(0x7f00000002c0)="37f5c4a129698ac7ed908b82a2ad24cad6cce5afe8a483357d59c2e09cc3b92cbc09309f3e489143bc8ea44da408f9e96a050e1406264eb6e6dcc49e5b1aeb44717f6472c5a23aa89b0e120732c2c69b71655bd686130534e0b295d3e312ea80dfd22ec0a832e13aa1ab0641b664915b9a41b58047bcb5f6ae1fb20535d79f157a6b6ca4001510ed5a58638ebf70e9f437918aea2b8a8e59f06aa232bcd4ef97b562110088c843f7a155dc6f4464d77aa2673e50c1d1c4e0bc443f39c3d9", &(0x7f0000000180)="6836eb6705af40eff751cea9f65647f02f6340b3853a", 0xbe, 0x16}) [ 626.562237] netlink: 140 bytes leftover after parsing attributes in process `syz-executor1'. [ 626.636117] netlink: 140 bytes leftover after parsing attributes in process `syz-executor1'. 22:13:06 executing program 1: r0 = socket(0x10, 0x2, 0x3) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000001d00)={0x7ff, {0x2, 0x4e24, @local}, {0x2, 0x4e23}, {0x2, 0x4e20, @multicast2}, 0x28, 0x7, 0x26f, 0x2, 0x101, 0x0, 0x10000, 0x2}) recvmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f0000000140)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/134}, {&(0x7f0000000280)=""/51}, {&(0x7f00000002c0)=""/187}, {&(0x7f0000000380)=""/156}, {&(0x7f0000000440)=""/4096}, {&(0x7f0000001440)}, {&(0x7f0000001480)=""/9}], 0x0, &(0x7f0000001540)=""/114, 0x0, 0x57}, 0xfffffffffffffffc}, {{&(0x7f00000015c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001640)=""/229}, {&(0x7f0000001740)=""/15}, {&(0x7f0000001780)=""/236}, {&(0x7f0000001880)=""/7}, {&(0x7f00000018c0)=""/251}], 0x0, 0x0, 0x0, 0x3}}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001a40)=""/162, 0x396}], 0x0, &(0x7f0000001b40)=""/165, 0x0, 0x7}, 0x5e5f}, {{&(0x7f0000001c00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001c80)=""/3}], 0x0, &(0x7f0000001f00)=""/4096, 0x0, 0x4}, 0xfff}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff5df905690c43b5d56d5be5"], 0x3) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0xf}, 0x82}, {0xa, 0x4e21, 0x5, @mcast1, 0x8000}, 0x0, [0x6, 0x100, 0x2, 0x2, 0x18, 0x4, 0x15f7, 0xea0]}, 0x0) 22:13:07 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x6, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) clone(0x400002102201ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000400), 0xffffffffffffffff) 22:13:07 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket(0x3, 0x0, 0x1) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = dup3(r1, r0, 0x80000) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x1a) read$FUSE(r1, &(0x7f00000020c0), 0x1000) open_by_handle_at(r0, &(0x7f0000000100)={0x37, 0x2, "d1e31fb31cabd90969632dcb8b1ff6cfe2b66ee299b92fcb4bedcb099b2ce5a4cd9d3c7b4f6b0b4db9f3152b3287d7"}, 0x40000) read(r1, &(0x7f0000000140)=""/19, 0x13) write$FUSE_INIT(r1, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x5, 0x100001, 0x0, 0x1}}, 0x50) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)=@known='system.posix_acl_access\x00', &(0x7f0000000540)=""/162, 0x44) 22:13:07 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = dup3(r0, r0, 0x80000) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000000)) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r5, &(0x7f0000000040)=0x100000, 0x8001) 22:13:07 executing program 5: socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) r0 = getpgid(0xffffffffffffffff) sched_setattr(r0, &(0x7f00000000c0)={0x30, 0x3, 0x1, 0x8, 0x2, 0x714, 0x5, 0x8c}, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x2, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) 22:13:07 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x600000, 0x0) r1 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x4, 0x70, 0x2, 0x3, 0x7, 0x81, 0x0, 0x2, 0x680, 0x0, 0x3c4, 0x8001, 0x5, 0x8, 0x0, 0xffffffff, 0x5, 0x5, 0x0, 0x10001, 0x8000, 0x80000000, 0x6, 0x8, 0x100, 0x5, 0x1000100000000000, 0x401, 0xffffffff, 0x9, 0x5a, 0x6, 0xd9, 0xfffffffffffffffb, 0x4, 0xe0, 0x8, 0x800, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000080), 0x1}, 0x200, 0x8, 0x0, 0x7, 0xcf, 0x7, 0x7ff}, r1, 0x9, r0, 0x1) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') sched_getattr(r1, &(0x7f0000000040), 0x30, 0x0) 22:13:07 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x80001, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000180)=""/181, 0xb5}, {&(0x7f0000000240)=""/26, 0x1a}, {&(0x7f0000000280)=""/116, 0x74}, {&(0x7f0000000300)=""/251, 0xfb}, {&(0x7f0000000400)=""/7, 0x7}], 0x5, &(0x7f00000004c0)=""/254, 0xfe, 0xc9d}, 0x10000) sendmsg$nl_route_sched(r0, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=@newqdisc={0x60, 0x24, 0x0, 0x70bd2d, 0x25dfdbfd, {0x0, r1, {0xfff1, 0xf}, {0xf, 0xc}, {0x10, 0xfff7}}, [@TCA_RATE={0x8, 0x5, {0xffffffff, 0x6}}, @qdisc_kind_options=@q_fq_codel={{0x10, 0x1, 'fq_codel\x00'}, {0x24, 0x2, [@TCA_FQ_CODEL_ECN={0x8}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x10000}, @TCA_FQ_CODEL_QUANTUM={0x8}, @TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4010}, 0x20040004) rmdir(&(0x7f0000000700)='./file0\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = getpgid(0xffffffffffffffff) tkill(r3, 0x3f) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="726177000000c7959cb4eec4a8749b2d89efb7000000000000000000000000000000000000000800000000000009000000e9000000080200000000000000000000e80000000000000000180000a00100a0010000a0032d63"], 0x1) [ 627.343971] x86/PAT: syz-executor0:19658 map pfn RAM range req write-combining for [mem 0x5e6e0000-0x5e6e3fff], got write-back [ 627.561452] x86/PAT: syz-executor0:19666 map pfn RAM range req write-combining for [mem 0x5e6e0000-0x5e6e3fff], got write-back 22:13:07 executing program 1: r0 = socket(0x10, 0x2, 0x0) lseek(r0, 0xc, 0x3) recvmmsg(r0, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='erspan0\x00') sendmsg$nl_crypto(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="e000000012000103000000a03d2837530b7e82e47bafc700000000000a726333320000000000000000000000a3b10000000000000000000000000000000000000000000000ff00000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f78070000000000000000000000000000000000000000000000000000000000000000000000000000800000000000b16b6cf8c8f6c33b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xe0}}, 0x0) 22:13:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x34700}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, 0x31, 0x829, 0x0, 0x0, {0x2804}, [@nested={0x2c, 0x0, [@typed={0x14, 0x1, @ipv6=@loopback}]}]}, 0x2c}}, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000340), &(0x7f0000000300)=0x4) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000080)={0xff, @multicast1, 0x4e20, 0x0, 'lblcr\x00', 0x20, 0x7, 0x7a}, 0x2c) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000200)={@multicast2, @empty, 0x0}, &(0x7f0000000240)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', r2}) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000140)=0x4) [ 627.762188] kvm: SMP vm created on host with unstable TSC; guest TSC will not be reliable 22:13:07 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x8000, 0x0) read$eventfd(r1, &(0x7f0000000100), 0x8) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x20000000672, 0x400040) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchmod(r0, 0x0) gettid() setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000280)=0x4, 0x4) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000080)) fsetxattr$security_selinux(r2, &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:watchdog_device_t:s0\x00', 0x27, 0x3) r3 = fcntl$getown(r2, 0x9) tkill(r3, 0x33) socket$inet6(0xa, 0x3, 0x101) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000001c0)={0x80000001, 0xffffffffffffffe1, 0x100000000000000, 'queue0\x00', 0xffff}) 22:13:07 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r4, &(0x7f0000000040)=0x100000, 0x8001) [ 627.879752] netlink: 140 bytes leftover after parsing attributes in process `syz-executor1'. [ 627.888765] netlink: 140 bytes leftover after parsing attributes in process `syz-executor1'. [ 627.914841] netlink: 'syz-executor2': attribute type 1 has an invalid length. 22:13:08 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8914, &(0x7f0000000280)="b96bb6feb439dce9e5c3b451308e15b3d79061a00633b725884f82cc35896c5aeef14cdc3787d137520cc09cb90b30f9537ca43215bbbb6b62643793573ea4d102d095bbc69c8791b67bc816eb8db75fcf1d99c22a52d802c0f20f5cd952a930a48be763ba4bcc19275646f36ebad3368de6007607efb8e781697988c8c426cf7656626a9a03659bfdfe02383a99db50d0b6f30b23cb520d64d0e8") r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x0) [ 628.030942] netlink: 'syz-executor2': attribute type 1 has an invalid length. 22:13:08 executing program 5: socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) connect$unix(r2, &(0x7f0000000000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) r3 = dup2(r2, r1) connect$unix(r1, &(0x7f000066fff4)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f0000000600)={0x80000001, 0x0, 0x1000, 'queue0\x00', 0x80000000}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) mkdirat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x1ff) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) r7 = dup3(0xffffffffffffffff, r5, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYBLOB="5f0000ce3e2977f8aa58aad319a2a6f6961991b73c7103df4ebdfb2f54a7bebf5022ac3d9b2dd7efc3612432a9931ed6092d44969ecad9f4118ee521ecd9bb4ddef47e81453a8a33a6471df9a0e79ad5c565d674f328cea156bb1bb5bd814c2e2149c89179d95ad099f3abb440bd9f054b32d491"], &(0x7f0000000440)=0x67) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000540)={r8, 0x6, 0x9}, 0x3a7) ioctl$KVM_RUN(r6, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/attr/exec\x00', 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x61, &(0x7f00000004c0)={'filter\x00', 0x1000000000000193}, 0xfffffffffffffde4) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) [ 628.145008] x86/PAT: syz-executor0:19689 map pfn RAM range req write-combining for [mem 0x5db60000-0x5db63fff], got write-back 22:13:08 executing program 1: socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000780)) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'team_slave_1\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="1b0000000010000050000000363468996f61dd2071abc30f68be78b9a2dbeb893a9d850b990f3f8879da912e6e82ebac275a472d59f0c1c665efcc228aec924c7f4fc60b3e74100f8c26ba00f5740f6a4cfaa91d13112bb69df58c98"]}) getsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000240)={@rand_addr, @local, @rand_addr}, &(0x7f0000000c00)=0xc) r2 = dup(r1) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000c80)={0x4, 0x2}) r3 = socket(0x10, 0x2, 0x0) recvmmsg(r3, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x37, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0xfffffffffffffe4c}, {&(0x7f0000000500)=""/122, 0x7a}, {&(0x7f0000000340)=""/242, 0xf2}, {&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000000440)=""/147, 0x459}, {&(0x7f0000000680)=""/72, 0x48}], 0xa, 0x0, 0x196}, 0x1}], 0x2, 0x0, &(0x7f0000000140)={0x77359400}) setsockopt$sock_void(r3, 0x1, 0x1b, 0x0, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000900)='/proc/self/net/pfkey\x00', 0x202200, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000180)={0x9, 0x1, 0x100000001, 0xce, 0x5}, 0xc) statx(r4, &(0x7f0000000940)='./file0\x00', 0x4000, 0x0, &(0x7f0000000980)) socket$nl_crypto(0x10, 0x3, 0x15) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000880)='/dev/dsp\x00', 0x1ffffc, 0x0) unlinkat(r5, &(0x7f00000008c0)='./file0\x00', 0x200) sendmsg$nl_crypto(r3, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000a80)=ANY=[@ANYBLOB="e000000de5eba6030000000000000000697263333200000000d51009e6b2c5417a0aaea5870056ee000000000000000000000000000000000000000000005111916cc6b5142ee856b000000000000000000000000000000000000000000000000000000000000004000000000000000000000000008000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000091ee0000000000000000000000000000000000000000e128000000067d9a1e8d2eeb4ea08d9b79ec9d22fa6e1809ae94a32e4021b4016fb64ddb91523f7450e48032b0131a1ccb8f348d58acad2bdd44966ed29037e4ab9d7fbd5571b8e88fc5aea197c0709d2311d08553d1fcaa2df9c55971f92b4fa1e0cbe60e9cfbf91ad0098a9026fb"], 0xe0}}, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f00000001c0)={0x10001, 0x0, 0x0, 0xffffffffffffffff}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000c40)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r5, 0xc0106438, &(0x7f0000000200)={0x7dc, r6}) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000700)={0x4, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xb}}, 0x22, 0x7, 0x8, 0x5d, 0x40, &(0x7f00000002c0)='irlan0\x00', 0x0, 0x9, 0x4}) 22:13:08 executing program 2: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4000) ioctl$RTC_VL_CLR(r0, 0x7014) r1 = getpgrp(0x0) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) rt_tgsigqueueinfo(r1, r2, 0xb, &(0x7f00000001c0)={0x0, 0x0, 0x1}) read(r4, &(0x7f0000481000)=""/128, 0x80) [ 628.281287] x86/PAT: syz-executor0:19696 map pfn RAM range req write-combining for [mem 0x5db60000-0x5db63fff], got write-back 22:13:08 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0xa1) sendto$unix(r1, &(0x7f0000000100)="4d49e9e9a1472f49d800d962a597677996ad26fbbbe2e36eba81e67afcfaa6880606dd965d2dddbdb0a9018aaf078ef226a9936c94428bd1185f039a73922180ccb038eac3a549dcaa15f3f45d4053b13f1551e712f778f38ca01a4cdf320b454b67d254d29fb295886314a52252b25dce2e72cfeebd0bbe2d66e0a5233c1b2e12d9ab3ddfa0e867bfcbea0acdfd", 0x8e, 0x800, 0x0, 0x0) setgroups(0x0, &(0x7f0000000300)) 22:13:08 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x7, 0x1) ioctl$BLKROGET(r1, 0x125e, &(0x7f00000002c0)) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000180)={0x0, 0x6}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r3, &(0x7f0000000240)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r5, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r6, &(0x7f0000000040)=0x100000, 0x8001) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x7, 0x8, [0x1, 0x8, 0xe09, 0x4, 0x1, 0x5, 0x5, 0x1]}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r7, 0x8, 0x800, 0x19d7, 0x100000000, 0x1}, &(0x7f0000000140)=0x14) 22:13:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6b4a, 0x0, 0x0, 0x1}) [ 628.939174] x86/PAT: syz-executor0:19717 map pfn RAM range req write-combining for [mem 0x5fb30000-0x5fb33fff], got write-back 22:13:09 executing program 5: socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, &(0x7f00000004c0)={{0xffffffffffffffff, 0x1, 0x8, 0x0, 0x3}, 0x4, 0x401, 'id0\x00', 'timer0\x00', 0x0, 0xc37d, 0x6, 0x0, 0x1f}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) 22:13:09 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0xffffffffffffffff) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='comm\x00') ptrace$getregset(0x4204, 0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=""/126, 0x7e}) writev(r1, &(0x7f0000000080), 0x1a6) 22:13:09 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x40600, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000140)=[{{r1, r2/1000+30000}, 0x3, 0x2, 0x192b}], 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x18, 0x2e, 0x319, 0x0, 0x0, {0x80000000003}, [@generic='9']}, 0x18}}, 0x0) 22:13:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000040)={0x7ff, 0x5, 0x7fe0000000000, 0x100}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0xaaaaaaaaaaaab7d, 0x0, &(0x7f0000000080), 0x111) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f00000001c0)="650fc75c276766b882000f00d0c4423d3c56eef22ede9a002000000f01cf0f3042802100660f38802afb0f23d4", 0x2d}], 0x1, 0xffffffffffffffff, &(0x7f0000000380), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x10001, 0x210000) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={0x0, 0x1}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000380)=ANY=[@ANYRES32=r4, @ANYBLOB="1cd83046dbeaa1003aab78e65513756d9d0000008a92b6d56c0ef1735c2060cfd0bf00f3093ea573cd24c47bb3e4da5bedd936a222cc"], &(0x7f0000000340)=0x8) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$DRM_IOCTL_GET_MAP(r5, 0xc0286404, &(0x7f00000000c0)={0x0, 0x527, 0x5, 0x1, &(0x7f0000011000/0x3000)=nil, 0x401}) r7 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r7, 0x1, 0x1000000000028, &(0x7f00000000c0)=0xfe66, 0x77) sendmsg$key(r7, &(0x7f0000007000)={0x0, 0x0, &(0x7f000001b000)={&(0x7f000001bf30)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) read(r7, &(0x7f0000000040)=""/69, 0x45) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f00000003c0)={{0xa, 0x4e21, 0xffff, @loopback, 0x4}, {0xa, 0x4e21, 0x400, @ipv4={[], [], @broadcast}, 0x7}, 0x33, [0x9, 0x0, 0x673, 0x400, 0x2a83, 0x7, 0x0, 0x7fa]}, 0x5c) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000580)={0x0, 0x0, 0x2080}) getsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f0000000140)=0x5, &(0x7f0000000180)=0x4) 22:13:09 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x400, 0x0) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f00000001c0)=0xc41, &(0x7f0000000200)=0x2) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)={r2, 0x3f}, &(0x7f0000000140)=0x8) r3 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2000002, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = perf_event_open$cgroup(&(0x7f0000000240)={0x3, 0x70, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x8000, 0x2, 0x5, 0x1, 0x9, 0x1, 0x2, 0x6, 0x7, 0x101, 0x0, 0xf9, 0x7, 0x6, 0x1f, 0x1, 0x1, 0x81, 0xfffffffffffffffa, 0x80000000, 0x0, 0x20, 0x0, 0xfa4c, 0x100000000, 0x3, 0x0, 0x80000000000000, 0x4, @perf_config_ext={0x8, 0x800}, 0x8000, 0x6, 0x0, 0x2, 0x2, 0xffff, 0xa68}, r1, 0x7, r1, 0x1) statx(r1, &(0x7f0000000340)='./file0\x00', 0x1100, 0x0, &(0x7f0000000500)) close(r5) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000002c0)={r2, 0x2}, &(0x7f0000000300)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r6, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r7, &(0x7f0000000040)=0x100000, 0x8001) 22:13:09 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000000000)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0), 0x3b9, 0x0, 0xfffffffffffffd62}, 0xfffffffffffffffe}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) sendmsg$nl_crypto(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@upd={0xe0, 0x12, 0x301, 0x0, 0x0, {{'\nrc32\x00'}}}, 0xe0}}, 0x0) 22:13:09 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000000)) syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYBLOB="95723f6bb94faaaaaaaaaabb86dd60093a0600083a00fe800000000003000000000000003fbbff0200000000000000000000000000010000000000089078"], &(0x7f0000000100)) signalfd(r0, &(0x7f0000000040)={0x8}, 0x8) [ 629.794117] x86/PAT: syz-executor0:19748 map pfn RAM range req write-combining for [mem 0x5fb70000-0x5fb73fff], got write-back 22:13:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x1fd, 0x0) clone(0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000140)="a96dd95b5c773af1dabadabe4f7a7ab32e573498024333") ioctl$KDGKBLED(r2, 0xc0046d00, &(0x7f0000000100)) fsetxattr$trusted_overlay_origin(r0, &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000240)='y\x00', 0x2, 0xfffffffffffffffc) [ 629.940389] x86/PAT: syz-executor0:19754 map pfn RAM range req write-combining for [mem 0x5fb70000-0x5fb73fff], got write-back 22:13:10 executing program 5: socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) 22:13:10 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000040)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) write$binfmt_aout(r0, &(0x7f0000000400)={{0x10b, 0x1f, 0x59e, 0x337, 0x376, 0x3, 0x4c, 0x7}, "496752515465cd37b467d559cd632f539de7c56b08a271af5e83871995a9108f6f61082ef3f7448c3ffe432d2a4e96f433fc40113ab20b4e39ac35637bc0368675af3419e50cc32f87925d765cc47520d55c91", [[], [], []]}, 0x373) setxattr$trusted_overlay_nlink(0xfffffffffffffffd, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'U-', 0x3}, 0x28, 0x3) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000200)={0x6, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000340)={0x4, 0x66, 0x9, 0x800, 0x3f, 0x8000}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000780)='/dev/autofs\x00', 0x84800, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x101480, 0x0) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f00000003c0)) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rfkill\x00', 0x480000, 0x0) ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000300)) 22:13:10 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa, 0x0, 0x0, 0x7fff}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) sendmsg$nl_crypto(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=@alg={0x118, 0x10, 0x104, 0x70bd2d, 0x25dfdbfd, {{'sha3-512\x00'}, [], [], 0x400}, [{0x8, 0x1, 0x10000}, {0x8, 0x1, 0x52b}, {0x8, 0x1, 0x5}, {0x8, 0x1, 0x3}, {0x8, 0x1, 0x4}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0xe6}]}, 0x118}}, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'U-', 0xb0f5}, 0xa, 0x0) getpeername$unix(r0, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'sit0\x00', 0x800}) r1 = getpid() r2 = fcntl$getown(r0, 0x9) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x40000) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000080)={r3, r0, 0x2}) 22:13:10 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x10000, @mcast2, 0x3}, 0x1c) sendfile(r0, r0, 0x0, 0x1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f00000001c0)={r3, 0x3}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x1fe, 0xffcc) ftruncate(r2, 0x80003) 22:13:10 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x109000, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000280)=""/35) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) acct(0x0) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{}, {0x77359400}}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0, 0x6012, r4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') setsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000500)=0x10001, 0x4) mount(&(0x7f0000000400)=@nullb='/dev/nullb0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)='devtmpfs\x00', 0x2000, &(0x7f0000000480)='pagemap\x00') acct(&(0x7f0000000200)='./file0\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f00000000c0)={0x6, 0x20a, 0x9, 0x7f, 0x0}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={r6, 0x3f}, 0x8) sendfile(r0, r0, &(0x7f0000000040), 0x8001) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r5, 0x800448d2, &(0x7f0000000380)={0x1, &(0x7f00000002c0)=[{}]}) [ 630.712491] x86/PAT: syz-executor0:19789 map pfn RAM range req write-combining for [mem 0x91360000-0x91362fff], got write-back 22:13:10 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x101200, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000100)={0x81}, 0x4) unshare(0x24020400) unshare(0x24020400) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) getgroups(0x1, &(0x7f0000000600)=[0xee00]) r4 = getgid() ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000680)=0x6) r5 = getegid() getgroups(0x3, &(0x7f0000000640)=[r3, r4, r5]) bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)="e91f7189591e9233614b00", &(0x7f0000000080)='fuseblk\x00', 0x0, &(0x7f0000000380)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xf000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) fstat(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000340)=0x3cc, 0x2) r7 = getegid() fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000005c0)=[@in6={0xa, 0x4e24, 0x8, @loopback, 0x3ff}, @in={0x2, 0x4e24, @remote}], 0x2c) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000001c0)="e91f7189591e9233614b00", &(0x7f0000000200)='fuseblk\x00', 0x880040, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xb000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xfffffffffedd14e8}}, {@blksize={'blksize', 0x3d, 0x400}}, {@max_read={'max_read', 0x3d, 0x9a}}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x2b}}, {@blksize={'blksize', 0x3d, 0x1000}}], [{@permit_directio='permit_directio'}, {@uid_eq={'uid', 0x3d, r8}}, {@fsmagic={'fsmagic', 0x3d, 0x6}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@smackfstransmute={'smackfstransmute'}}, {@hash='hash'}, {@dont_measure='dont_measure'}, {@smackfsroot={'smackfsroot'}}, {@context={'context', 0x3d, 'unconfined_u'}}]}}) 22:13:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0x3000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x101000, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000140)=@sack_info={0x0, 0x6b, 0x1}, &(0x7f0000000200)=0xc) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1040000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="040029bd7000fddbdf25020000005400070008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="000000008b75bf4ffee63bdbf024e68cf6fdeb31e3c877871c50730264eb199a6f66b33b0faaedc85013a50a3762f2065b4a91b19c9dcd84e323871e453f", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="0c0004000000000000000000"], 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000240)={r3, 0x6, 0x15, 0x40}, 0x10) syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x5, 0x0) eventfd(0x998) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000180)={0x7a, 0x0, [0x4b564d01, 0x35fd]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x400) ioctl$TCSBRK(r5, 0x5409, 0x2000000000003) ioctl$KVM_GET_REG_LIST(r5, 0xc008aeb0, &(0x7f0000000480)=ANY=[@ANYBLOB="0a000000000000000100010000000000030000000000000002000000000000000101000000000000ff0f00000000000008000000000000000600000000000000010000000000000040000000000000008100000000000000f3336f5c1da448b85c50e288d2919fbc05c7140b3319d0b6839ff600b837ceb2dfc0b011"]) 22:13:11 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="b70200000b000000a7a30000000000000703000000feffff7a"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffff9c, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r1, 0x2, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x2}, [@ldst={0x7}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) r2 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0x19, "cc0bcbb73070b4a2033a784aa2dd7a0d062b43c9339519aa1f"}, &(0x7f0000000140)=0x21) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000180)={r3, 0x4, 0x2, 0xfffffffffffffffe}, 0x10) 22:13:11 executing program 5: socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup(0xffffffffffffffff) exit(0x2) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) [ 631.389923] x86/PAT: syz-executor0:19790 map pfn RAM range req write-combining for [mem 0x91360000-0x91362fff], got write-back 22:13:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x101000, 0x0) write$vnet(r3, &(0x7f00000011c0)={0x1, {&(0x7f0000000140)=""/4096, 0x1000, &(0x7f0000001140)=""/101, 0x3, 0x7}}, 0x68) epoll_create1(0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [0x49, 0x0, 0xc2]}) 22:13:11 executing program 2: clone(0x800, &(0x7f0000000300), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000400)) r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/attr/current\x00', 0x2, 0x0) r1 = dup(r0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000240)) syz_open_dev$amidi(&(0x7f0000000200)='/dev/amidi#\x00', 0x2, 0x200400) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000140)={{0x6}, 'port1\x00', 0x90, 0xc0c, 0x6, 0xe2fd, 0xa0a1, 0xdc3, 0x2, 0x0, 0x4, 0x5}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000280)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) 22:13:11 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001040)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) r3 = dup2(r2, r0) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1}}, 0x800d) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="6fe0d60d295efdf1e9e626bce60c457c7d73f7"], 0x14}}, 0x8000) [ 631.873945] kvm [19818]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 22:13:12 executing program 2: unshare(0x400) r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") fcntl$F_GET_RW_HINT(r0, 0x40b, 0xffffffffffffffff) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0xf6, &(0x7f0000000080)=0x1) fcntl$notify(r0, 0x402, 0x80000020) 22:13:12 executing program 3: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x2b}, 0x2, @in=@rand_addr, 0x0, 0x1, 0x0, 0x1}}, 0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000180)=0xe8) quotactl(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', r1, &(0x7f00000001c0)="afa65f7f4a36a429058238e4cef1b40cb83247ae13c88cff76bbb145dc8dba31668d1204f0d94f5376dc98ece12bab961938eef5a7f7d22e86d5897a268d3b592cb8fab94d35dc68df1718d414377045a35e6b48d14403ca5f12d75592d1696d2090847806b91b1d8b97345bddc0a69857c7285efd30891338cfa3fc5feaf85d2a2cef0cb51da3b4131226f8b82d360d8306c90e5731fcc48e6cac3dba4ff4fbd72e2f9167577623e2") r2 = syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x4, 0x200000) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f00000003c0)=""/52) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000400)) r3 = shmget$private(0x0, 0x1000, 0x1c02, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_RMID(r3, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c) [ 632.525584] kvm [19818]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 22:13:12 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) sendmsg$nl_crypto(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@upd={0xe0, 0x12, 0x301, 0x0, 0x0, {{'\nrc32\x00'}}}, 0xe0}}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x100, 0x0) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000100)) write$P9_RSTATFS(r1, &(0x7f0000000080)={0x43, 0x9, 0x2, {0xa8f, 0x6, 0x6, 0x1, 0x5, 0xfffffffffffffffc, 0xfff, 0x8001, 0x7}}, 0x43) 22:13:12 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x101000, 0x0) io_setup(0x4b3, &(0x7f00000002c0)=0x0) io_pgetevents(r1, 0x5, 0x4, &(0x7f0000000300)=[{}, {}, {}, {}], 0x0, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e22, 0x7, @loopback, 0x37}}, 0x8000000000006, 0x8, 0xffff, 0xffffffffffffffab, 0x401}, &(0x7f0000000040)=0x98) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={r2, 0x9, 0x1}, 0x8) r3 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x2, 0x1) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f0000000100)={'TPROXY\x00'}, &(0x7f0000000240)=0x1e) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000140), 0xa) 22:13:12 executing program 3: mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getpid() rt_sigprocmask(0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x8) 22:13:12 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, 0xfffffffffffffffe, 0x7ffd, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x7, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, r3}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r5, &(0x7f0000000040)=0x100000, 0x8001) 22:13:13 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000080)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x3, &(0x7f0000000140)='em1selinux\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) open(&(0x7f0000000000)='./file0/file1\x00', 0x1, 0x0) 22:13:13 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) io_setup(0x1, &(0x7f0000000000)=0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000340)='/dev/rfkill\x00', 0x105000, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x80000, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r1, 0x7, &(0x7f00000007c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x5, r5, &(0x7f0000000080)="b7f783e28b428a7dd00872ea88504328492b2c5c5ed1c5f85de641ceb11dfd33789011e141", 0x25, 0x3}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x200000, r0, &(0x7f0000000140)="6ae1a343", 0x4, 0x803, 0x0, 0x0, r2}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x8, 0x22c, r0, &(0x7f00000001c0)="9c35137fb6e4c44040bb94618e34c56c0b20a253c958c29011a24b76de416341b9916aa1bc04b03f8cd8c4a5ad081caa8e255b29a639d07c646ce4efdd76c7e4c696b9ae373abbd43227d73efc911fe04acfbbf34328c1aec1cc148912b567f70692caab70effe32fb30257f833ac68b876f85f3b7ecd33fca7a3026b91fa44fba72eb6798ceb35e8c919586f5d96c5f777f2700f68e01a076ee1b38192dd6525d04346fe4ecaa99a64014ea3eebd9e86ad64062be0b5e253863b9a914c219fd55571decab3e31d87feb5b4e", 0xcc, 0x0, 0x0, 0x1, 0xffffffffffffff9c}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x8db, r0, &(0x7f0000000300)="64cfa3e6a4192b90b81d5f26cf1d962b41fd2c667ebed9136cedf603a2614c05d946", 0x22, 0xfffffffffffffffa, 0x0, 0x2, r2}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x401, r0, &(0x7f00000003c0)="1673e581c7b9dd55dd4609de8bf33a129f958f0cbc448e3cd9eac459d3cd52c7eb0eb5080e271cd4e1f3d3d020284ea4d866f17da28ba0aae8c72234cc2eef05aee2087ea670641c79552623b8f4e7abfb2282f03e8af355e8365f7db60aebb907cf0301510bd3f0", 0x68, 0x6, 0x0, 0x2, r4}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x5, 0x3, r0, &(0x7f0000000500)="74ed63b71d64b3df44060f249c3b331cd0ce92a662fb5fada243d1f09a17", 0x1e, 0x1, 0x0, 0x2, r3}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffd, r2, &(0x7f00000005c0)="279ef6cb9248b2cbc9aeb0e97953e5823ee4a162d93c4a5dd661f651f9f5af480a0164903df668ee2ab1902e23723bb51e1e6ebe5d665388e5615a3fdbb9fd4bbe1bbc3c50d2f9866499a81d31260e2eb737ff7644baf429e1c0bee94c5b7254576ec5213c4bc9ea4fcdd0f7fb11eb4ece77651d81a4443b9b8ac5b71411dbbdaf330d2c5d88c22df374418ab3466f7a66e4f045493738db06d87e0566b090b88d58043f2c7f63e51dfc2206dbe223efda977d96e7c7e8c48228f14701ac4f59c0d9dc97fad286f9e6d4af03e7b89532fe0019", 0xd3, 0x8, 0x0, 0x1, r4}]) r6 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r9, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') fsetxattr$security_selinux(r7, &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000740)='system_u:object_r:klogd_exec_t:s0\x00', 0x22, 0x0) sendfile(r0, r10, &(0x7f0000000040)=0x100000, 0x8001) [ 633.105536] nla_parse: 8 callbacks suppressed [ 633.105563] netlink: 192 bytes leftover after parsing attributes in process `syz-executor1'. [ 633.156174] netlink: 192 bytes leftover after parsing attributes in process `syz-executor1'. [ 633.377624] x86/PAT: syz-executor0:19857 map pfn RAM range req write-combining for [mem 0x5ee00000-0x5ee03fff], got write-back [ 633.496128] x86/PAT: syz-executor0:19857 map pfn RAM range req write-combining for [mem 0x5ee20000-0x5ee23fff], got write-back 22:13:13 executing program 2: r0 = socket$inet6(0xa, 0x80000000000003, 0x80000000000006) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040)=0x5, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000200)}, 0x8000) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000000)=0xfffffffffffffffa, 0x4) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000003b40)}, 0x0) 22:13:13 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000380)) r1 = open(&(0x7f0000000200)='./file0\x00', 0x8000, 0x69) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000240)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r3, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") clone(0x210007fa, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) preadv(r0, &(0x7f0000000540)=[{&(0x7f00000005c0)=""/243, 0xf3}], 0x1, 0x0) getsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000100)=""/116, &(0x7f00000001c0)=0x74) close(r2) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000180)={0x0, r2}) 22:13:13 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) sendmsg$nl_crypto(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="e00000001200010300000000000000000a72633332000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a876a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d90db1f8dad1d430a29de916849783d300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xe0}}, 0x0) 22:13:13 executing program 5: r0 = socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x4000, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000140)=0x81) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000, 0x0) 22:13:13 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x1, 0x100000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x4b564d03, 0x1, 0x40000080], [0x0, 0x2]}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000080)=0x8) 22:13:13 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x40, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x141802, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f00000001c0)) finit_module(r1, &(0x7f0000000080)='\x00', 0x3) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000240)={0x0, 0xfb, 0xd1, 0x1, 0x8, "0da0bf07c07bdaa935eadae94c86a40f", "a675fbc26729faf33227ca5939857331e1adf7e4d016a79ae1e00898c585cf6124459e21dbc31e0f3c72d5bcac7876241bcc593b7ae5cda9280ecd5920b45a79df3c1ced082db16aef3b2302e30961385b07b34e2406ef2acbc35e3080fe3553f75f4ad68e9ff0638c14dfcbdbf9e6565cb03084ca674a69a11c779094cadda62a092292be16df7237c43d34419ec398c3a8941f0a7e0db6b27aa23c1037f1159e487076cba69b090cfbaac95921c86073b65efbb2c5fbe43291fa18"}, 0xd1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x1, 0x402000) ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f0000000140)=0x3) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r5, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r6, &(0x7f0000000040)=0x100000, 0x8001) [ 634.065093] netlink: 192 bytes leftover after parsing attributes in process `syz-executor1'. [ 634.106048] netlink: 192 bytes leftover after parsing attributes in process `syz-executor1'. 22:13:14 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14, 0x80000) fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in, @in=@dev={0xac, 0x14, 0x14, 0x14}, 0x4e21, 0x5, 0x4e21, 0x1, 0xfffffffffffffffe, 0x80, 0x20, 0x3a, r1, r2}, {0x1ff, 0xb05, 0x40, 0xff, 0x2, 0x21, 0x200, 0x8}, {0x10000, 0x1f, 0x6, 0x3ff}, 0x7, 0x6e6bb0, 0x3, 0x0, 0x0, 0x2}, {{@in=@multicast1, 0x4d2, 0x2b}, 0xa, @in=@multicast2, 0x0, 0x3, 0x1, 0x18059578, 0x5, 0x1ff, 0x8}}, 0xe8) r3 = socket$inet(0x2, 0x6, 0x0) connect$unix(r0, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) connect$unix(r3, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) 22:13:14 executing program 2: r0 = socket$inet6(0xa, 0x801, 0x0) setsockopt$inet6_int(r0, 0x29, 0xff, &(0x7f0000000080)=0x20, 0x4) 22:13:14 executing program 1: r0 = socket(0x10, 0x2, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000100), &(0x7f0000000140)=0x4) recvmmsg(r0, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000000)=0x68) sendmsg$nl_crypto(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@upd={0xe0, 0x12, 0x301, 0x0, 0x0, {{'\nrc32\x00'}}}, 0xe0}}, 0x0) 22:13:14 executing program 3: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xfffffffffffffffc, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) write$binfmt_aout(r0, &(0x7f0000000640)={{0x108, 0xf62, 0x3, 0xb8, 0x1a0, 0x5, 0x326, 0x5}, "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", [[], []]}, 0x351) getsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x4) 22:13:14 executing program 0: r0 = socket$inet6(0xa, 0x7, 0x2) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4000) getsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f00000000c0)=0x20, &(0x7f0000000140)=0x2) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x2, 0x6012, r3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r5, &(0x7f0000000040)=0x100000, 0x8001) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000180)={0x0, 0x3ff}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x4, @mcast2, 0x1}, 0x1c) ioctl$UI_DEV_CREATE(r5, 0x5501) [ 634.617840] netlink: 192 bytes leftover after parsing attributes in process `syz-executor1'. 22:13:14 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x8a001, 0x0) write$P9_RSTATu(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="940000007dffff00006600000000000000000000000000000000000000000000000000000000000000000000000014a3e6280a002f6465762f70746d78001d0073656c66292540747275737465647b47504c75736572766d6e657431210a002f6465762f70746d780002005b001900766d6e657430766d6e6574302d776c616e312d73797374656d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x94) getsockname$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x1c) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) [ 634.725322] netlink: 192 bytes leftover after parsing attributes in process `syz-executor1'. 22:13:14 executing program 5: socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f00000000c0)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) [ 634.880652] x86/PAT: syz-executor0:19913 map pfn RAM range req write-combining for [mem 0x5e360000-0x5e363fff], got write-back 22:13:15 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xc, 0x200, 0x5, 0x1f, 0x22, r1, 0x7}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r2 = accept4$packet(0xffffffffffffff9c, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14, 0x80000) r3 = syz_open_dev$usb(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x6, 0x109100) timerfd_gettime(r3, &(0x7f0000000200)) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000180)=0x68) [ 635.070525] x86/PAT: syz-executor0:19923 map pfn RAM range req write-combining for [mem 0x5adb0000-0x5adb3fff], got write-back 22:13:15 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) waitid(0x2, 0x0, &(0x7f0000000040), 0x0, 0x0) 22:13:15 executing program 1: r0 = socket(0x10, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) sendmsg$nl_crypto(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="e00000001200010300000000000000000a72633332000000000000000000000000000000000000000000000000000000000000000000000000000000b7df0000000000000000000000000000000000000000000000000000000000000000000059000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xe0}}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) sched_getparam(r1, &(0x7f0000000180)) uselib(&(0x7f00000001c0)='./file0\x00') 22:13:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000001c0), 0xffffffffffffffff) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000400)=""/233, &(0x7f0000000000)=0xe9) r2 = getpgid(0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f0000000540)={0x6}) get_robust_list(r2, &(0x7f0000000240)=&(0x7f0000000200)={&(0x7f00000000c0)={&(0x7f0000000080)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, &(0x7f0000000280)=0x18) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x0, 0x3}) modify_ldt$read(0x0, &(0x7f0000000100)=""/10, 0xa) pselect6(0x40, &(0x7f00000002c0)={0x7, 0x3, 0x100000000, 0x5, 0x5, 0x0, 0x79, 0x4}, &(0x7f0000000300)={0x1ff, 0x3, 0xfff, 0x2, 0x100000001, 0x9, 0x2, 0x100000000}, &(0x7f0000000340)={0x9, 0x200, 0x1, 0x0, 0x7ff, 0xb6, 0xe, 0xffff}, &(0x7f0000000380)={0x77359400}, &(0x7f0000000500)={&(0x7f00000003c0)={0xa1}, 0x8}) 22:13:15 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x2, 0x0) r1 = gettid() write$cgroup_pid(r0, &(0x7f0000000080)=r1, 0x12) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$KDENABIO(r2, 0x4b36) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000980)='cpuset.effective_mems\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="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", 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$notify(r4, 0x402, 0x1) close(r3) 22:13:15 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() r3 = getpgrp(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000900)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f0000000a00)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000a40)={0x0, 0x0, 0x0}, &(0x7f0000000a80)=0xc) sendmsg$netlink(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="f80100003500200026bd7005d796c100b4b63eae0d54938486afa000fedbdf25b1d43a182c7dbe99277bc1b1ab3f7b", @ANYRES32=r1, @ANYBLOB="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"], 0x1f8}, {&(0x7f0000000400)={0x48c, 0x1f, 0x402, 0x70bd2c, 0x25dfdbff, "", [@nested={0x1d8, 0x1e, [@typed={0x14, 0x5f, @ipv6=@dev={0xfe, 0x80, [], 0xd}}, @typed={0xc, 0x87, @u64=0x6}, @typed={0xec, 0x2e, @binary="f820144cc9204ac9e0895f79e5c4bfcc4abd7ac83a1bee900b9c953e15086ef1de98767ee91467d6fac42fdc5b2b2709cd09b89ec8c08d70c2dbf4b31388c09c47d2621f59c59ad0e0ac4d063d5d593ae7622b5e843458a4810f444a9e07cf9ad1b7ceb047cb493b707623e0a697d7d12586e5b5beb591cc2fc68a8e642ada029e5fb127332a7c68e460a2ddd3c6f3f4265accb379ee377635ba0300ed66b10f34acce7866d878e8b3a22d6f18f9c2d6aaae8e51eef49df7460fe18cee447b8297f7850303575a684d513ca5d4f68688b29856ee0484d7fa2da62110a6d2d5def0c25322806ca7"}, @generic="a0c58a00be8f6a61462b06ea31fad59723bb8f3dcc5a245e90492ec79b7cc703acdb933c", @typed={0x8, 0x17, @u32=0x3ff}, @typed={0x8, 0x7, @pid=r2}, @generic="fc38ac17655eb45313e6f64d0c403f599f9b2ba11d4d1da44687ac3fe4057a413a7b7a1216c18e735c2079e5484b0eef39eeeb9c0d9956013efef4a7fff3d2bd85a33f11f829923eec7ee46c95ecbb65d9f8f549512b8bca312481393dcc4f144de584ea20779696cf076a0ddddf1c2dd4101860f1430cb3709ed684eed91ab6d6c372193dd65274a0cff81205ca220ff4"]}, @generic="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", @generic="e58611c3eac4b09faadc9b4795da1cfeb249194bff7bd4cb5f8b139b88770261eb51ef4d794c5105cd0db5487ae02987249cf82ee1748d035be5f2e84b2201bb22232b260ab3133910a039751986e49b8cc191db242b1472eac678e6a441e7e94a3d2d286cfbc00290e0201da23feeb86e3ce1984e48ec7f276ea8b46b02a9628c74ed31b0b675e0fb62c8f1493a53197b7bcd77ef53808bfef05bff7574b9e0c32ac9709266a7ca3f739eba2d3da964c43764b0384808541253", @generic="1e1db0a50fd9ce7a2dabe4951900e1e802128787dbb31373f9686680d71596249a33b30b2784e2d65166bc9a3c3ea31361c21b9f3f2fa497bd0256f3792653f27b9c7b36eb4c268cb75de8685d7af88fadb66ce377c4fe41cf30458c664175408b246d293e144a7080b41198aea061810c6223d982e8bf55e3592ee4e93a895992411acb315068ccb7f87cdc759cc9abbd3b3f917597cbf503c6190332af2edc59839ce7a9fa82218a60c583e8f03ec2d202bc71b355d79b9e02dac2b2003593b174533a68635325633c2062da0dfc3dc04c53a5ffdb73d5d0cd5343c6cdc083f5d277b30f8f17ff74f9cb81"]}, 0x48c}], 0x2, &(0x7f0000000ac0)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x20, 0x1, 0x1, [r0, r1, r1]}, @rights={0x18, 0x1, 0x1, [r0, r1]}], 0x58, 0x4000000}, 0x40) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000100)={0x8, {{0xa, 0x4e23, 0x13b, @local, 0x7fffffff}}}, 0x88) r6 = memfd_create(&(0x7f0000000080)="2a04656d3100", 0x0) splice(r6, 0x0, r1, 0x0, 0x3, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000001c0), 0x4) 22:13:15 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) munlock(&(0x7f0000005000/0x2000)=nil, 0x2000) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r4, &(0x7f0000000040)=0x100000, 0x8001) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r1, &(0x7f0000000000)={0x8}) 22:13:15 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000002580)=0x1c, 0x80000) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, &(0x7f00000025c0)=""/21, &(0x7f0000002600)=0x15) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x400000}}, &(0x7f0000000140)=0xb0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x0, 0xffff, @dev}], 0x1c) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) syz_emit_ethernet(0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRESOCT=r2, @ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYRES16=r0, @ANYRES64=0x0], @ANYRESDEC=r0], &(0x7f0000000000)={0x4, 0x0, [0x3, 0x1]}) execve(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f0000000200)="7365637572697479776c616e306264657676626f786e6574311f2973656c665f70726f63656d312300"], &(0x7f00000005c0)) setsockopt$inet_buf(r0, 0x0, 0x60, &(0x7f00000000c0), 0x0) 22:13:15 executing program 1: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x80) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000180)=0x9, 0x4) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x404000, 0x0) openat$cgroup_ro(r2, &(0x7f0000000100)='memory.events\x00', 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000080)=0xc00, 0x4) recvmmsg(r3, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) sendmsg$nl_crypto(r3, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xe0}}, 0x0) 22:13:15 executing program 5: socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) epoll_create1(0x80000) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0xc, 0x0, &(0x7f00000000c0)=[@enter_looper, @register_looper, @exit_looper], 0x69, 0x0, &(0x7f0000000140)="53364d747ee55a51b1d63f1a66dc1289411f1cd9ff9d89521e540f82c2c0a8fa0e1b99ea7328dda77ddf0ea5e478f1bfe90a495a447c24049e2c18534a6f51753f1593e355e88b36190a093914f059de5fbadc269589dfda233fcd37efd8cd6c0d24c4a8dc3779ba58"}) sched_setattr(0x0, &(0x7f0000000080)={0x200000000000000, 0x3, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) [ 635.855924] x86/PAT: syz-executor0:19949 map pfn RAM range req write-combining for [mem 0x5cae0000-0x5cae3fff], got write-back [ 635.979699] x86/PAT: syz-executor0:19959 map pfn RAM range req write-combining for [mem 0x5cae0000-0x5cae3fff], got write-back [ 636.037743] netlink: 192 bytes leftover after parsing attributes in process `syz-executor1'. 22:13:16 executing program 4: mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x101) socket$unix(0x1, 0x5, 0x0) 22:13:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x3, 0x8002) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000600), 0x267) connect$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e21}, 0x6e) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400)='/dev/hwrng\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) fcntl$setflags(r3, 0x2, 0x1) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:13:16 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e22, 0xa5, @mcast2, 0x7c86}}, 0x0, 0xf33, 0x3, 0x7a50}, &(0x7f0000000080)=0x98) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000000c0)={r4, 0x32a465a0, 0x9, 0x1a698625, 0x5, 0x9}, 0x14) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="05000000c51e529c93eb47934bb89a0e240da3479be4f504efdbb0af541ace327da8f76926cc6a6a175edc2d011db28c152d46c4ce4748aa56eff03463b09801540dd47295d2cbb38bf3fb73b6aade9fb3d3140321ce90c66a2782", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000240)=0x18) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000200)=[0x1, 0xbf]) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r5, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r3, &(0x7f0000000040), 0x8001) 22:13:16 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f0000009240)=[{{&(0x7f0000001d00)=@nfc, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001ec0)=""/50, 0x32}}, {{0x0, 0x0, &(0x7f0000008ec0)=[{&(0x7f0000007ec0)=""/4096, 0x1000}, {&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/242, 0xf2}, {&(0x7f00000039c0)=""/204, 0xcc}, {&(0x7f0000003ac0)=""/214, 0xd6}, {&(0x7f0000003bc0)=""/151, 0x97}, {&(0x7f0000003c80)=""/197, 0xc5}, {&(0x7f0000004180)=""/169, 0xa9}, {&(0x7f0000004240)=""/147, 0x93}, {&(0x7f0000003d80)=""/72, 0x48}], 0xa}}], 0x2, 0x0, &(0x7f0000009440)={0x77359400}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x401, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f00000000c0)={0x8, 0x3, 0x594, 0x4, 0x3}) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7, 0x80) sendmsg$nl_crypto(r0, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@upd={0xe0, 0x12, 0x301, 0x0, 0x0, {{'\nrc32\x00'}}}, 0xe0}}, 0x0) 22:13:16 executing program 4: keyctl$join(0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x20, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da11}, [@typed={0xc, 0x3, @u64}]}, 0x20}}, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, r1) keyctl$unlink(0x9, r1, r1) [ 636.637426] netlink: 192 bytes leftover after parsing attributes in process `syz-executor1'. [ 636.656448] x86/PAT: syz-executor0:19984 map pfn RAM range req write-combining for [mem 0x5be30000-0x5be33fff], got write-back [ 636.757552] x86/PAT: syz-executor0:19984 map pfn RAM range req write-combining for [mem 0x5a2a0000-0x5a2a3fff], got write-back [ 636.779505] netlink: 'syz-executor4': attribute type 3 has an invalid length. [ 636.820998] netlink: 'syz-executor4': attribute type 3 has an invalid length. 22:13:16 executing program 5: socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$FUSE_INIT(r3, &(0x7f0000000140)={0x50, 0xfffffffffffffff5, 0x2, {0x7, 0x1b, 0x95, 0x220980, 0x1b602ff, 0x80, 0xcbe, 0x1ff}}, 0x50) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) 22:13:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xfffffffffffffffa, 0x10000) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000080)=0x7f39ef97) ioctl$TCSETSF(r0, 0x5433, &(0x7f0000000040)) 22:13:17 executing program 1: socket$kcm(0x2, 0x3, 0x2) r0 = socket$kcm(0xa, 0x6, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x10d, 0xb, &(0x7f0000000080)=r0, 0x4) r1 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x1, 0x200004) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000000100)={0x1e, &(0x7f0000000040)=""/30}) r2 = gettid() getpgid(r2) socket$packet(0x11, 0x3, 0x300) fcntl$getown(r1, 0x9) 22:13:17 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000080)=0x200, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0xc, @local, 0x4}, 0x12) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100000, 0x8001) setsockopt$sock_void(r1, 0x1, 0x3f, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in=@dev, @in6=@mcast2}}, {{@in=@rand_addr}, 0x0, @in=@dev}}, &(0x7f0000000000)=0xe8) 22:13:17 executing program 3: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x7, 0x200000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x0, 0x46d, 0x0, 0x6, 0x100000001}, &(0x7f0000000080)=0x98) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000100)={r2, 0x19, "a1af3aefd12cd8af22be1dd2de4cf8b03feefabd8d48e8f397"}, &(0x7f0000000300)=0x21) capget(&(0x7f00000001c0)={0x19980330}, &(0x7f0000000200)) 22:13:17 executing program 0: r0 = socket$inet6(0xa, 0x80006, 0x200000100) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r4, &(0x7f0000000040)=0x100000, 0x8001) 22:13:17 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = gettid() ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000140)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) restart_syscall() ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000001c0)={"6c6f00000000000000c500", 0xfffffffffffffffc}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) migrate_pages(r1, 0xffff, &(0x7f0000000040)=0x5, &(0x7f0000000080)=0x1000) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x1, 0x4) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000240)={0x4, 0x0, 0xa41, 0x51, 0x8, 0x5}) ioctl$NBD_DISCONNECT(r0, 0xab08) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000100)={0x6, 0x1, 0x6, 0x75b0, 0x5, 0x6, 0x1, 0x7fffffff, 0xad, 0x0, 0x9, 0x3}) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x8) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/attr/current\x00', 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'irlan0\x00', 0x4}, 0x18) 22:13:17 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) r1 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d5c6070") connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000220b4db359f87cd5000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x800, 0x0, 0xff}, 0x20) 22:13:17 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)) [ 637.607644] x86/PAT: syz-executor0:20017 map pfn RAM range req write-combining for [mem 0x5ac90000-0x5ac93fff], got write-back [ 637.758960] x86/PAT: syz-executor0:20024 map pfn RAM range req write-combining for [mem 0x5ac90000-0x5ac93fff], got write-back [ 637.828556] device lo entered promiscuous mode 22:13:17 executing program 5: socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0xffffffffffffff65) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) 22:13:18 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffff9c, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0)={0xffffffffffffffff}, 0x1, {0xa, 0x4e21, 0x101, @empty, 0x441e}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x11, 0x10, 0xfa00, {&(0x7f0000000080), r1}}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendto$inet6(r2, &(0x7f0000000300)="040105000500000000000000ffb25bc202938207d903378c398d5375c5f73f2e55067d2780e19e33e3c2e77205000000402810fadc5712f29508c008186575efe5eb8f5972eaecff8b30ac32030e80fa87d0d03d18c1f5fcb8c96da56c6fa39f106b", 0x62, 0x0, &(0x7f00000002c0)={0xa, 0x100200000800, 0x800000000000d, @mcast2}, 0x1c) 22:13:18 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)="6e6574000000805f7479626c747300") fstat(r1, &(0x7f0000000100)) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0xc00}], 0x8, 0x0) 22:13:18 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) readahead(r0, 0x1, 0x7fffffff) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x1}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r3, 0x4) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') ioctl$SG_GET_ACCESS_COUNT(r5, 0x2289, &(0x7f0000000000)) sendfile(r0, r5, &(0x7f0000000040)=0x100000, 0x8001) 22:13:18 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x40, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r1, 0xd, 0x3}, 0x14) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="3d000000060000000063ed4fa63fed56c8000000000000000808000000000000000000000000000014000000000000005b6e6f64657673656c696e7578"], 0x3d) [ 638.458157] x86/PAT: syz-executor0:20052 map pfn RAM range req write-combining for [mem 0x5a9f0000-0x5a9f3fff], got write-back 22:13:18 executing program 5: socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup(r0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r4, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4000000000, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20008000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r5, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 22:13:18 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x1ff, 0x10000) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x2, 0x10, 0xda, 0x8}, &(0x7f0000000180)=0x18) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={r1, 0xffffffffffffffc0}, 0x8) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0xfffffffffffffffe) sysinfo(&(0x7f0000000040)=""/99) 22:13:19 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000080)) unshare(0x20400) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f00000000c0)={0x0, 0x9}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x3, 0x1, &(0x7f0000000100)=""/148, &(0x7f00000001c0)=""/129, &(0x7f0000000280)=""/98, 0x5}) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r1) [ 639.155282] x86/PAT: syz-executor0:20070 map pfn RAM range req write-combining for [mem 0x5c8d0000-0x5c8d3fff], got write-back 22:13:19 executing program 2: unshare(0x8000400) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) ioprio_set$uid(0x0, r1, 0xffffffffffffffa0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0) fstat(r0, &(0x7f0000000040)) 22:13:20 executing program 1: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/procMsys/net/ipv4/vk/lblc_expiration\x00', 0x2, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getdents64(r1, &(0x7f00000000c0)=""/11, 0xeb) 22:13:20 executing program 5: r0 = socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) 22:13:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) modify_ldt$write2(0x11, &(0x7f00000001c0)={0x5, 0x20001000, 0x0, 0x3, 0xfffffffffffffffe, 0x1, 0x3f, 0x1340, 0x8000, 0x8}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x412002, 0x0) write$FUSE_INIT(r1, &(0x7f0000000240)={0x50, 0x0, 0x5, {0x7, 0x1b, 0xcd0b, 0x4050, 0x8000, 0x4, 0x3, 0x2}}, 0x50) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x3) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) write$FUSE_WRITE(r0, &(0x7f0000000200)={0x18}, 0x18) 22:13:20 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x20, 0x7, 0x100000001, 0xb5, 0x1, 0x59}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x8, 0x4, 0x104000001, 0x0, r0}, 0x2c) 22:13:20 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x8992, &(0x7f0000000100)={"626f6e643000000000041300", @ifru_names='bond0\x00'}) 22:13:21 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000180)={0x2f, @local, 0x4e24, 0x3, 'ovf\x00', 0x23, 0x9, 0x24}, 0x2c) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x200, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000140)={r4, 0x5, 0x1}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r6, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r7, &(0x7f0000000040)=0x100000, 0x8001) 22:13:21 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e20, 0x8, @remote, 0x4cd}}, 0x1, 0x3f, 0xfff, "d2878dc9ff7e49a343cfcfe80bec2c740e4e995e086e7450db98ba07408bb4c0d776dd64a4b54c1581aa96e9666be94383b7e4d6625db5f62b62b529f4c8c33008e1d05b1a406c3e8124486c73a2c821"}, 0xd8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="b0553fec94248c32e27d04ee0000288a79d904d863568704b95facb83f09546708a6a9cf05cc3584fcdbbb0afa7f3a5aa44da25f9a02e9a48124a99bab633eea19bf57ab5b3b8480b584924a69", 0xfffffffffffffdc4) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000080)={0x1, 0x0, [{0xfffffffffffffffb, 0x4, 0x0, 0x0, @msi={0x8, 0x3, 0x10001}}]}) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2b911b35ebe4194cb557011cf43e0bb60904b6efc345c01c49f0f572e4a8d598725e769ab1dc891f7f9a189aca576f00e04e898222cf062e2cd7b166b06e5cd1a988"], 0x1}}, 0x0) recvmsg(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000023c0)=""/4096, 0x1000}], 0x1, &(0x7f00000007c0)=""/16, 0xc009}, 0x0) 22:13:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000003, 0x4) ioctl(r0, 0x8912, &(0x7f00000001c0)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x300}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x18, 0x31, 0x82d, 0x0, 0x0, {0x400000000000001}, [@nested={0x4}]}, 0x18}}, 0x0) [ 641.135694] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20004 [ 641.174683] x86/PAT: syz-executor0:20108 map pfn RAM range req write-combining for [mem 0x5ad90000-0x5ad93fff], got write-back [ 641.276161] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20004 [ 641.340991] x86/PAT: syz-executor0:20115 map pfn RAM range req write-combining for [mem 0x5bf80000-0x5bf83fff], got write-back 22:13:21 executing program 3: r0 = socket(0x40000000015, 0x8000f, 0x4000000001ff) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000007c0)=0x2, 0x4) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000002}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x24fc}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa72}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) 22:13:21 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x70, 0x2, 0x1, 0x7, 0x0, 0x0, 0x2, 0x2000, 0xb, 0x0, 0x20, 0x7, 0x80, 0x1, 0x2, 0x6, 0x81, 0x6, 0x6, 0x79eb, 0x7, 0x8001, 0x0, 0x8, 0x1f, 0x5, 0x8, 0x7, 0x8000, 0xffffffffffffff80, 0x3b5c, 0x80000000, 0x1, 0x100, 0x0, 0x20a7a7f4, 0x4, 0x0, 0x4, 0x7, @perf_config_ext={0x10000, 0x5}, 0x10200, 0x7, 0x6, 0x3, 0x1, 0xde, 0x5}, 0xffffffffffffff9c, 0x9, 0xffffffffffffffff, 0xe) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x5edbfa2ac06f9873, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x800) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r4, &(0x7f0000000040)=0x100000, 0x8001) 22:13:21 executing program 5: r0 = socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup(0xffffffffffffffff) r4 = socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) r5 = getpid() fcntl$setown(r4, 0x8, r5) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) 22:13:22 executing program 3: perf_event_open(&(0x7f0000940000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x9, 0x101000) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000080)) sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, &(0x7f000057bff0)={0x2, 0x0, @rand_addr}, 0x10) mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x800000, 0x3, &(0x7f00007fb000/0x800000)=nil) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f00000000c0)={0x11da, 0x5, 0x7c0142e2, {}, 0x460fb306, 0x266}) [ 641.932034] x86/PAT: syz-executor0:20135 map pfn RAM range req write-combining for [mem 0x5cf80000-0x5cf83fff], got write-back [ 642.100014] x86/PAT: syz-executor0:20135 map pfn RAM range req write-combining for [mem 0x58f70000-0x58f73fff], got write-back 22:13:22 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x8000, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x81, 0x3cfc0000000}) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000080)={0x8, 0x0, [{0x4, 0x8, 0xfffffffffffffff9, 0x4, 0x7}, {0x80000001, 0x6, 0x9, 0x3, 0x40}, {0xc0000000, 0x7, 0x2, 0xffff, 0x9}, {0x80000007, 0x3ff, 0x7, 0x2, 0x7}, {0x80000007, 0x7ff, 0x2, 0x3, 0x4}, {0xb, 0x1f, 0x3, 0x5, 0x25}, {0x2, 0x43668f3e, 0x3ff, 0x0, 0x9}, {0xf, 0x4, 0x3, 0x101, 0x2}]}) r1 = getpgid(0xffffffffffffffff) r2 = geteuid() ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000180)={0x3aff, 0x0, r1, 0xd82, r2, 0x3, 0x1, 0x6}) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x5c, "65980a3d1f712abc4a55e6b95f7ce2ab9edfea50c5a713525ee08efab61298e5a08b1a96a44f29cd2b26630562fe0443e1252850adcda7ffcf36846869ca0ee3117532ca73128aae2c90ebe629d303dd8ec06ca7f724b6f27438997c"}, &(0x7f0000000240)=0x80) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000002c0)={0x0, 0x7fffffff, 0x4, &(0x7f0000000280)=0x9}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000300)=0xe78, &(0x7f0000000340)=0x2) r3 = openat$cgroup_subtree(r0, &(0x7f0000000380)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f0000000540)={0x2, &(0x7f00000003c0)=""/14, &(0x7f0000000500)=[{0x100000000, 0x1b, 0x8, &(0x7f0000000400)=""/27}, {0x4, 0xb2, 0x9, &(0x7f0000000440)=""/178}]}) sendmsg$alg(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000580)="4f8860738e227d3bfce4de3f865b550ec409f45cea60a53c539579a32592e4cf0f1e63ba2af8962b01c679dc42afee526299714b133a53fea4e3b577d0301138a5967635be09898b3706fe647d54234a04ddb104066892e94fad631620453e4605ae7feddc9934a0a00be99c4e1dd16ea2434c05ff1e074d3d3199efff3e31686d3496fd12c21c86da3813350342185d4e8c7ca578a248c01a6f52c7c660ea63656a909ceaa9c7c090868ec6385bbdd2995e81404681ab215db1f44d8689187714bf504deb2ec6f1f1f3a9a1575101816eb73f9cb5f79d80974711d7aad762c938c51643d1fd660d526030804abd732d706a30396b2f6f", 0xf7}, {&(0x7f0000000680)="efdfe3b7a7261d264a779fd5841993bb4431eddae9380b129bd0a9e1738ef4b411a4fda85d0d7b55ec36e46a48fa4ba71fbeac038b2d7f3fde332e960c928318f66c97b40d997c8aa4776cd8869dd6c039a0d5489806576cf3d24eff692af14ba2d440c64b6d4418c8c85bc3b055e8bf965f5c4186249200411c2beb5ac24b5061928014bef4d4c0379394932cea1b9e94da5911bae4964b709b5d1ea0b4bd6934ffebfea3502825e9e13d83df6832452c9c1dad1a4adf47152e7bd4f98d68a3d8eda7c65573e5324322cb60185070877f1f73ea8e7b7518033272137e74be98f379d7dcba6a4c7c9b5011e8c2119221", 0xf0}, {&(0x7f0000000780)="96bd8b9d3ba3a4043ea55e310852a5b8e33ae24cc96c820fb9b55669d4b0b480edd717271d73375a0eba24a5e1f5275d3be7b347e0d9c71c0ab5cfff7ed6dd0ef97fa2d7e83504328ece56165a0bcb9b18356e88e38fdd59b3b1042967520c824e60d31e2f1d318d", 0x68}, {&(0x7f0000000800)="44b646d0f50740e88eb7e082f4cc3a650ed08a293096d40f773875b328010004eb6263bbf140119542f6bb6b14c1165b89c52ca4426e67218e460b4acee892d1ced116650a6b495f7b0c812fa4e6aad8bbbcceb2530e49a82dda2aef4ad06d2f15965b4ce15cf31ff85e35f1c8b0759a98513f270b7934f8b731384340d3ae55820a777e5ea452fbb00b1615f48f9a59add2cef6bcf03a09f6c82214f359a9dd80e5e9bc9e53f923f62dd78e4dcbfe35e4c0cf8a0075b6d341cd09b3", 0xbc}, {&(0x7f00000008c0)="13085e21373d9865ecd7776b5e6520ffab174f824c795ebd566b877d8fbfba8b4c16105681b571c2b768ee2c0702999b21b647da55890e46a6d8b91dfb0cc96811f4184736c429757efa68a6bd0612ede17789e834aade3f4cfb29888964685b2f191f7487d18da45065646f591e70fb4cab0a200fbf7d6e90d4202aea0121549a747f31c3584f08e4ac32bd7823548568920771ecaea371a0cc6edfcf2e0d109b235e900e799f7c8dc0f6a286b3fb2655eeacf5b78d68808620397a60dd2273c1eafae4bf3cc96e09b9efc5ccd66dbdcaf317e4d0901888e84720", 0xdb}, {&(0x7f00000009c0)="954457c2e2d2baf56041622edfa96097d2c1db22ac810769b99dd86b0c5b5362475967d8bdae775156e99b0585efd5141c0c4c9b", 0x34}, {&(0x7f0000000a00)="21cc14da05daa9dd71e495be430bc85a2833c809d207d88e7881cc1d6e0b4dbf1873fd5ff30b933045a7f7cd2908ec9339c3f1926f453b2db5c220d2e5a4cdc7239c419c9c6da000cbc03692c26cb0456f9292872dd4f1a59419375aadf0fd8380512f7c399a68a1e7ecc611a6b7d6bc28f5ebf77464fd839db3257d02c78bb411b9232613c9634b4c7110ca1fd8d766f4ee8b0057adf1d49c68721e6bad87c0a54eaef3c636a9cb87b4ff12b85167e7f89efdc37cdba58f22f47efc86169e262ea4ebfc4fc53a93b5683f8c9b0a7cef3cd97804f5c84f4b5adf6dff13909525c83f086e3c58cff4300402d7717df863635cd89637a0fe2403d8e2f1b918e5b9f0864ea1cd3dc830a8c2718f561206db3973c7c4e61bf09d6d0b3e42901202844b623cbfd2f41bcbe8215f4c0357c8ec121196f38cca99e1fc44dcdc8df993ec09ef97336079f840e890d6283007db0b608988181307cc0521ca6c4ee145b929a42de8fe0faa63b0601f654d6a0472b2f44309976a65a26b3a830e7d58810c60ca6f9bc4b1925f094d06c5199649fd50de87371e8fba866a5e39528753070c8245343b862ae036563cf7978c3ee035594d4a9e1457358fc73b8200ab1dd8612765662fd2e3a6c5a7b1768ff27bb8daf7753789972e0d3d5de83bd1d1940df62a92ae7a4573d4987e586b7a905da39f0ec545ccc964dfde82ef575af084673586cce4e2f9d0b201db47769accec9dd722835e8f0790920a9f9e658d65a63ae397f3c25c0ee58d8f2532b162012563ccf8e48cc56b9e7c55b39eaafd81f8855f31a5b0ea01ffe81dfc2855acb59a3b71e542f38b9db8504e0c5cf5dc71b0ad9bfcd774648df3bde53deab789b05aa9a0e25c6c36ba06e739db322c3dd359b8c38a25f1a3fca3fe96e7133250388545154523bc010b0aedbf14cc6dd8abbe631121ec1f23d38c2fba522b95cb14f4044d7c14d7bb685b1c85cb6f7452457c3c63b5ab7dc6d8aec0d777b40294a762f394891c505ea336e12a635ad6f491ba076cecb0995e9c61915989cef805f0aa6b73ea191eaed2f264a834e6ca89e63de464455d733893ff0eaa6537ef691242ec4f2d25c9a75fd5754223d0c57320e38ac306c66e5adfcccb26c008ddf2296f232a1f706cc651d735d9e9049fb07692ba899537edfb01c36e7085b7a0826efff1e9c38d7e4722a1fd0c21d50b4765cd7ff4616b919458db8180f6cfcd843383b789d5709e394ba9e35a524928fa1ac25c2eec44992c09af22b222fd9178402b21a5d69cbbe52fc63ddf922cef0fdd3119311e35baef6184022da8a5a29508b2996f71aa743837db5835dc1c97e3ac59ad2df1a9fdd5ca12bfcde5ead5c2bc49efee57f9b415313e502c12fac27fed286f545ff8b7150f3696ea776920f08bdab7574b73e8b8ed57e8fcb7c3218059f8b7eeb81e54a4d9b229bae42c7e57c8c6723eb18ffc8790c98fd5e6e8379b86eba313b494549c8b069a1df39a5fb8eed9be82393d4f0689ec0a280efbd9af8636664dbccdebb139256fb331547f300e1932c94eda04b760e1a2f160dc129107d63478b5a8707717d4a3d953986fd73302a5a177c0fb9925ebe5201f5c5d332a6d664e7d97ccad1ed838088d04ac291f7d8f5413790a04cb8504d550cdfa1371c68b534a8787bde418e43908e8d8a4a919a2ff7411c058a7b1d20f899d811346b64e9646e60e022bf4c0961f93a5473d56f98f8a5ee0b8dbb24b9bff1128a91c750c7a14499cb1b930d4383f454afa05323db5771bfac31ffcf5abb6e542cbaeeeebd9436a96bb441d123a274d8e35755d46330390dabc00f637f42a597ec4d4042a28e92f56d43651a00789e87cdefe7a7f2d3005f2f8d26c30fe78ca8ef072f546aa32d39bec681b4694f70600ca59f2aa5067da7cbda39ecda49afcde666df37d7726c21397b76e8b08284f4624d3f325629e7e4fcf4c8c17c6a9190b90bbbec6ab68e61bda66f011a628fd4e86a34d9886bfe95d1d8553b2220d2db422bcda06248c00740cc839f58a8df14f691263af4fe1c9cea95fe225050e132f3d72280d046a06a619332932c9df5721b496fd3f2307e51f5aab0e4e13e0488dbf099a85e5d4248be967fd646d98918a69d53e1ae316d02ecc78f60f67642e54282c1f645ceb320a5c4722299d50587b4b7d485e5d83b8a2ce969d52ee57be303b8f228b38dd0066a5cfbfc31cdfff1c3b0dc3f382219e458812877db2014c676a076dcedf26e81a012e6957a86898ba19cb2a4c911d1a8b89435017fd5718875ac210e0636fbc7f566fcd58b2d01853a62de0312f072349a460464371f05febcc0f7606d9f6f31bdad5e7aa0a6108d1f9697940ffe9b8eda4c770191fa102acd4bd099b5453aa9a9742f406e3768c5dc33ceea354ff90b8d4ed6b2a55679f82574047dc64f75141e57e02bb789d7deb624017ca85c5669fcc04194951253c8a4c22fd4cbcbad3933e33e417dc178c71ad3d98ee985fde29566f6cd3b53b93a4fc2f6091656a9d8d13e45c2f174f3cd3fd41cf1ed86eac8bb20e1a32b33bd26cc101cbdea44392bbcdc257347182fd056e9289b21597beb841571b5ac22e07a938b01a3d07cbbe4ffeb8e7bfbcf74c476d9c452346fb20ab3afe24140e8eaa636808b70390fcb4d6d0a6568b3e4ae64efcb70944e4f349797f4ca6c1830b4fdc27ab57091b5f5df780f5014ecd596d3ee9478fa436dee8ebee4706e622d5f0f943efaf2372d385a555bf0d051026a2cc06c7675a032fd0673e351098a0e055f2cbb6ba65ca1612286f42787353a5adc3564a65a97ae346218e7295c96591a90da62006c2336ce04005bc16bf724e74c32d9aba840ba518f11891e5062409ccaf2e8743bd7a99d3ebf19064f760a68bfcb760deaf722e3847ecf509623e2a7f7945264ed389de14c5bedb40e3120a5c8703bf40eee68963ec66dc116a14b90fbd0e09176f863922a8203fbb89f354b9707e76cafd54d7fa8ac7f4c74e24eb4c74738c00a10e79057df25d28c2646709f5e0b0661487499e826d6df944e3fc7b22de1f424122e459ee483e0fc3a082278aeaeb9ed92bb9a4e60a0872b44f1ac1d74557156eca1ef9ea1a579eaf4eba8f09c46e3b41418d5e0ee9a6d60b5c29aefc8f17a7cbc9bfae26d60b8ec269b934fc20ace8ea6ded60b689b686ea64b39179d3cc513fa06dfe21f7761ca02a6e63a277206006aceb59840876d5366074fb488037360fd7b540af340c98c87db0678feb1c2a97bc0b51a8d85dbbba5e0029e23cff3c43a6c4701dc5eeb182ffbc15e1ba5df1d499ef7ee0cad72592094f95a9aa010bfda9ba1ca11f4bf3ed81a02bbcfaa7f7b0ce656278178d1270c486f9b5a0df073068f1640d6f2423df9e60bf4ab542abd90fba04b88b0d8fdbfd36d3cbf7ac8f0b581a046c45c5a16bc6e001eab467d158d8e19c9b456399d2f2a82b603b0528a5a5e908a29ef1c82fac9b612f748a7b5c69ebc934e83f6bac3df91df8127b71cc3df6642eb53f3215564378aab3985c8bbe12392d727dcd11ceb8965ba777b50349cbe5e1ac8a045444d1f17ac06271871e8858ec68fe5c3f751a67a7912743d3d93190ae44167be65d03410110e891393ea71d7fe444a538a8d3a33345a681f5aecf34c1ea51d00e600bc47f2ca2a9b626ede6fe905bb71614a8cabb02c02024407930839de19698e17d12c343658516a3c1ab3432055217f74d5059433d64724aa15154087c8473174f83b0167f8f7a5ea0385103788661091dda0570041634b82480c294ccf0a2e65abed68a389a7694bb076b48562fb625d69d10f4ccd65892fb89bcdb01ed8c26ab19aad606037d7d9f74d096663fec1bf810d4bc752c89d66f69bc911101d01347effea97990f915dc79d29cae831511d26556caf6da7e701801816c81416d94f64381464550e0bceeb1efe91e3f536e06a936d2d6d13ca61773734306adabf905242c15cd688561374079551b21d8100bffd118b8b35af9eccef48b72070ef2dccfc3df2d90efe30e85bd77713b34c1f185974c7de14923240edd74acfce284774b41dc63c7cc0f99fe38f97317f70cddc693fa79745dcce370e041cbcdd0c85fdc3c766ed5217e9c4929b2c336e3744031bfb052c2353ecfbefe40b4fb861e1eff956262d8af2336044b9aba5ffaf17b0368d796354330b15c27b63c44b056509398b8ec7da5bef573a14aee72b1131f61b989de366b6ee2ace3f5ba45de4dda42c517674e3b44da28f4c921ecff07e612e6aa3984e8131948be973d194af513bd19be9b4eb35f0db446e505543416c0567e866febf5c9c59050e1b14eebefcf351dc14d333a27704c5cb3afb2eba417fd36a8879aa67cc566f5b88731771b89b6b3697444726d321a40715883d5c78838763b9431dabac9ef31487bc57f06b26c46fabd0500d27c1177dcd0eb71fcec1fdd692037a0fda048434e755a75fb4eded67c8cb3b305ea635425e60476a36c9222e2f86483f0b25d347b82d297ef38c05d625908e82324cd4e59f8cb0f2fe8da01558286192954baa12c31524177043e47cd5dadd805dce58f2c09543bfea7aad7d51c5ec7470f497c1dce618a0096d077381858950ca733af5c7b1b4ffb27e0b3ca2e9b0760c59dbdc1bac3d25ac5bd9d1e45af19a41a859114c6f33e219324b1e695f3e0aee9c98f48d2927be02f6a2d8589ec68943d9626b7219d6ae3ffa4f192edd709aa902cdd6db57fc6329315a7b03880b082f59802a33c9d424a80df80aa44f3b48b6eb487c2b3c617cc0b097fbc8c74edc86bb9d85087cf3385afe93e1dcbf9ab1845f0557e8a7ce577201834abd1a598d83d1a9e5e704d6a81fa1ff78e30e6aca0d3deeec62cf4f6537230715073e747927570d5a5b6b7938874d00cdb43a32c0d320242fb56da4f877a29b6651d4e96b3278cb41444295f1e3e9738c042ba7abc75bc275af9d91d9bdae32045ab3edd649138fb4054b1d6ca325580cafa4e9764caa673635701396dfabd4215a2debf3d6410377720b5b44d5e2d95335489dfca00413bce59774a8fb42bdc9d633ab2d6218b137dba84a59b41e9f40cbbf55b4b41218be0fcffea4426c5bc58e1291be3d285f6fe59b486ad447ac0e0352193cacbb32f40bd879356079a9d1cf9f753c13fb59a8c16e7dcd7238a90efa8813eb359bc9a8a9f72bf02bbcdaa8b5005211c64a2a304307520fc7557c1bc4678215e3f33d3268fe868f437ae896cd2a354deba1350474a02bc7f8ce86b06814ea11081a7b8516a36be45f5bbcac9e04475a81ea9df13e7c7d63ca75892d69cbe4c37fc6adb296eb924adfc1514c474f5bf6420c9e10d5f707c892dfdc618aa2f2e8fc1c5b47e12eba00e8a90b7dad2e372bc3119006b2e67312248fc12c49cbc0713f8063c68c9612cb88ca5fbf2e12d8ebcb0906d45229475f23a8b01f8fc2b81c1209ea8e2df44853b6bb9210c655001037ef17d07fc4cfb1224da8febf4e889e0818f46b1c22c0e4b6ae29906904ec5ae4f5dc8f534fba8267ab8803210daa53c8bcffd6c1f92c70c42510f1adc10167c497f73bb270956bfa7ac5f986359b0b248410f5883f7a8b4121c08f93cf6fa17f641d710c3d232e9d3b858cd5f872ec29341d6030d62cec7890ca5f77a6f160dc95af840219ebc6e2f33d895c38c5cbb987327698fcc3ff755dc04647c34968a519ac94c77d93b1fccf4a345ab209593420f900d0255c4eeba9f4d3900f1c1a4ff976b6a36a57415de976bfb7dfef0a4bf", 0x1000}], 0x7, &(0x7f0000001a80)=[@assoc={0x18, 0x117, 0x4, 0x400}], 0x18, 0x4000090}, 0x4005) r4 = getegid() fchown(r3, r2, r4) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000001b00)) umount2(&(0x7f0000001b40)='./file0\x00', 0x1) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000001b80)={&(0x7f0000ffa000/0x4000)=nil, 0x4, 0x3, 0xaa, &(0x7f0000ffc000/0x2000)=nil, 0x8}) r5 = dup(r3) write$P9_RGETLOCK(r0, &(0x7f0000001bc0)={0x25, 0x37, 0x2, {0x1, 0x9d3, 0x9, r1, 0x7, 'filter\x00'}}, 0x25) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000001c00), &(0x7f0000001c40)=0x4) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/dsp\x00', 0x400, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000001cc0)={0x10203, 0x3, 0x1f000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) prctl$setmm(0x23, 0x5, &(0x7f0000ffc000/0x2000)=nil) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000001d00)={0x0, 0xf, "4e9e87fc1e1dbb9604ded6fdee606a"}, &(0x7f0000001d40)=0x17) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000001d80)={r7, 0xb73, 0x30, 0xd5d, 0x8}, &(0x7f0000001dc0)=0x18) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000001e00)) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000001e40)) preadv(r0, &(0x7f0000001ec0)=[{&(0x7f0000001e80)=""/46, 0x2e}], 0x1, 0x0) ioctl$KDGKBLED(r6, 0x4b64, &(0x7f0000001f00)) 22:13:23 executing program 3: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f000001c000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f000000a000)) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) mount(&(0x7f0000000200)=ANY=[], &(0x7f000000fff8)='./file0\x00', &(0x7f0000032ffb)='fuse\x00', 0x7ffbf, &(0x7f0000032000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setxattr$security_ima(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='security.ima\x00', &(0x7f0000000140)=@ng={0x4, 0x0, "9acc547ba9"}, 0x7, 0x1) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x8000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000040)={0x1, 0x2cff, 0xb1ee, 0x1000}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) open$dir(&(0x7f0000000080)='./file0/bus\x00', 0x101840, 0x0) 22:13:23 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) keyctl$session_to_parent(0x12) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r4, &(0x7f0000000040)=0x100000, 0x8001) ioctl$TUNGETIFF(r4, 0x800454d2, &(0x7f0000000000)) 22:13:23 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380)='/dev/audio\x00', 0x0, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f00000003c0)=0x20f, &(0x7f0000000400)=0x1) r2 = accept(r0, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000100)=0x80) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0xc, 0x2, 0xf, 0x22, 0x0, 0x8, 0x25dfdbfd, [@sadb_spirange={0x2, 0x10, 0x4d4, 0x4d3}, @sadb_address={0x3, 0x0, 0xff, 0x20, 0x0, @in={0x2, 0x4e22}}, @sadb_ident={0x2, 0xb, 0xe7, 0x0, 0xf4e}, @sadb_x_policy={0x8, 0x12, 0x2, 0x3, 0x0, 0x5, 0x1, {0x6, 0x3c, 0xfffffffffffffffd, 0x9, 0x0, 0x2, 0x0, @in6, @in6=@dev={0xfe, 0x80, [], 0x1e}}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e22}, @sadb_x_sec_ctx={0x6, 0x18, 0xffffffffffff711d, 0x6, 0x22, "f310c26b445c990abc9e350f16f50080c9bdd09e98c8fc3d65cd36d64a66bdbb7fed"}, @sadb_x_sa2={0x2, 0x13, 0x9, 0x0, 0x0, 0x70bd2c, 0x3505}, @sadb_x_sa2={0x2, 0x13, 0xe6f, 0x0, 0x0, 0x70bd2a, 0x3507}, @sadb_lifetime={0x4, 0x6, 0x0, 0x1ff, 0x7, 0x4}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d4}]}, 0x110}}, 0x4000040) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x40, 0x0) r6 = dup2(r2, r2) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000340)) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000180)={0x1fd, 0x0, &(0x7f0000ffc000/0x3000)=nil}) 22:13:23 executing program 4: mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x2c871, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='/exe\x00\x00\x00\x00\x00\x00') r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200400}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="020025bd7000fddbdf251d0000003000912d7beb0300ac1414aa00020000000000000000000008000800ff010000080002006cffffffff001400030619da3dc1000800040000041600080007004e2200002c000200080002004e20000008000b000a000005080007000700000008000900040004aa8a980f6b67f7100ba506fc00000848f5ea7ea691000800000000000002004e2300002000010018000b007369700014000300ff0200000000000000000000000000010f9b1ce8ec020c10a2"], 0xa4}, 0x1, 0x0, 0x0, 0x4004}, 0x20040001) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x8001, 0x0) unshare(0x600) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r2, 0xc0045520, &(0x7f0000000180)=0xf51) pselect6(0x40, &(0x7f0000000ec0), &(0x7f0000000f00)={0x8}, &(0x7f0000000f40), &(0x7f0000000fc0)={0x77359400}, &(0x7f0000001040)={&(0x7f0000001000), 0x8}) fcntl$setstatus(r0, 0x4, 0x4000000000046800) io_setup(0x8, &(0x7f0000000080)=0x0) io_submit(r3, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000002200)="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", 0x200}]) 22:13:23 executing program 5: socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) bind(r0, &(0x7f00000004c0)=@xdp={0x2c, 0x4, r4, 0xc}, 0x80) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) 22:13:23 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x400000, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x8281, 0x600) r3 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @multicast2}, &(0x7f00000004c0)=0xc) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000500)={@loopback, @local, 0x0}, &(0x7f0000000540)=0xc) getpeername(r0, &(0x7f0000000580)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000600)=0x80) getpeername$packet(r1, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000680)=0x14) accept4$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000700)=0x14, 0x80000) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000740)={@dev, 0x0}, &(0x7f0000000780)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000880)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000980)={{{@in, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@local}}, &(0x7f0000000a80)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000ac0)={'team0\x00', 0x0}) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000b40)={@local, 0x0}, &(0x7f0000000b80)=0x14) accept4$packet(r1, &(0x7f0000001140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001180)=0x14, 0x80800) getpeername$packet(r1, &(0x7f00000011c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001200)=0x14) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001240)={0x0, @multicast1, @remote}, &(0x7f0000001280)=0xc) removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@random={'osx.', '\x00'}) recvmsg$kcm(r1, &(0x7f0000001500)={&(0x7f00000012c0)=@can={0x1d, 0x0}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001340)=""/131, 0x83}], 0x1, &(0x7f0000001440)=""/153, 0x99, 0xfffffffffffffeff}, 0x2000) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000200)={'gretap0\x00', 0x200}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001540)={{{@in6, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000001640)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000001b40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x60}, 0xc, &(0x7f0000001b00)={&(0x7f0000001680)={0x478, r3, 0x210, 0x70bd28, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0x170, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x7ff}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x4000000000000000}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x10000}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0x1e8, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x98}}, {0x8}}}]}}, {{0x8, 0x1, r14}, {0xf4, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r15}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r17}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r18}}, {0x8}}}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x84}, 0x40000) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000080)={0x3, {{0xa, 0x4e22, 0x6, @mcast1, 0x100000001}}}, 0x88) getsockopt$inet_int(r0, 0x10d, 0xd4, &(0x7f0000002800), &(0x7f00000027c0)=0x1a8) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'ip_vti0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}}) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000240)={0x8, 0x728, 0xfffffffffffffffc, 0x9}, 0x8) 22:13:23 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'security\x00'}, &(0x7f0000000140)=0x54) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x70d, 0x139000) ioctl$NBD_DISCONNECT(r2, 0xab08) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x10000, 0x12, r0, 0x0) io_setup(0x1ff, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f00000006c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x100, r0, &(0x7f0000000300)}]) [ 643.872714] x86/PAT: syz-executor0:20167 map pfn RAM range req write-combining for [mem 0x5b0c0000-0x5b0c3fff], got write-back [ 644.026321] x86/PAT: syz-executor0:20179 map pfn RAM range req write-combining for [mem 0x5b0c0000-0x5b0c3fff], got write-back 22:13:24 executing program 1: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_delroute={0x1c, 0x19, 0x503, 0x0, 0x0, {0x1c, 0x14}}, 0x1c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000080)={r0, r1}) ioctl(r1, 0x8912, &(0x7f0000000000)="c4adf57a73dc6f19766070") recvfrom$inet6(r1, &(0x7f00000001c0)=""/148, 0x94, 0x40010142, &(0x7f00000000c0)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, [], 0x10}, 0x8}, 0x1c) 22:13:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) shmget(0x0, 0x4000, 0x78000001, &(0x7f0000000000/0x4000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="030ea2"], 0x3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="9d0f"], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:13:24 executing program 2: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x341040, 0x9c) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000180)=0x1000) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) 22:13:24 executing program 5: socket$inet6(0xa, 0x7ffffffffffff, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x4000, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000440)={0x1, 0x1, 0x383, 0x0, 0xb2aa, 0x6d200, 0x4, 0x4, 0x6, 0x1, 0x400, 0xffffffff, 0x0, 0x101, 0x4, 0x20, 0x80, 0x6de2, 0x4}) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_GET_REGS(r4, 0x8090ae81, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) 22:13:24 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x4, 0x4, 0x400000000004, 0x6}, 0x2c) r1 = socket$inet6(0xa, 0x4, 0x101) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x9, 0x2, 0x3f, 0x2b2aebdf, 0x7, 0xffffffff, 0x5, {0x0, @in6={{0xa, 0x4e20, 0x9bb3, @empty, 0x8c03}}, 0x80000001, 0x6, 0x5, 0x2, 0x5}}, &(0x7f0000000000)=0xb0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000200)={r2, 0x8}, &(0x7f0000000240)=0x8) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000100)='9'}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f0000000080)={'veth1\x00', 0xfffffffffffffff7}) 22:13:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x42801, 0x0) write$smack_current(r2, &(0x7f0000000000)='/dev/audio\x00', 0xb) sendto$inet6(r0, &(0x7f0000000080)="340c3aa8131ac021e7a72352", 0xc, 0x40880, 0x0, 0x0) ioctl$int_in(r2, 0x800000c0045005, &(0x7f0000003ff8)=0x80) 22:13:25 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) getsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000000000), &(0x7f0000000080)=0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r4, &(0x7f0000000040)=0x100000, 0x8001) 22:13:25 executing program 4: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="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", 0x12e) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{}, {0xa, 0x0, 0x0, @empty, 0x1}}, 0x5c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000004680)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x1}, 0x14) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x200100, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x40, &(0x7f0000001fde), 0x4) 22:13:25 executing program 2: mkdir(&(0x7f00000000c0)='./control\x00', 0x0) r0 = open(&(0x7f0000039000)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000080)='./control\x00', 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}) mkdirat(r0, &(0x7f0000016ff8)='./file0\x00', 0x0) r1 = openat(r0, &(0x7f0000025000)='./file0\x00', 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000140)='./control\x00', 0x80000, 0x4) mkdirat(r1, &(0x7f0000000100)='./control\x00', 0x0) recvmsg(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/117, 0x75}], 0x2, &(0x7f00000002c0)=""/32, 0x20, 0xd96f}, 0x61) mknodat(r0, &(0x7f0000000000)='./control/file0\x00', 0x0, 0x0) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000001800)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f0000000300)={0x1a}) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000440)) sendmsg(r0, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001840)="8c3b6ca957d4b04b17caf199bcd1e8249756c86b3b84026d0d5576d770c3417d203675c4e5bda293cdfc61536d3086c87adf2b786dd6bd0efb87a1a4ed47093b0dc6fa", 0x43}], 0x1, &(0x7f0000001a40)}, 0x400c000) renameat2(r1, &(0x7f000003aff6)='./control\x00', r0, &(0x7f0000000180)='./control/file0\x00', 0x2) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x80, &(0x7f0000001580)=[@in6={0xa, 0x4e21, 0x6, @empty, 0x30}, @in={0x2, 0x0, @local}, @in6={0xa, 0x4e23, 0x0, @loopback, 0xfb}, @in6={0xa, 0x0, 0x200, @mcast2, 0xe27}, @in6={0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0x15}, 0xfffffffffffffff8}]}, &(0x7f0000001600)=0xc) dup3(r2, r2, 0x0) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000340)={0x0, 0x0, 0x100000, 0x7, 0x1, 0x1, 0xff, 0x10000, 0x7, 0x80000001}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000280)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={r3, 0x5}, 0x8) 22:13:25 executing program 3: r0 = epoll_create1(0x7fffb) r1 = epoll_create1(0x0) close(r1) r2 = memfd_create(&(0x7f0000000140)="000276d43857a72667ae19eae24522680b00000000000000000000", 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r4 = dup2(r3, r2) r5 = memfd_create(&(0x7f0000000080)='#em1#+\x00', 0x0) recvfrom$inet6(r2, &(0x7f0000000200)=""/171, 0xab, 0x20, &(0x7f0000000100)={0xa, 0x4e21, 0x9, @mcast1, 0x3}, 0x1c) write(r5, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r5, 0x0) r6 = getpid() syz_open_procfs$namespace(r6, &(0x7f00000000c0)='ns/mnt\x00') ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0xc028ae92, &(0x7f00000002c0)={0x100000001, 0x8}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ef17a8c5ae95ec86760de884e9740474a13eea165c0322901dc6bd36cde2c51d41b7f0b014f9f91eeb7c37c7340f476c8d753d000aa8faf8fb574dbcda6dc4d"}) write$sndseq(r2, &(0x7f0000000080), 0xffffff17) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) write(r4, &(0x7f00000001c0)="a82af5ddbda38786192aa5bd9791df68ab526ed2f10697ade801feaf", 0x1c) 22:13:25 executing program 5: socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280, 0x0) write$FUSE_DIRENT(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="68010000daffffff9381492100000000040000000000000001000000ec5400000a0000003f0000002f6465762f70746d7800000000000000060000000000000008000000000000000c000000c1ffffff2f6465762f6173686d656d000000000008000000000000000700000000000000ed40ab812ce41400000001feffff70726ebb3adeec1636ea0e390b30707070312d0000000001000000000000002721ec30000000000000000001000000030000000000000001000000000000000a000000050000002f6465762f70746d78000000000000000600000000000000060000000000000009000000410a00002f6465762f6b766d00000000000000000500000000080000009d8224000000000a0000000500e8cd945652300a00002e62646576776c616e300000000000000200000000000000ff00000000000000051ad200000000006e6f646576000000020000000000000000000000000000000a000000ffffff7f2f6465762f70746d78000000000000000000000000000000000000"], 0x168) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX2(r1, 0x541c, &(0x7f0000000140)={0x2, 0x2, 0xfffffffffffffffc, 0x3, 0x2, 0x6}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) [ 645.509876] x86/PAT: syz-executor0:20228 map pfn RAM range req write-combining for [mem 0x841f0000-0x841f3fff], got write-back [ 645.624359] x86/PAT: syz-executor0:20236 map pfn RAM range req write-combining for [mem 0x841f0000-0x841f3fff], got write-back 22:13:25 executing program 4: r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x7, 0x4000) socket$netlink(0x10, 0x3, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000000c0)={0x1, 0x2e, &(0x7f0000000080)="45f47edea33ce8562e55b5ac48f472ad783fcb3273f7f9fe91e7af914a348c1cadcf527de32edf0cf3d6b47ac4e0"}) r1 = socket$inet6(0xa, 0x2, 0x0) listen(r0, 0x6) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x2) r2 = shmget(0x1, 0x2000, 0x78000004, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000e00)=""/4096) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x12b, @empty, 0x5393}, 0x1c) sendto$inet6(r1, &(0x7f0000000840)="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", 0x5a1, 0x3c99830876959646, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f00000001c0)={0x8, 0x7fff, 0x1000, 0x10000, 0x8000, 0x81}) sendto$inet6(r1, &(0x7f0000000140)="fb11f74104b209275d24547c", 0xc, 0x0, 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000240)) 22:13:26 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x802, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x20000000000084) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0xc) read$FUSE(r0, &(0x7f0000000240), 0x1000) getsockname(r0, &(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @reserved}, &(0x7f0000000100)=0x80) 22:13:26 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) 22:13:26 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0xfffffffffffffffe, 0x1, @dev}, 0x19) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r4, &(0x7f0000000040)=0x100000, 0x8001) 22:13:26 executing program 3: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x8000, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x80, 0x88000) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000080)={&(0x7f0000ffb000/0x1000)=nil, 0x1ff, 0x6, 0x10, &(0x7f0000ffc000/0x2000)=nil, 0x6}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000300)=0x4) 22:13:26 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x232, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) linkat(r0, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00', 0x0) [ 646.246483] x86/PAT: syz-executor0:20257 map pfn RAM range req write-combining for [mem 0x5c550000-0x5c553fff], got write-back [ 646.327730] x86/PAT: syz-executor0:20262 map pfn RAM range req write-combining for [mem 0x5c550000-0x5c553fff], got write-back 22:13:26 executing program 5: socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x80000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000140)) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) 22:13:26 executing program 3: socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x280, 0x0) write$FUSE_DIRENT(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="68010000daffffff9381492100000000040000000000000001000000ec5400000a0000003f0000002f6465762f70746d7800000000000000060000000000000008000000000000000c000000c1ffffff2f6465762f6173686d656d000000000008000000000000000700000000000000ed40ab812ce41400000001feffff70726ebb3adeec1636ea0e390b30707070312d0000000001000000000000002721ec30000000000000000001000000030000000000000001000000000000000a000000050000002f6465762f70746d78000000000000000600000000000000060000000000000009000000410a00002f6465762f6b766d00000000000000000500000000080000009d8224000000000a0000000500e8cd945652300a00002e62646576776c616e300000000000000200000000000000ff00000000000000051ad200000000006e6f646576000000020000000000000000000000000000000a000000ffffff7f2f6465762f70746d78000000000000000000000000000000000000"], 0x168) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX2(r1, 0x541c, &(0x7f0000000140)={0x2, 0x2, 0xfffffffffffffffc, 0x3, 0x2, 0x6}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) 22:13:26 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) getpeername$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x80000000, 0x1, 0xfffffffffffffff7, 0xfff, 0x2}, 0xc) 22:13:26 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x4b564d03, 0x1]}) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0x9, 0x4}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x111000, 0x0) 22:13:26 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x5, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x200, 0x3, 0x0, r1}) 22:13:26 executing program 0: r0 = socket$inet6(0xa, 0x806, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r4, &(0x7f0000000040)=0x100000, 0x8001) 22:13:27 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=@bridge_setlink={0x20, 0x13, 0x129}, 0x20}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 647.150049] x86/PAT: syz-executor0:20291 map pfn RAM range req write-combining for [mem 0x5bf50000-0x5bf53fff], got write-back 22:13:27 executing program 5: socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x28180, 0x0) getsockopt$netlink(r2, 0x10e, 0x7, &(0x7f00000004c0)=""/253, &(0x7f0000000140)=0xfd) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) [ 647.263000] x86/PAT: syz-executor0:20292 map pfn RAM range req write-combining for [mem 0x5bf50000-0x5bf53fff], got write-back 22:13:27 executing program 3: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xb5, @remote, 0x8}}, [0x5, 0x7, 0x4, 0x6, 0x10000, 0x6, 0x5, 0x100000001, 0x80000000, 0x5, 0x80000001, 0x1, 0x7, 0x1, 0x9]}, &(0x7f0000000040)=0x100) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={r1, 0xdc7}, 0x8) r2 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r2, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) name_to_handle_at(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="0800000000000001"], &(0x7f00000003c0), 0x0) fcntl$setstatus(r3, 0x4, 0xc00) 22:13:27 executing program 1: r0 = socket(0x2, 0x2, 0x0) shutdown(r0, 0x2) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x2010}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)) 22:13:27 executing program 4: sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)={0x48, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipddp0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}]}, 0x48}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00003cefe4)={&(0x7f0000000300)={0x10, 0x36200}, 0xffffffffffffff29, &(0x7f0000007ff0)={&(0x7f0000000180)={0xffce, 0x2e, 0x6fd, 0x0, 0x0, {0x2004}, [@nested={0xc, 0x0, [@typed={0x62, 0x0, @ipv4}]}]}, 0xffce}}, 0x0) 22:13:27 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x800000, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x2000, 0x0) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000180)=0xf2, 0x2) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r5, &(0x7f0000000040)=0x100000, 0x8001) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x100d}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r6, 0x5}}, 0x10) write$smack_current(r3, &(0x7f00000001c0)='pagemap\x00', 0x8) 22:13:27 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0x4, 0x4, 0x1, 0x0, r0}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000280)={r1, &(0x7f0000000180), &(0x7f0000004240)=""/4096}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x28, &(0x7f0000000040)}, 0x10) [ 647.855440] x86/PAT: syz-executor0:20317 map pfn RAM range req write-combining for [mem 0x5bc30000-0x5bc33fff], got write-back 22:13:28 executing program 3: unshare(0x28020400) r0 = socket$pptp(0x18, 0x1, 0x2) uselib(&(0x7f0000000000)='./file0\x00') r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x101000, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) connect$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) socket$pptp(0x18, 0x1, 0x2) [ 647.986515] x86/PAT: syz-executor0:20321 map pfn RAM range req write-combining for [mem 0x5bc30000-0x5bc33fff], got write-back 22:13:28 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x400001, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{}, {0x0}, {}]}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000140)={r1, 0x58bec2c77b5a1841}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) getresuid(&(0x7f00000001c0), &(0x7f0000000200)=0x0, &(0x7f0000000240)) sendmsg$nl_xfrm(r2, &(0x7f0000000ec0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x3}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)=@delpolicy={0x0, 0x14, 0x320, 0x70bd25, 0x25dfdbfe, {{@in6=@local, @in=@multicast2, 0x4e23, 0x8, 0x4e24, 0x4, 0xa, 0x80, 0x0, 0x3f, r3, r4}, 0x6e6bb9, 0x2}, [@proto={0x0, 0x19, 0xff}, @algo_aead={0x0, 0x12, {{'authenc(sha3-512,cbc(cast5))\x00'}, 0x0, 0x200, "5464a66e23b4324cb97e497d7f808e352e967feccbf71bbfd4b115612f67b53ab8c4f8218fab25b2768b450a81e07cdb9bbe7a7a22e504d977ff3c8cbedb702ef2fa80dc2a933f433c9ac91a5569d1b6f046a9d96594b85dcdec26761b80f75bf12b3443b75c1843d44916e3de34e42797b0d82fe2c5d7b421ac93c96b5439fea8144cf21e1270e9f07f1e5db5e6a24a4165c0b00c44f8a8f460c0aff4470d275ad540e1b1876efab3f9fb5edbdb67495fc63448c9349a9d39d74c2ef243f0b252dd5516c5767e850494f7e10eebb1427b23b818ecab10f8db"}}, @extra_flags={0x0, 0x18, 0x6}, @lastused={0x0, 0xf, 0x5}, @lastused={0x0, 0xf, 0x88fa}, @user_kmaddress={0x0, 0x13, {@in6=@mcast1, @in6=@mcast1, 0x0, 0xa}}, @policy_type, @tfcpad={0x0, 0x16, 0x6}, @etimer_thresh={0x0, 0xc, 0x80000001}, @sec_ctx={0x0, 0x8, {0x0, 0x8, 0x1, 0x81, 0x0, "1fbad8278687ba08ae5e24a63e54e6de5fd67cc5cc5ec1c30c03d0b532fd06cb4bbdb0ae189f090ac93e8aa96dca1e7fc9d606122bde007a0e5ebda00f75bd820275ee3d18f854dd07f28f28787b1aaf479dd975948e2df6ad3e9be5fa9551adc788215d54a67c44007bbda562e7046b8852a78773a8f6a1466741657ced3ab476aab53a43804dfc7f801e62bd44"}}]}, 0xfffffffffffffd15}}, 0x0) 22:13:28 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair(0x1, 0x2000000001, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) fcntl$getown(r0, 0x9) r1 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000}, r1, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000000)='ip6gre0\x00') 22:13:28 executing program 2: lsetxattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='system.sockprotoname\x00', &(0x7f0000000540)='\x00', 0x1, 0x67922453249bde76) r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/7, 0x7}], 0x1) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000240), &(0x7f00000000c0)=0x60) mount(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@remote, @in6=@loopback}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000140)=0xe8) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000040)) perf_event_open$cgroup(&(0x7f00000002c0)={0x3, 0x70, 0x100000000, 0x2, 0x2, 0x6, 0x0, 0xfffffffffffffff8, 0xa, 0xa, 0x8, 0x4, 0x6, 0x80000001, 0x1000000020000000, 0x0, 0x8000, 0x8, 0x3, 0x53, 0x40, 0x100000000, 0x200, 0x7, 0x4, 0x100000000, 0x0, 0x5, 0x2, 0x5, 0x3, 0xfffffffffffff800, 0x1, 0x1f, 0x1000, 0x80000001, 0x1, 0x5, 0x0, 0xd4f, 0x1, @perf_bp={&(0x7f00000001c0), 0x4}, 0x20000, 0xe2d, 0xfffffffffffffffd, 0x5, 0x8, 0xf97, 0x3}, r1, 0x4, 0xffffffffffffffff, 0x4) 22:13:28 executing program 5: r0 = socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x4, 0x1, @dev, 0xd60a}, 0x365) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000140)={'nat\x00'}, &(0x7f00000001c0)=0x54) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f0000000440)=0x75) r5 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x100000000, 0x210040) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000540)={0x0, @broadcast, @multicast1}, &(0x7f0000000580)=0xc) sendmsg$xdp(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x2c, 0x2, r6, 0x1f}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000600)="f146111b3ca47ad693084ab81bb63a354ffdaf05ec411544b52330806629799c4ff434e193c3c1ccd1662375bd5f7d7004a42cb5a4315bc9c4669afdad8e9620ccc1b4e53dd1cef084b38b1ddf35cd71756bed44c102b6c63dd9cca33657f975b2b3d9b9f915a51957bc129c42a2e17e6344a4554f735abea4384efae06e0c6081ef05920df346e87377371536bffbe817a41dbefc415405febc7f66110ed8529162c30337bb6faa4e54a38f5ab8c1de445d31", 0xb3}], 0x1, 0x0, 0x0, 0x800}, 0x804) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0xfffffffffffffffc) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000004c0)=[{0x2}, {0x4, 0x400}], 0x2) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r7, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) 22:13:28 executing program 3: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f00485bc04fef7001c0a0b49ffed00000080fc080008001d0001000000", 0x24) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000100)={0x100}, 0x2) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_procfs(r1, &(0x7f0000000080)='net/snmp6\x00') 22:13:28 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') open_by_handle_at(r2, &(0x7f0000000000)={0xd, 0x6, "13d9fc0486"}, 0x60601) sendfile(r0, r4, &(0x7f0000000040)=0x100000, 0x8001) 22:13:28 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000100)={0x9}, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000040)={0x6, 0x0, 'client0\x00', 0x0, "121a71471179811a", "c08bfccc204a814b269397c65bfa940305358d3fa69ef6578350f9c0e8dee7c1"}) [ 648.684757] netlink: 'syz-executor3': attribute type 29 has an invalid length. 22:13:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000080), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000040)="b9800000c00f3235001000000f30f24c0f2c49e8426dc4027d3493b80800003626660f7e676d660f1678b06cc403f9dfbeb70000000bc7442400f5000000c744240284d178bcff1c24f2f347dbe1", 0x4e}], 0x77, 0x48, &(0x7f0000000140), 0x1000000000000390) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000004680)={0x0, 0x0, 0x1ef2, {}, [], "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", "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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$SCSI_IOCTL_START_UNIT(r3, 0x5) [ 648.754350] netlink: 'syz-executor3': attribute type 29 has an invalid length. [ 648.835538] x86/PAT: syz-executor0:20351 map pfn RAM range req write-combining for [mem 0x58550000-0x58553fff], got write-back [ 648.944652] x86/PAT: syz-executor0:20358 map pfn RAM range req write-combining for [mem 0x58550000-0x58553fff], got write-back 22:13:29 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x4) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000040)) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000000200)={0x7b, 0x0, [0x44b, 0x10000, 0x4, 0x1]}) 22:13:29 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f00000002c0)=""/216) r1 = socket$key(0xf, 0x3, 0x2) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000100)=0xc) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x18, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000280)={0x61e}, 0x1) 22:13:29 executing program 5: socket$inet6(0xa, 0x7ffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) 22:13:29 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0), 0x4) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x1, 0x4, 0x7, 0x9, 0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) r4 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x80000000, 0x600) ioctl$KVM_PPC_GET_SMMU_INFO(r4, 0x8250aea6, &(0x7f0000000080)=""/64) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r5, &(0x7f0000000040)=0x100000, 0x8001) 22:13:29 executing program 3: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r0, 0x8912, &(0x7f0000000100)="153f6234488dd25d7e6070") r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x6000, 0x104) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000180)={0x2b, @loopback, 0x4e22, 0x1, 'fo\x00', 0x1, 0x200, 0x78}, 0x2c) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xffffff3f) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000240)=0x37) syz_open_procfs(r3, &(0x7f0000000200)='net/udplite\x00') ppoll(&(0x7f0000000080), 0x8c3564269379246, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f00000001c0), 0x8) 22:13:29 executing program 2: lsetxattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='system.sockprotoname\x00', &(0x7f0000000540)='\x00', 0x1, 0x67922453249bde76) r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/7, 0x7}], 0x1) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000240), &(0x7f00000000c0)=0x60) mount(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@remote, @in6=@loopback}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000140)=0xe8) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000040)) perf_event_open$cgroup(&(0x7f00000002c0)={0x3, 0x70, 0x100000000, 0x2, 0x2, 0x6, 0x0, 0xfffffffffffffff8, 0xa, 0xa, 0x8, 0x4, 0x6, 0x80000001, 0x1000000020000000, 0x0, 0x8000, 0x8, 0x3, 0x53, 0x40, 0x100000000, 0x200, 0x7, 0x4, 0x100000000, 0x0, 0x5, 0x2, 0x5, 0x3, 0xfffffffffffff800, 0x1, 0x1f, 0x1000, 0x80000001, 0x1, 0x5, 0x0, 0xd4f, 0x1, @perf_bp={&(0x7f00000001c0), 0x4}, 0x20000, 0xe2d, 0xfffffffffffffffd, 0x5, 0x8, 0xf97, 0x3}, r1, 0x4, 0xffffffffffffffff, 0x4) 22:13:29 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f00000002c0)=""/216) r1 = socket$key(0xf, 0x3, 0x2) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000100)=0xc) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x18, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000280)={0x61e}, 0x1) 22:13:30 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000140)={0x1, 0x0, [0x80000001, 0x6, 0x3, 0xfffffffffffffff9, 0x4, 0x3, 0xfff]}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r5, &(0x7f0000000040)=0x100000, 0x8001) 22:13:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000080), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000040)="b9800000c00f3235001000000f30f24c0f2c49e8426dc4027d3493b80800003626660f7e676d660f1678b06cc403f9dfbeb70000000bc7442400f5000000c744240284d178bcff1c24f2f347dbe1", 0x4e}], 0x77, 0x48, &(0x7f0000000140), 0x1000000000000390) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000004680)={0x0, 0x0, 0x1ef2, {}, [], "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", "1f0b9e513a42ec679ebfd41b28324118d4c1628fe02a97c613f313571dd0efd63d679eb1024ddac20c2e38ea1340a51c479e354d14a4aeda959b8cda34c8edb7d627985d89c85dff22f8b6b1a33f2ea902fe64ea14071d78a2f2a59f5f43ff3dc5a5d0d1292fadca2c6112561485ce3e23a15484086bde5e6cba08c0a2b653d97d089e259b0e04eb6b2fa61bc51a834d22c0e904f7c43fdbf53f055d7d0b1f196915c23e0e5d1edc3c110ca21961d4b097db18849e1016536ca5f424baec5543ef5b0ce56aa63f5253383d7d7be6aa1b967f14b0081c7683120d19544f8d303e1d26c5e84eb6aefa23aa3333caccb04f32c514b4e7e6f73239226990827e11851730f32f3a9c852efb05dc52cccbf7829333c9041c122d22110206ef09ea31dfa8169a1f2909967a3d7de2542cd879eb93563adc118275aded4cdbe09b4d4b1286fa1778af4a4c850b45f3b7de86f8e677e51c13897a3880a1924cb8279952fd9e052d0f3ee13626c5f3fe52d30338e6b37a959331d6edf0f47d3e3353f9d776c2eabc8b84454639e28fc08002973d0f5187077a1a630410d245291331b152db41205e5fc5188c7bb53dd7f91a6ddc749616719de900e9e59681983f3e27214d79b74ec8364fd40b9946b0c12d7b8844b5a35e79580ddb84452f8fc1f7e327726ad7881198c639c0bc3e8300246e3cde72ea43227bb8430da2d7a7e5b468acb556833da07731205cf00e8eaa5a0acb1db03ca51f30ac7c5a616719b3a8057600be4c3b5b284e644a4bf2399a1d2668f30c7f0de655808ab3096bdafd9dcc6ebf76fa3a1febf311cf7d78812b649fe4ba0473cb65a34c5c380c78ecb0ddd8a817f21637575575e1d74075ad74ea68b226be01950d3ad5a84a19d84a1c23c3da764e512b97e00b99fa1e2c675273f9151e15f838d1303320dbd46e69f549f04f1337e9e490427863270888f7cc525f5a55daa60a7367e2912f6e5add373d1aaaa11a66e89bcc97ca1646a8d8acc40d6644efce3b563314ae41c6a20653788154064c53c8f9885cf847b3eb4a54dc7a304a3354db7fd6d7a22effc19b010c4488a5f33529527f9a957f1fae7ac046881943906f07dbb08e848c01e4324996af4ebb78bd2110c66ffed0939fe5949a52200c7fd3fc44789fd17657654688274d65851ad1685b9d037bad5d3c9fa4ca4e1ba0848bae2205e3264af2e60904a97524fceaf8a30502287b583ee8cab97bd45b3c4abc1b53698398f3d94665b75f1c485b3d5820be16d14fe5c8fb2d76f59cae6dcd892d3d1956b98646fa0c02a0bf0b9b182c70e71c7cb82c21c825487c41d7c7f954fd6e0b7bf804b954411e66a55cf95a07b648559e0956226dadb03b76015d1caff91a71ba88bf9385dc2ca59b84292eac5ac09c7a4e90d1872209ebb590a68d54cee35d8d6ccb8dddff7b062e56726a92b3a1986252586cd7bbb56ee8b81ebc65d21252697f2b01b7eeb9e767d692fadf373e2a859a1dd2b1a660c41ff3035ed637791da2f343ff2260dc78c2c58be408e5940bb25f8eb4db666bf7632bd7705ef3e314e0111d850421530d76037123c12b2653263f16588191630e7592d5389017d3b17e83ddbf579c73bff2d51a88861743a2cecde3e512e082dec71054db4a3f753fa0845851a2f9cb42635c256707a919312a2637ffc82671a285790f0fe392133378b5c4a50e7802212458c9dd30ab52e4ed52397a67c92c8718cc1bfaef14f11dfde8222f6c89d07415ec4fae4846da250bb5a7ebfbd84f25bbba9921667d8af3bd5622ff3b7d6bf93ac9c89072e4115bc0b4755485a952da6183311874051b832991c1b3490ff9cf198ad385a5009faa1d7fc6d4d963b3c64eacc56136356b52d9c661bfd9051ee11926405726d0bfd616eaa72f49773d57a80cf8dfc088bb6cade15f4f50dc72af7f091f0c9ab0737eaa6030cc00c567db26b994e12b9ddbb4d8b340fb8bca28125c300b925aa0dd43af4e167ca4ec37c5dfff55ed85cb90e3744525492c9b08d0434d2a2643a6dc79bb4ee295f047c3195e03e0b01629affc5774181d09cdd0e6c6816307b3e8943cafd1f3ac6fc7f4d77d61a386f98415d67ce02b80e01f2849cf740a731aae2bc26de3b11e5ce37f6d2283bad9db855f30de91fca2f8fe780f3056d2c6924e9907ace977eb2483f9acd101c21c8de0f08d54c56eca96a410f7375ade38cfbd5ab98c7fb32e60fa4b6fd077a7827fbf725a32dc134cb006084f4b77db72bcf6d2e5a06998e8e2e3f0d372bfb494260a2e4c43e177842ec47d6bad1b778b9361201dbf054d360b054b5b689ec684dfac02ddfed561e7bbb9adcfb1b9b4731869c8604ef586f2a1ec8e4806608fe1c9d4bd8037f34e38dd8064fa8b6be35dd21ad6424202fa00af97936bfc1bbd881927bbbd8ad9d4e7b644543a1cd027a2db3d7dd53b6ecd99af6cdb46789bbaf31f869a12bf8c904b49e286e7ad97ea2a9d3d27e3a360c53e6163fdf059234f54b390eecc47c63453172726e2c947ebc182f4b68a571591c4c869a1fd884066b659a68112bc708e856427a51e049bdff3c7e0c4dddf8e40d693c22b29c35254ce4dc0da58a2afaf20b8316e615c2026efc859e57d0fd9c80f24002bc309e59841ef46ea8f3cc369d3654ddd2a9d3b4f26793766ef01b835fd2e809fdeefdf34eb90aee44aaf80b8964604d565e63b236b857f571f5cc4aa3b4b6e7ffb7b771beaa883bca127b0b55ff7c0cea76e47b8b6b289aad36ade2297af1ad70d06834aa4e68e878423a1524add214612751c2858398da5651dbaa6d4ac1e1f7bf4b0b1533fb7f255887c6a5964d87f3877842e1594fdc94a61d509343780a866e602846ff52e209b28c8a9f1d96934413d844993fb900aaa1b2a5b259adb4184e6aaf802eb31f10efe6f339a929950677fec48199fede230e3b01dfe4d58ff227fa821d978dcb641be0b0e21f5bc0cfb9dcdc66f7d7883483b53cd0b04389e91e516f90175288ac30f0b7bc00e9c0f5c1adbac2a8f894e9678b4ae8e565efaae2c6057dc066ac4bbb56f82cca13e78d638cd1703a8eb6871ca63af19919174a6dc8dbda22bf7d989fc70115b4153bdcb7256ead7e17b695d0bbf989743e794406622dcdec0e0d6eeb5e263515b2c8685287d0fde0507ac468971d85e50297caeb13ba108053c6aa33b7ea2618e59eed135a824c9bd0818414b0e6e0c46f22086980665f8e9517d003daf0ee6b59c7a33d1ca60578acc71639e23c958896cd5305cfb0d63bab64d9483f0111269ef165d540e4cd44068062c7dcc09e3066de0c9033ae067a03900a2bd73fb67e1d340adb969d2be169fc059a1834a6f85f3ac651fed2279006b45ca0e6fa7e5332a1a68d8d0d77bf62cb2e1d9a0d0442aaf9a989d819205d0119b0a07073a13b6fc7cff490c531fbccb48a449f545168ecd673c288c9c64c483430b207984684afff2d0c6027c86fc1074e963c480355b6d17c6b00a98d91ecc0aa6207492fee52012317cb648561627cfd7a6ebdf92d2fb0b75645d699f8dea515bc742081e63268e62e9d4a726875c5cc768e5baedd00d546a495093cc4d79a940f1006e66cc14998ece51bc18819425e7df6047bd018da981b71c6e47e511509504f06da67acf7f4a4c845346f1601c6a4f29c4bd30896b0a0e06618c8b32bd8fa8e8256dbb86a6574d324f75646a836177c6a833e78a3926af3ed9c8ed363ae9224b7523d8b934eae969801e090a1560f46a9542c174af0112d1d3c2ace73ab1510d3a62de7a171a85e59b31f2b3427fbb2505876bb51efca76ae5cbfc730c06b058173ad39bc80509eefc19dd47cb7e5fee8488a0e990d8e6c004f1af86d483f5de858ed26bca32a25c3528636c62835acf02e95ddfce3f91d3924fc1dbe2844629b780d14ad143437c60128bf55b1bbf765b99b0d7cc6befa777d31d61e558387941fc418ed9c6c133287548b7d7b5008a98b14e615500b1ab2f7df85782daca43b2a3ea8712d2ffc6fa734e9158da06dd4fbed0f67d3086ed8c58825b0457e9f28b53171e5ba0b332d01f94a474089d17f46b60db0d3e5eb22a38c6e26bc11186ad5dcf62bd0bf10f9664945e99d90ceba3fe90aee991e5f7cc3bd5569f9950067cff31d7d2040f5fa5132bb314b87d5bf041d0be431b54664d3c6af255fff3b68ce75bab62d8667929fc6abccdae8afac89c2e8000e7f22c68fc852212daee06d3b7b2bb5169a8be3bfb1d6168ad23c523af3d6d0467b43561053afe776a8a94e2b8e5dade184be5f34f1b097f2c7a8b40464e3886f9d0e0e12596cf017c9443dea699a3a8936d6c2d73e4924a481cb8af9c69595589d15a0d4641525df72993887dd16192d1b6fa0146a4c82f28c5a9d5849ef5fd772f6966875ea0ed1f1c0efcb2e45e5967052e1414b4de236c3da4e05c616b88a5f147ff1d993ee465090c7ec180fa6adb8f1acbacccebca4a215843aeea79e4752760577b75e5f39eca7a921ece10f83615393dbe9cf1c1efc215c4ac889de1e10a71ec3146e942bda0a3c9abc87616914da3dbb1a6ee54cdc59bea747194d212163f421633a5a6eff9ff1da055626aea50734b71069a8306448449942c62bc643a7c81e8e35813b9ba5e28012a55878a4c4f6653b97c7d328f901c4e6e04d6858231b0efc3280f2f8592c613e1163d90e8ccf9bf6c624d606b19cb7e8f297b8f53725edcfab8153f27a1478108338cf8e5068270b3a4d6b8c72c7ce55da0a023a54949c221874d75527c2aa6cf6f3941f4907bf17dbabcac9577a8ac8ab0ca490e7d0131759a365be67ea022ea3a324ad819bc48d570f3e5efa2bdcc22d5fb1b86bf97c3034ec6948ed4fb2e36fd4be43c22d4a50dcdbffa7c193863154b417f24a291bf19a049abe14e68dbcbe33d9514da9181d5baf1e0d4950f2986d5b5744478dca29411af665372f9b9d62ea0c422aca3d675cc7fb3db9dfeae4f3ff450e11daf20c8a533d30dc0837b6cfe66ccc3e08fac9cf7119114ab9ff9c06e70dbf09a8bd1460e7c71e91b7777fad1dc3cffab2d1bac90d6992a4d2ef493e1fd30bd50c97ee17e3c3c673ed17e39e093244d8f6d7c3e626639054a5185ef0c9b402d470cbd6f2b0e614daae562c03bb8ec08989965cca1b4c80192c278df55690a21d5b512c07e3650f0741d414f324437b63cf0e5c4c0e35313961b0a7c3fc303a4e660fd9a33681d78781f8f2db5a6b11588063c8c33778b3d64589a2433757b4da2aa3245fbecdb0978cc1cc26eb346ad38b7469e3c0d874fc1aac94654882edc13f82abfba20fbec53578f24f1b1458e0f24a88e5e5cd1be9721e332bba4c724792819bb696b492d6ebbccbe48760a891fdb4b118a94f6e8d16d0b184edf713eaf11d595deb5b234dd566770d6ffbd7fcc4c32c09bdb420cd38fe80ccce3f37c41c260c1527fd09947ee8457fecc4da308c2cf19648581c1b0d3fde0f645cea0cf7850d5511b21982e4c7cda7696e890949ac53aed5e9ef16af8536697c13b1db9875c8ddbd1395ac7a6a48e1de652d71a9422740edea16abbf2ad6bcbc198aa1418eb9eda000af55a17243e0837a909275613a171eb2f49f45e7c2fced84bfb5f4b28c3daa8ca08680b27095e74690cc99427ec01a88253b12456cd8cb8c2c4af6a2ce0d597f406efe49503799e6148985cce9ab39f0f9da91f79651f0c380526d228f754f2eaa5bac557e17e9fe0eaf81e36e77b63e76265d1d018ffc79aac1bdff5ec5b35764551ac38ef56e3f34ccf30"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$SCSI_IOCTL_START_UNIT(r3, 0x5) 22:13:30 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000002100010000000000000000000200000000000000000000001c00000008000e0000800000080013000100000008000b000100000008000100000024ba"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x20004000) 22:13:30 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f00000002c0)=""/216) r1 = socket$key(0xf, 0x3, 0x2) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000100)=0xc) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x18, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000280)={0x61e}, 0x1) 22:13:30 executing program 5: r0 = socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x7) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000440)=0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f00000004c0)=r5) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000140)=0x4, 0x4) dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)={&(0x7f0000000180)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) [ 650.334830] x86/PAT: syz-executor0:20399 map pfn RAM range req write-combining for [mem 0x5ad90000-0x5ad93fff], got write-back [ 650.503196] x86/PAT: syz-executor0:20399 map pfn RAM range req write-combining for [mem 0x5ab20000-0x5ab23fff], got write-back 22:13:30 executing program 2: r0 = socket$inet6(0xa, 0x8, 0x1000000092) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_emit_ethernet(0x3e, &(0x7f0000000500)=ANY=[@ANYBLOB="0180c2000000815a105d548ba99e60093a0600021100fe8000000000000000000000000000bbff0200000000000000000000000000010000000008907800"], &(0x7f0000000100)) 22:13:30 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7, 0x40) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) mknod(&(0x7f0000000180)='./file0\x00', 0xffc, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000c00), &(0x7f0000001ac0)=[&(0x7f0000000c40)="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", &(0x7f0000000e40)="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", &(0x7f0000001280)="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"]) 22:13:30 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f00000002c0)=""/216) r1 = socket$key(0xf, 0x3, 0x2) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000100)=0xc) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x18, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000280)={0x61e}, 0x1) 22:13:31 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x2, 0x400000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') sendfile(r0, r4, &(0x7f0000000040)=0x100000, 0x8001) 22:13:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000080), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000040)="b9800000c00f3235001000000f30f24c0f2c49e8426dc4027d3493b80800003626660f7e676d660f1678b06cc403f9dfbeb70000000bc7442400f5000000c744240284d178bcff1c24f2f347dbe1", 0x4e}], 0x77, 0x48, &(0x7f0000000140), 0x1000000000000390) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000004680)={0x0, 0x0, 0x1ef2, {}, [], "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", "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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$SCSI_IOCTL_START_UNIT(r3, 0x5) [ 651.273365] x86/PAT: syz-executor0:20430 map pfn RAM range req write-combining for [mem 0x5b040000-0x5b043fff], got write-back 22:13:31 executing program 2: r0 = open(&(0x7f0000000580)='./file0\x00', 0x4280, 0x10) r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000080)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000200)={{0x18d, 0x2}, 'port1\x00', 0x41, 0x400, 0x20, 0x1ff, 0x6, 0x1, 0x96d, 0x0, 0x4, 0x200000004000}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r2 = syz_open_dev$mouse(&(0x7f0000000600)='/dev/input/mouse#\x00', 0x11544310, 0x88c56fda809c177) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) sendmsg$nl_netfilter(r2, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8040008}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="d8000000090000082dbd7000ffdbdf250d0000033400240008005500", @ANYRES32=r3, @ANYBLOB="0c00402e7474834c5300210100006f214aee35c8af5b0ba1913469740000", @ANYRES32=r1, @ANYBLOB="353344b939713b0f8960b3574f0fe12b1de913fa3203b70fa1bf345460c3957e135ae95165acbee0d75b4e1da8f76dd6d05c878bdf8a5c2710a384afa71f104e8dcd99ca8d96affd0e9b04d483868473221c3cd22ab01bbff469273ae4a05c1f8f05976a0e55c3372b90c36a5c6e98b11a255e796b78a3c7f7d73b5d380d757dd9a5d86bf67a939f4e4d360557e26600"], 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x8000) ioctl$RTC_PIE_OFF(r2, 0x7006) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000480)=""/150, &(0x7f0000000540)=0x96) 22:13:31 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f00000002c0)=""/216) r1 = socket$key(0xf, 0x3, 0x2) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000100)=0xc) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x18, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 22:13:31 executing program 5: r0 = socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x8800, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000440)) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) connect$inet6(r0, &(0x7f00000005c0)={0xa, 0x4e22, 0x8000, @dev={0xfe, 0x80, [], 0x1a}, 0x100000001}, 0x1c) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r5, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0x9, @loopback, 0x6}}, [0xf39, 0x3fe, 0x80000001, 0x0, 0x0, 0x100000001, 0xff, 0x68, 0x6, 0x8, 0x9, 0x0, 0x1, 0xffffffff]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000140)={r6, 0xfffffffffffffffd}, &(0x7f0000000180)=0x8) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) 22:13:31 executing program 3: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000100)) mq_open(&(0x7f0000000040)='[procmime_type\x00', 0x800, 0x101, &(0x7f0000000080)={0x8, 0x6, 0x8, 0x0, 0x7, 0x0, 0x80, 0x7fffffff}) 22:13:31 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x6000, 0x0) write$UHID_SET_REPORT_REPLY(r3, &(0x7f0000000080)={0xe, 0x7, 0x9, 0x7, 0x58, "4ac94e60dc0ff52b0260f06ed337d297fa4d174096ccaf2ffa2dc8c2465cfc2c09dbdf30c58e1bdd5ab1bea808ab76ea7f1b74c77e437dc7f4079e4a849c06b08ebbfacf049738e0352d439f17af09c356c25f5b308e0891"}, 0x64) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f0000000140)={'syz1', "c640204080e137d87bf864f5163fbe1f8e0b9dde7d0b43f1dc050baa33c6f804fec048b907bfccacf80f2cf90865811f0f213bb34bdb8aa44c4575aad73925c9ab6dc6a81ac19fed2b038acaea6bd2e554047dda35aa701a00310d1e"}, 0x60) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r5, &(0x7f0000000040)=0x100000, 0x8001) 22:13:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000080), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000040)="b9800000c00f3235001000000f30f24c0f2c49e8426dc4027d3493b80800003626660f7e676d660f1678b06cc403f9dfbeb70000000bc7442400f5000000c744240284d178bcff1c24f2f347dbe1", 0x4e}], 0x77, 0x48, &(0x7f0000000140), 0x1000000000000390) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000004680)={0x0, 0x0, 0x1ef2, {}, [], "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", "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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$SCSI_IOCTL_START_UNIT(r3, 0x5) [ 651.948069] x86/PAT: syz-executor0:20457 map pfn RAM range req write-combining for [mem 0x5a0d0000-0x5a0d3fff], got write-back [ 652.072464] x86/PAT: syz-executor0:20457 map pfn RAM range req write-combining for [mem 0x5c510000-0x5c513fff], got write-back 22:13:32 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)="0001705f66696c657300") r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = getegid() getresgid(&(0x7f0000000180), &(0x7f0000000380), &(0x7f00000003c0)=0x0) setregid(r4, r5) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000087cee40be1bdd7ea7d3885efa5cf97ad60bf2a0400000000000000030f6a9704c2c837647b8c000000000000000000c912eb", @ANYRES32=0x0], &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000200)={r6, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1a}}}, [0x101, 0x3c00000000000000, 0x80000000, 0x3ff, 0x3, 0xdc17, 0x0, 0x4, 0xbd4, 0x8, 0x2, 0xffffffffffff0000, 0x3, 0x1, 0xfa]}, &(0x7f0000000300)=0x100) getdents(r2, &(0x7f0000000080)=""/108, 0x6c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000140)=0x2, 0x4) getdents(r2, &(0x7f0000000ea9)=""/407, 0x197) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000400)=0x8, 0x4) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000040)=0xa763, 0x4) 22:13:32 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f00000002c0)=""/216) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x18, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 22:13:32 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r4, &(0x7f0000000040)=0x100000, 0x8001) 22:13:32 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000680)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"31719548fbc3753b3a152e7b6f373ae1"}}}}, 0x90) r3 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0xffffffffffffffff, 0x100) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000140)=[{0x8, 0x7fffffff}, {0x3, 0x4}, {0x8, 0x9}, {0x0, 0x6}], 0x4) 22:13:32 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f00000002c0)=""/216) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x18, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) [ 652.701017] x86/PAT: syz-executor0:20482 map pfn RAM range req write-combining for [mem 0x5a940000-0x5a943fff], got write-back 22:13:32 executing program 1: ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000000)={'syz_tun\x00', {0x2, 0x6, @rand_addr=0x100000000}}) write(0xffffffffffffffff, &(0x7f0000000200)="240000001a0025f00485bc04fef7001c0a0b49ffefdeffff7f000800080003ea01000000", 0x24) 22:13:32 executing program 5: socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup(0xffffffffffffffff) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f00000004c0)={0x2100000000000000, 0xf000, 0x100000000, 0x1, 0x1c}) socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f00000001c0)={0x0, 0x25, 0x2, @thr={&(0x7f00000000c0)="f0e519503bfa780de1e82316299ef4911afdf3689dd88198fb7219", &(0x7f0000000140)="e64f68a1cb1c277c3b5c1767da8ed8b154b869fa8ef800ecd92615722ff313edb8486ac98442ecfc6c405cdb9e772395cd75f78815d3aab7de39a17b79fefa1a547f6cfa7d3f66eb0568db8c14cab33f1eeccd0b64728776b785594b6b62ca55f38355c848f683e7875f"}}, &(0x7f0000000440)=0x0) timer_delete(r3) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) [ 652.924039] x86/PAT: syz-executor0:20491 map pfn RAM range req write-combining for [mem 0x5c9d0000-0x5c9d3fff], got write-back 22:13:33 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffff9c, 0x0, 0x3b, &(0x7f0000000140)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a00", 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=r0, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000100)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r1, 0x0, 0x2, &(0x7f0000000000)='.\x00', r0}, 0xffffffffffffffa8) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0c0583b, &(0x7f0000000040)) 22:13:33 executing program 3: r0 = memfd_create(&(0x7f0000000100)="bcf6", 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = fcntl$getown(r0, 0x9) sched_setaffinity(r1, 0x8, &(0x7f0000000080)) futex(&(0x7f00000001c0), 0x5, 0x0, &(0x7f0000000100), &(0x7f00000000c0), 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x568, 0x328, 0x0, 0x0, 0x0, 0x210, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x6, &(0x7f0000000000), {[{{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x1e}, 0xffffff00, 0xffffffff, 'ip6_vti0\x00', 'bpq0\x00', {}, {0xff}, 0xff, 0x2, 0x40}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00', 0x0, {0xf, 0x80000000, 0x3}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x100}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x17}, 0xffffffff, 0x0, 'veth1_to_bond\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0x6, 0x3, 0x20}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x4}}, @common=@set={0x40, 'set\x00', 0x0, {{0x5, [0x1, 0x1ff, 0x4, 0x2, 0x1, 0x747bb9b6], 0x0, 0x100000001, 0x81}}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x21, 0x6d, 0x2}}}, {{@uncond, 0x0, 0xe8, 0x118, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x7, 0x4, 0x2}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x987, 0x8, @local, 0x4e23}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0x7c, 0x1}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x21}, @multicast2, 0x0, 0x0, '\x00', 'bridge_slave_0\x00', {0xff}, {}, 0x33, 0x2, 0x12}, 0x0, 0x98, 0xc0}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x5, 0x1}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x5c8) 22:13:33 executing program 4: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x18, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 22:13:33 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = dup(r0) write$apparmor_exec(r1, &(0x7f0000000380)={'stack ', 'vmnet1wlan0\'keyring\x00'}, 0x1a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x800000000008031, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000000)="bad004b8c0abef2e360f0966b9cc0a00000f3266b8010000000f01c12e0f22420fc7a814590fc72d650f00d1670fae0af30f209c", 0x34}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x20000000000, 0x0, 0x2000, &(0x7f000016c000/0x2000)=nil}) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x90100, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r5, &(0x7f0000000180)="ee1eae6a904461de3bfa230681017fe04f21456bbd5a03445a8a5c210a2510c215cb50b90d58f89452b7e5a5546219c3b05a", &(0x7f00000001c0)=""/51}, 0x18) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000600)={'bond_slave_1\x00', &(0x7f00000005c0)=@ethtool_cmd={0x3a, 0x8, 0x36, 0x3, 0x4378, 0x5, 0x8, 0xfffffffffffffffa, 0x6, 0x6, 0x9, 0x2, 0x8d8, 0x9969, 0x40e1, 0x100000001, [0x200, 0x9]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f00000003c0)="66b8410000000f23c80f21f86635080040000f23f8ba4300edf390baf80c66b8186f4a8666efbafc0c66b88d3f000066ef66b9e402000066b80080000066ba000000000f3066b9760100000f32b800008ec00f01c90f2202f3650f011b", 0x5d}], 0x1, 0x0, &(0x7f00000003c0), 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x6, @local, 0x6}, @in={0x2, 0x4e22, @multicast2}], 0x2c) ioctl$KVM_RUN(r4, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x2, 0x6, 0x4, 0xffffffffffffff0c, 0x3, 0x1, 0x80, {0x0, @in={{0x2, 0x4e20, @rand_addr=0x56}}, 0x5, 0x400, 0x400, 0x1000, 0x8001}}, &(0x7f0000000240)=0xb0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000500)={r7, @in6={{0xa, 0x4e20, 0x2, @loopback, 0xffffffffffffffff}}, 0x6, 0x2, 0x800, 0x3, 0x800}, &(0x7f0000000340)=0x98) move_pages(0x0, 0x33d, &(0x7f0000000040), &(0x7f0000000180), &(0x7f00000001c0), 0x0) 22:13:33 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000140)=""/219) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x200040, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_pts(0xffffffffffffff9c, 0x143100) ioctl$KDENABIO(r4, 0x4b36) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r5, &(0x7f0000000040)=0x100000, 0x8001) 22:13:33 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f00000051c0)='ns/user\x00') r1 = dup2(r0, r0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)=0x0) syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/user\x00') time(&(0x7f0000000080)) socketpair(0x13, 0x5, 0x100000000, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x4e24}, @in={0x2, 0x4e20}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}, @in6={0xa, 0x4e23, 0x0, @empty, 0x7}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e21, 0x80000000, @dev={0xfe, 0x80, [], 0x14}, 0x2}], 0x88) [ 653.662300] x86/PAT: syz-executor0:20519 map pfn RAM range req write-combining for [mem 0x5ad60000-0x5ad63fff], got write-back 22:13:33 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x18, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 22:13:33 executing program 5: socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000180)=[@dstype3={0x7, 0xc}], 0x1) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000100}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0x8c, r4, 0x502, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xc}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x48080}, 0x20004080) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) [ 653.808185] x86/PAT: syz-executor0:20523 map pfn RAM range req write-combining for [mem 0x5ad60000-0x5ad63fff], got write-back 22:13:34 executing program 4: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x18, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 22:13:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f0000000700)=@newlink={0x38, 0x10, 0x327, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0x4}}}]}, 0x38}}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') execveat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=[&(0x7f00000000c0)='\\^vboxnet1\x00', &(0x7f0000000100)='{}cpuset:.{eppp1}proc{\x00'], &(0x7f00000001c0)=[&(0x7f0000000180)='ip6erspan\x00'], 0x1000) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000200)=[{0xb, 0x2}, {0x7, 0x4}, {0x4, 0x3ff}, {0x2, 0x4}, {0xb, 0x42}, {0x3, 0x3}, {0xc, 0x1}, {0x0, 0x100000001}, {0x0, 0x7}, {0x2, 0x8000}], 0xa) 22:13:34 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = memfd_create(&(0x7f00000006c0)='net/snmp\x00', 0x1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000740)=0x14) bind$packet(r1, &(0x7f0000000780)={0x11, 0xf5, r2, 0x1, 0x4, 0x6, @dev={[], 0x10}}, 0x14) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r3 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r5, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') sendfile(r0, r6, &(0x7f0000000040)=0x100000, 0x8001) 22:13:34 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x80000000003, 0x0, &(0x7f0000000100)={0x0, 0x0}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x15) connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) times(&(0x7f0000000080)) [ 654.498360] x86/PAT: syz-executor0:20543 map pfn RAM range req write-combining for [mem 0x57d80000-0x57d83fff], got write-back 22:13:34 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) [ 654.606820] x86/PAT: syz-executor0:20543 map pfn RAM range req write-combining for [mem 0x5b180000-0x5b183fff], got write-back 22:13:34 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20}, 0x10) r1 = socket$kcm(0x29, 0x1000000000002, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x800, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000002c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002c80)=0x14, 0x800) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000002cc0)={r3, 0x1, 0x6, @remote}, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f000031aff8)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000001700)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000400)={&(0x7f0000000280), 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x14}, 0x5580}}, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)) recvfrom$packet(r4, &(0x7f0000001b40)=""/197, 0xc5, 0x0, 0x0, 0x0) 22:13:34 executing program 5: socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000440), 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0xd}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0), 0x3, {0xa, 0x4e20, 0x1, @mcast2, 0xffff}, r5}}, 0x38) ioctl$BLKIOOPT(r4, 0x1279, &(0x7f00000004c0)) socket$l2tp(0x18, 0x1, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) 22:13:36 executing program 1: unshare(0x2000400) fgetxattr(0xffffffffffffffff, &(0x7f00000001c0)=@known='security.selinux\x00', &(0x7f0000000d40)=""/4096, 0x1000) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8001, 0x200) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000040)={0x2, 0xff, 0x2, 0x7, 0x1, 0x97}) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x0) 22:13:36 executing program 2: r0 = gettid() ioprio_set$pid(0x2, r0, 0x1) 22:13:36 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r4, &(0x7f0000000040)=0x100000, 0x8001) 22:13:36 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x18, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}]}, 0x68}}, 0x0) 22:13:36 executing program 5: r0 = socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000100)={0x800000, 0x0, 0xfffffffffffffffc}) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x800, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, &(0x7f00000003c0)={{0x1, 0x0, 0x7}, 0x1, 0x95}) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x9) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r5, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000140)={0x600}, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) 22:13:36 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={&(0x7f00000002c0), 0xc, &(0x7f00000056c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c00000014000b0900000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14000200fe800000000000000000000000970017"], 0x2c}}, 0x0) [ 656.562106] x86/PAT: syz-executor0:20583 map pfn RAM range req write-combining for [mem 0x5b000000-0x5b003fff], got write-back [ 656.667222] x86/PAT: syz-executor0:20583 map pfn RAM range req write-combining for [mem 0x57de0000-0x57de3fff], got write-back 22:13:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000008c0)={&(0x7f0000000000), 0xc, &(0x7f0000000880)={&(0x7f0000001940)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x8, 0x16, [{0x4}]}, @IFLA_IFNAME={0x14, 0x3, 'bond_slave_1\x00'}]}, 0x3c}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040)=0x4, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x8, 0x9, 0x3, 0x0, 0x8, 0xffffffffffffffff, 0x81}, 0x2c) 22:13:36 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x18, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}]}, 0x68}}, 0x0) 22:13:36 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001b80)=[{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000000)="1eee96aef1126be8e4c396581ad0994db3c40a8b81b6ca283059d896d09e5a52499210aaf824c6505bdb54c8acf45113fa76df52252df207b8167b4f12904d981d50043ef0e1d7c16317b4ea2c380f63e237fa2121fe08aef19d4d8ab84d1b6f", 0x60}], 0x1, &(0x7f0000001580), 0x0, 0x1}], 0x1, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x15, 0x3fffe) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000100)={0x0, 0x1d, 0x7, 0xffffffffffffff81, "c89a89ab5c4a94a5e16f343eb648d062b8ba888b0859919110f4be9e4147d6c6"}) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000500)=""/84, 0xf}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x2, &(0x7f00000000c0)=""/50, 0x32}, 0x0) 22:13:37 executing program 1: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x10000000089f0, &(0x7f0000000000)={'ip6gre0\x00', @ifru_ivalue=0x705000}) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000040)={0x33, @loopback, 0x4e20, 0x1, 'sh\x00', 0x13, 0x7fffffff, 0x63}, 0x2c) 22:13:37 executing program 0: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x329}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000080)={0x1, 0x4, [0x8]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r5, &(0x7f0000000040)=0x100000, 0x8001) 22:13:37 executing program 5: socket$inet6(0xa, 0x7ffffffffffff, 0x3) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x20000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) 22:13:37 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rfkill\x00', 0x141a40, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000580)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000540)=0x0) capset(&(0x7f0000000600)={0x20080522, r1}, &(0x7f0000000640)={0x8, 0x6, 0x0, 0xee4, 0x0, 0x14}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x24020400) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x2080, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={&(0x7f0000000040), 0xc, &(0x7f00000003c0)={&(0x7f0000002640)=@bridge_getneigh={0x28, 0x1e, 0x711, 0x0, 0x0, {}, [@IFLA_MTU={0x8}]}, 0x28}}, 0x0) write$uinput_user_dev(r3, &(0x7f00000000c0)={'syz0\x00', {0x2, 0x6, 0x17c6, 0x50cd9302}, 0x2d, [0x3ff, 0x6, 0x2, 0x1d, 0x7, 0xa7, 0x75, 0x0, 0x80000000, 0x8, 0x101, 0x2, 0x7f, 0x3ff, 0x5, 0x401, 0xfffffffffffffffa, 0x7d2, 0x73, 0xb508, 0x0, 0x5, 0x6, 0x9, 0x6, 0x101, 0x1ff, 0x200, 0x5, 0x1f, 0x4, 0x6, 0x3ddb, 0x5, 0x5, 0x1, 0x4, 0x7, 0x53, 0x8, 0x2, 0x6, 0x6, 0x8001, 0x8c3f, 0x7, 0x80, 0x200, 0x9, 0xfffffffffffffff7, 0x7, 0x9, 0x9, 0x5, 0x100, 0xffffffffffff0000, 0x207, 0x494800, 0x61, 0x4, 0x7fffffff, 0x6, 0x401, 0x8], [0x5, 0x5, 0x4, 0x9, 0x8, 0xfff, 0x1f, 0x0, 0x7, 0x1, 0x8, 0x3b45daa5, 0x5, 0xff, 0xfffffffffffffff8, 0xffffffffffffff35, 0xff, 0xffffffffffffffff, 0x400, 0xd91, 0x194e, 0x800, 0x7fffffff, 0x8, 0x80, 0x1, 0x9a, 0x1f, 0xcae, 0x9, 0xfffffffffffffff7, 0x8a7b, 0x6, 0xa81, 0x2a78, 0x0, 0x9, 0x6, 0x0, 0x1, 0xc65d, 0x3, 0xffff, 0x31, 0xae, 0x8, 0x100000001, 0x7fff, 0x8345, 0x1, 0x100000001, 0x3, 0xbbeb, 0x7, 0x2, 0x1c, 0x0, 0x9, 0x9, 0xffffffff, 0x100000001, 0xffffffff, 0x1, 0xff], [0x7, 0x5, 0x1000, 0x4, 0x6, 0x5, 0x200000000, 0x10000, 0x7, 0xfffffffffffffff8, 0x1, 0xffff, 0x10001, 0x7fffffff, 0x6, 0x4, 0x3f, 0x2, 0x7, 0x3, 0xe38, 0x800, 0x7, 0xfffffffffffff5cd, 0x9, 0x1, 0x2, 0x70, 0xa2d, 0x7, 0x2112, 0x80, 0x7ff, 0x6, 0x174, 0x0, 0x6, 0x46, 0xfffffffe00000000, 0x1, 0x8, 0x81, 0x5, 0x0, 0x10000, 0x0, 0x2, 0x7ff, 0x7, 0x6, 0x7, 0x9, 0x7c, 0x1, 0x10000, 0x10000, 0x3, 0x7f, 0x5, 0x5, 0xffffffff7fffffff, 0x9, 0x8, 0x3], [0x4, 0x8, 0x3ff, 0x7, 0x6, 0x1, 0x9, 0x8000, 0x9, 0x7f, 0xd94a, 0x4, 0x5, 0x7, 0x3, 0x0, 0x80000000, 0x2, 0xffff, 0x6, 0x4b7, 0x8, 0x7fffffff, 0x200, 0x4, 0x81, 0x8578, 0x81, 0x4, 0x3, 0x10000, 0x36b, 0x5, 0x9, 0x0, 0x3, 0x8001, 0xb7, 0x0, 0x0, 0x8, 0x3ff, 0x800, 0xf901, 0x4, 0x0, 0xff, 0x7, 0xcca, 0x8, 0x4, 0x7ff, 0x9, 0xffffffffffffff00, 0x6, 0x32, 0x5, 0xb6220f9, 0x3, 0x1, 0x8, 0x80000000, 0x396, 0x100]}, 0x45c) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) [ 657.323123] x86/PAT: syz-executor0:20606 map pfn RAM range req write-combining for [mem 0x5a0e0000-0x5a0e3fff], got write-back 22:13:37 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x18, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}]}, 0x68}}, 0x0) 22:13:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x2000000000, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$TIOCLINUX6(r1, 0x541c, &(0x7f0000000280)={0x6, 0x80}) getsockopt$sock_buf(r1, 0x1, 0x0, &(0x7f0000000140)=""/194, &(0x7f0000000240)=0xc2) r2 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x200, 0x0) r3 = msgget(0x0, 0x8) msgctl$IPC_RMID(r3, 0x0) ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f0000000040)) [ 657.418600] x86/PAT: syz-executor0:20606 map pfn RAM range req write-combining for [mem 0x59f00000-0x59f03fff], got write-back 22:13:37 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000008380)=[{{&(0x7f0000000000)=@in={0x2, 0x4e22, @dev}, 0x80, &(0x7f0000001180), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1400000000000000000000000100000000000000"], 0x14}}], 0x1, 0x0) connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x2, 0x4) sendmmsg(r0, &(0x7f00000000c0), 0x40000000000019b, 0x20000000) 22:13:37 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x9) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r5, &(0x7f0000000040)=0x100000, 0x8001) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0xa1f, @remote, 0x40}, 0x1c) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, &(0x7f0000000000)) 22:13:37 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x18, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x0, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 22:13:37 executing program 2: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x1010, 0xffffffffffffffff, 0x54) unshare(0x24020400) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x0, 0x200000) flock(r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x88, 0x0, &(0x7f0000000180)=[@request_death={0x400c630e, 0x1, 0x3}, @release={0x40046306, 0x1}, @clear_death={0x400c630f, 0x1, 0x3}, @dead_binder_done={0x40086310, 0x2}, @reply={0x40406301, {0x3, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x28, 0x48, &(0x7f00000000c0)=[@ptr={0x70742a85, 0x0, &(0x7f0000000080), 0x1, 0x1, 0x15}], &(0x7f0000000100)=[0x18, 0x28, 0x38, 0x18, 0x28, 0x78, 0x20, 0x48, 0x38]}}, @release={0x40046306, 0x2}, @decrefs={0x40046307, 0x3}], 0x47, 0x0, &(0x7f0000000240)="8cf6d10c2a460838fa8fa241808786afb6287d17caf16e03b6db11faf5ac5922f83384a93640f43d7b7e9c3d27b003505533184db56ab746a8ec34091d94a12e277fce327def7d"}) [ 658.133016] x86/PAT: syz-executor0:20643 map pfn RAM range req write-combining for [mem 0x59f30000-0x59f33fff], got write-back 22:13:38 executing program 5: socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup(0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) 22:13:38 executing program 1: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") fgetxattr(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="75736572f404"], &(0x7f00000002c0)=""/101, 0xffffffffffffff68) [ 658.304829] x86/PAT: syz-executor0:20649 map pfn RAM range req write-combining for [mem 0x59f30000-0x59f33fff], got write-back 22:13:38 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x802, 0x0) sendto(r0, &(0x7f0000000180)="690e7403c1d190438d45fa553130a776d65535fa1d78af46c8f1e4ca37758c904cae3302ae5bfea16dd8aa3bb46695f415a0322e0e5aa7316c58308dd12d43b0bdcc9d3f41f5e366c12c58bb884da5be13e068f5f051e72495035a394390ebf5eea08132ccaa41369888f6bc2343063b543a99adeb625989ce4d2c", 0x7b, 0x44000, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x1, 0x0, 0x1, {0xa, 0x4e24, 0x7f, @mcast2, 0x2}}}, 0x80) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000040)={0x2c, 0x4, 0x100000000, 'queue0\x00', 0x3}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000100)={0x5, 0x6, 0x9}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000005fd8)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r2}, 0xfffffffffffffcc9) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x1d, r3}, 0x10, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x188, 0x4, {r4, r5/1000+10000}, {0x0, 0x7530}, {0x2, 0x3, 0x8000}, 0x1, @canfd={{0x2, 0xadf, 0x13f1, 0x88f}, 0x38, 0x2, 0x0, 0x0, "0ce94ed54343d53d8dd3df23e7048dff8bcc5f127a49bf1a950ce1b9b25e4eb85b7837a93f8b08c11aa0c41dd71a99507cb03e390def6513470e681295e17b2b"}}, 0x80}, 0x1, 0x0, 0x0, 0x44080}, 0x48000) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000), 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0xffffff7f, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b50200000000000000004e2f9663a918fa1efd9b0b"}, 0x9d8}}, 0x0) 22:13:38 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x18, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x0, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 22:13:38 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, r2) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000180)={0x5}) pipe2(&(0x7f00000001c0), 0x84000) ioctl$KVM_RUN(r5, 0xae80, 0x0) 22:13:38 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x10000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000140)={{{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000080)=0xffffffb1) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000001700)={@rand_addr=0xffff, @empty, r3}, 0xc) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0x10000000000fffb, 0x2f, 0x0, 0xffffffffffffffff}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e24, 0x657, @remote, 0x4}, 0x1c) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r5, &(0x7f0000000040)=0x100000, 0x8001) 22:13:38 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x0, 0xffffffffffffffff, 0x1c, 0x1, @in6={0xa, 0x0, 0x0, @local}}}, 0xa0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3, 0x20000) dup2(r0, r0) 22:13:39 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x18, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x0, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 22:13:39 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x80, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x6}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e20, 0x3, @mcast2, 0x2}, @in6={0xa, 0x4e23, 0x6, @ipv4={[], [], @broadcast}, 0x4}, @in6={0xa, 0x4e23, 0x3, @local, 0x54}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000140)={r1, 0x1, 0x7, 0x2, 0x3, 0x7}, 0x14) r2 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x4, 0x80000) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000040), 0x4000) 22:13:39 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x25c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2800, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000080)=0x8) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r5, &(0x7f0000000040)=0x100000, 0x8001) 22:13:39 executing program 5: r0 = socket$inet6(0xa, 0x7ffffff7fffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000580)={0x19f, 0x6, 0x9, @empty, 'dummy0\x00'}) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x200000, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r4, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) 22:13:39 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="7a1af8ffff"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = socket(0x11, 0x80002, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') sendmsg$FOU_CMD_DEL(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r2, 0xb02, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x3f}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x3f}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e21}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) setsockopt(r1, 0x9, 0x6, &(0x7f0000000140)="ba93f27b5205e801f942f18764ccda6cc8712476e9c373f82c21d8e1c4995271dee5a40b13ff5eac8999d6cdb7d676d6d16dfd3643764ca82f0fe34fdde83a88ca1947ebe277202305c2ab2ba4d426ee772d6bb150e3dc80ca7072a6318569cbd47af626f10c9fc1b78ab85310e83308fa67f45fda3d88a01e81b35a64fc1c78e0a2eb89b6d43ca5578cdd8ee0b6536218632bc0d5cef98a8f4ee81fff2a01dec6da4d91", 0x9) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000380)=0x6, 0x4) msgget(0x3, 0x90) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000300)=0xcf00000000, &(0x7f0000000340)=0x4) sendfile(r1, r0, &(0x7f0000000080), 0x7) [ 659.442953] x86/PAT: syz-executor0:20694 map pfn RAM range req write-combining for [mem 0x5aae0000-0x5aae3fff], got write-back 22:13:39 executing program 3: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x39, @broadcast, 0x4e20, 0xffffffffffffffff, 'nq\x00', 0x0, 0x6, 0x61}, 0x2c) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f00000000c0)) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) sched_setscheduler(r1, 0x3, &(0x7f0000000200)=0x5) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000140)) r2 = syz_open_procfs(0x0, &(0x7f0000000180)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0c0583b, &(0x7f0000000080)={0x223e, &(0x7f0000000040)}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000100)={0x3, r2}) 22:13:39 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x18, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x40}}, 0x0) [ 659.504953] x86/PAT: syz-executor0:20696 map pfn RAM range req write-combining for [mem 0x5aae0000-0x5aae3fff], got write-back 22:13:39 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r2 = perf_event_open$cgroup(&(0x7f0000000140)={0x7, 0x70, 0x80000000, 0x2, 0x8, 0x400, 0x0, 0x10000, 0x1200, 0x4, 0x6, 0x8, 0x4, 0x1a, 0x1, 0x4, 0x6, 0xf4, 0x9, 0x4, 0x7fffffff, 0x81, 0x80, 0x8, 0x2, 0x20, 0x3, 0x8, 0x5, 0x3ff, 0xef11, 0x400, 0x8000, 0x3, 0x3, 0xfff, 0x81, 0x7, 0x0, 0xffffffff, 0x4, @perf_bp={&(0x7f0000000080), 0x8}, 0x8000, 0x20, 0x2, 0x3, 0x1ff, 0x9, 0x401}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r4, &(0x7f0000000040)=0x100000, 0x8001) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) 22:13:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0) dup2(r0, r2) dup3(r2, r1, 0x0) [ 660.067024] x86/PAT: syz-executor0:20715 map pfn RAM range req write-combining for [mem 0x59d00000-0x59d03fff], got write-back [ 660.166929] x86/PAT: syz-executor0:20715 map pfn RAM range req write-combining for [mem 0x5c9a0000-0x5c9a3fff], got write-back 22:13:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_buf(r3, 0x0, 0x2c, &(0x7f0000000140)=""/134, &(0x7f0000000000)=0x86) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x9, 0x40010, r0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, &(0x7f0000000180), 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x5, 0x50000) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000240)=""/252, 0x0, 0x0, 0x7}, 0x18) 22:13:40 executing program 1: socket$xdp(0x2c, 0x3, 0x0) 22:13:40 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x18, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x40}}, 0x0) 22:13:40 executing program 5: r0 = socket$inet6(0xa, 0x7ffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f00000000c0)="8063d77db4fab2e08b6a9097a70761ccfd33178955d78852", 0x18) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) 22:13:40 executing program 3: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000040)={0x20000000, 0x1000, 0x7ff, 0x80000000000000}, 0x10) 22:13:40 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) fsetxattr$security_smack_entry(r0, &(0x7f0000000000)='security.SMACK64IPIN\x00', &(0x7f0000000080)='/dev/ion\x00', 0x9, 0x2) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200, 0x40) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000002980)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002f00)={{{@in=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000480)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000003200)={{{@in6=@mcast2, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000003300)=0xe8) r13 = getgid() setsockopt$inet6_buf(r0, 0x29, 0x0, &(0x7f00000033c0)="89cf84eb8fc71f243a8f4dda0e3fd5910d024a0c7ba833c01009f15bda5ae15f44f2e0fa82e3a88752e4f6c1e8025411ba86f312272e7c7ea6cb2e88fff568f1b20d8ee4f04587c00641ed67cef457001ced06bb87ad9da4cc59f9d4cb034c30d405b41aa39726e9dd800fe67d3cfa2b43ad3e806de2c1e0e703fd4f926c87b18e5f101413d96b9b58c0e830f65e0ccdb4bfbf137482f95c17cd2ee46c8df1a568a4690bdfa6655875eba1b465734de71dfc52b4905f8c4a1a36a395a92e0964cce2ecf816672cd5d4d53c6945cb", 0xce) sendmsg$netlink(r5, &(0x7f0000003380)={&(0x7f0000000200)=@proc={0x10, 0x0, 0x25dfdbfb, 0x4020}, 0xc, &(0x7f0000000400)=[{&(0x7f0000000240)={0x10, 0x26, 0x400, 0x70bd2c, 0x25dfdbfe}, 0x10}, {&(0x7f0000000500)={0x2464, 0x35, 0x600, 0xaa, 0x25dfdbfe, "", [@generic="d67cc4c7a2fd2c459ef8065cabc3630743cbb007ed4024389c1eaea0a4757134fa2a51651349f2ae44633f7213b193aba0fbea3d31e3dba2b7c598a3fd007db70766d2b9852767beba0f1d5336535a2b3b0f68e832f816777accc068532df6828d2089843af465276d796da5233de2bfa9e5eac694f2fad08ea6ef7d25fe1c32d615ba01e5beedf89c4c25d95af5cd79b0da9ff4042421d2a5bf4c4665287ea56623de5344c62acd61e29108dfc13f75d9cb4aae120fb798e2b1ac25a3e52ecdfde84bd7b774ef37718827cf8096d5a1c922761a8dfd6cb25b63fcab", @typed={0x8, 0x7b, @pid=r6}, @generic="d8bb1e79c4a94832f75af50e962216714abdcc8bf608ec78aa5b1eb163a5d4e87f71d70d4a390ca96b367099de910e82db31319c28e2f2a49532752b570366f048ab1aa8cc652dbce370900365ea5c6dbebfb4eaa8dfcf87ceb36025b77aa7043782306b2093aab19a428ec00aee383086", @typed={0x8, 0x5a, @fd=r0}, @nested={0x2298, 0x3a, [@generic="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", @generic="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", @typed={0x4, 0x14}, @typed={0x8, 0x4c, @uid=r8}, @generic="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", @typed={0x8, 0x50, @str='\x00'}, @generic="77c5fb534d3554cc7c9958a68cd340f9af39bd72aa6f1d212004ad916cfa31d0bdf94020c39394733cc3cab4bc9eb3ea14a7ada31d202bac939ea9ac52a1f53359639e7225447f72ae5fefe9ce2e5bf3ed8f461f92771135c378ec282edafd36598cf8e35951d2369302206125447c98808b5473dd7508618647548753bc8d7d43bea5b64ad2ca8fb067804bd971a4d531a7a6439026a4157ca84652d606549f62", @generic="21b454f549246cf66e427388aa25651d831fc0627a4593f413a4801edcdb1603e034989384dd847a59b80664c8e10ec4501127705df4cf2b04161e92df022832c5815b20b4d93421bbbc25bc31c8fefafdeae80f0cdaeab88e1486611cf8c707c87324afdbc1c9d5f03d903a4e9bc0db754e300ee6462fdd09776bc24a736607e2d7b9f1908000029d4fc4aaef3749b7c15f8bf747e07289ee0bf6a13b730755674386e2865e985919e816f41a58c3c79d7c8c9dbaed09aba349bb73d7dffd363d3f6e24aa29ba00a1d944497050038aed51b1cf78f5070f507d8c6e93"]}, @generic="febdf39dcf625ee21c1ae34bc8189af983787ceca137ee0772713affb3c983d2fd92", @typed={0x8, 0x4c, @u32=0x40}, @typed={0x8, 0x3a, @fd=r2}, @typed={0x8, 0x7b, @fd=r4}, @generic="7a57a878d24ab8813567bf46348c34fbd38ab7f0e638add9bbc0cb6eb5d21d1e54d45b9f"]}, 0x2464}, {&(0x7f0000002a80)={0x444, 0x41, 0x2a, 0x70bd2c, 0x25dfdbff, "", [@generic="b0c8a0ba8d745f65723ea1403eda958de53b3c125548baca41f00d5c2f1dd49b6357299b74f9ce1ef9ad662cd18282010f697b7c", @nested={0x3f4, 0x7d, [@generic="df2e06bb288a8dba15ab10fdf24909371394967ee3436bac9551a7a65b618f2958ba27fbd2aa0143b171c61d81c5ed9343aac3ae0368a11541eba6432969863c780eb084114d3daf668abf3e02ea2a4b9121bd35ce64278ef9e916490ec7556f554d625a02680458d7c71dfe80", @typed={0xc, 0x49, @u64=0x101}, @generic="ef8941eb2560f8e21f0df24b9dd969e8b5b398b8d86265a279ce47168b4d29810113a274097180cf78b17d543d04b094226ece9dd4e98649b2964fc5effe983ff98c5763dda865da2e7ef4680be5db123543f97293d827468103f252654af381b567412973da9acc6a22d2de8a3e89749879e4589ab500e6f7a86316ba918edbf9220a9103da229c5dfd07709bede23c36b41e434c63d8287af1215e2e002f4f66f09d0eeaa58ede139c347e604cf110295a5776bf7d99388c683226a9790dce06cd99cfa5a5a3141d9653eac90cefe5d5d128999a066895722e283c", @generic="17553dc407f1413c078b302756b733727f2a55ee3c9e4bd8545b61b46faf50156ff0d4a340a7dc3a8391a3f5e3874db0403ad2a65bcf7028107d19906ac7897ba1d7bc250af2d7152f264ccbd9a882b64eb58117d41fd5506393255fe43924a9a232f860dc5751140a92d13ece1d83999a2d28243a170123bc83a7513f208d1b43d17c7786a78fabb2fd71ea2aff3f06b44c231c1346912e6e270a0ce244fbf401d4f3db44", @generic="79b2", @typed={0x8, 0x8c, @uid=r9}, @typed={0xd0, 0x5a, @binary="b4e77feb70cc5253fbb04939c5cf5045dd76479fb83ab4a8aa887649834912d4493a9a531a0d90f14379cf13db8d502428c07e41822b1a85d4d8b8acecbba84b5ceed15933d682b7475cca395150c1e6a08e8ac5227f36359de35919b482a6a949f27b6f37e61f4c0e89294feb57b7a90c208f9a3d579355f2d40dc295f2f46f1a660f193d96daa1fef20b9b18dc193c232e272ab024df82b30e6ef5f513cf8392599401b765edaffb6089246e13499a0fe442c975f2ee198a76d0f6693550e90d3225814587757828"}, @typed={0x14, 0x4e, @ipv6=@local}, @generic="49e7f5901670a290b02dba07b5100163c6fecdf2f0b4771b5b3c7fdd201ca6f87c3fa2e2d3eed763d66ccbf8561abc0d9546e83c9bd2cda2b8c0638051a1be4e5690dc7048c31d1d690645c46eef03cff4453786829854144decf7e69797", @generic="7dd47faf84321fd9b3fd513a6f62e15a1ab5243ea94afaa54ed93b016e8db237cea857862591c70f3e7fd91af3f74928af426bea26b283274b4d5d0f12c222af2b3cf35efa7885f1be11a292bdc3792234fb0a2a4a879ce435ab22f14040934e0e147d1c6189547b6515778988df20d42f9722fe439835bbacbd16ea37f79aed3b603c9a5bcac9e2bac320615c5ae0ba77942b4e8d1c732728ff3c59724d1f30f72f767789dfc3b7"]}, @typed={0xc, 0x32, @str='pagemap\x00'}]}, 0x444}, {&(0x7f0000003000)={0x1e0, 0x30, 0x4, 0x70bd27, 0x25dfdbfc, "", [@nested={0x20, 0x32, [@typed={0x1c, 0x2, @str='security.SMACK64IPIN\x00'}]}, @generic="efd2a85baea1925285de453b9e62512709bf760bc60304a83c5ea63a17e82f50de95982808b351781b7f5c9fc6c6c28b89141bf59e5ed6150020b0b8ef30c35a355827713ae005327ef2", @nested={0x158, 0x93, [@typed={0x4, 0x15}, @typed={0x8, 0x1f, @ipv4=@remote}, @generic="1a7e8fe314e9defff60cb3b6160530e841247d7b2516c24a956adfb76db14b3a1bf39f3dac0715557113f13bb3c63fdf049e3985221e17e7fbc5898c86b28272efdb52bb9eb3ee35ac4ca1ede37f10e3428e0e55960828c12fea3b128f65f9ffdb29fb55a4f05f0b4b7cff8db722a0027b5ad7c651ec3c807caa208c8d2b224b4241a205d6ba5cffa3812adb1d85b74717983d003c4f795f3596546478571465b0ab96f24dbaf78988", @typed={0x8, 0x86, @str='\x00'}, @generic="01d19a2c121d567224af2effb13e2085f3f45aef6e33029c328e84e02ed80234a4be519bf27e5aa8f127da87fae5bf9171e2a3c6b5ae685ee953b023b67ba222f12959ba510982bdb04f581d7f0cb4c8d1e77254903a59627ca66bb8fe46f643f8b41b4b5d0010ab7ec17c25eb09d74d90f3ecf0054935c089b9f40e9334f530c597ddfe17ed36ee8a2c62ae", @typed={0x8, 0x4e, @uid=r10}]}, @typed={0xc, 0xb, @u64=0x7fff}]}, 0x1e0}], 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="200000000000000001000000010000008cd8249a880cb7f7ad1f469f45c052b2f5c5f49e76ecd09da010dbc79110d0cfa3a1c6b6b2e29f9e097f78655b9a1d", @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00'], 0x40, 0x4000000}, 0x80) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x8, 0x110010, r1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f00000034c0)={{0x401, 0x10000}, 'port1\x00', 0x8, 0x1020, 0x5, 0x8000, 0xffff, 0x7, 0x9, 0x0, 0x2, 0x1ff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r4, 0x0) r14 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r14, &(0x7f0000000040)=0x100000, 0x8001) ioctl$TUNSETGROUP(r5, 0x400454ce, r7) 22:13:40 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x18, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x40}}, 0x0) 22:13:40 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") getuid() r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x22002, 0x0) write$P9_RMKDIR(r1, &(0x7f0000000140)={0x14, 0x49, 0x1, {0x80, 0x2, 0x7}}, 0x14) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x3a) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000080)={'IDLETIMER\x00'}, &(0x7f00000000c0)=0x1e) write$P9_RMKDIR(r2, &(0x7f0000000040)={0x14, 0x49, 0x2, {0x38, 0x0, 0x5}}, 0x14) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00142b00fe80000000e2ffffffffffffff0000aafe8000000000000000000000000000aa21000000c0c49dbf32de017bf7361d962f1f9d1f2200df6b46ae7b96d56d04f6fb7e1cd52a14e4714eae6fdddc011b957aa9dc5cf9ca9b87b6dfc72ff10f613d5f749fbe1ee2b91f525f2380ed50ee79c99a57a939e814c7e2de1fc217be9ad42fd78f6d806d07ba576e06d13b4c3d29165b38c54921aedaa20cc99aea3b5b0b18ec70c89f661a40e010accef765ed082f419804c60647cd7516ea3ece20084d269c2cd86f1355209d352ad3f1175335b388a14c97356279ebc24f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f00000002c0)) [ 660.885340] x86/PAT: syz-executor0:20745 map pfn RAM range req write-combining for [mem 0x86080000-0x86083fff], got write-back 22:13:41 executing program 2: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@in={0x2, 0x0, @multicast1}, &(0x7f0000000080)=0x80, 0x80000) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000880)=0x14) r4 = memfd_create(&(0x7f0000000440)='\x00', 0x5) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000480)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1}) sendmsg$nl_route(r0, &(0x7f0000000980)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x6}, 0xc, &(0x7f0000000940)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6c00000018000a0629bd7000fedbdf251c100005fc03ff0f002000001400010000000000000000f0000000000000000008000400", @ANYRES32=r1, @ANYBLOB="08101a00060000000800eb42296a67130c9708a750e5109aa51f2b86f547c91b6f1baf92434e51e454fb272ba32ad759d538f4b459d10385af02201ab247c91813e5b3ceaf3bbf41dca01cf6932ae44767da83cee17c396e02f423968c51b5ef12f00355fd53d7e0c439d3a01caf0727b0ae2d49aea2fe428b6a69a58ae3bae407873b6717674da3de766bd5749b8dde9090f31f0680a6e014742c87b1da21c8ec2d09b6928090691f88749cd28840fb045d477db535d5752eb9a00c5364a13480ea8a52e1b798714d6f660838b2ff5c671917d634ab6c622dcad325f51cbf44e7aa1ae8", @ANYRES32=r2, @ANYBLOB="08000400", @ANYRES32=r3, @ANYBLOB="1c000100000000000000000000001000000000000000004000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x81}, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000015c0)={'sit0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000080), 0x4) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ffc2500924877cfff8d7f0ba3626ff7f4e32f61b26a054e8b0f23d12cdf1e422000000000100804824ca945f64009400050028925aaa000000000000008400f0fffeff2c707f8f", 0x58}], 0x1) sendmsg$nl_route(r5, &(0x7f0000000240)={&(0x7f0000000280), 0xc, &(0x7f0000012000)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x10, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x4}}}]}, 0x30}}, 0x0) [ 660.993576] x86/PAT: syz-executor0:20745 map pfn RAM range req write-combining for [mem 0x58d40000-0x58d43fff], got write-back 22:13:41 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000000080)=@known='security.capability\x00', &(0x7f00002b2fec)="0000000201000000000000010400000000000000", 0x14, 0x0) lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:dhcp_state_t:s0\x00', 0x22, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000d8e000)=@known='security.capability\x00', &(0x7f0000a2af87)=""/121, 0x71) r1 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x28000000000000, 0x8000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x4, 0x9, 0x3b3, 0xfffffffffffffffd, 0x5}, &(0x7f0000000400)=0x98) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000440)=@assoc_value={0x0}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000004c0)={r2, 0x7, 0x18, 0xf2f, 0x45c, 0x3, 0x1, 0x9, {r3, @in={{0x2, 0x4e24, @broadcast}}, 0xfff, 0x101, 0xb726, 0xe632, 0x8001}}, &(0x7f0000000580)=0xb0) r4 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000000080), 0x0, &(0x7f00000013c0)}, 0x20000054) socketpair(0x15, 0xa, 0x100000001, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r6, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) ioctl$SNDRV_TIMER_IOCTL_STATUS(r5, 0x80605414, &(0x7f0000000180)=""/153) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x5452, &(0x7f0000000140)) setsockopt$sock_attach_bpf(r4, 0x6, 0x1d, &(0x7f0000000100), 0x4) [ 661.047994] dccp_invalid_packet: P.Data Offset(247) too large [ 661.085852] dccp_invalid_packet: P.Data Offset(247) too large 22:13:41 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x18, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x68}}, 0x0) 22:13:41 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') getsockopt$sock_int(r4, 0x1, 0x27, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendfile(r0, r4, &(0x7f0000000040)=0x100000, 0x8001) 22:13:41 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") getuid() r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x22002, 0x0) write$P9_RMKDIR(r1, &(0x7f0000000140)={0x14, 0x49, 0x1, {0x80, 0x2, 0x7}}, 0x14) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x3a) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000080)={'IDLETIMER\x00'}, &(0x7f00000000c0)=0x1e) write$P9_RMKDIR(r2, &(0x7f0000000040)={0x14, 0x49, 0x2, {0x38, 0x0, 0x5}}, 0x14) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00142b00fe80000000e2ffffffffffffff0000aafe8000000000000000000000000000aa21000000c0c49dbf32de017bf7361d962f1f9d1f2200df6b46ae7b96d56d04f6fb7e1cd52a14e4714eae6fdddc011b957aa9dc5cf9ca9b87b6dfc72ff10f613d5f749fbe1ee2b91f525f2380ed50ee79c99a57a939e814c7e2de1fc217be9ad42fd78f6d806d07ba576e06d13b4c3d29165b38c54921aedaa20cc99aea3b5b0b18ec70c89f661a40e010accef765ed082f419804c60647cd7516ea3ece20084d269c2cd86f1355209d352ad3f1175335b388a14c97356279ebc24f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f00000002c0)) 22:13:41 executing program 5: socket$inet6(0xa, 0x7ffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000200)={[], 0x0, 0x40, 0xb0}) socket$inet6(0xa, 0x2, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000100)) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev}, 0x79) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000003c0)="0f20c035100000000f22c0c4c1f87766baf80cb8aedf018fef66bafc0c66ed0f01ef8149000f00000036f30f2000c4c37962530782670fc75b39643e2e0f01cf66baf80cb86c5fbb8aef66bafc0c66b8e07166ef", 0x54}], 0x1, 0x0, &(0x7f0000000040), 0xfffffffffffff29) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) 22:13:41 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x2000, 0x2) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_emit_ethernet(0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="000800000000aaaaaaaaaa0888f5"], &(0x7f00000000c0)) 22:13:41 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x18, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x68}}, 0x0) [ 661.677981] x86/PAT: syz-executor0:20771 map pfn RAM range req write-combining for [mem 0x860b0000-0x860b3fff], got write-back [ 661.734684] dccp_invalid_packet: P.Data Offset(247) too large [ 661.803469] x86/PAT: syz-executor0:20779 map pfn RAM range req write-combining for [mem 0x860b0000-0x860b3fff], got write-back 22:13:41 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0xfffffffffffffebc) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f00000002c0)=0x3ff, 0x4) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x40, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000280)={0x6, 0x3, 0x6, 0x8c27}, 0x8) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100), 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v1={0x1000000, [{0x6, 0x1}]}, 0xc, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x10000, 0x0) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x420002}, 0xc) r3 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x1f, 0x200000) ioctl$BLKSECTGET(r3, 0x1267, &(0x7f0000000200)) 22:13:42 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") getuid() r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x22002, 0x0) write$P9_RMKDIR(r1, &(0x7f0000000140)={0x14, 0x49, 0x1, {0x80, 0x2, 0x7}}, 0x14) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x3a) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000080)={'IDLETIMER\x00'}, &(0x7f00000000c0)=0x1e) write$P9_RMKDIR(r2, &(0x7f0000000040)={0x14, 0x49, 0x2, {0x38, 0x0, 0x5}}, 0x14) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00142b00fe80000000e2ffffffffffffff0000aafe8000000000000000000000000000aa21000000c0c49dbf32de017bf7361d962f1f9d1f2200df6b46ae7b96d56d04f6fb7e1cd52a14e4714eae6fdddc011b957aa9dc5cf9ca9b87b6dfc72ff10f613d5f749fbe1ee2b91f525f2380ed50ee79c99a57a939e814c7e2de1fc217be9ad42fd78f6d806d07ba576e06d13b4c3d29165b38c54921aedaa20cc99aea3b5b0b18ec70c89f661a40e010accef765ed082f419804c60647cd7516ea3ece20084d269c2cd86f1355209d352ad3f1175335b388a14c97356279ebc24f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f00000002c0)) 22:13:42 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x18, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x68}}, 0x0) 22:13:42 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x7) get_thread_area(&(0x7f0000000080)={0x10000, 0xffffffffffffffff, 0x4000, 0x3, 0x8001, 0xc825, 0x140, 0x7, 0x48, 0x101}) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_emit_ethernet(0xfffffe43, &(0x7f00000000c0)={@local, @empty, [], {@canfd={0xd, {{0x0, 0x9, 0x7fffffff, 0x9}, 0xc, 0x1, 0x0, 0x0, "bc3b48ad3856d0c9250510d678052f11b9277d3459ca054803f0aaaecf4d62024f4e65f6fe1b22cdfd367848ef743ca419e5376325c657525716461f10984c4f"}}}}, &(0x7f0000000040)={0x800000000000000, 0x0, [0xbbc, 0x0, 0x0, 0x146]}) 22:13:42 executing program 0: r0 = socket$inet6(0xa, 0x10000000003, 0x9b) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0xffeb, 0x200000000001c, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r4, &(0x7f0000000040)=0x100000, 0x8001) setsockopt$inet_dccp_buf(r4, 0x21, 0x8c, &(0x7f0000000200)="292fb426511cf750b7ade02fadbc726c1f788c385a12781faef2ac23048ec00500cf3ed95ea8f1062afb6d3c313783f4749780f901e88ee018b120a085ebd5ab9b4ccb55b654a09c00d4aa1cab9404f67db7ed8e1d20c0da3ae685f0a8a9a2e602f6631fbd10aa9c51820dd9f03c5fdf08a98690b3672baf00995cae098da152f0c2a8741be094755aa701301830d55c4f16b225af5f45964fa0b47d8d9d72a3d745c4271dd35b34f84e55ceb3daecbcaf585e4308a63dbf0d01a50d3449f357000e5874aff904ba0029babffa178b92da6003a86bf971569f02442512d79c3fb70e33950a9727fa4da6c2", 0xeb) r5 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000140), 0x0, 0x0) r6 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$instantiate(0xc, r5, 0x0, 0x0, r6) [ 662.320251] dccp_invalid_packet: P.Data Offset(247) too large 22:13:42 executing program 2: 22:13:42 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x18, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x0, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 22:13:42 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x9, 0x100) 22:13:42 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") getuid() r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x22002, 0x0) write$P9_RMKDIR(r1, &(0x7f0000000140)={0x14, 0x49, 0x1, {0x80, 0x2, 0x7}}, 0x14) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x3a) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000080)={'IDLETIMER\x00'}, &(0x7f00000000c0)=0x1e) write$P9_RMKDIR(r2, &(0x7f0000000040)={0x14, 0x49, 0x2, {0x38, 0x0, 0x5}}, 0x14) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00142b00fe80000000e2ffffffffffffff0000aafe8000000000000000000000000000aa21000000c0c49dbf32de017bf7361d962f1f9d1f2200df6b46ae7b96d56d04f6fb7e1cd52a14e4714eae6fdddc011b957aa9dc5cf9ca9b87b6dfc72ff10f613d5f749fbe1ee2b91f525f2380ed50ee79c99a57a939e814c7e2de1fc217be9ad42fd78f6d806d07ba576e06d13b4c3d29165b38c54921aedaa20cc99aea3b5b0b18ec70c89f661a40e010accef765ed082f419804c60647cd7516ea3ece20084d269c2cd86f1355209d352ad3f1175335b388a14c97356279ebc24f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f00000002c0)) 22:13:42 executing program 3: r0 = eventfd(0x0) writev(r0, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="0eff4a45de15627c", 0x8}], 0x1) close(r0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000200)=@v3={0x3000000, [{0x1, 0x6}, {0x101, 0x7}], r2}, 0x18, 0x3) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x3) [ 662.962930] dccp_invalid_packet: P.Data Offset(247) too large 22:13:43 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r2 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x8, 0x40000) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f0000000180)=""/208) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400201) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000380)) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000003c0)=0x0) r5 = syz_open_procfs(r4, &(0x7f0000000400)='net/rpc\x00') sendfile(r0, r5, &(0x7f0000000040)=0x100000, 0x8001) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_dccp_buf(r2, 0x21, 0x8e, &(0x7f0000000500)="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", 0x1000) getsockopt$inet_tcp_buf(r5, 0x6, 0x1e, &(0x7f0000000080)=""/88, &(0x7f0000000000)=0x58) 22:13:43 executing program 2: r0 = socket(0x10, 0x803, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{&(0x7f0000000940)=@xdp, 0x80, &(0x7f0000002140), 0x0, &(0x7f00000021c0)=""/151, 0x97}}], 0x1, 0x0, &(0x7f0000002280)={0x0, 0x989680}) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x17}, {&(0x7f0000000540)=""/154, 0x7ee}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 22:13:43 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x18, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x0, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 22:13:43 executing program 5: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000d81ff8)=0xe) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000200)=""/249, 0xf9}], 0x1) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000540)) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000000)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', r2}) fcntl$setstatus(r1, 0x4, 0x20000000800) readv(r1, &(0x7f0000a6fff0)=[{&(0x7f0000000180)=""/110, 0xfffffec7}], 0x1000000000000258) 22:13:43 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") getuid() r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x22002, 0x0) write$P9_RMKDIR(r1, &(0x7f0000000140)={0x14, 0x49, 0x1, {0x80, 0x2, 0x7}}, 0x14) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x3a) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000080)={'IDLETIMER\x00'}, &(0x7f00000000c0)=0x1e) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00142b00fe80000000e2ffffffffffffff0000aafe8000000000000000000000000000aa21000000c0c49dbf32de017bf7361d962f1f9d1f2200df6b46ae7b96d56d04f6fb7e1cd52a14e4714eae6fdddc011b957aa9dc5cf9ca9b87b6dfc72ff10f613d5f749fbe1ee2b91f525f2380ed50ee79c99a57a939e814c7e2de1fc217be9ad42fd78f6d806d07ba576e06d13b4c3d29165b38c54921aedaa20cc99aea3b5b0b18ec70c89f661a40e010accef765ed082f419804c60647cd7516ea3ece20084d269c2cd86f1355209d352ad3f1175335b388a14c97356279ebc24f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f00000002c0)) [ 663.242463] x86/PAT: syz-executor0:20828 map pfn RAM range req write-combining for [mem 0x58db0000-0x58db3fff], got write-back [ 663.397754] x86/PAT: syz-executor0:20840 map pfn RAM range req write-combining for [mem 0x58db0000-0x58db3fff], got write-back 22:13:43 executing program 3: r0 = socket(0x1e, 0x805, 0xfffffffffffffffe) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000180)) [ 663.478709] dccp_invalid_packet: P.Data Offset(247) too large 22:13:43 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x18, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x0, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 22:13:43 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") getuid() r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x22002, 0x0) write$P9_RMKDIR(r1, &(0x7f0000000140)={0x14, 0x49, 0x1, {0x80, 0x2, 0x7}}, 0x14) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x3a) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00142b00fe80000000e2ffffffffffffff0000aafe8000000000000000000000000000aa21000000c0c49dbf32de017bf7361d962f1f9d1f2200df6b46ae7b96d56d04f6fb7e1cd52a14e4714eae6fdddc011b957aa9dc5cf9ca9b87b6dfc72ff10f613d5f749fbe1ee2b91f525f2380ed50ee79c99a57a939e814c7e2de1fc217be9ad42fd78f6d806d07ba576e06d13b4c3d29165b38c54921aedaa20cc99aea3b5b0b18ec70c89f661a40e010accef765ed082f419804c60647cd7516ea3ece20084d269c2cd86f1355209d352ad3f1175335b388a14c97356279ebc24f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f00000002c0)) 22:13:43 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x3000003, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r4, &(0x7f0000000040)=0x100000, 0x8001) 22:13:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) pread64(r0, &(0x7f0000000100)=""/228, 0xe4, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) set_thread_area(&(0x7f0000000000)={0x3368, 0x20000000, 0x0, 0x8, 0x200, 0xffffffff7fffffff, 0x8, 0xf54, 0x4}) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000080)={{0x2, 0x0, @remote}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @multicast2}, 'syz_tun\x00'}) 22:13:44 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4000000084c00, 0x0) mount(&(0x7f0000000840)=ANY=[], &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='selinuxfs\x00', 0x0, &(0x7f0000000180)) clone(0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000180), &(0x7f00000001c0)) ioctl$KDGKBLED(r1, 0xc0046d00, &(0x7f0000000100)) [ 663.964427] x86/PAT: syz-executor0:20857 map pfn RAM range req write-combining for [mem 0x59d40000-0x59d42fff], got write-back [ 664.001266] dccp_invalid_packet: P.Data Offset(247) too large [ 664.153250] x86/PAT: syz-executor0:20863 map pfn RAM range req write-combining for [mem 0x59d40000-0x59d42fff], got write-back 22:13:44 executing program 4 (fault-call:1 fault-nth:0): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x18, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 22:13:44 executing program 5: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000d81ff8)=0xe) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000200)=""/249, 0xf9}], 0x1) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000540)) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000000)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', r2}) fcntl$setstatus(r1, 0x4, 0x20000000800) readv(r1, &(0x7f0000a6fff0)=[{&(0x7f0000000180)=""/110, 0xfffffec7}], 0x1000000000000258) 22:13:44 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") getuid() r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x22002, 0x0) write$P9_RMKDIR(r1, &(0x7f0000000140)={0x14, 0x49, 0x1, {0x80, 0x2, 0x7}}, 0x14) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x3a) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00142b00fe80000000e2ffffffffffffff0000aafe8000000000000000000000000000aa21000000c0c49dbf32de017bf7361d962f1f9d1f2200df6b46ae7b96d56d04f6fb7e1cd52a14e4714eae6fdddc011b957aa9dc5cf9ca9b87b6dfc72ff10f613d5f749fbe1ee2b91f525f2380ed50ee79c99a57a939e814c7e2de1fc217be9ad42fd78f6d806d07ba576e06d13b4c3d29165b38c54921aedaa20cc99aea3b5b0b18ec70c89f661a40e010accef765ed082f419804c60647cd7516ea3ece20084d269c2cd86f1355209d352ad3f1175335b388a14c97356279ebc24f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f00000002c0)) [ 664.425298] FAULT_INJECTION: forcing a failure. [ 664.425298] name failslab, interval 1, probability 0, space 0, times 0 [ 664.436881] CPU: 0 PID: 20873 Comm: syz-executor4 Not tainted 4.19.0-rc7+ #69 [ 664.444202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 664.446675] Call Trace: [ 664.446675] dump_stack+0x306/0x460 [ 664.446675] should_fail+0x1170/0x1350 [ 664.446675] __should_failslab+0x278/0x2a0 [ 664.446675] should_failslab+0x29/0x70 [ 664.446675] kmem_cache_alloc_node+0x167/0xe10 [ 664.446675] ? __alloc_skb+0x32a/0xe90 [ 664.477587] __alloc_skb+0x32a/0xe90 [ 664.477587] pfkey_sendmsg+0x1e7/0x1a90 [ 664.477587] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 664.477587] ? aa_sk_perm+0x739/0x960 [ 664.477587] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 664.477587] ? security_socket_sendmsg+0x1bd/0x200 [ 664.477587] ___sys_sendmsg+0xe47/0x1200 [ 664.477587] ? pfkey_release+0x5e0/0x5e0 [ 664.477587] ? __fget+0x8f7/0x940 [ 664.477587] ? __fdget+0x318/0x430 [ 664.477587] __se_sys_sendmsg+0x307/0x460 [ 664.477587] __x64_sys_sendmsg+0x4a/0x70 [ 664.477587] do_syscall_64+0xbe/0x100 [ 664.477587] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 664.477587] RIP: 0033:0x457569 [ 664.477587] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 664.477587] RSP: 002b:00007f46a157bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 22:13:44 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x80, 0x80100) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000080)={0x6, &(0x7f0000000140)=[{0x0, 0x0, 0x0, @link_local}, {}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @random}]}) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0xb2}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={r3, 0xee23}, &(0x7f0000000280)=0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r5, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r6, &(0x7f0000000040)=0x100000, 0x8001) [ 664.477587] RAX: ffffffffffffffda RBX: 00007f46a157bc90 RCX: 0000000000457569 [ 664.477587] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 664.477587] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 664.477587] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f46a157c6d4 [ 664.477587] R13: 00000000004c382f R14: 00000000004d5658 R15: 0000000000000004 22:13:44 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") getuid() r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x22002, 0x0) write$P9_RMKDIR(r1, &(0x7f0000000140)={0x14, 0x49, 0x1, {0x80, 0x2, 0x7}}, 0x14) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x3a) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00142b00fe80000000e2ffffffffffffff0000aafe8000000000000000000000000000aa21000000c0c49dbf32de017bf7361d962f1f9d1f2200df6b46ae7b96d56d04f6fb7e1cd52a14e4714eae6fdddc011b957aa9dc5cf9ca9b87b6dfc72ff10f613d5f749fbe1ee2b91f525f2380ed50ee79c99a57a939e814c7e2de1fc217be9ad42fd78f6d806d07ba576e06d13b4c3d29165b38c54921aedaa20cc99aea3b5b0b18ec70c89f661a40e010accef765ed082f419804c60647cd7516ea3ece20084d269c2cd86f1355209d352ad3f1175335b388a14c97356279ebc24f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f00000002c0)) [ 664.692825] dccp_invalid_packet: P.Data Offset(247) too large [ 664.786107] x86/PAT: syz-executor0:20883 map pfn RAM range req write-combining for [mem 0x57050000-0x57053fff], got write-back 22:13:44 executing program 3: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000d81ff8)=0xe) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000200)=""/249, 0xf9}], 0x1) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000540)) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000000)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', r2}) fcntl$setstatus(r1, 0x4, 0x20000000800) readv(r1, &(0x7f0000a6fff0)=[{&(0x7f0000000180)=""/110, 0xfffffec7}], 0x1000000000000258) 22:13:45 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") getuid() r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x22002, 0x0) write$P9_RMKDIR(r1, &(0x7f0000000140)={0x14, 0x49, 0x1, {0x80, 0x2, 0x7}}, 0x14) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00142b00fe80000000e2ffffffffffffff0000aafe8000000000000000000000000000aa21000000c0c49dbf32de017bf7361d962f1f9d1f2200df6b46ae7b96d56d04f6fb7e1cd52a14e4714eae6fdddc011b957aa9dc5cf9ca9b87b6dfc72ff10f613d5f749fbe1ee2b91f525f2380ed50ee79c99a57a939e814c7e2de1fc217be9ad42fd78f6d806d07ba576e06d13b4c3d29165b38c54921aedaa20cc99aea3b5b0b18ec70c89f661a40e010accef765ed082f419804c60647cd7516ea3ece20084d269c2cd86f1355209d352ad3f1175335b388a14c97356279ebc24f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f00000002c0)) [ 664.905263] dccp_invalid_packet: P.Data Offset(247) too large 22:13:45 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x6, 0x5995c0) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r5, &(0x7f0000000040)=0x100000, 0x8001) 22:13:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000013000703000000000000000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000c0001000000000000000000"], 0x2c}}, 0x0) [ 665.177060] x86/PAT: syz-executor0:20895 map pfn RAM range req write-combining for [mem 0x5a190000-0x5a193fff], got write-back 22:13:45 executing program 4 (fault-call:1 fault-nth:1): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x18, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 22:13:45 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=""/193, &(0x7f0000000500)=""/97, &(0x7f0000000300)=""/127}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000040)=""/83, &(0x7f0000000380)=""/181, &(0x7f0000000440)=""/141}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001900)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) r1 = dup3(r0, r0, 0x80000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000580)={0x1, 0x6, 0x20, 0x0, 0x1}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000640)=0x104000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[@ANYBLOB="452200000000000000000000c4a583fb"]) [ 665.242125] dccp_invalid_packet: P.Data Offset(247) too large [ 665.458352] FAULT_INJECTION: forcing a failure. [ 665.458352] name failslab, interval 1, probability 0, space 0, times 0 [ 665.469882] CPU: 0 PID: 20903 Comm: syz-executor4 Not tainted 4.19.0-rc7+ #69 [ 665.477200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 665.479727] Call Trace: [ 665.479727] dump_stack+0x306/0x460 [ 665.479727] should_fail+0x1170/0x1350 [ 665.479727] __should_failslab+0x278/0x2a0 [ 665.479727] should_failslab+0x29/0x70 [ 665.479727] __kmalloc_node_track_caller+0x272/0x1400 [ 665.479727] ? __msan_get_context_state+0x9/0x30 [ 665.479727] ? INIT_INT+0xc/0x30 [ 665.479727] ? kmem_cache_alloc_node+0x27b/0xe10 [ 665.479727] ? pfkey_sendmsg+0x1e7/0x1a90 [ 665.479727] ? pfkey_sendmsg+0x1e7/0x1a90 [ 665.479727] __alloc_skb+0x422/0xe90 [ 665.479727] pfkey_sendmsg+0x1e7/0x1a90 [ 665.479727] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 665.479727] ? aa_sk_perm+0x739/0x960 [ 665.479727] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 665.479727] ? security_socket_sendmsg+0x1bd/0x200 [ 665.479727] ___sys_sendmsg+0xe47/0x1200 [ 665.479727] ? pfkey_release+0x5e0/0x5e0 [ 665.479727] ? __fget+0x8f7/0x940 [ 665.479727] ? __fdget+0x318/0x430 [ 665.479727] __se_sys_sendmsg+0x307/0x460 [ 665.479727] __x64_sys_sendmsg+0x4a/0x70 [ 665.479727] do_syscall_64+0xbe/0x100 [ 665.479727] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 665.479727] RIP: 0033:0x457569 [ 665.479727] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 665.479727] RSP: 002b:00007f46a157bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 665.479727] RAX: ffffffffffffffda RBX: 00007f46a157bc90 RCX: 0000000000457569 [ 665.628273] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 665.634561] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 665.634561] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f46a157c6d4 22:13:45 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000140)={r2}) close(r2) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000800)) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') connect(r3, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e24}, 0x0, 0x3, 0x4, 0x1}}, 0x80) [ 665.634561] R13: 00000000004c382f R14: 00000000004d5658 R15: 0000000000000004 22:13:45 executing program 2: r0 = memfd_create(&(0x7f0000000000)='#em1#+\x00', 0x0) ioctl$int_out(r0, 0x5460, &(0x7f0000000040)) fallocate(r0, 0x25, 0x0, 0x80000003) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}, &(0x7f00000000c0)=0x10) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000280)={'filter\x00'}, &(0x7f00000001c0)=0x25) 22:13:45 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x400000000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r4, &(0x7f0000000040)=0x100000, 0x8001) 22:13:45 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") getuid() openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x22002, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00142b00fe80000000e2ffffffffffffff0000aafe8000000000000000000000000000aa21000000c0c49dbf32de017bf7361d962f1f9d1f2200df6b46ae7b96d56d04f6fb7e1cd52a14e4714eae6fdddc011b957aa9dc5cf9ca9b87b6dfc72ff10f613d5f749fbe1ee2b91f525f2380ed50ee79c99a57a939e814c7e2de1fc217be9ad42fd78f6d806d07ba576e06d13b4c3d29165b38c54921aedaa20cc99aea3b5b0b18ec70c89f661a40e010accef765ed082f419804c60647cd7516ea3ece20084d269c2cd86f1355209d352ad3f1175335b388a14c97356279ebc24f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f00000002c0)) [ 665.920857] x86/PAT: syz-executor0:20914 map pfn RAM range req write-combining for [mem 0x561e0000-0x561e3fff], got write-back 22:13:46 executing program 3: unshare(0x20400) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x100, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x7f) mmap(&(0x7f000090c000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x2a2800, 0x0) readlinkat(r1, &(0x7f000090fff8)='./file0\x00', &(0x7f0000728000)=""/145, 0x91) [ 665.976922] x86/PAT: syz-executor0:20921 map pfn RAM range req write-combining for [mem 0x561e0000-0x561e3fff], got write-back 22:13:46 executing program 2: r0 = socket$inet(0x2, 0x80006, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, &(0x7f00000005c0), &(0x7f0000000600)=[{}, {}, {0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x0, 0x0, 0x0, 'nr0\x00', 'bridge_slave_1\x00', "699537979aa207b31800", "6c6f9a00000004000000000000000f00", @broadcast, [], @local, [], 0xe8, 0xe8, 0x138, [@mac={'mac\x00', 0x10, {{@dev}}}, @quota={'quota\x00', 0x18}]}}, @common=@log={'log\x00', 0x28, {{0x0, "ad8892c4b5d33fe007cf2a17b6487e56b04f473693f2e309b4ac1b4b1f5c"}}}}]}]}, 0x240) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socket$inet(0x2, 0x4, 0xfffffffffffffffb) 22:13:46 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x100) ioctl$KVM_SET_CPUID(r0, 0x802c550a, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000000000000600400009"]) 22:13:46 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") getuid() openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x22002, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00142b00fe80000000e2ffffffffffffff0000aafe8000000000000000000000000000aa21000000c0c49dbf32de017bf7361d962f1f9d1f2200df6b46ae7b96d56d04f6fb7e1cd52a14e4714eae6fdddc011b957aa9dc5cf9ca9b87b6dfc72ff10f613d5f749fbe1ee2b91f525f2380ed50ee79c99a57a939e814c7e2de1fc217be9ad42fd78f6d806d07ba576e06d13b4c3d29165b38c54921aedaa20cc99aea3b5b0b18ec70c89f661a40e010accef765ed082f419804c60647cd7516ea3ece20084d269c2cd86f1355209d352ad3f1175335b388a14c97356279ebc24f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f00000002c0)) [ 666.314697] kernel msg: ebtables bug: please report to author: entries_size too small [ 666.342557] kernel msg: ebtables bug: please report to author: entries_size too small 22:13:46 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x805, 0x3f) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000000)={'veth0_to_bridge\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1d}}}) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r3, r4, &(0x7f0000000040)=0x100000, 0x8001) 22:13:46 executing program 4 (fault-call:1 fault-nth:2): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x18, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 22:13:46 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x4, 0x1) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x1778) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000006c0)) [ 666.546602] net_ratelimit: 1 callbacks suppressed [ 666.546628] dccp_invalid_packet: P.Data Offset(247) too large 22:13:46 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x8, 0x8000) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0xad2}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0)={r1, 0x7fff, 0x4}, 0x8) r2 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r2, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") fchdir(r2) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_sctp(0x2, 0x800000000001, 0x84) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f0000000200)) connect$inet(r3, &(0x7f0000f6fff0)={0x2, 0x4e23, @dev}, 0x10) write$P9_RMKDIR(r0, &(0x7f0000000300)={0x14, 0x49, 0x1, {0x8, 0x4, 0x8}}, 0x14) listen(r3, 0x11000000000e) r4 = accept(r3, &(0x7f00000015c0)=ANY=[], &(0x7f0000123000)) write$cgroup_subtree(r0, &(0x7f0000000340)={[{0x0, 'rdma'}, {0x2f, 'memory'}, {0x2b, 'rdma'}, {0x2d, 'pids'}]}, 0x1a) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x0, 0x1c}, &(0x7f00000002c0)=0x18) 22:13:46 executing program 5: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) r1 = semget(0x0, 0x0, 0x408) socket$pptp(0x18, 0x1, 0x2) semctl$GETZCNT(r1, 0x0, 0xf, &(0x7f0000000200)=""/136) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfe, 0x80000}, 0xc) sendto$unix(r0, &(0x7f0000000340)="f742d45bcafcea", 0x382, 0x40000, &(0x7f0000000d00)=@abs={0x1, 0x0, 0x4e22}, 0x6e) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='security.ima\x00', &(0x7f00000001c0)=@sha1={0x1, "c0237ebe842ac695e25edb415d41af50bcbe72e1"}, 0x15, 0x3) recvfrom$inet(r0, &(0x7f0000000080)=""/181, 0xffffffffffffffd0, 0x0, &(0x7f0000000140)={0x2, 0x0, @rand_addr}, 0x70d000) [ 666.745613] x86/PAT: syz-executor0:20946 map pfn RAM range req write-combining for [mem 0x561c0000-0x561c3fff], got write-back [ 666.870420] FAULT_INJECTION: forcing a failure. [ 666.870420] name failslab, interval 1, probability 0, space 0, times 0 [ 666.882027] CPU: 1 PID: 20951 Comm: syz-executor4 Not tainted 4.19.0-rc7+ #69 [ 666.889351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 666.891870] Call Trace: [ 666.891870] dump_stack+0x306/0x460 [ 666.891870] should_fail+0x1170/0x1350 [ 666.891870] __should_failslab+0x278/0x2a0 [ 666.891870] should_failslab+0x29/0x70 [ 666.891870] kmem_cache_alloc+0x146/0xd50 [ 666.891870] ? skb_clone+0x4d2/0x7b0 [ 666.921852] ? __msan_poison_alloca+0x17a/0x210 [ 666.921852] skb_clone+0x4d2/0x7b0 [ 666.921852] pfkey_sendmsg+0x79a/0x1a90 [ 666.921852] ? msan_get_shadow_origin_ptr+0x300/0x300 [ 666.921852] ? aa_sk_perm+0x739/0x960 [ 666.921852] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 666.921852] ? security_socket_sendmsg+0x1bd/0x200 [ 666.955596] raw_sendmsg: syz-executor5 forgot to set AF_INET. Fix it! [ 666.921852] ___sys_sendmsg+0xe47/0x1200 [ 666.921852] ? pfkey_release+0x5e0/0x5e0 [ 666.921852] ? __fget+0x8f7/0x940 [ 666.921852] ? __fdget+0x318/0x430 [ 666.921852] __se_sys_sendmsg+0x307/0x460 [ 666.921852] __x64_sys_sendmsg+0x4a/0x70 [ 666.921852] do_syscall_64+0xbe/0x100 [ 666.991776] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 666.991776] RIP: 0033:0x457569 [ 666.999910] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 22:13:47 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") getuid() syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00142b00fe80000000e2ffffffffffffff0000aafe8000000000000000000000000000aa21000000c0c49dbf32de017bf7361d962f1f9d1f2200df6b46ae7b96d56d04f6fb7e1cd52a14e4714eae6fdddc011b957aa9dc5cf9ca9b87b6dfc72ff10f613d5f749fbe1ee2b91f525f2380ed50ee79c99a57a939e814c7e2de1fc217be9ad42fd78f6d806d07ba576e06d13b4c3d29165b38c54921aedaa20cc99aea3b5b0b18ec70c89f661a40e010accef765ed082f419804c60647cd7516ea3ece20084d269c2cd86f1355209d352ad3f1175335b388a14c97356279ebc24f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f00000002c0)) 22:13:47 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) r0 = socket$inet6(0xa, 0x80003, 0x2) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) add_key(&(0x7f0000000300)='encrypted\x00', &(0x7f0000000340)={'syz'}, &(0x7f0000000380)="e204b18bba3c99361172e023b0b82b3a02c81688f8bd875b775e44ca55d74c579866a1674598f3f8028085cdb5f269f2fddb5b8141c19922ba651dadce23313b530e31caf1a721a3e7a97b2b9cd6b5937fb08e63da40f47cbafacf5de12532306417f09b7fe73f6b24632e0ac20548520373bab9fb7b3bb41b0b2fa698c1084cafdbfd33845c34c873d6f1c51ab618ec518ca2956009", 0x96, 0xfffffffffffffffe) socketpair(0x11, 0x6, 0x2a2, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x8) rt_sigreturn() getsockname$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000180)=0x1c) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x2, 0x0, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) [ 666.999910] RSP: 002b:00007f46a157bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 666.999910] RAX: ffffffffffffffda RBX: 00007f46a157bc90 RCX: 0000000000457569 [ 666.999910] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 667.036317] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 667.036317] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f46a157c6d4 [ 667.056402] R13: 00000000004c382f R14: 00000000004d5658 R15: 0000000000000004 [ 667.116234] x86/PAT: syz-executor0:20946 map pfn RAM range req write-combining for [mem 0x5ab00000-0x5ab03fff], got write-back [ 667.255119] encrypted_key: master key parameter '' is invalid [ 667.265150] dccp_invalid_packet: P.Data Offset(247) too large 22:13:47 executing program 3: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x406000) shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x6000) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) munlockall() 22:13:47 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x800, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r5, 0xc0206416, &(0x7f0000000080)={0xffffffff000000, 0x7ff, 0x1, 0x4, 0x2, 0x80}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r4, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000140)=""/178, &(0x7f00000000c0)=0xb2) sendfile(r0, r6, &(0x7f0000000040)=0x100000, 0x8001) 22:13:47 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00142b00fe80000000e2ffffffffffffff0000aafe8000000000000000000000000000aa21000000c0c49dbf32de017bf7361d962f1f9d1f2200df6b46ae7b96d56d04f6fb7e1cd52a14e4714eae6fdddc011b957aa9dc5cf9ca9b87b6dfc72ff10f613d5f749fbe1ee2b91f525f2380ed50ee79c99a57a939e814c7e2de1fc217be9ad42fd78f6d806d07ba576e06d13b4c3d29165b38c54921aedaa20cc99aea3b5b0b18ec70c89f661a40e010accef765ed082f419804c60647cd7516ea3ece20084d269c2cd86f1355209d352ad3f1175335b388a14c97356279ebc24f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f00000002c0)) [ 667.589689] x86/PAT: syz-executor0:20974 map pfn RAM range req write-combining for [mem 0x59df0000-0x59df3fff], got write-back 22:13:47 executing program 4 (fault-call:1 fault-nth:3): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x18, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) [ 667.713451] x86/PAT: syz-executor0:20980 map pfn RAM range req write-combining for [mem 0x56120000-0x56123fff], got write-back [ 667.726701] dccp_invalid_packet: P.Data Offset(247) too large 22:13:47 executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) ioctl(r0, 0xc9, &(0x7f0000000380)="153f6234488dc3c0fbf93b6321198fc27fc99c1108d25d766070405e735a65578f94144b1f58bbd3b446f46213e8df5620faf4df1e4a7bafdc78a0fdf43b285fdace4d1eb4d14871e143020000000000000082f66dadcb202b65dd159cd5d5fa1c81ae12d8ee1310b36d133a303957b9467167e08b99d714146466cdc150cd10f2f355dc72939e9fc354fb1afb17906d8ba6e0c1cf25a46433645d088f2a4031eab11e5cb1fd6fac9dfac09d12674ab5eb415eb622dcedbbe55e73597fa5292d8c838732c5da1c88f1331763407664598c03352ac83e") sendmsg$key(r0, &(0x7f00000001c0)={0x20480, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x2, 0x2c}, 0x3a8}}, 0x0) 22:13:48 executing program 1: socket$inet6(0xa, 0x3, 0x800000000002) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00142b00fe80000000e2ffffffffffffff0000aafe8000000000000000000000000000aa21000000c0c49dbf32de017bf7361d962f1f9d1f2200df6b46ae7b96d56d04f6fb7e1cd52a14e4714eae6fdddc011b957aa9dc5cf9ca9b87b6dfc72ff10f613d5f749fbe1ee2b91f525f2380ed50ee79c99a57a939e814c7e2de1fc217be9ad42fd78f6d806d07ba576e06d13b4c3d29165b38c54921aedaa20cc99aea3b5b0b18ec70c89f661a40e010accef765ed082f419804c60647cd7516ea3ece20084d269c2cd86f1355209d352ad3f1175335b388a14c97356279ebc24f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f00000002c0)) 22:13:48 executing program 2: r0 = socket(0x4000000000011, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x14, &(0x7f0000b56f40)=""/192, &(0x7f0000000080)=0xc0) r1 = memfd_create(&(0x7f0000000000)="766d6e6574316c6f73797374656d73656c66fe73656c696e757847504c2d402d6d643573756d6d643573756d26d92b2c73656375726974792b2600", 0x2) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) 22:13:48 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r4, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)=0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000080)={0x1, r5}) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r6, &(0x7f0000000040)=0x100000, 0x8001) [ 668.115362] dccp_invalid_packet: P.Data Offset(247) too large 22:13:48 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) getsockopt$sock_buf(r0, 0x1, 0x38, &(0x7f0000000040)=""/215, &(0x7f0000000140)=0xd7) r1 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x2, 0x8000) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000200)={0x0, 0x53dd99e4000}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000280)={r2, 0x800}, &(0x7f00000002c0)=0x8) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x18) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f00000001c0)={0x104, 0x7}) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000300)=0xab, 0x4) 22:13:48 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000040), r1, 0x0, 0x2, 0x4}}, 0x20) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xffffffffffff0000, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x6f, &(0x7f00000000c0)=0x1000, 0x4) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x4e21, 0x0, @remote, 0x4479397d}, r1, 0x14e5}}, 0x48) 22:13:48 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x18, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) fanotify_init(0x1, 0x101000) [ 668.351135] x86/PAT: syz-executor0:21002 map pfn RAM range req write-combining for [mem 0x56e20000-0x56e23fff], got write-back [ 668.422422] x86/PAT: syz-executor0:21007 map pfn RAM range req write-combining for [mem 0x56e20000-0x56e23fff], got write-back 22:13:48 executing program 1: socket$inet6(0xa, 0x3, 0x800000000002) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00142b00fe80000000e2ffffffffffffff0000aafe8000000000000000000000000000aa21000000c0c49dbf32de017bf7361d962f1f9d1f2200df6b46ae7b96d56d04f6fb7e1cd52a14e4714eae6fdddc011b957aa9dc5cf9ca9b87b6dfc72ff10f613d5f749fbe1ee2b91f525f2380ed50ee79c99a57a939e814c7e2de1fc217be9ad42fd78f6d806d07ba576e06d13b4c3d29165b38c54921aedaa20cc99aea3b5b0b18ec70c89f661a40e010accef765ed082f419804c60647cd7516ea3ece20084d269c2cd86f1355209d352ad3f1175335b388a14c97356279ebc24f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f00000002c0)) 22:13:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000009000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000240)="697c019a000fc79a82f86767360f01cb1baa6ae30f01d6670fc72d07000000c42066b9c30d000066b80000000066ba000000000f300f67246567f4", 0x3b}], 0x1, 0x0, &(0x7f00000002c0), 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffc) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000003c0)={0x2, 0x0, [{}, {}]}) ioctl$KVM_SMI(r2, 0xaeb7) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x800, 0x0) setsockopt$inet6_dccp_int(r3, 0x21, 0x0, &(0x7f00000000c0)=0x8, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) fgetxattr(r2, &(0x7f0000000100)=@known='trusted.syz\x00', &(0x7f0000000140), 0x0) 22:13:48 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x80, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000100)="4669c24969cdf284f109655cd053daa18d8c162a1198490b7455ae80a0384269e5008fd46d6b68c7740f82e01b0339b8d60a5275b1c9a3025be9b398633560307ecc65eae6e83f438d3de43b4710478929081f974cf1e46238b585817c42dee51fc4aa1d0f023d84f023bdeba2b604d35acca7eb74e581e6705652f02a9ccb4106b13c4591dc0c52502163c84d647bd49bd94c425fce62bf9e5b13fd3eeb597ec7b1ba453941") connect$netlink(r0, &(0x7f00000001c0)=@unspec, 0xc) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000200)=0x81) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="f00000001000010000000000008000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000010000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0045ca000000000000000000000000003c000000ff020000000000000000000000000001000000000000000000000000fcc1cb9e670000000000000000000000000000000000ac058e554c33f3ffffffffffffff0000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000004000000000000000000000000000000000000000004000000000000008c000000020000000000000000000000fc2a4ed420ed65f5a00944954c7e7e3978f3422705d50ad1ed6e6b1a59b715f77bee4b6217be301a2a20e6b7c49ece820bc7ecc222e550529667a0a9a1de1648d5f9e9"], 0xf0}}, 0x0) [ 668.773181] dccp_invalid_packet: P.Data Offset(247) too large 22:13:48 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="8d605e927fa4b4dbe0aa4d79b583650110f30dfc6c0de82c3bb56912782aa33063b2010d8e86be9a36eba7159e193a755dd1f5f83b1b887fe19da163b0935f94627e5a953cfde7b726395b8caa9234315affb052f47d086fe8009eba00503c4c9bf43f644afd7122b0502eb68c1bd1119ce2b960e44a7864f69aab1fcc8999ec86619ce4bfad4a1c225b42b7b9bee739149fe0b1f8baab9f66ca263d6c471fd8a874dfeebd9ebc78e9648960d72783c780b4503faf421b3daafe121190dbfb967aec", 0xc2}], 0x1) r4 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x40000) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f00000000c0)={0x2, [0x0, 0x0]}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r5, &(0x7f0000000040)=0x100000, 0x8001) 22:13:48 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218004f100000000000000000000000030006000000000002000000e00000010000000000000000080012000000000000000000000000000600363ba0d2f2d9d34e1605000000000000000000000000000000000000000000000000000000000001ac1414bb000000000000000000000000030005000000000002000000e0007489e9955e2259a1f8c1a30571b6eb8fb52a4ac30526c3f4fe732b9822a245591d3aac814f9233c7c7dc061d8ef64bb8300b6e29e3f06f9cdca4a58aa7e2cfe90062d296233a53a924c9e1ef7c75cd896247"], 0x80}}, 0x0) 22:13:49 executing program 1: socket$inet6(0xa, 0x3, 0x800000000002) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00142b00fe80000000e2ffffffffffffff0000aafe8000000000000000000000000000aa21000000c0c49dbf32de017bf7361d962f1f9d1f2200df6b46ae7b96d56d04f6fb7e1cd52a14e4714eae6fdddc011b957aa9dc5cf9ca9b87b6dfc72ff10f613d5f749fbe1ee2b91f525f2380ed50ee79c99a57a939e814c7e2de1fc217be9ad42fd78f6d806d07ba576e06d13b4c3d29165b38c54921aedaa20cc99aea3b5b0b18ec70c89f661a40e010accef765ed082f419804c60647cd7516ea3ece20084d269c2cd86f1355209d352ad3f1175335b388a14c97356279ebc24f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f00000002c0)) 22:13:49 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGREP(r0, 0x8010743f, &(0x7f0000000000)=""/174) [ 669.239996] dccp_invalid_packet: P.Data Offset(247) too large 22:13:49 executing program 5: r0 = memfd_create(&(0x7f0000000200)="00eb000000000000", 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000009fe8)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000040)={&(0x7f00003e4000/0x4000)=nil, 0x4000}) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) 22:13:49 executing program 2: r0 = socket$inet6(0xa, 0x1200000000000802, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1}, 0xfffffffffffffd8d) r1 = dup2(r0, r0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{}]}) syz_emit_ethernet(0x437, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000001780)) 22:13:49 executing program 0: connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000240)=0x6d) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000300)={r4, 0x68, &(0x7f0000000280)=[@in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e20, 0x4, @ipv4={[], [], @multicast2}, 0x4}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e24}, @in6={0xa, 0x4e21, 0x8a, @loopback, 0xffffffff}]}, &(0x7f0000000340)=0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4000000000005) sendto$inet(r3, &(0x7f0000000680)="d4934c2362d4d060791ee174e70c01247ecbbc2a700f8b40fa285f610b9f85d41b48d30110c8bff97f076c241b3f73eb826fc69d9defcffd2283985d09bf5a5ba1558387be3efdf703115f6b80e31bbe58539f9e34d17b4b7eae3cf8a69ea4bb856186db1565c7737aca37e9b9d4a841363ce9ba433e218c96ed6f757af466cdb7be52d92376c70ef50b24c9785473da00e26aff85ba30565dd8f2ab9123849d1efebb84efe8d77fb0293ac258b4d6f59b00e08e16c88e1251bce9bff7b4550020fa021961b847244ee415bfe2a6b0b10fb417725910d09cfa", 0xd9, 0x8010, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10) accept4$unix(r1, &(0x7f0000000080)=@abs, &(0x7f0000000140)=0x6e, 0x80003) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r5, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4002, 0x1) r6 = getpid() r7 = syz_open_procfs(r6, &(0x7f0000000780)='limits\x00') r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380)='nbd\x00') time(&(0x7f0000000440)) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000480)={&(0x7f0000000200), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r8, 0x102, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x200400c4) sendfile(0xffffffffffffffff, r7, &(0x7f0000000040)=0x100000, 0x8001) 22:13:49 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00142b00fe80000000e2ffffffffffffff0000aafe8000000000000000000000000000aa21000000c0c49dbf32de017bf7361d962f1f9d1f2200df6b46ae7b96d56d04f6fb7e1cd52a14e4714eae6fdddc011b957aa9dc5cf9ca9b87b6dfc72ff10f613d5f749fbe1ee2b91f525f2380ed50ee79c99a57a939e814c7e2de1fc217be9ad42fd78f6d806d07ba576e06d13b4c3d29165b38c54921aedaa20cc99aea3b5b0b18ec70c89f661a40e010accef765ed082f419804c60647cd7516ea3ece20084d269c2cd86f1355209d352ad3f1175335b388a14c97356279ebc24f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f00000002c0)) 22:13:49 executing program 3: r0 = socket$inet6(0xa, 0x8000000000000001, 0x1fe) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x100000001, 0x3}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000140)={r1, 0xc7db}, 0x8) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0xffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000180)=0x8e9, 0x4) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) munlock(&(0x7f0000ff3000/0xb000)=nil, 0xb000) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x14}}}}, 0x84) 22:13:49 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x18, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x400) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x8f, 0x30, 0xff, 0x8}, &(0x7f0000000100)=0x18) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={r2, 0x8}, 0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000180)={r2, 0x4, 0x4, [0xfffffffffffffffb, 0x1ff, 0x3, 0xffffffffffffff81]}, 0x10) [ 669.751817] dccp_invalid_packet: P.Data Offset(247) too large 22:13:49 executing program 5: r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x14, 0x80000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x500, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0x4) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000080), &(0x7f00000000c0)=0xc) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x8000000}, 0x14) [ 669.792948] x86/PAT: syz-executor0:21053 map pfn RAM range req write-combining for [mem 0x58830000-0x58833fff], got write-back [ 669.934549] x86/PAT: syz-executor0:21059 map pfn RAM range req write-combining for [mem 0x58830000-0x58833fff], got write-back 22:13:50 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x647a, 0x4) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) socketpair$inet(0x2, 0x8000f, 0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_int(r1, 0x6, 0xc, &(0x7f0000000080)=0x57, 0x4) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x9) sendmsg$kcm(r2, &(0x7f0000000380)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @broadcast}, 0x2, 0x0, 0x1, 0x3}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000000180)="1ab6aaabfdda25cd0ab6f268a3c76e16a1d2490e410782366cbdfb550879788151b0e4", 0x23}, {&(0x7f0000000200)="5f03622d2ac0f9776e83736873816bd4eb764a529b5fb56cb56f2ccc789156ce92ac73abbbaf76d4263fe2fa53203c44a7ae301d9c0d00663c680a87f4a865945f56bf43713951a8219e5a5fe26c02a14a2c6a90edbc53f30ba3cfbcc1c01c6d7efabaf174f069c39e59ef92f3a08e1ec9576b8c3a7c38e6f5008348", 0x7c}, {&(0x7f0000000280)="abb340907131fc1d6fff4ce077efdd79772e6020c5240a9df480273a3661020474cec065404861bc", 0x28}, {&(0x7f00000002c0)}], 0x5, &(0x7f0000001480)=[{0x100, 0x100, 0x9, "58b3fb922ecc8515f0c79339453c3d254cee3f0b6eb74c1d8fb32807ba7aa0bb9a71b4fd5dbf6d05be9ecc6e2715c33e78c26af70d6ef0e7c42dde6a269b5ec87bfde7a96aaaf5a62fe6b72865aac0bec12fd809de0ffbd0097c4d19745860e6548e377b1368226ddda0bf2832e24e97911131886cb74b1da9ff3fa1bf6fa3f92823ea46e41ac54ba03cb03a996124108cd87803b21394c1a71b8f786c1857052511aad66195d5412b068e34ddadd177e4d8adc2d988fdedd8b140dcc2c48220757adc91333b011c3f1b3a5d1513b122f02bdc3f42b3090c0ead141e6f43961d657af94d7cd56d770052f5a1ff0bb8"}, {0x88, 0x117, 0x76, "c6b68fafa6fcdd7181fcf118760904cf166e019f859f54300b14880b582c4368af2d866f69e935d389f7e403ab22b4350d237db693b754dcf07f2fb6a095883437525c21d96211011f9a6fee82a3dbd3bb56815269be03e8f6d74c10941b70561b011e6b7ec4acd1f9b541fbcdfd58096764395082"}, {0x68, 0x86, 0x7, "cdd185f10abfa234354c3e176349f7cecd4a58b1d746c096398b192d29075322721df894b62d89055acab497910c3e061ef2a697d9507c93951d3ed5164016177cd986790c86e39a48d98e511a54bb6a5eb388"}, {0xf8, 0x10f, 0x0, "ca6a7ab221b1882d94e6c7375b6fa06d03d461e17de8c6861954ac5e426f194b7e6031ecc70c62ee99b2c5b00fe587446f81a804a00fc07bcb708fe4b90528cd2682fa3c1bbe8549308e5dd91a80d7f7a93f9eb76c875935206a6fd4e02499e3952ee9a2c031acd4042ab590b8a50a57f49d92a582960c1302daf6d018fdf72c955368cb41c271ff7a24a4d22585e2048f603d5b90cab3ebdc686c8e195db0811121dfda0c1d3882262bcade7ce34947c2f5e7493083820d2c43ba2efe2877d638f3e5b77a5243a740a4360ed359ed0a4bd7c7b952785c620e39d9b0679a898c20934b077d2d"}, {0x50, 0x114, 0x8000, "afbbd4119e981422b491da6ec354fb0c1d232b769c1ce0e29ed951d3fd7a112163cb9fc2ae8a013146f95bf8038a30e670ecb8e6a2f9705d7ae981a06d75a7"}, {0xa8, 0x184, 0x8000, "c72132452b25158a9c0dffac9101f821622a3b96ac5e0ce96189734266e5282eec16188335d5d20153829c40dc4be1768f849539a111a3288fdef3797ea97e1ad00d834c39a25f078d0ff4f36cda1dcc0e9a97f3ee6b96f27d130330fdff69ed913116d0a645c69d3ce3c16c18b0cd92bea58fd8729260f9280156e16b730517819a1f17c0ac4285a2a79c313cd1d9fc322cb9464f757d"}, {0x20, 0x110, 0x1, "6943457eff4956185034a6"}, {0xe0, 0x6, 0x3, "4b56adbe7f1faa0bbe48aea7c5a0c694b4d3ce6060ccf5236691214665cffa713733566bfbcb0258261fec2e1af882cc4cb3e4cbe5de8a68370aa9238d07c60962368e8e9b5000c2b684f28106d61a8a46462dea40c355185952f67baaafb9241ab0445a998709cf62deebcca5edb75de7397e4850ab9ed5869631c077f9011d9b591aa72ffa824c642cf5f0b58200ae7492c142a3a4886430c38952b688ec4962dbd3fe9fd9ac7202eaf29195d30facf0df230c70dc4a7ed66096d1cfce3c2e9efbbea752954d3c4ab027ec8e31"}, {0x90, 0x11f, 0x6, "5c0b1e2dc49956b855877d9e6d4a3ac906918695858812e77db55e245fda4f0c473f6949c4d31031eb26be85df4e035e41b512d034f0ea06ce7dd8885d9c8d54060aa38e0fd14917c1ff111b8fca1e9a3dca152c1c494db5df73faa2099f5b46316ac4f6d44afb28afc21da4954525f1c32a3c6e9485f3e916453614fc"}, {0x90, 0x119, 0x3652ad84, "1a32186c555f139ed5265540fa93e334ea5b064973004f9844af66e7e96ac442aca3a160b67ca1ad30dfa4160bb69591b19aefc20cac52feb8e6ad938443347d674270fcf8e5bb97e1ad02d3ffe8d3ab30daa49365152e2741321b965268974ed7c172acc376af5504a30f2ff17e5ae72fe12eb3da34bd2530433ccc"}], 0x600, 0x4}, 0x8000) 22:13:50 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00142b00fe80000000e2ffffffffffffff0000aafe8000000000000000000000000000aa21000000c0c49dbf32de017bf7361d962f1f9d1f2200df6b46ae7b96d56d04f6fb7e1cd52a14e4714eae6fdddc011b957aa9dc5cf9ca9b87b6dfc72ff10f613d5f749fbe1ee2b91f525f2380ed50ee79c99a57a939e814c7e2de1fc217be9ad42fd78f6d806d07ba576e06d13b4c3d29165b38c54921aedaa20cc99aea3b5b0b18ec70c89f661a40e010accef765ed082f419804c60647cd7516ea3ece20084d269c2cd86f1355209d352ad3f1175335b388a14c97356279ebc24f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f00000002c0)) 22:13:50 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)=ANY=[@ANYBLOB="02180000100008000000000000000000031006000000400002000000e0000001000000000000000008001200000000000000000000000000060000000000000100000000000000000000000000e5b57ab3a6b477808222d88928d42a0000000000000000000001ac1414bb000000000000000000000000030005000004000002"], 0x80}}, 0x0) 22:13:50 executing program 2: r0 = socket$inet6(0xa, 0x1200000000000802, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1}, 0xfffffffffffffd8d) r1 = dup2(r0, r0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{}]}) syz_emit_ethernet(0x437, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000001780)) 22:13:50 executing program 5: seccomp(0x1, 0x0, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6, 0x0, 0x0, 0x407ffffffd}]}) timer_create(0x3, &(0x7f0000044000)={0x0, 0x0, 0x1}, &(0x7f0000000000)) seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_delete(0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x6f, &(0x7f00000000c0)=0x9, 0x4) 22:13:50 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000000c0)) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r4, &(0x7f0000000040)=0x100000, 0x8001) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000080)=0x4) [ 670.341811] dccp_invalid_packet: P.Data Offset(247) too large 22:13:50 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)=ANY=[@ANYBLOB="02180000100000000000000000000000030006000000000002000000e00040010000000000000000080012000000000000000000000000000600000000000000000000000000000000000000000000000000000000000001ac1414bb000000000000000000000000030005000000000002000000e00000010000000000000000"], 0x80}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x101002, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x24000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20}}, [0x9, 0x7, 0xffffffffffffff00, 0xfe66, 0x3, 0xfffffffffffffff9, 0x10000, 0xffffffffffffffff, 0x9, 0x5, 0x81, 0x80, 0x4, 0x6, 0xffffffffffff8001]}, &(0x7f0000000100)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000280)={r2}, &(0x7f00000002c0)=0x8) [ 670.562704] x86/PAT: syz-executor0:21088 map pfn RAM range req write-combining for [mem 0x589e0000-0x589e3fff], got write-back 22:13:50 executing program 3: r0 = socket(0x15, 0x0, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000180)={0x1, 0x3, 0x2, 0x7, 0x22b, 0x4, 0x6, 0x0, 0x0}, &(0x7f00000001c0)=0x20) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000200)={r1, 0x12a}, 0x8) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000240)=""/4096) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7, 0x40) ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f0000000040)={0xe, 0x20, 0xffffffffffff118a}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000140)=0x7) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000080)=0x1f7, 0x4) semop(0x0, &(0x7f0000000100)=[{0x0, 0x2, 0x1800}, {0x0, 0x8000}], 0x2) msync(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4) semop(0x0, &(0x7f00000000c0)=[{0x0, 0x80}], 0x1) [ 670.708963] x86/PAT: syz-executor0:21088 map pfn RAM range req write-combining for [mem 0x56060000-0x56063fff], got write-back 22:13:50 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00142b00fe80000000e2ffffffffffffff0000aafe8000000000000000000000000000aa21000000c0c49dbf32de017bf7361d962f1f9d1f2200df6b46ae7b96d56d04f6fb7e1cd52a14e4714eae6fdddc011b957aa9dc5cf9ca9b87b6dfc72ff10f613d5f749fbe1ee2b91f525f2380ed50ee79c99a57a939e814c7e2de1fc217be9ad42fd78f6d806d07ba576e06d13b4c3d29165b38c54921aedaa20cc99aea3b5b0b18ec70c89f661a40e010accef765ed082f419804c60647cd7516ea3ece20084d269c2cd86f1355209d352ad3f1175335b388a14c97356279ebc24f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f00000002c0)) 22:13:50 executing program 2: r0 = socket$inet6(0xa, 0x1200000000000802, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1}, 0xfffffffffffffd8d) r1 = dup2(r0, r0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{}]}) syz_emit_ethernet(0x437, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000001780)) [ 670.971205] dccp_invalid_packet: P.Data Offset(247) too large [ 670.992039] audit: type=1326 audit(1539728031.030:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=21085 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 22:13:51 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x2) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') recvfrom$unix(r2, &(0x7f0000000140)=""/164, 0xa4, 0x10000, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) ioctl$KVM_S390_INTERRUPT_CPU(r5, 0x4010ae94, &(0x7f0000000200)={0x2, 0x1, 0x80000001}) sendfile(r0, r5, &(0x7f0000000040)=0x100000, 0x8001) fcntl$setflags(r4, 0x2, 0x1) write$cgroup_type(r5, &(0x7f0000000000)='threaded\x00', 0x9) 22:13:51 executing program 3: unshare(0x20400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x2000, 0x0) fallocate(r1, 0x0, 0x0, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f00000000c0)='posix_acl_access\x00'}, 0x30) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x9, 0x6, 0x4, 0x1, 0x0, 0x2, 0x4, 0xb, 0x3ff, 0xcc0, 0x1fe, 0x3f, 0x680, 0x9, 0x7, 0x3, 0x7fff, 0x6, 0x87d, 0x7, 0x4, 0x3, 0x3, 0x0, 0x4, 0x1, 0x8001, 0x9, 0x6, 0x2, 0x100000001, 0x60674c07, 0x2, 0x8, 0x3a5d4ab7, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x3, 0x1}, 0x108, 0x8, 0x8, 0x4, 0x3, 0x2, 0x9}, r2, 0x1, 0xffffffffffffffff, 0x9) 22:13:51 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x800000000002) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00142b00fe80000000e2ffffffffffffff0000aafe8000000000000000000000000000aa21000000c0c49dbf32de017bf7361d962f1f9d1f2200df6b46ae7b96d56d04f6fb7e1cd52a14e4714eae6fdddc011b957aa9dc5cf9ca9b87b6dfc72ff10f613d5f749fbe1ee2b91f525f2380ed50ee79c99a57a939e814c7e2de1fc217be9ad42fd78f6d806d07ba576e06d13b4c3d29165b38c54921aedaa20cc99aea3b5b0b18ec70c89f661a40e010accef765ed082f419804c60647cd7516ea3ece20084d269c2cd86f1355209d352ad3f1175335b388a14c97356279ebc24f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f00000002c0)) 22:13:51 executing program 2: r0 = socket$inet6(0xa, 0x1200000000000802, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1}, 0xfffffffffffffd8d) r1 = dup2(r0, r0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{}]}) syz_emit_ethernet(0x437, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000001780)) 22:13:51 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x4000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000040)={0x6, 0x10, [0x2, 0x8, 0x100000000, 0xffffffffffffff7f]}) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000180)={0x2, 0x18, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_key={0x0, 0x9, 0x0, 0x0, "fba980f90c26670e00b62f994cc28b8c162664870e20555e08c0f4cfb127bbef5dbbb952231e8ecf19e50d5c3e26735f40c69433c7d6c4721cd7883c071fc4b630505a8d53b1883f211ddf6e95e1d876b483d46561a4765332d4ba0b"}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0xff11}}, 0x0) [ 671.383054] x86/PAT: syz-executor0:21114 map pfn RAM range req write-combining for [mem 0x561f0000-0x561f3fff], got write-back 22:13:51 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fchdir(r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x5d}}, &(0x7f0000000180)="4550d4001f91eb2f57b73224433025039c3096b20c6b439348bf689c08608537d6223e63adc0624fbae2e109359dce6922324ccc13160b68cae6430697259dd52d1f73e16adc3592d02925dffae85e9cd2398c6c67c87fb5b12602f145b484be45912966e8b7e2f66069c56dd76c1dc112013c3a6b4de999cdcdc8855aee3437dcc87580cfbe546fbbfbc0eb56d8bbbea2904a7c73c2", 0x0, 0x60, &(0x7f0000000000)=""/195}, 0x16) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000300)={0x8000, 0x375, 0x2}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={0x80, {0x2, 0x4e23}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e22, @remote}, 0x1, 0x7f, 0x4, 0xfb, 0x73, &(0x7f0000000240)='lo\x00', 0x10001, 0x8, 0x400}) [ 671.654762] dccp_invalid_packet: P.Data Offset(247) too large 22:13:51 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [], {0x0, 0x989680}}) r1 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x5, 0x1) poll(&(0x7f0000000080)=[{r0}, {r0, 0x8000}, {r1, 0x2}, {r0, 0x2}, {r0, 0x6}, {r0, 0x210a}, {r0}, {r0, 0x1092}], 0x8, 0x3) 22:13:52 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x100, 0x0) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x18, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 22:13:52 executing program 2: r0 = socket$inet6(0xa, 0x1200000000000802, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1}, 0xfffffffffffffd8d) dup2(r0, r0) syz_emit_ethernet(0x437, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000001780)) 22:13:52 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x800000000002) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00142b00fe80000000e2ffffffffffffff0000aafe8000000000000000000000000000aa21000000c0c49dbf32de017bf7361d962f1f9d1f2200df6b46ae7b96d56d04f6fb7e1cd52a14e4714eae6fdddc011b957aa9dc5cf9ca9b87b6dfc72ff10f613d5f749fbe1ee2b91f525f2380ed50ee79c99a57a939e814c7e2de1fc217be9ad42fd78f6d806d07ba576e06d13b4c3d29165b38c54921aedaa20cc99aea3b5b0b18ec70c89f661a40e010accef765ed082f419804c60647cd7516ea3ece20084d269c2cd86f1355209d352ad3f1175335b388a14c97356279ebc24f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f00000002c0)) [ 672.197754] x86/PAT: syz-executor0:21148 map pfn RAM range req write-combining for [mem 0x561f0000-0x561f3fff], got write-back [ 672.315521] dccp_invalid_packet: P.Data Offset(247) too large 22:13:52 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x9, 0x0, 0x7}, 0x10) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(&(0x7f0000000380)=ANY=[], &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x1000818, &(0x7f0000000200)) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="04"], 0x1) r1 = open$dir(&(0x7f0000000040)='./file0/bus\x00', 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x1f, &(0x7f00000000c0)=0x4, 0x4) sendfile(r0, r1, &(0x7f0000000780), 0xbb1) chdir(&(0x7f0000000280)='./file0\x00') syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) 22:13:52 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000080)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) timerfd_create(0x1, 0x80000) setitimer(0x2, &(0x7f0000000100), &(0x7f0000000140)) dup3(r0, r0, 0x80000) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="021808006c0300000000000000000000000012000100020000000000ba00000000007c0009000000b40f000000000000ff01000000000000000000000000000100000000000000000000ffffac1414aa0000070013be00000300000000000000af00000000deffff05000000000000009067d8"], 0x258}}, 0x0) [ 672.600619] audit: type=1804 audit(1539728032.640:35): pid=21159 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="/newroot/592/file0/bus" dev="ramfs" ino=91761 res=1 [ 672.694522] audit: type=1804 audit(1539728032.730:36): pid=21163 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor3" name="/newroot/592/file0/bus" dev="ramfs" ino=91761 res=1 22:13:52 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000e78a42), 0xffae, 0x8084, &(0x7f00004d4000)={0x2, 0x4e20}, 0x10) ioctl$int_in(r0, 0x4000005452, &(0x7f0000f75000)=0x4) getsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x4) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) 22:13:52 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="8bd6005020d9eb0fc5745444e0c22cb0", 0x10) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b0054381e5b3b60ced5c54dbb7", 0x10) 22:13:52 executing program 2: r0 = socket$inet6(0xa, 0x1200000000000802, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1}, 0xfffffffffffffd8d) syz_emit_ethernet(0x437, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60c22df704011100fe800000000000000000000000000000fe8000000000000000000000000000aa00004e2004019078000087ae00ca83452b00b32def4f1142b6793bb530f9b20e90aa25d5c2b9431efd840a07c1922833b2c789aefbbaee9f63cbab38a8acfb8dba0595ecb683e74ea2bc44a7aee9c52e18ca01c06a5c354712b8b1ff75f45ba55a3487c83849023d37e037d2d3e3e842e9ba099e9ed8775d1173d8e78335aa65d58f54c1d78d4fce897cfefa24b7f268f90be76c7f4e1bfe4d84a869353e931c3732afea55697618a1318ecb657b34172b93fd59d7988d43630cf81e976a0ea01fd8b2547ab593bc605c985f56664b84ed3c9f90ffb666e030c794e2d2d5070af38d83dc275da88cfe6910b2ded59f6c418af5d247237eceb14857c1d7c3ee32e729d9793040f8f4e432eb875a89fe31cbed117f0e76643797169fba3dac3f377d145ce97980ba626da7a279e698a9e040a22d63c535f0ee06adb59e9e06ad7295e6601f3a5fe9b581975993c6c775734212bccb26288d42a672c965d40e80d0e1908f04425a60a08241378ec7ff88315de073b64c5f9647e51732be34988e0948f12e6c560bedbece811bca501d4389dbfe20e4df5160cd7324c0670c7b3e8980b061e31b1c8461d6f7a63f9e9fd24326924c076e01631a0b9703a6106accfaa064075fa1f16e16c5171b6a324e8642b2ab76618b824110c312ab12d9f65d6a980634a6a7cba8bf89e01a91259f446232476a1c490982636b78d1300befab1a2f6e8261e07336c5692db37bb7d3cebf4a942b62f2fa6cceb7e488aa02b2e52c6f82bd3792845fff41cce52e0469d14821ce11491864860c11421a92dae3152eb23106a0c679d2b1f0a9809b56abdcf893f9531508f24e64ec911fd8e8b3c8fd2291f1a7b910222c38533d4caadac9acd194be7e53549c1719bdf668887a0e19db83b5356f8f7d93cbef1ef3505dcc40d0d2a02a2745ab518979b9c3774babfe8e70ead767c7a00289b8cc6e51d1a957548270cb3f5064961a88f61b34f9442d78ae5a8551713f9afb4269d689f9adb6b4a902a637184f7f899efe9fa0ddb45cd1076c4eeeda51ca8dc20dcfc9cc5f56768073b3f4c2c9f543324a4fd0b8bc7b95e232bf85bf222394fa4336ab4007d7ad2dc85afa6eb79ad2624c4be6c674ee98fce9a51786b7cc2b5044de114d36d2690e13bcedf96590c7d5aeb8040b74c4d6a5aa38a7c1f0857522f4f968795056b9a7034dc3444784f9486b575e44dec3216d72845500e6329701010000000000003411001d1d47ba42d70e7af8e91246c02d7e37ff0eb60abebc37dd00315b4fbb09e77a6b5f7e8441818ebcfafecf622731f1db8a11fa2de8e30d808bedbfee104b3b1100f5094675521da07dd2a28be7e486b325a0f0e6d75116be1bbc2aa20deb64a6e4e7b824b12d009e6f1802f5a8e31559b125d71d00a5684fbde4668f5af1eb4ca04fa7c4ef4d2a194b0856e007"], &(0x7f0000001780)) [ 672.795634] audit: type=1804 audit(1539728032.780:37): pid=21167 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor3" name="/newroot/592/file0/bus" dev="ramfs" ino=91761 res=1 22:13:53 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)=ANY=[@ANYBLOB="02180000100000000000000000000000030006000000000002000000e0000001000000000000000008001200000000000000000000000000060000000000000000000000000000000000000000000000000001ac1414bb000000000000000000000000030005000000000002000000e00000010000000000000000"], 0x80}}, 0x0) 22:13:53 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x800000000002) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00142b00fe80000000e2ffffffffffffff0000aafe8000000000000000000000000000aa21000000c0c49dbf32de017bf7361d962f1f9d1f2200df6b46ae7b96d56d04f6fb7e1cd52a14e4714eae6fdddc011b957aa9dc5cf9ca9b87b6dfc72ff10f613d5f749fbe1ee2b91f525f2380ed50ee79c99a57a939e814c7e2de1fc217be9ad42fd78f6d806d07ba576e06d13b4c3d29165b38c54921aedaa20cc99aea3b5b0b18ec70c89f661a40e010accef765ed082f419804c60647cd7516ea3ece20084d269c2cd86f1355209d352ad3f1175335b388a14c97356279ebc24f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f00000002c0)) 22:13:53 executing program 2: socket$inet6(0xa, 0x1200000000000802, 0x0) syz_emit_ethernet(0x437, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000001780)) 22:13:53 executing program 3: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x84, r1, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x10}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x20}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2d0}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffffffffff9}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000090}, 0x84) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000000), 0x4) 22:13:53 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) get_mempolicy(&(0x7f0000000100), &(0x7f00003e8000), 0x401, &(0x7f0000a8c000/0x3000)=nil, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) [ 673.314134] dccp_invalid_packet: P.Data Offset(247) too large 22:13:53 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)=ANY=[@ANYBLOB="0218000010000000000000000000000003000600000000000000000000000000080012000000000000000000000000000600000000000000000000000000000000000000000000000000000000000001ac1414bb000000000000000000000000030005000000000002000000e000000100000000000000000000000000000000"], 0x80}}, 0x0) 22:13:53 executing program 2: syz_emit_ethernet(0x437, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000001780)) 22:13:53 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x60002, 0x0) io_setup(0x20000000000006, &(0x7f00000000c0)=0x0) io_submit(r2, 0x111, &(0x7f0000001540)=[&(0x7f0000000140)={0x4068, 0x0, 0xd, 0x0, 0x0, r1, &(0x7f0000000000), 0xfffffce4}]) 22:13:53 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00142b00fe80000000e2ffffffffffffff0000aafe8000000000000000000000000000aa21000000c0c49dbf32de017bf7361d962f1f9d1f2200df6b46ae7b96d56d04f6fb7e1cd52a14e4714eae6fdddc011b957aa9dc5cf9ca9b87b6dfc72ff10f613d5f749fbe1ee2b91f525f2380ed50ee79c99a57a939e814c7e2de1fc217be9ad42fd78f6d806d07ba576e06d13b4c3d29165b38c54921aedaa20cc99aea3b5b0b18ec70c89f661a40e010accef765ed082f419804c60647cd7516ea3ece20084d269c2cd86f1355209d352ad3f1175335b388a14c97356279ebc24f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f00000002c0)) 22:13:53 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x200200, 0x0) write$FUSE_NOTIFY_DELETE(r1, &(0x7f00000001c0)={0x29}, 0x29) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000700)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c20fca06e4e66d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a657534726a2cfd6f5cc2ff9cb8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217eb2f", 0xc0) keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r2, r2}, &(0x7f00000004c0)=""/163, 0xa3, &(0x7f0000000580)={&(0x7f00000002c0)={'cmac(camellia-generic)\x00'}}) r3 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x0, 0x440000) ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f0000000140)) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") 22:13:54 executing program 3: r0 = memfd_create(&(0x7f0000001fc1)="00ac3d9dd2dbe6bfb408ed634a8e84d44e129b1f09bd112b865416a3b3ae309f393fef6fa46b01323ea19c86781c9f841935de975f097ef3591222705ec10f", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) flock(r0, 0xa) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000000)=""/170, &(0x7f00000000c0)=0xaa) connect$unix(r0, 0xfffffffffffffffd, 0x0) r1 = gettid() ptrace$getsig(0x4202, r1, 0x4, &(0x7f0000000100)) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)) 22:13:54 executing program 2: syz_emit_ethernet(0x0, &(0x7f0000000700)=ANY=[], &(0x7f0000001780)) [ 674.130993] dccp_invalid_packet: P.Data Offset(247) too large 22:13:54 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) fcntl$getown(r0, 0x9) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x18, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x4000, 0x0) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000200)="8dac8f8d1e9c9cc4ed392713d6f8e88bec70a48bc3b77d80abc0d3e57868165d55d625293c86a17d6253d0f9b53fad065649a6c96603b28bdcfb4e90e09dec6b835e0fad97461e26263e7242bd81bf80") 22:13:54 executing program 0: capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)) r0 = socket$inet6(0xa, 0x1, 0x6) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000001c00)=@in={0x2, 0x4e23, @broadcast}, 0x80, &(0x7f0000000280), 0x0, &(0x7f00000049c0)=ANY=[@ANYBLOB="30000000000000000000000007290b536be7df460f3892f1abe2d869cbd26c5ff4140e6522cfba156800000000000000"], 0x30}}], 0x1, 0x0) 22:13:54 executing program 2: syz_emit_ethernet(0x0, &(0x7f0000000700)=ANY=[], &(0x7f0000001780)) 22:13:54 executing program 3: r0 = memfd_create(&(0x7f0000001fc1)="00ac3d9dd2dbe6bfb408ed634a8e84d44e129b1f09bd112b865416a3b3ae309f393fef6fa46b01323ea19c86781c9f841935de975f097ef3591222705ec10f", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) flock(r0, 0xa) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000000)=""/170, &(0x7f00000000c0)=0xaa) connect$unix(r0, 0xfffffffffffffffd, 0x0) r1 = gettid() ptrace$getsig(0x4202, r1, 0x4, &(0x7f0000000100)) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)) 22:13:54 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00142b00fe80000000e2ffffffffffffff0000aafe8000000000000000000000000000aa21000000c0c49dbf32de017bf7361d962f1f9d1f2200df6b46ae7b96d56d04f6fb7e1cd52a14e4714eae6fdddc011b957aa9dc5cf9ca9b87b6dfc72ff10f613d5f749fbe1ee2b91f525f2380ed50ee79c99a57a939e814c7e2de1fc217be9ad42fd78f6d806d07ba576e06d13b4c3d29165b38c54921aedaa20cc99aea3b5b0b18ec70c89f661a40e010accef765ed082f419804c60647cd7516ea3ece20084d269c2cd86f1355209d352ad3f1175335b388a14c97356279ebc24f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f00000002c0)) 22:13:54 executing program 4: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x4) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000240)=""/4096) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') write$P9_RSETATTR(r0, &(0x7f0000000100)={0x7, 0x1b, 0x1}, 0x7) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000014c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="88000000", @ANYRES16=r1, @ANYBLOB="000426bd7000fedbdf2504000000080004000455ffdac130f3da10b7eccb66dc9b9e0064000100080005000200000008000200a9f700000800f1ff020000000800ffff7ece0000080009004500000014000300ff010000000000000000984000000000000108000800f9ffffff080000060000002000006a0896e7f312fe8da6e822804b0c587339f096f4ba98281d410761a2a8cb18f1f419e73382b25baadfcf13e030c38f808085fe0cebc752f97ec0faf8c5805a"], 0x88}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000180)=ANY=[@ANYBLOB="02180000100000000000000000000000de2fa819a0ce5e97aaa0000002000000e00000010000000000000000080012000000000000000000000000000600000000000000000000000000000000000413000000000000000000000001ac1414bb00000000000080fa6cc4000003000500000000000200000000000000000000007e9701c370c706ad185d79edd6303f480fd12a5b0cf38ced239126108845bf49d632965ff12feed064775284879d56c3bc04bc8f8fd89c9a282cee"], 0x80}}, 0x0) 22:13:54 executing program 0: process_vm_writev(0x0, &(0x7f0000002800), 0x0, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000000), 0xc, &(0x7f00000006c0)={&(0x7f0000001fc0)=ANY=[]}}, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000b00)=[{&(0x7f0000000a40)=""/178, 0xb2}], 0x1, &(0x7f0000000700)=[{&(0x7f0000000c00)=""/251, 0xfb}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000140)=@hci, 0x80, &(0x7f0000000d00), 0x0, &(0x7f00000024c0)=""/129, 0x81}, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x1, 0x0) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000e00)=""/143) process_vm_writev(0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f00000001c0)=""/19, 0x13}, {&(0x7f0000000280)=""/37, 0x25}, {&(0x7f0000000d00)=""/226, 0xe2}, {&(0x7f0000000980)=""/69, 0x45}], 0x5, &(0x7f0000002180), 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 22:13:55 executing program 2: syz_emit_ethernet(0x0, &(0x7f0000000700)=ANY=[], &(0x7f0000001780)) [ 675.053715] dccp_invalid_packet: P.Data Offset(247) too large [ 675.133154] QAT: Invalid ioctl 22:13:55 executing program 3: r0 = gettid() r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/current\x00', 0x2, 0x0) fcntl$addseals(r1, 0x409, 0x8) r2 = syz_open_procfs(r0, &(0x7f0000000040)="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") ioctl$TIOCGPTPEER(r2, 0x5441, 0x101) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x60, &(0x7f0000000000)={0x0, @empty, 0x0, 0x0, "736800000300", 0x0, 0xffffffffffffffff}, 0x2c) [ 675.243321] QAT: Invalid ioctl 22:13:55 executing program 2: syz_emit_ethernet(0x1, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f0000001780)) 22:13:55 executing program 5: r0 = socket$inet6(0xa, 0x1000000000004, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r1, &(0x7f00006f7fe8)=[{{0x0, 0x2710}, 0x1, 0x45, 0x400000002}], 0xf6) 22:13:55 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x18, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) socketpair(0xa, 0x7, 0xd80000000000, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) lseek(r2, 0x7ffffffffffffffb, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000826fe0)={0x0, 0x200000000000001, 0x200000000008}) ioctl$TCSBRKP(r1, 0x5425, 0x7) 22:13:55 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) add_key(&(0x7f0000000740)="93431747bf70a52ba6e52dda17012d3eae80741e9c0e37e8562ddd5c611ce0c7f7dc1a920641c128d61e051472128747966f1160fd7053e4ede708f600dc93bd27fefc5295fd26701e226b01218d8bc44e0fbe2e7645d3a8ed842d62e22b7ed62d454fa2c95e7e342700c07b452677b1a419dee1b7d73a4fe417fd9894219cac651c796460dbd7471db958635a34ae13d799ef67d952a017e10ac23a34216fa4302ccdbbc4d07514e03296edfe97c1f1e38562c7ff860ff5ebb7", &(0x7f0000000180)={'syz'}, &(0x7f0000000500), 0x0, 0xfffffffffffffffb) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x80, 0x0) add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000140)="03", 0x1, 0x0) write$P9_RCREATE(r1, &(0x7f0000000040)={0x18, 0x73, 0x2, {{0x50, 0x2, 0x7}, 0x3ff}}, 0x18) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYBLOB="000000000000db835aba4e0c698b497aeb019987a4b2efa4fa470876400af718e3edd01414a92ae74a565f16c3a21684ebdbfcb00b689785f4ad442b5a7f510f6a206455054f3e538c4cce109262bf4b4fb9f4005beee51248bd20463640a668c3d2800df6b6323684350497b63030efc846c8e76c56fd02e81f518e3ca7"]) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r2, r2}, &(0x7f00000006c0)=""/83, 0x53, &(0x7f0000000240)={&(0x7f00000000c0)={'crc32\x00'}, &(0x7f00000001c0)}) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x358, 0x150, 0x150, 0x150, 0x0, 0x150, 0x288, 0x288, 0x288, 0x288, 0x288, 0x3, &(0x7f0000000100), {[{{@ipv6={@mcast1, @remote, [0xffffffff, 0xffffffff, 0xff000000, 0xffffffff], [0x0, 0xffffffff], 'syzkaller1\x00', 'ipddp0\x00', {0xff}, {}, 0x88, 0x2, 0x4, 0x11}, 0x0, 0x120, 0x150, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x4d5, 0x4d2, 0x2, 0xc, 0x1}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x2}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x6, 0x8000, 0x3}, {0x1, 0xee, 0x4}, 0x1, 0xfac9}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x2}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x100000001, 0xffff, 0x7, 'pptp\x00', 0xe75}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") socket$inet6_sctp(0xa, 0x5, 0x84) 22:13:55 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00142b00fe80000000e2ffffffffffffff0000aafe8000000000000000000000000000aa21000000c0c49dbf32de017bf7361d962f1f9d1f2200df6b46ae7b96d56d04f6fb7e1cd52a14e4714eae6fdddc011b957aa9dc5cf9ca9b87b6dfc72ff10f613d5f749fbe1ee2b91f525f2380ed50ee79c99a57a939e814c7e2de1fc217be9ad42fd78f6d806d07ba576e06d13b4c3d29165b38c54921aedaa20cc99aea3b5b0b18ec70c89f661a40e010accef765ed082f419804c60647cd7516ea3ece20084d269c2cd86f1355209d352ad3f1175335b388a14c97356279ebc24f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f00000002c0)) 22:13:55 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000100)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@remote}}, &(0x7f0000000200)=0xe8) ioprio_get$uid(0x3, r1) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b00)=ANY=[], 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7472616365667300a57fc518952ce9fe8989eda1541db9181b5fa86598d78c65ffbba394d9b6040e1255dbfbb6ace61f8010eab2d737c5d013a04c39e7985ddb041e9a3c0b0295cb27ada93829f315dcd67cc3d1845802e42b78b421545766b66bc1a53157bb3950d8eb00160c095533c7e77c47df13a2214a24f510ace204f3927aeb665f5f297c2742755a5140fb7269729230d616f001cc2f55ffab73a8766ad4508480eb86367d3f1af64c8d01dcc5562d7534f3265a36c3d410b9ed7af2642d0090ac47f852dc897fbc358456bc66967f2fa894e07b18e0496e46d88b899475d851cc69b2aa3ed52f070dab3d65217f3a3de0d678f487346ae5701f11ef5595fd2173d7e9221de633cb0a0a07fb37ea4ff581ed5e85c33fed406cc3217957093b1e5419c3a51d0468d6303f474f0de6e116a37d69a93d9f45740f1eb0ef581b06036d2a45b0ceec8276db4484dbaa52d45be697961ff8a30d55a6ee8bfed0907f39509ef63364dadf0fbbca3217b50b239699cde8fefc3ec9eee3c647ed22485a907e108e8a96b0943bcc953db27560f81a8f7a48522d11c394", 0xffffffffffffffff, &(0x7f0000000000)) 22:13:55 executing program 3: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000140)='.\x00', 0x86000130) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read(r0, &(0x7f0000000000)=""/103, 0x67) close(r0) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x3) msgget(0x1, 0x80002) r3 = msgget$private(0x0, 0x95) msgrcv(r3, &(0x7f0000000180)={0x0, ""/217}, 0xe1, 0x1, 0x2800) bind$unix(r1, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) [ 675.959126] dccp_invalid_packet: P.Data Offset(247) too large 22:13:56 executing program 2: syz_emit_ethernet(0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000001780)) 22:13:56 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)=ANY=[@ANYBLOB="02180000100000000000000000000000030006000000000002000000e00000010800000000000000080012000000000000000000000000000600000000000000000000000000000000000000000000000000000000000001ac1414bb000000000000000000000000030005000000000002000000e00000010000000000000000"], 0x80}}, 0x0) 22:13:56 executing program 1: socket$inet6(0xa, 0x3, 0x800000000002) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00142b00fe80000000e2ffffffffffffff0000aafe8000000000000000000000000000aa21000000c0c49dbf32de017bf7361d962f1f9d1f2200df6b46ae7b96d56d04f6fb7e1cd52a14e4714eae6fdddc011b957aa9dc5cf9ca9b87b6dfc72ff10f613d5f749fbe1ee2b91f525f2380ed50ee79c99a57a939e814c7e2de1fc217be9ad42fd78f6d806d07ba576e06d13b4c3d29165b38c54921aedaa20cc99aea3b5b0b18ec70c89f661a40e010accef765ed082f419804c60647cd7516ea3ece20084d269c2cd86f1355209d352ad3f1175335b388a14c97356279ebc24f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f00000002c0)) 22:13:56 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256\x00'}, 0x58) recvmsg(r0, &(0x7f0000000540)={&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/166, 0xa6}, {&(0x7f0000000040)=""/13, 0xd}, {&(0x7f00000003c0)=""/207, 0xcf}, {&(0x7f0000000180)=""/59, 0x3b}], 0x4, &(0x7f00000004c0)=""/100, 0x64, 0x9}, 0x2) getsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000580), &(0x7f00000005c0)=0x4) close(r0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x218f, 0x700) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000200)=ANY=[@ANYBLOB="040000000000000007000000a8d3842d00000000000000000104000000000000f90b0000000000000001000000000000030000003d4bae5900000000020000000000000000000000050000005d00000000000000000000000000000000000000000000000000000009000000020000000000000000000000c70f00000000000000100000000000000200000000000000a3000000050000000900000001000000000000000000000002000000090000000000000000000000000000000000000000479c00000000000000"]) [ 676.796855] dccp_invalid_packet: P.Data Offset(247) too large 22:13:56 executing program 5: r0 = memfd_create(&(0x7f0000000040)="6d81351e39cfc228a4a17200", 0x1000000000000005) lseek(r0, 0x0, 0x4) userfaultfd(0x800) write$apparmor_current(r0, &(0x7f00000000c0)=@profile={'stack ', '-\x00'}, 0x8) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={r1, r2/1000+10000}, 0x10) 22:13:56 executing program 2: syz_emit_ethernet(0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000001780)) 22:13:57 executing program 4: openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x40200, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000180)=ANY=[@ANYBLOB="02180000100000000002000000000040030006000000000002000000e000000100000000000000000800120000000000000000000000000006000000000000000400460000000000000000000000000000000000eba4639f00000001ac1414bb000015000000000000000000030005000000000002000000e00000010800000000000000"], 0x80}}, 0x0) 22:13:57 executing program 1: socket$inet6(0xa, 0x3, 0x800000000002) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00142b00fe80000000e2ffffffffffffff0000aafe8000000000000000000000000000aa21000000c0c49dbf32de017bf7361d962f1f9d1f2200df6b46ae7b96d56d04f6fb7e1cd52a14e4714eae6fdddc011b957aa9dc5cf9ca9b87b6dfc72ff10f613d5f749fbe1ee2b91f525f2380ed50ee79c99a57a939e814c7e2de1fc217be9ad42fd78f6d806d07ba576e06d13b4c3d29165b38c54921aedaa20cc99aea3b5b0b18ec70c89f661a40e010accef765ed082f419804c60647cd7516ea3ece20084d269c2cd86f1355209d352ad3f1175335b388a14c97356279ebc24f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f00000002c0)) [ 677.366005] dccp_invalid_packet: P.Data Offset(247) too large 22:14:09 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000280)={"62726f75746500007e8800", 0x0, 0x4, 0x4e, [], 0x4, &(0x7f0000000140)=[{}, {}, {}, {}], &(0x7f0000000200)=""/78}, &(0x7f0000000180)=0x78) r2 = userfaultfd(0x807ff) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) openat$cgroup_type(r3, &(0x7f0000000480)='cgroup.type\x00', 0x2, 0x0) close(r2) clone(0x0, &(0x7f00000001c0), &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000140)) read(r0, &(0x7f0000000400)=""/100, 0x64) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1, 0x1) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000300)={'nat\x00'}, &(0x7f0000000380)=0x78) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x80000, r4}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000500)={0x0, r6, 0x9}) ioctl$RTC_ALM_SET(r5, 0x40247007, &(0x7f0000000100)={0xe, 0x1d, 0x2, 0x3, 0x2, 0x5, 0x6, 0xce, 0xffffffffffffffff}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f00000001c0)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x3000}) 22:14:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r1, r2, &(0x7f00000002c0), 0x10000000000443) 22:14:09 executing program 2: syz_emit_ethernet(0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000001780)) 22:14:09 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00003a3000)='/dev/input/event#\x00', 0x0, 0x1) ioctl$TIOCSBRK(r0, 0x40044591) write$evdev(r0, &(0x7f0000000140), 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x7ff, 0x2000) 22:14:09 executing program 1: socket$inet6(0xa, 0x3, 0x800000000002) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00142b00fe80000000e2ffffffffffffff0000aafe8000000000000000000000000000aa21000000c0c49dbf32de017bf7361d962f1f9d1f2200df6b46ae7b96d56d04f6fb7e1cd52a14e4714eae6fdddc011b957aa9dc5cf9ca9b87b6dfc72ff10f613d5f749fbe1ee2b91f525f2380ed50ee79c99a57a939e814c7e2de1fc217be9ad42fd78f6d806d07ba576e06d13b4c3d29165b38c54921aedaa20cc99aea3b5b0b18ec70c89f661a40e010accef765ed082f419804c60647cd7516ea3ece20084d269c2cd86f1355209d352ad3f1175335b388a14c97356279ebc24f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f00000002c0)) 22:14:09 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x4000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000080)={0x9}, 0x4) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x1, 0x0) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RCLUNK(r2, &(0x7f0000000100)={0x7, 0x79, 0x1}, 0x7) ioctl$VT_RELDISP(r2, 0x5605) r4 = getgid() write$FUSE_CREATE_OPEN(r2, &(0x7f0000000200)={0xa0, 0xffffffffffffffda, 0x1, {{0x7, 0x2, 0x4, 0x6, 0x3, 0x9, {0x0, 0x3, 0x3, 0x2, 0x7e3, 0x0, 0x2, 0x9e, 0x7f, 0x6de8, 0x3f, r3, r4, 0x8, 0x200}}, {0x0, 0x5}}}, 0xa0) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0) unshare(0x0) [ 689.663563] dccp_invalid_packet: P.Data Offset(247) too large 22:14:09 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0xff) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f00000000c0)=0x1000001003, 0x4) 22:14:10 executing program 2: syz_emit_ethernet(0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000001780)) 22:14:10 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r0, 0x0, &(0x7f0000000280)="153f6234488dd25d766070") syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00142b00fe80000000e2ffffffffffffff0000aafe8000000000000000000000000000aa21000000c0c49dbf32de017bf7361d962f1f9d1f2200df6b46ae7b96d56d04f6fb7e1cd52a14e4714eae6fdddc011b957aa9dc5cf9ca9b87b6dfc72ff10f613d5f749fbe1ee2b91f525f2380ed50ee79c99a57a939e814c7e2de1fc217be9ad42fd78f6d806d07ba576e06d13b4c3d29165b38c54921aedaa20cc99aea3b5b0b18ec70c89f661a40e010accef765ed082f419804c60647cd7516ea3ece20084d269c2cd86f1355209d352ad3f1175335b388a14c97356279ebc24f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f00000002c0)) 22:14:10 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x0, 0x2) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000180)=0xc00) r1 = socket$key(0xf, 0x3, 0x2) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000000)={0x1, [0x3ff]}, &(0x7f0000000040)=0x6) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x18, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) [ 690.163034] dccp_invalid_packet: P.Data Offset(247) too large 22:14:10 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f00000002c0)="153f6234488dd25d766070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x1}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x6b7, 0x0) 22:14:10 executing program 2: syz_emit_ethernet(0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000001780)) 22:14:10 executing program 5: r0 = socket$inet6(0xa, 0x81000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x2000800e, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2, 0x7000028]}, 0x10) recvfrom(r1, &(0x7f0000f9cf9b)=""/101, 0x389756b1353686c0, 0x120, 0x0, 0xffffffffffffffeb) 22:14:10 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r0, 0x0, &(0x7f0000000280)="153f6234488dd25d766070") syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00142b00fe80000000e2ffffffffffffff0000aafe8000000000000000000000000000aa21000000c0c49dbf32de017bf7361d962f1f9d1f2200df6b46ae7b96d56d04f6fb7e1cd52a14e4714eae6fdddc011b957aa9dc5cf9ca9b87b6dfc72ff10f613d5f749fbe1ee2b91f525f2380ed50ee79c99a57a939e814c7e2de1fc217be9ad42fd78f6d806d07ba576e06d13b4c3d29165b38c54921aedaa20cc99aea3b5b0b18ec70c89f661a40e010accef765ed082f419804c60647cd7516ea3ece20084d269c2cd86f1355209d352ad3f1175335b388a14c97356279ebc24f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f00000002c0)) 22:14:10 executing program 3: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") clone(0x210007fa, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) 22:14:10 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x18, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 22:14:10 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x89b0, &(0x7f00000001c0)={'veth1_to_bond\x00', &(0x7f0000000180)=@ethtool_test}) close(r2) close(0xffffffffffffffff) 22:14:10 executing program 2: syz_emit_ethernet(0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000001780)) [ 690.815131] dccp_invalid_packet: P.Data Offset(247) too large 22:14:10 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000280)={'stack ', '&&\x00'}, 0x9) [ 691.072703] ================================================================== [ 691.080132] BUG: KMSAN: uninit-value in aa_fqlookupn_profile+0x32d/0x720 [ 691.082185] CPU: 0 PID: 21408 Comm: syz-executor0 Not tainted 4.19.0-rc7+ #69 [ 691.082185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 691.082185] Call Trace: [ 691.082185] dump_stack+0x306/0x460 [ 691.082185] ? _raw_spin_lock_irqsave+0x227/0x340 [ 691.082185] ? aa_fqlookupn_profile+0x32d/0x720 22:14:11 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r0, 0x0, &(0x7f0000000280)="153f6234488dd25d766070") syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60d8652b00142b00fe80000000e2ffffffffffffff0000aafe8000000000000000000000000000aa21000000c0c49dbf32de017bf7361d962f1f9d1f2200df6b46ae7b96d56d04f6fb7e1cd52a14e4714eae6fdddc011b957aa9dc5cf9ca9b87b6dfc72ff10f613d5f749fbe1ee2b91f525f2380ed50ee79c99a57a939e814c7e2de1fc217be9ad42fd78f6d806d07ba576e06d13b4c3d29165b38c54921aedaa20cc99aea3b5b0b18ec70c89f661a40e010accef765ed082f419804c60647cd7516ea3ece20084d269c2cd86f1355209d352ad3f1175335b388a14c97356279ebc24f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f00000002c0)) [ 691.082185] kmsan_report+0x1a2/0x2e0 [ 691.082185] __msan_warning+0x7c/0xe0 [ 691.082185] aa_fqlookupn_profile+0x32d/0x720 [ 691.082185] ? __msan_warning+0x71/0xe0 [ 691.082185] aa_label_strn_parse+0x171e/0x1e30 [ 691.082185] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 691.141057] ? refcount_inc_not_zero_checked+0x5bb/0x6d0 [ 691.141057] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 691.141057] aa_label_parse+0x11f/0x130 [ 691.141057] aa_change_profile+0x827/0x3cc0 [ 691.141057] ? kmsan_set_origin_inline+0x6b/0x120 [ 691.141057] ? __msan_poison_alloca+0x17a/0x210 [ 691.141057] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 691.141057] ? strcmp+0x83/0x160 [ 691.181581] apparmor_setprocattr+0xbc3/0x12f0 [ 691.181581] ? apparmor_getprocattr+0x630/0x630 [ 691.181581] security_setprocattr+0x139/0x210 [ 691.181581] proc_pid_attr_write+0x3f9/0x4e0 [ 691.181581] ? proc_pid_attr_read+0x500/0x500 [ 691.181581] __vfs_write+0x1f4/0xb70 [ 691.181581] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 691.181581] ? __sb_start_write+0xf8/0x230 [ 691.181581] vfs_write+0x495/0x8e0 [ 691.222772] __se_sys_write+0x183/0x370 [ 691.222772] __x64_sys_write+0x4a/0x70 [ 691.222772] do_syscall_64+0xbe/0x100 [ 691.222772] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 691.222772] RIP: 0033:0x457569 [ 691.222772] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 691.222772] RSP: 002b:00007f10c0528c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 691.270312] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 691.270312] RDX: 0000000000000009 RSI: 0000000020000280 RDI: 0000000000000003 [ 691.270312] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 691.291805] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f10c05296d4 [ 691.291805] R13: 00000000004c54ee R14: 00000000004d8e08 R15: 00000000ffffffff [ 691.291805] [ 691.291805] Local variable description: ----ns_name@aa_fqlookupn_profile [ 691.291805] Variable was created at: [ 691.318012] aa_fqlookupn_profile+0x79/0x720 [ 691.318012] aa_label_strn_parse+0x171e/0x1e30 [ 691.327864] ================================================================== [ 691.327864] Disabling lock debugging due to kernel taint [ 691.327864] Kernel panic - not syncing: panic_on_warn set ... [ 691.327864] [ 691.327864] CPU: 0 PID: 21408 Comm: syz-executor0 Tainted: G B 4.19.0-rc7+ #69 [ 691.327864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 691.327864] Call Trace: [ 691.327864] dump_stack+0x306/0x460 [ 691.327864] panic+0x54c/0xafa [ 691.327864] kmsan_report+0x2d3/0x2e0 [ 691.327864] __msan_warning+0x7c/0xe0 [ 691.327864] aa_fqlookupn_profile+0x32d/0x720 [ 691.327864] ? __msan_warning+0x71/0xe0 [ 691.327864] aa_label_strn_parse+0x171e/0x1e30 [ 691.327864] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 691.327864] ? refcount_inc_not_zero_checked+0x5bb/0x6d0 [ 691.327864] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 691.327864] aa_label_parse+0x11f/0x130 [ 691.327864] aa_change_profile+0x827/0x3cc0 [ 691.327864] ? kmsan_set_origin_inline+0x6b/0x120 [ 691.327864] ? __msan_poison_alloca+0x17a/0x210 [ 691.430548] dccp_invalid_packet: P.Data Offset(247) too large [ 691.327864] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 691.327864] ? strcmp+0x83/0x160 [ 691.327864] apparmor_setprocattr+0xbc3/0x12f0 [ 691.327864] ? apparmor_getprocattr+0x630/0x630 [ 691.441710] security_setprocattr+0x139/0x210 [ 691.441710] proc_pid_attr_write+0x3f9/0x4e0 [ 691.441710] ? proc_pid_attr_read+0x500/0x500 [ 691.441710] __vfs_write+0x1f4/0xb70 [ 691.441710] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 691.441710] ? __sb_start_write+0xf8/0x230 [ 691.441710] vfs_write+0x495/0x8e0 [ 691.441710] __se_sys_write+0x183/0x370 [ 691.441710] __x64_sys_write+0x4a/0x70 [ 691.491851] do_syscall_64+0xbe/0x100 [ 691.491851] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 691.491851] RIP: 0033:0x457569 [ 691.491851] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 691.491851] RSP: 002b:00007f10c0528c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 691.491851] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 691.491851] RDX: 0000000000000009 RSI: 0000000020000280 RDI: 0000000000000003 [ 691.491851] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 691.491851] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f10c05296d4 [ 691.491851] R13: 00000000004c54ee R14: 00000000004d8e08 R15: 00000000ffffffff [ 691.491851] Kernel Offset: disabled [ 691.491851] Rebooting in 86400 seconds..