[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 16.202631] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 26.317365] random: sshd: uninitialized urandom read (32 bytes read) [ 26.706505] random: sshd: uninitialized urandom read (32 bytes read) [ 27.340183] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.20' (ECDSA) to the list of known hosts. [ 32.834289] random: sshd: uninitialized urandom read (32 bytes read) 2018/07/20 13:07:29 fuzzer started [ 34.531974] random: cc1: uninitialized urandom read (8 bytes read) 2018/07/20 13:07:33 dialing manager at 10.128.0.26:39733 2018/07/20 13:07:36 syscalls: 1808 2018/07/20 13:07:36 code coverage: enabled 2018/07/20 13:07:36 comparison tracing: enabled 2018/07/20 13:07:36 setuid sandbox: enabled 2018/07/20 13:07:36 namespace sandbox: enabled 2018/07/20 13:07:36 fault injection: enabled 2018/07/20 13:07:36 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/07/20 13:07:36 net packed injection: enabled 2018/07/20 13:07:36 net device setup: enabled [ 40.880391] random: crng init done 13:08:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x10000000000001, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) init_module(&(0x7f0000000040)='\x00', 0x1, &(0x7f0000000140)='/dev/ptmx\x00') r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffeee, 0x0, &(0x7f0000351ff0)=@ipx={0x4, 0x0, 0x0, "a074edebb7e1"}, 0x10) syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) 13:08:42 executing program 2: r0 = socket(0x10, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00008cbfd8)={'vcan0\x00', 0x0}) r2 = getpid() sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f00000004c0)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)=@setlink={0x28, 0x13, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8, 0x13, r2}]}, 0x28}, 0x1}, 0x0) 13:08:42 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000140)={0x6, 0x0, [0x12, 0x1]}) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:08:42 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='dctcp\x00', 0x6) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e319aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0001c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x0, &(0x7f0000e66000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='illinois\x00', 0x9) shutdown(r0, 0x1) 13:08:42 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) 13:08:42 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getattr(0x0, &(0x7f00000014c0), 0x30, 0x0) 13:08:42 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00009f3fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="0a0775b0d5", 0x5) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000003580)={&(0x7f00000003c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000003440)=""/112, 0x200034b0}], 0x1, &(0x7f0000003500)=""/106, 0x6a}, 0x0) 13:08:42 executing program 1: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$cgroup_subtree(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="a0"], 0x1) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x4) write$sndseq(r0, &(0x7f0000000240)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x30) ftruncate(r0, 0x7f) [ 106.181874] IPVS: ftp: loaded support on port[0] = 21 [ 106.196510] IPVS: ftp: loaded support on port[0] = 21 [ 106.235368] IPVS: ftp: loaded support on port[0] = 21 [ 106.241344] IPVS: ftp: loaded support on port[0] = 21 [ 106.250388] IPVS: ftp: loaded support on port[0] = 21 [ 106.271600] IPVS: ftp: loaded support on port[0] = 21 [ 106.280424] IPVS: ftp: loaded support on port[0] = 21 [ 106.281836] IPVS: ftp: loaded support on port[0] = 21 [ 107.891216] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.897627] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.920722] device bridge_slave_0 entered promiscuous mode [ 107.939049] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.945480] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.966775] device bridge_slave_0 entered promiscuous mode [ 107.989320] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.995793] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.018161] device bridge_slave_0 entered promiscuous mode [ 108.035866] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.042266] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.053488] device bridge_slave_0 entered promiscuous mode [ 108.068138] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.074604] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.084201] device bridge_slave_0 entered promiscuous mode [ 108.093926] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.100409] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.108088] device bridge_slave_0 entered promiscuous mode [ 108.114825] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.121554] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.129390] device bridge_slave_1 entered promiscuous mode [ 108.137186] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.143602] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.153941] device bridge_slave_0 entered promiscuous mode [ 108.161051] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.167574] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.181246] device bridge_slave_1 entered promiscuous mode [ 108.190050] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.196468] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.203937] device bridge_slave_0 entered promiscuous mode [ 108.211888] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.218325] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.225739] device bridge_slave_1 entered promiscuous mode [ 108.234201] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.240617] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.248812] device bridge_slave_1 entered promiscuous mode [ 108.257848] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 108.265117] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.271507] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.286971] device bridge_slave_1 entered promiscuous mode [ 108.299698] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.306127] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.313983] device bridge_slave_1 entered promiscuous mode [ 108.323198] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.329597] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.339246] device bridge_slave_1 entered promiscuous mode [ 108.345880] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.352297] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.359773] device bridge_slave_1 entered promiscuous mode [ 108.367770] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 108.376107] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 108.384510] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 108.392684] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 108.407621] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 108.415349] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 108.424895] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 108.480876] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 108.497752] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 108.506504] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 108.515493] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 108.524456] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 108.531886] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 108.544208] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 108.641852] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 108.717504] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 108.810390] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 108.825901] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 108.843070] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 108.853762] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 108.864869] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 108.876630] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 108.891854] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 108.941434] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 108.964810] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 108.983563] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 108.996911] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 109.009612] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 109.020517] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 109.032159] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 109.135710] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 109.311357] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 109.327191] team0: Port device team_slave_0 added [ 109.449650] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 109.466575] team0: Port device team_slave_1 added [ 109.473464] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 109.480870] team0: Port device team_slave_0 added [ 109.498395] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 109.512282] team0: Port device team_slave_0 added [ 109.521237] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 109.535563] team0: Port device team_slave_0 added [ 109.548457] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 109.559809] team0: Port device team_slave_0 added [ 109.569993] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 109.587672] team0: Port device team_slave_0 added [ 109.594294] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 109.603099] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 109.614650] team0: Port device team_slave_1 added [ 109.622615] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 109.639607] team0: Port device team_slave_1 added [ 109.651916] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 109.663428] team0: Port device team_slave_1 added [ 109.668924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 109.681050] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 109.697182] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 109.704857] team0: Port device team_slave_1 added [ 109.711712] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 109.718664] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 109.726910] team0: Port device team_slave_0 added [ 109.733796] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 109.744865] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 109.756600] team0: Port device team_slave_1 added [ 109.771592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 109.788586] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 109.802251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 109.812504] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 109.820379] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 109.827696] team0: Port device team_slave_0 added [ 109.834269] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 109.841559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 109.852574] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 109.869340] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 109.876461] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 109.884576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 109.896746] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 109.906800] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 109.914987] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 109.924090] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 109.937135] team0: Port device team_slave_1 added [ 109.943794] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 109.952561] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 109.972612] team0: Port device team_slave_1 added [ 109.981752] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 109.989440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 110.005214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 110.025301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 110.033579] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 110.041296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 110.048931] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 110.056541] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 110.063951] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.071709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 110.081123] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 110.088329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.096632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 110.106898] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 110.116406] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 110.126934] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 110.135156] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 110.144342] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 110.155996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.181876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 110.200346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 110.208546] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 110.216638] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 110.224110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 110.231773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 110.239470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.247197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 110.255677] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 110.264392] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 110.271452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 110.279481] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 110.296397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 110.306332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 110.315776] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 110.323309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 110.331632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 110.340088] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 110.350586] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.363177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 110.377586] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 110.388481] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 110.400899] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 110.410275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.426385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 110.439624] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 110.452714] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 110.463905] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 110.471056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.491351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 110.522895] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 110.534579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 110.542730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 110.550511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 110.559934] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 110.570211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.582261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 110.605479] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 110.612760] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 110.620499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 110.637119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 110.671734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 110.685173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 110.698368] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 110.705518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 110.713428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 111.541006] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.547653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.554337] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.560837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.580505] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 111.587438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 111.598793] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.605215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.611949] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.618309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.625956] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 111.633899] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.640302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.647125] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.653489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.660818] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 111.670553] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.676953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.683601] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.690006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.701642] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 111.712448] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.718881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.725841] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.732238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.759912] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 111.780225] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.786656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.793337] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.799749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.839903] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 111.871098] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.877513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.884174] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.890558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.933138] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 111.954627] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.961050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.967693] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.974067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.021384] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 112.609080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 112.620409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 112.649404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 112.660763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 112.668656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 112.676049] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 112.683328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 115.582004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.608638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.669596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.777989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.806621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.822457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.922589] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 115.942364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.991835] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 116.011599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.121337] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 116.139593] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 116.156695] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 116.224586] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 116.293999] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 116.300307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 116.314469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 116.339948] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 116.419516] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 116.438927] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 116.445377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 116.452959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 116.498642] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 116.505009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 116.523783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 116.542210] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 116.548470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 116.558654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 116.590767] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 116.599260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 116.612497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 116.681425] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.708250] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 116.715700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 116.724902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 116.756968] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 116.768231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 116.787616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 116.835659] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.863775] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 116.873079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 116.881291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 116.923872] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.965895] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.086698] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.110414] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.220900] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.247481] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.940872] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 1041) [ 118.948690] FAT-fs (loop1): Filesystem has been set read-only [ 119.037467] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 1041) [ 119.119140] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 1041) 13:08:56 executing program 6: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f00000002c0)={{0x80}, 'port0\x00', 0xa9824f69d1376637, 0x800010800a}) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0xe71) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000240)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f000035d000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 13:08:56 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:08:56 executing program 7: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x10dd}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffa5, 0x0, 0x2}, [@ldst={0x7, 0x18d1fb, 0x0, 0x1d1, 0xa}], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x3e9, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x1b515f]}, 0x48) 13:08:56 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r1 = syz_open_dev$sndtimer(&(0x7f0000022ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f000000efcc)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) dup3(r1, r0, 0x0) 13:08:56 executing program 2: r0 = socket(0x10, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00008cbfd8)={'vcan0\x00', 0x0}) r2 = getpid() sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f00000004c0)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)=@setlink={0x28, 0x13, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8, 0x13, r2}]}, 0x28}, 0x1}, 0x0) 13:08:56 executing program 7: r0 = getpgid(0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x1) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = getpid() msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000040)=""/53) sched_setattr(r3, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f00000001c0), 0x0, 0xffff) recvmmsg(r2, &(0x7f0000001c00)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f0000000540)=[{&(0x7f0000000340)=""/168, 0xa8}, {&(0x7f0000000400)=""/55, 0x37}], 0x2, &(0x7f0000000580)=""/8, 0x8, 0x9}, 0x3}, {{&(0x7f00000006c0)=@vsock={0x0, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000740)=""/42, 0x2a}, {&(0x7f0000000780)=""/183, 0xb7}, {&(0x7f0000000840)=""/188, 0xbc}, {&(0x7f0000000900)=""/14, 0xe}, {&(0x7f0000000940)=""/231, 0xe7}], 0x5, &(0x7f0000000ac0)=""/250, 0xfa, 0x10000}, 0x7}, {{&(0x7f0000000bc0)=@alg, 0x80, &(0x7f0000001d40)=[{&(0x7f0000000c40)=""/195, 0xc3}, {&(0x7f0000000d40)=""/127, 0x7f}, {&(0x7f0000000dc0)=""/244, 0xf4}, {&(0x7f0000000ec0)=""/3, 0x3}, {&(0x7f0000000f00)=""/82, 0x52}], 0x5, &(0x7f0000001000)=""/138, 0x8a, 0x100}, 0x4626}, {{&(0x7f00000010c0)=@can, 0x80, &(0x7f0000001300)=[{&(0x7f0000001140)=""/95, 0x5f}, {&(0x7f00000011c0)=""/233, 0xe9}], 0x2, &(0x7f0000001340)=""/53, 0x35, 0x1}, 0xffffffffffffff00}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001380)=""/154, 0x9a}, {&(0x7f0000001440)=""/66, 0x42}, {&(0x7f00000014c0)=""/220, 0xdc}, {&(0x7f00000015c0)=""/207, 0xcf}], 0x4, &(0x7f0000001b40)=""/151, 0x97, 0x1}, 0x9}], 0x5, 0x44000022, &(0x7f0000000680)={0x0, 0x1c9c380}) sendto$llc(r2, &(0x7f0000000080)="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", 0x120, 0x4, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x3, 0x2, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) 13:08:56 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r1 = syz_open_dev$sndtimer(&(0x7f0000022ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f000000efcc)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) dup3(r1, r0, 0x0) 13:08:56 executing program 2: r0 = socket(0x10, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00008cbfd8)={'vcan0\x00', 0x0}) r2 = getpid() sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f00000004c0)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)=@setlink={0x28, 0x13, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8, 0x13, r2}]}, 0x28}, 0x1}, 0x0) 13:08:57 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, &(0x7f0000000280)) syz_mount_image$iso9660(&(0x7f0000000080)='iso9660\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x4020, &(0x7f0000000240)=ANY=[@ANYBLOB='uid=']) 13:08:57 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa}, {0xa}, r1}}, 0x48) 13:08:57 executing program 3: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) 13:08:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x50, 0x0, 0x0, 0xffffffffffffffff}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f00000026c0), 0x0, &(0x7f0000002700)}}], 0x1, 0x0) 13:08:57 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) rename(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/file0\x00') read$FUSE(r0, &(0x7f00000040c0), 0x1000) read$FUSE(r0, &(0x7f00000020c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b}}, 0x50) write$FUSE_DIRENT(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="90000000000000000200000000000000010000000045000000000000000000000b08956d069e000000002066ce654d316e6f646576656d3100f9ff00000000000000000000000000000000000001000000000000002c00000000000000000000000000000000000000000000001c000000000000002b737973740400000065746367726f7570246367726f7570150000"], 0x90) 13:08:57 executing program 2: r0 = socket(0x10, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00008cbfd8)={'vcan0\x00', 0x0}) r2 = getpid() sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f00000004c0)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)=@setlink={0x28, 0x13, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8, 0x13, r2}]}, 0x28}, 0x1}, 0x0) 13:08:57 executing program 6: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000240)='./file0\x00', 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@random={'security.', '.(/vboxnet0-^\x00'}, &(0x7f0000000140)='.(/vboxnet0-^\x00', 0xe, 0x0) removexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)=@random={'security.', '.(/vboxnet0-^\x00'}) 13:08:57 executing program 7: io_setup(0x5b3, &(0x7f0000000040)) 13:08:57 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f00000003c0)) 13:08:57 executing program 2: r0 = socket(0x10, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00008cbfd8)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f00000004c0)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)=@setlink={0x28, 0x13, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8, 0x13}]}, 0x28}, 0x1}, 0x0) 13:08:57 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000017000)=[{&(0x7f0000004000)="240000001d0003ffff3cc0023da2830101eee6cd7986c436271d8568b51ba3a2d188737e", 0x24}], 0x1}, 0x0) 13:08:57 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) 13:08:57 executing program 3: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0x58) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000040)='./bus\x00', 0x100000004000, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) fadvise64(r0, 0x0, 0x0, 0x4) 13:08:57 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, @thr={&(0x7f0000000100), &(0x7f0000000240)}}, &(0x7f0000000300)) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000200)={0x7, 0x15}, 0x7) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@known='user.syz\x00', &(0x7f00000001c0)="bf70726f6373656c696e757800", 0xd, 0x0) unlink(&(0x7f00003b3000)='./file0\x00') dup2(r2, r1) 13:08:57 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) close(r0) 13:08:57 executing program 5: shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, &(0x7f00000000c0)=0x100000000000001, 0x43, 0x0) [ 120.466465] netlink: 16 bytes leftover after parsing attributes in process `syz-executor6'. 13:08:57 executing program 2: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f00000004c0)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)=@setlink={0x28, 0x13, 0x601, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8, 0x13}]}, 0x28}, 0x1}, 0x0) [ 120.521793] netlink: 16 bytes leftover after parsing attributes in process `syz-executor6'. 13:08:57 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000100)="045b898f73", 0x1004, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 13:08:57 executing program 0: r0 = socket(0x11, 0x2, 0x0) r1 = socket$packet(0x11, 0x400000000000003, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xffffffffffffffff, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100), 0x5e0, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r2, 0x1, 0x0, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x14) 13:08:57 executing program 6: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tgkill(r1, r1, 0x21) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace$getregs(0xe, r1, 0x0, &(0x7f0000000000)=""/230) [ 120.827195] syz-executor3 (6636) used greatest stack depth: 17336 bytes left 13:08:58 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x3a) r1 = memfd_create(&(0x7f0000000080)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) dup2(r1, r0) 13:08:58 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000004c0)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)=@setlink={0x28, 0x13, 0x601, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8, 0x13}]}, 0x28}, 0x1}, 0x0) 13:08:58 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)="2f67726f3c23fb57e6c60f1f4b45b74d999a9a8c2ce15b26e518a4cb3a9cd12dcea440d899c22c652b3a471b4a7db7f3fef6e034d804e5f07302df5b540745df4b1dee483b157624c5bc719a099e6a357cd6abb4398c3408000000000000000000000000000000", 0x2761, 0x0) 13:08:58 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0), &(0x7f0000000180)=[0x0]}}], 0x0, 0x0, &(0x7f0000000500)}) 13:08:58 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x100000000000e801, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000210010a020002260af8", 0x16}], 0x0, &(0x7f0000000040)) 13:08:58 executing program 4: clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, &(0x7f00000000c0)) r0 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f00000001c0)) tkill(r0, 0x1000000000013) 13:08:58 executing program 3: pselect6(0x187, &(0x7f0000000280), &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000000000000000}, &(0x7f0000000140), &(0x7f0000000040), &(0x7f0000000080)={&(0x7f0000000100), 0x8}) 13:08:58 executing program 2: r0 = socket(0x0, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f00000004c0)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)=@setlink={0x28, 0x13, 0x601, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8, 0x13}]}, 0x28}, 0x1}, 0x0) [ 121.208486] binder: 6683:6689 ERROR: BC_REGISTER_LOOPER called without request 13:08:58 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x100000000000e801, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000210010a020002260af8", 0x16}], 0x0, &(0x7f0000000040)) [ 121.248705] binder: 6683:6689 got transaction with invalid offset (0, min 0 max 0) or object. [ 121.262161] binder: 6683:6689 transaction failed 29201/-22, size 0-8 line 3030 [ 121.269679] binder: send failed reply for transaction 2 to 6683:6689 13:08:58 executing program 7: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) sendfile(r0, r0, 0x0, 0x7fffffff) 13:08:58 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f00000030c0), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) write$FUSE_ENTRY(r0, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90) 13:08:58 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) read$FUSE(r0, &(0x7f0000001000), 0x1000) read$FUSE(r0, &(0x7f0000005000), 0xe83) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0x0, 0x3}, 0x20) 13:08:58 executing program 2: r0 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f00000004c0)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)=@setlink={0x28, 0x13, 0x601, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8, 0x13}]}, 0x28}, 0x1}, 0x0) [ 121.303645] binder: BINDER_SET_CONTEXT_MGR already set [ 121.315162] binder: 6683:6698 ioctl 40046207 0 returned -16 [ 121.322613] binder_alloc: 6683: binder_alloc_buf, no vma [ 121.328203] binder: 6683:6689 transaction failed 29189/-3, size 0-0 line 2967 13:08:58 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x100000000000e801, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000210010a020002260af8", 0x16}], 0x0, &(0x7f0000000040)) [ 121.392942] binder: 6683:6698 ERROR: BC_REGISTER_LOOPER called without request 13:08:58 executing program 2: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000004c0)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)=@setlink={0x28, 0x13, 0x601, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8, 0x13}]}, 0x28}, 0x1}, 0x0) 13:08:58 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) sendmmsg(r0, &(0x7f000000c3c0)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x80, &(0x7f0000001900), 0x0, &(0x7f0000001980)}}], 0x1, 0x0) [ 121.438185] binder: undelivered TRANSACTION_COMPLETE [ 121.443451] binder: undelivered TRANSACTION_ERROR: 29201 [ 121.469281] binder: undelivered TRANSACTION_ERROR: 29190 [ 121.479217] syz-executor7 (6717) used greatest stack depth: 15680 bytes left [ 121.499713] binder: undelivered TRANSACTION_ERROR: 29189 13:08:58 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5414, &(0x7f0000000080)) 13:08:58 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8000000000019, &(0x7f000074fffc)=0x4, 0x4) r1 = dup(r0) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000240)={0x77359400}, 0x10) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="661f4aeabff76763e6b0b17d53db87e42f18c6d17f644dcad32985b35085914fc8d5ecace6504098fff24b08c1879b13368d4caa50f50c2e5f3f26c43c6f737144a08d2850d569f647448cb6f253d926ca54bad59f288832313514143375e3c33a10f50d133bd8dfa63221f03e3a26b37b5ddccde228", 0x76, 0x1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 13:08:58 executing program 2: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f00000004c0)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)=@setlink={0x28, 0x13, 0x0, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8, 0x13}]}, 0x28}, 0x1}, 0x0) 13:08:58 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sysfs$2(0x2, 0x9, &(0x7f0000001d40)=""/162) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) recvmmsg(r2, &(0x7f0000004b80)=[{{&(0x7f0000001e00)=@pppol2tpin6, 0x80, &(0x7f0000003100)=[{&(0x7f0000001e80)=""/15, 0xf}, {&(0x7f0000001ec0)=""/196, 0xc4}, {&(0x7f0000001fc0)=""/8, 0x8}, {&(0x7f0000003040)=""/10, 0xa}, {&(0x7f0000003080)=""/96, 0x60}], 0x5, &(0x7f0000003180)=""/69, 0x45}, 0x100000000}, {{&(0x7f0000003200)=@generic, 0x80, &(0x7f0000003480)=[{&(0x7f0000003280)=""/11, 0xb}, {&(0x7f00000032c0)=""/147, 0x93}, {&(0x7f0000003380)=""/231, 0xe7}, {&(0x7f0000003540)=""/4096, 0x1000}], 0x4, 0x0, 0x0, 0x8}, 0x100000000}, {{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000004540)=""/205, 0xcd}, {&(0x7f0000004640)=""/99, 0x63}], 0x2, &(0x7f00000046c0)=""/105, 0x69, 0x6}, 0x6}, {{&(0x7f0000004740)=@nfc_llcp, 0x80, &(0x7f0000004980)=[{&(0x7f00000047c0)}, {&(0x7f0000004800)=""/248, 0xf8}, {&(0x7f0000004900)=""/113, 0x71}], 0x3, &(0x7f00000049c0), 0x0, 0x7}, 0x80000000}, {{&(0x7f0000004a00)=@can, 0x80, &(0x7f0000004ac0)=[{&(0x7f0000004a80)=""/26, 0x1a}], 0x1, &(0x7f0000004b00)=""/126, 0x7e, 0x5}, 0x2}], 0x5, 0x12001, &(0x7f0000004cc0)={0x0, 0x1c9c380}) sendto$inet6(r1, &(0x7f0000e77fff), 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x200, 0x4) ftruncate(r3, 0x80003) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00), 0x0, 0x0, &(0x7f0000001bc0)={0x0, 0x1c9c380}) sendfile(r1, r3, &(0x7f0000000080), 0x8000fffffffe) recvmmsg(r2, &(0x7f0000003440), 0x1cf, 0x2000, &(0x7f0000003500)={0x0, 0x1c9c380}) 13:08:58 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=@known='system.posix_acl_default\x00', &(0x7f00000000c0)=""/48, 0x30) close(r0) [ 121.747669] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 121.770870] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 13:08:59 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000002c0)={{0x2, 0x0, @multicast2=0xe0000002}, {}, 0x0, {0x2, 0x0, @multicast1=0xe0000001}, 'tunl0\x00'}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 13:08:59 executing program 2: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f00000004c0)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)=@setlink={0x28, 0x13, 0x0, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8, 0x13}]}, 0x28}, 0x1}, 0x0) 13:08:59 executing program 6: mmap(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x1, 0x8972, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000002000)='dns_resolver\x00', &(0x7f000080f000)={0x73, 0x79, 0x7a}, &(0x7f0000726000)="c387", 0x2, 0xffffffffffffffff) 13:08:59 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="800000000002000019000000e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000100)) 13:08:59 executing program 7: pipe(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) dup3(r0, r1, 0x0) 13:08:59 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000='version=9p2000', 0x2c}]}}) mount$9p_tcp(&(0x7f00000004c0)='127.0.0.1\x00', &(0x7f0000000500)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=tcp,', {'port', 0x3d}, 0x2c}) clone(0x0, &(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000300)) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0x49, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x49) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 122.382110] 9pnet: p9_fd_create_tcp (6776): problem connecting socket to 127.0.0.1 [ 122.383653] EXT4-fs (loop5): bad geometry: block count 512 exceeds size of device (1 blocks) 13:08:59 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa}, 0x1c) 13:08:59 executing program 6: mmap(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x1, 0x8972, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000002000)='dns_resolver\x00', &(0x7f000080f000)={0x73, 0x79, 0x7a}, &(0x7f0000726000)="c387", 0x2, 0xffffffffffffffff) 13:08:59 executing program 2: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f00000004c0)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)=@setlink={0x28, 0x13, 0x0, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8, 0x13}]}, 0x28}, 0x1}, 0x0) 13:08:59 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r1}}, 0x10) 13:08:59 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) getxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000340)=@known='security.selinux\x00', &(0x7f00000005c0)=""/122, 0x7a) read$FUSE(r0, &(0x7f00000020c0), 0x1000) write$FUSE_IOCTL(r0, &(0x7f0000000080)={0x20, 0x0, 0x1, {0x7}}, 0x20) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000200)={0x10, 0x0, 0x2}, 0x10) [ 122.423982] 9pnet: p9_fd_create_tcp (6786): problem connecting socket to 127.0.0.1 [ 122.455530] EXT4-fs (loop5): bad geometry: block count 512 exceeds size of device (1 blocks) 13:08:59 executing program 5: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}], 0x1, &(0x7f0000000080)) r0 = semget$private(0x0, 0x2, 0x0) semtimedop(r0, &(0x7f0000000100)=[{0x0, 0x0, 0x1800}], 0x117, &(0x7f0000000140)) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x0, 0x1800}], 0x1, &(0x7f0000000280)={0x77359400}) 13:08:59 executing program 2: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f00000004c0)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)=@setlink={0x20, 0x13, 0x601}, 0x20}, 0x1}, 0x0) 13:08:59 executing program 7: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) close(r1) connect$l2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4}}, 0x2e) 13:08:59 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0xc0505350, &(0x7f0000000000)) 13:08:59 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_to_bridge\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x1, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000000)={r1, 0x1, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) 13:08:59 executing program 1: syz_emit_ethernet(0x6e, &(0x7f0000000000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="766289ef0c52", [], {@ipv6={0x86dd, {0x0, 0x6, "a7614a", 0x38, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @remote={0xfe, 0x80, [], 0xbb}, {[@fragment={0x3b}], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "8c9ffd", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}}}}}}}, &(0x7f0000000200)) 13:08:59 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0xf4, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x1, &(0x7f0000000140), &(0x7f0000001280)) 13:08:59 executing program 2: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f00000004c0)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)=@setlink={0x20, 0x13, 0x601}, 0x20}, 0x1}, 0x0) 13:08:59 executing program 6: open(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001380)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000013c0)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000001440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) 13:08:59 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) [ 122.635730] device veth0_to_bridge entered promiscuous mode [ 122.654401] device veth0_to_bridge left promiscuous mode [ 122.668853] device veth0_to_bridge entered promiscuous mode [ 122.675660] device veth0_to_bridge left promiscuous mode 13:08:59 executing program 7: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c906d6b660800666174000204010a0200027400f8000000000283224ea4224b5494fab2", 0x25}], 0x0, &(0x7f0000000080)={[{@fat=@fmask={'fmask', 0x3d}, 0x2c}]}) 13:08:59 executing program 2: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f00000004c0)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)=@setlink={0x20, 0x13, 0x601}, 0x20}, 0x1}, 0x0) 13:08:59 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="480000001400197f09004b0101048c590188ff3f67614e495b1e2e1f72161affcf5d6f9fafab2a40e10520613057fff7e07900defeff0000e5ed5e00000000c855000000000000ac", 0x48}], 0x1) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f00000024c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80}}], 0x1, 0x0, &(0x7f0000002e40)={0x0, 0x1c9c380}) 13:08:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast1={0xff, 0x1, [], 0x1}}, 0x20) 13:08:59 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) inotify_init() pselect6(0x40, &(0x7f0000000000)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) [ 122.777129] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:09:00 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x11, 0x2, r0, &(0x7f0000000380)="2e2f66692e65318c00") r2 = creat(&(0x7f00000005c0)='./file1\x00', 0x0) write$evdev(r2, &(0x7f0000000680)=[{}], 0x18) 13:09:00 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000100)) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 13:09:00 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) read$FUSE(r0, &(0x7f0000001000), 0x1000) creat(&(0x7f0000000040)='./file0/file1\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b}}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0x1000) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) write$FUSE_ENTRY(r0, &(0x7f0000003000)={0x90, 0x0, 0x3}, 0x90) 13:09:00 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x26, 0x829, 0x0, 0x0, {0x3}, [@nested={0x4, 0x4001}]}, 0x18}, 0x1}, 0x0) 13:09:00 executing program 2: r0 = memfd_create(&(0x7f0000000780)='HL\x00', 0x0) write(r0, &(0x7f0000000180)="a85883156f794c05e0b02a03983b5addde9e46e1145c5c3fcb185a36d20d52d097399fd15648c664", 0x28) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000317000), 0xff8) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x1ff) 13:09:00 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$sndseq(r0, &(0x7f0000011fd2), 0xfff6) fallocate(r0, 0x20, 0x0, 0x8000) 13:09:00 executing program 6: r0 = getpgid(0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) read$FUSE(r1, &(0x7f0000001000), 0x1000) chroot(&(0x7f00000003c0)='./file0\x00') stat(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000240)) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, 0x1, {0x7, 0x1b}}, 0x50) 13:09:00 executing program 0: syz_emit_ethernet(0x32, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}}, @dccp={{0x0, 0x0, 0x4, 0xbb00, 0x0, 0x0, 0x0, 0x0, 0x0, "e57044", 0x0, "cd98e8"}}}}}}, &(0x7f0000000040)) 13:09:00 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x8401, 0x0) write(r0, &(0x7f0000000380), 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 13:09:00 executing program 0: r0 = socket(0x11, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000040)=0x1, 0x4) socket(0x11, 0x80002, 0x0) bind(r0, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) 13:09:00 executing program 3: syz_mount_image$iso9660(&(0x7f00000001c0)='iso9660\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x0, &(0x7f00000008c0)={[{@check_relaxed='check=relaxed', 0x2c}]}) 13:09:00 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000180)={0x0, 0x0, 0x101}) fcntl$lock(r0, 0x7, &(0x7f0000000140)) [ 123.361887] netlink: 'syz-executor7': attribute type 1 has an invalid length. 13:09:00 executing program 2: r0 = socket$inet6(0xa, 0x1000000000006, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) [ 123.431933] FAT-fs (loop4): bogus number of reserved sectors [ 123.437836] FAT-fs (loop4): Can't find a valid FAT filesystem 13:09:00 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)='proc:/\x00', 0xfe0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b}}, 0x50) read$FUSE(r0, &(0x7f0000001000), 0x1000) [ 123.503284] ISOFS: Unable to identify CD-ROM format. [ 123.542418] FAT-fs (loop4): bogus number of reserved sectors [ 123.548353] FAT-fs (loop4): Can't find a valid FAT filesystem [ 123.554007] ISOFS: Unable to identify CD-ROM format. 13:09:00 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x4004, &(0x7f00000001c0)=0x0) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d}, 0x10) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)="050000008cfc6cfde19ab3a251fd2cfd09684d9c7afae3b519d21a2ce3cbdfcb2665dd1203ed5f1023fa813c9a0e46000000004001000000", 0x38}]) 13:09:00 executing program 4: mkdir(&(0x7f0000000480)='./file0\x00', 0x0) mount(&(0x7f0000000540)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x0, &(0x7f0000000080)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000000380)=""/169, 0xfffa) 13:09:00 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x8401, 0x0) write(r0, &(0x7f0000000380), 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 13:09:00 executing program 4: sched_setattr(0x0, &(0x7f0000000000), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) read$FUSE(r0, &(0x7f0000001000), 0x1000) chroot(&(0x7f00000003c0)='./file0\x00') stat(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000240)) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x1, {0x7, 0x1b}}, 0x50) read$FUSE(r0, &(0x7f0000001000), 0x1000) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) memfd_create(&(0x7f00000001c0)='em1proc\x00', 0x0) 13:09:01 executing program 2: syz_mount_image$iso9660(&(0x7f0000000080)='iso9660\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000a80), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='gid=']) 13:09:01 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) read$FUSE(r0, &(0x7f00000020c0), 0x1000) llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000480)=""/222, 0xde) r1 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000340)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b}}, 0x50) read$FUSE(r0, &(0x7f0000001000), 0x1000) 13:09:01 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x43289}}, 0x50) open(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) close(r0) 13:09:01 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) vmsplice(r0, &(0x7f0000000440)=[{&(0x7f0000000640)="ad2bb8c0df1f14bae6473b0ff3e8043d3ba2b766d05643f6e2e0b58a7941ac46e012d83c49a70362a4610b88c78ea0fff150245f1656d63a72f8ed4eca9ef7261fa79caa2a", 0x45}], 0x1, 0x0) 13:09:01 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f00000002c0)) sendto$packet(r0, &(0x7f0000000040)="daa4", 0x2, 0x0, &(0x7f0000001c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x14) 13:09:01 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="000100000008000066000000c9030000ec000000010000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000000c0)) 13:09:01 executing program 2: r0 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000595ff8)=0x80) close(r0) 13:09:01 executing program 3: mkdir(&(0x7f0000000880)='./file0\x00', 0x0) unlink(&(0x7f00000000c0)='./control/file0\x00') rename(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./control\x00') close(0xffffffffffffffff) 13:09:01 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000240)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40505330, &(0x7f00000002c0)) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f00000000c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) [ 124.460560] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 13:09:01 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000001d00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 13:09:01 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x100, 0x279d, 0x3f}) [ 124.508696] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 13:09:01 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000140)={{0x3, 0x0, 0x0, 0x3}}) 13:09:01 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="bf1600000000000085100000050000001d00000000000000bf610000000000008510000002000000bf0100000000000095000000000000001501000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 13:09:01 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) write$FUSE_NOTIFY_DELETE(r0, &(0x7f00000000c0)={0x30, 0x6, 0x0, {0x0, 0x0, 0x7, 0x0, 'user_id'}}, 0x30) 13:09:01 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), r1, r0}}, 0x18) 13:09:01 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="390000001300090468fe000081000000c9ffff3f03000000450001070000003719001a001100020007e91ee400538a274d69a26cdf12f24006", 0x39}], 0x1) 13:09:01 executing program 1: mkdir(&(0x7f0000000640)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0xf3, &(0x7f0000000380), &(0x7f0000000280)=""/243, 0x0, 0x8}, 0x28) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) [ 124.758341] netlink: 13 bytes leftover after parsing attributes in process `syz-executor4'. [ 124.767178] netlink: 13 bytes leftover after parsing attributes in process `syz-executor4'. [ 124.777459] netlink: 13 bytes leftover after parsing attributes in process `syz-executor4'. [ 124.786155] netlink: 13 bytes leftover after parsing attributes in process `syz-executor4'. 13:09:02 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) write$binfmt_elf64(r0, &(0x7f0000002900)=ANY=[@ANYBLOB="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"], 0x911) 13:09:02 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000001540)='/dev/snd/seq\x00', 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000001340)=""/150, 0x96}], 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000300)) close(r0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) memfd_create(&(0x7f0000000280)="70314029047536342d55689d6c7257443bad15295b65736f2c462cf5a0a0e8a64754eb58decd1011629741a07ea8adbb72bd7297a0004194defad98d35fea4e4ab433673901d4df2daec6b83df6c481c22cfb6484b8b749df8fc961ec023787e6b659316d035", 0x0) tkill(r1, 0x1000000000016) 13:09:02 executing program 7: exit(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x3) msync(&(0x7f00009c7000/0x2000)=nil, 0x2000, 0x0) 13:09:02 executing program 2: mknod$loop(&(0x7f0000dceff8)='./file0\x00', 0x0, 0xffffffffffffffff) mount$fuseblk(&(0x7f0000000100)='/dev/loop0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='fuseblk\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d}, 0x2c, {'rootmode', 0x3d}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) 13:09:02 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x1, 0x168, [0x20000200, 0x0, 0x0, 0x20000350, 0x20000380], 0x0, &(0x7f0000000000), &(0x7f0000000200)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x800, 'veth0_to_bond\x00', 'bond_slave_1\x00', 'bridge_slave_1\x00', 'gretap0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @random="743d8f956ebb", [], 0xa0, 0xa0, 0xd8, [@pkttype={'pkttype\x00', 0x8}]}}, @snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1e0) 13:09:02 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,s\x00owexec,discard,check=strict']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mount$9p_unix(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000400)={'trans=unix,'}) utimes(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000440)={{0x77359400}}) 13:09:02 executing program 0: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=0xffffffff, 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") ioctl$FS_IOC_FSGETXATTR(r0, 0xc0c0583b, &(0x7f0000000040)={0x0, 0x0, 0x1}) [ 125.344991] kernel msg: ebtables bug: please report to author: Valid hook without chain [ 125.355364] FAT-fs (loop4): Unrecognized mount option "uid=" or missing value 13:09:02 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000240)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40505330, &(0x7f00000002c0)) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f00000000c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 13:09:02 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getflags(r1, 0x401) 13:09:02 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x0, 0x82) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, "e1d3f453651b58d4c2b87d64d0000000000000068baca8669b38ccd60857dbf5ae461a4569636517bf0f80030004000000208f0f1b00005c8ba93c00", "fe047b3177f4fc2eb04172daa8e7d1c4c4cf144a23173b6605afb988de9bbae0932dee7e07195d78f7ddd19a37cb5aa0a5629eef628582fba5bf4af44acfe059", "ee42e3ef1d1772a9432c227a3131995a00"}) 13:09:02 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000a00)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x8}}, 0x50) 13:09:02 executing program 5: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='fuseblk\x00', 0x0, &(0x7f00000006c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) 13:09:02 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006580)=[{{&(0x7f0000000140)=@sco, 0x6b, &(0x7f0000002000)=[{&(0x7f0000001f40)=""/26, 0x6}, {&(0x7f0000001f80)=""/68, 0x44}], 0x2, &(0x7f0000002080)=""/77, 0x4d}}], 0x800000000000043, 0x0, &(0x7f00000067c0)) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia-asm)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080)=0x229, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef915d56534c90c2", 0x18) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r1, &(0x7f00000007c0)=ANY=[], 0x1a7) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 13:09:02 executing program 5: socket$inet6(0xa, 0x0, 0x5) semop(0x0, &(0x7f00000001c0)=[{0x0, 0x4}], 0x1) semop(0x0, &(0x7f0000000140)=[{}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x10) 13:09:02 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)) read$FUSE(r0, &(0x7f0000001000), 0x10f8) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0xfffffffffffffff5, 0x1, {0x7, 0x1b}}, 0x50) 13:09:02 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x2b, 'pids', 0x20}]}, 0x6) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x80002d, 'pids', 0x20}]}, 0x6) 13:09:02 executing program 1: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 13:09:03 executing program 6: r0 = syz_open_dev$sndctrl(&(0x7f0000012000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0xffffffffffffff0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 13:09:03 executing program 7: syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1bac}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x0) 13:09:03 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006580)=[{{&(0x7f0000000140)=@sco, 0x6b, &(0x7f0000002000)=[{&(0x7f0000001f40)=""/26, 0x6}, {&(0x7f0000001f80)=""/68, 0x44}], 0x2, &(0x7f0000002080)=""/77, 0x4d}}], 0x800000000000043, 0x0, &(0x7f00000067c0)) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia-asm)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080)=0x229, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef915d56534c90c2", 0x18) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r1, &(0x7f00000007c0)=ANY=[], 0x1a7) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 13:09:03 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000800)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000580)=@newpolicy={0xc4, 0x13, 0x29, 0x0, 0x0, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@sec_ctx={0xc, 0x8, {0x8, 0x8}}]}, 0xc4}, 0x1}, 0x0) 13:09:03 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000002c0)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x0, @loopback=0x7f000001}}}, 0x90) 13:09:03 executing program 6: r0 = memfd_create(&(0x7f00000000c0)="70726f63ae6d696d655f74797065776c616e316e6f64657600", 0x6) fallocate(r0, 0x0, 0x0, 0xeb96) 13:09:03 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000240)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40505330, &(0x7f00000002c0)) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f00000000c0)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 13:09:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x3, 0x0) readv(r0, &(0x7f00000002c0), 0x0) 13:09:03 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x1}, {0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}, r1}}, 0x48) 13:09:03 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006580)=[{{&(0x7f0000000140)=@sco, 0x6b, &(0x7f0000002000)=[{&(0x7f0000001f40)=""/26, 0x6}, {&(0x7f0000001f80)=""/68, 0x44}], 0x2, &(0x7f0000002080)=""/77, 0x4d}}], 0x800000000000043, 0x0, &(0x7f00000067c0)) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia-asm)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080)=0x229, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef915d56534c90c2", 0x18) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r1, &(0x7f00000007c0)=ANY=[], 0x1a7) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 13:09:03 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 13:09:03 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000000)={0x0, 0x0}) recvmsg(r0, &(0x7f0000000040)={&(0x7f0000006980)=ANY=[], 0x0, &(0x7f0000006d00)=[{&(0x7f0000006c40)=""/181, 0xb5}], 0x1, &(0x7f0000006d40)=""/65, 0x41}, 0x0) sendmsg(r1, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)='v', 0x1}], 0x1, &(0x7f0000000440)=ANY=[]}, 0x0) 13:09:03 executing program 7: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)}}, 0x20) fcntl$setstatus(r0, 0x4, 0x4bff) pwrite64(r0, &(0x7f0000002200)="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", 0xe00, 0x200000) 13:09:03 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000000)='A::2:e:\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='ceph\x00', 0x0, &(0x7f00000000c0)) r0 = gettid() socket$inet6(0xa, 0x0, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) 13:09:03 executing program 6: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) unshare(0xa020200) 13:09:03 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x0, [0x40000071, 0x7fffffff]}) [ 126.760118] libceph: connect [a::2:e]:6789 error -101 [ 126.774766] libceph: mon0 [a::2:e]:6789 connect error 13:09:03 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006580)=[{{&(0x7f0000000140)=@sco, 0x6b, &(0x7f0000002000)=[{&(0x7f0000001f40)=""/26, 0x6}, {&(0x7f0000001f80)=""/68, 0x44}], 0x2, &(0x7f0000002080)=""/77, 0x4d}}], 0x800000000000043, 0x0, &(0x7f00000067c0)) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia-asm)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080)=0x229, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef915d56534c90c2", 0x18) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r1, &(0x7f00000007c0)=ANY=[], 0x1a7) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 13:09:03 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4"}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000080)={{0x80, 0x1}, 'port1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) [ 126.803362] libceph: connect [a::2:e]:6789 error -101 13:09:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x0, 0x0, @ioapic={0xf000, 0x0, 0xad8}}) [ 126.824453] libceph: mon0 [a::2:e]:6789 connect error 13:09:03 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000680)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)=""/193, &(0x7f0000000280)=""/97, &(0x7f00000001c0)=""/127}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000600)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x1, 0x0, &(0x7f0000000040)=""/132, &(0x7f0000000300)=""/238, &(0x7f0000000240)}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0xfffffffffffffffe) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000140)=&(0x7f0000000100)) 13:09:03 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000080), r1, 0x0, 0x2, 0x4}}, 0x20) 13:09:03 executing program 7: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=""/1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000080)=""/251}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000140)='sit0\x00') [ 127.571649] libceph: connect [a::2:e]:6789 error -101 [ 127.579605] libceph: mon0 [a::2:e]:6789 connect error 13:09:04 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-fixed-time)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c50400aeb995298992ea5400c2", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000000)={0x28, 0x4}, 0xfdef) 13:09:04 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006580)=[{{&(0x7f0000000140)=@sco, 0x6b, &(0x7f0000002000)=[{&(0x7f0000001f40)=""/26, 0x6}, {&(0x7f0000001f80)=""/68, 0x44}], 0x2, &(0x7f0000002080)=""/77, 0x4d}}], 0x800000000000043, 0x0, &(0x7f00000067c0)) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia-asm)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080)=0x229, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef915d56534c90c2", 0x18) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 13:09:04 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2900000004000000000000000000000001000000000000000000000081c00000010000000000000000"], 0x29) 13:09:04 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) shutdown(r0, 0x0) 13:09:04 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) stat(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000480)) read$FUSE(r0, &(0x7f0000001000), 0x1000) read$FUSE(r0, &(0x7f00000020c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b}}, 0x50) write$FUSE_DIRENT(r0, &(0x7f0000000500)={0x90, 0x0, 0x2, [{0x1, 0x0, 0xb, 0x0, 'em1nodevem1'}, {0x0, 0x0, 0x1, 0x0, ','}, {0x0, 0x0, 0x1c, 0x0, "2b73797374656dcc6370757365746367726f7570246367726f757015"}]}, 0x90) 13:09:04 executing program 6: syz_emit_ethernet(0x36, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x9, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14}, @remote={0xac, 0x14, 0x223, 0xbb}}, @icmp=@timestamp_reply={0xe}}}}}, &(0x7f0000000040)={0x0, 0x2, [0x0, 0xfffffffffffffffe]}) 13:09:04 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x4, 0x8, 0xffffffffffffffff}, 0x14}, 0x1}, 0x0) 13:09:04 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000015c0), 0x0, &(0x7f00000016c0)={[{@unhide='unhide', 0x2c}]}) 13:09:04 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x4, &(0x7f00000001c0)=0x0) io_getevents(r1, 0x2, 0x192, &(0x7f0000000040), &(0x7f0000000000)={0x77359400}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000640)}]) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x700000000000}]) 13:09:04 executing program 1: mmap(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x1, 0x8972, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) add_key(&(0x7f0000002000)='encrypted\x00', &(0x7f000080f000)={0x73, 0x79, 0x7a}, &(0x7f0000726000), 0x0, 0xffffffffffffffff) 13:09:04 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006580)=[{{&(0x7f0000000140)=@sco, 0x6b, &(0x7f0000002000)=[{&(0x7f0000001f40)=""/26, 0x6}, {&(0x7f0000001f80)=""/68, 0x44}], 0x2, &(0x7f0000002080)=""/77, 0x4d}}], 0x800000000000043, 0x0, &(0x7f00000067c0)) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia-asm)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080)=0x229, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef915d56534c90c2", 0x18) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 13:09:04 executing program 2: socket$inet6(0xa, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x40000, &(0x7f0000000240)={[{@shortname_winnt='shortname=winnt', 0x2c}, {@numtail='nonumtail=0', 0x2c}]}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) [ 127.832489] ISOFS: Unable to identify CD-ROM format. 13:09:04 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xe) ioctl$TCFLSH(r0, 0x541b, 0x709000) 13:09:04 executing program 1: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xffd2) truncate(&(0x7f0000000080)='./file0\x00', 0x400) close(r0) unlink(&(0x7f00000001c0)='./file0\x00') 13:09:04 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006580)=[{{&(0x7f0000000140)=@sco, 0x6b, &(0x7f0000002000)=[{&(0x7f0000001f40)=""/26, 0x6}, {&(0x7f0000001f80)=""/68, 0x44}], 0x2, &(0x7f0000002080)=""/77, 0x4d}}], 0x800000000000043, 0x0, &(0x7f00000067c0)) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia-asm)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080)=0x229, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef915d56534c90c2", 0x18) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) [ 127.950710] ISOFS: Unable to identify CD-ROM format. 13:09:04 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)="6e6f01fcffff692a2936f0d00c94808bcfbce5de2d57e70200818c6ab7847c51a44bb3aaaefbb8ae99506ae53aa88a80fec3073ecbcc3e72", 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "858818c80a06f9419f0645f5c828aff30125fe03f167d575e66335269e4a2784b6fa7ca74f3c4fcc18a97b489efa6cbfc375b6099c15059172f17c8dac70b01b", "c56cc6030016763b68466b3882888b474c3d859b5a4d9ed3ad01737782ad10568d74c9ee09f808a2bb61eec4409ff01aeebedd00000000c71d77353820975691", "2c5c591f0dc612cbf01b5b40aab1963f73172251e32b2dd768558f22ee0a0acc"}) 13:09:04 executing program 7: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) vmsplice(r0, &(0x7f0000000440)=[{&(0x7f0000000640)="ad2bb8c0df1f14bae6473b0ff3e8043d3ba2b766d05643f6e2e0b58a7941ac46e012d83c49a70362a4610b88c78ea0fff150245f1656d63a72f8ed4eca9ef7261fa79caa2a", 0x45}], 0x1, 0x0) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=@known='system.posix_acl_default\x00', &(0x7f0000000400)=':\x00', 0x2, 0x0) 13:09:04 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000040)='./f.Le0\x00', 0x0, 0x0) 13:09:04 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006580)=[{{&(0x7f0000000140)=@sco, 0x6b, &(0x7f0000002000)=[{&(0x7f0000001f40)=""/26, 0x6}, {&(0x7f0000001f80)=""/68, 0x44}], 0x2, &(0x7f0000002080)=""/77, 0x4d}}], 0x800000000000043, 0x0, &(0x7f00000067c0)) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia-asm)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080)=0x229, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef915d56534c90c2", 0x18) write$binfmt_elf32(r1, &(0x7f00000007c0)=ANY=[], 0x1a7) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 13:09:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000680)={0x18, 0x18, 0xfffffffffffffffd, 0x0, 0x0, {0x16}, [@typed={0x4, 0x13}]}, 0x18}, 0x1}, 0x0) [ 128.117911] netlink: 'syz-executor5': attribute type 19 has an invalid length. 13:09:05 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006580)=[{{&(0x7f0000000140)=@sco, 0x6b, &(0x7f0000002000)=[{&(0x7f0000001f40)=""/26, 0x6}, {&(0x7f0000001f80)=""/68, 0x44}], 0x2, &(0x7f0000002080)=""/77, 0x4d}}], 0x800000000000043, 0x0, &(0x7f00000067c0)) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia-asm)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080)=0x229, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef915d56534c90c2", 0x18) write$binfmt_elf32(r1, &(0x7f00000007c0)=ANY=[], 0x1a7) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 13:09:05 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) 13:09:05 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_user='access=user', 0x2c}]}}) 13:09:05 executing program 5: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x0) r1 = open$dir(&(0x7f00004daff8)='./file0\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00009b9000)="05000907667300", 0x801008, &(0x7f0000000000)) symlinkat(&(0x7f000001fff7)='./file0/file0\x00', r2, &(0x7f000001fff8)='./file0\x00') renameat2(r1, &(0x7f0000000180)='./file0/file0/file0/file0\x00', r1, &(0x7f00000000c0)='./file0/file0/file0/file0\x00', 0x0) 13:09:05 executing program 6: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0xffffffff, 0x2, 0x0, 0x0, [{r0}, {0xffffffffffffffff, 0x0, 0x1}]}) 13:09:05 executing program 1: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x0, 0x0, &(0x7f0000000540)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_notify(r0, &(0x7f00000003c0)) 13:09:05 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xd4, 0x20}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) 13:09:05 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)={[{0x0, 'rdma', 0x20}]}, 0x6) 13:09:05 executing program 2: r0 = socket$inet6(0xa, 0x80803, 0x2f) socket$inet6(0xa, 0x1000000000002, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@local={0xfe, 0x80, [], 0xaa}, @in=@multicast1=0xe0000001}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1=0xe0000001, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x8464}}, 0xe8) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={[], 0x3, 0x0, 0x4, 0x7, 0x1f}) capset(&(0x7f00000001c0), &(0x7f0000000200)={0x10001, 0x0, 0x0, 0x9, 0xffffffffffffffff}) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000300)=""/75, 0x4b) 13:09:05 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006580)=[{{&(0x7f0000000140)=@sco, 0x6b, &(0x7f0000002000)=[{&(0x7f0000001f40)=""/26, 0x6}, {&(0x7f0000001f80)=""/68, 0x44}], 0x2, &(0x7f0000002080)=""/77, 0x4d}}], 0x800000000000043, 0x0, &(0x7f00000067c0)) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia-asm)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080)=0x229, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef915d56534c90c2", 0x18) write$binfmt_elf32(r1, &(0x7f00000007c0)=ANY=[], 0x1a7) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 13:09:05 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x28000) 13:09:05 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f00000000c0)) 13:09:05 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x6}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000000000)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001640)=[{&(0x7f0000002040)=""/4096, 0x1000}], 0x1, &(0x7f0000000480)=""/24, 0x18}, 0x0) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000680), 0x3ba, &(0x7f0000002000)=[{0x10}], 0x10}}], 0x2, 0x8000) 13:09:05 executing program 6: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x0, 0x0, {0x8}}, 0x14}, 0x1}, 0x80) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:09:05 executing program 3: syz_emit_ethernet(0x67, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x31, 0xffffff84, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "0a07ec", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @ipv4={[0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0xff, 0xff], @dev={0xac, 0x14}}, [], "a8"}}}}}}}, &(0x7f0000000100)={0x0, 0xfffffffffffffffe, [0x0, 0x4cd]}) 13:09:05 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000bc4f00000007002e2f6669090030"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) vmsplice(r0, &(0x7f0000000180)=[{&(0x7f0000000640)="ad2bb8c0df1f14bae6473b0ff3e8043d3ba2b766d05643f6e2e0b58a7941ac46e012d83c49a70362a4610b88c78ea0fff150245f1656d63a72f8ed4eca9ef7261fa79caa2a", 0x45}], 0x1, 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0x0) 13:09:05 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r0, &(0x7f0000e78a42), 0xffae, 0x8084, &(0x7f00004d4000)={0x2, 0x4e20}, 0x10) ioctl$int_in(r0, 0x4000005452, &(0x7f0000f75000)=0x4) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) 13:09:05 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006580)=[{{&(0x7f0000000140)=@sco, 0x6b, &(0x7f0000002000)=[{&(0x7f0000001f40)=""/26, 0x6}, {&(0x7f0000001f80)=""/68, 0x44}], 0x2, &(0x7f0000002080)=""/77, 0x4d}}], 0x800000000000043, 0x0, &(0x7f00000067c0)) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia-asm)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080)=0x229, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r1, &(0x7f00000007c0)=ANY=[], 0x1a7) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 13:09:05 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9}, 0x14) 13:09:05 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f00001ed000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000600)="bf", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000240)={&(0x7f00001ee000/0x2000)=nil, 0x2000}, &(0x7f00000002c0)=0x10) 13:09:05 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x0, @empty=0x1000000}}}, 0x90) 13:09:05 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000004c0)={0x18, 0x0, {0x100003, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'ip6_vti0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x2, @random="277a4c148d89", 'bridge_slave_0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'ip6_vti0\x00'}}) 13:09:05 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006580)=[{{&(0x7f0000000140)=@sco, 0x6b, &(0x7f0000002000)=[{&(0x7f0000001f40)=""/26, 0x6}, {&(0x7f0000001f80)=""/68, 0x44}], 0x2, &(0x7f0000002080)=""/77, 0x4d}}], 0x800000000000043, 0x0, &(0x7f00000067c0)) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef915d56534c90c2", 0x18) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[], 0x1a7) recvmmsg(0xffffffffffffffff, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 13:09:05 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='fusectl\x00', 0x0, 0x0) 13:09:05 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 13:09:05 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000140)}, 0xc100) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000000)="ea54426349b0a8abea4ee3cb0a50617b", 0x10}], 0x1, &(0x7f00000001c0)}, 0x0) 13:09:05 executing program 2: r0 = timerfd_create(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000100)={{0x77359400}}, &(0x7f00000000c0)) 13:09:05 executing program 7: r0 = socket$inet6(0xa, 0x202000000801, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=@dstopts, 0x8) close(r0) 13:09:05 executing program 3: r0 = timerfd_create(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000100)={{0x77359400}}, &(0x7f00000000c0)) clock_settime(0x0, &(0x7f0000000000)={0x77359400}) 03:33:20 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x4}, 0x1c) 03:33:20 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendto(r1, &(0x7f0000000480), 0x2b6, 0xfffffdffffffffff, &(0x7f0000000000)=@hci={0x1f}, 0x80) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, &(0x7f00000000c0)=""/50, 0x32}, 0x0) sendto(r1, &(0x7f0000001640)="13", 0x1, 0x0, &(0x7f0000002a80)=@nl=@unspec, 0x80) 03:33:20 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:33:20 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006580)=[{{&(0x7f0000000140)=@sco, 0x6b, &(0x7f0000002000)=[{&(0x7f0000001f40)=""/26, 0x6}, {&(0x7f0000001f80)=""/68, 0x44}], 0x2, &(0x7f0000002080)=""/77, 0x4d}}], 0x800000000000043, 0x0, &(0x7f00000067c0)) r1 = accept4(r0, 0x0, &(0x7f0000000080)=0x229, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef915d56534c90c2", 0x18) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r1, &(0x7f00000007c0)=ANY=[], 0x1a7) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 03:33:20 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000002280)=ANY=[@ANYBLOB="7f454c468b05ff03fe0000000003000700"], 0x11) recvmmsg(r1, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=""/156, 0x9c}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000026c0)=""/4096, 0x1000}], 0x1, &(0x7f00000036c0)=""/4096, 0x1000}}], 0x2, 0x0, &(0x7f0000002240)={0x77359400}) 03:33:20 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f00001ed000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @loopback=0x7f000001}, 0x10) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000240)={&(0x7f00001ee000/0x2000)=nil, 0x2000}, &(0x7f00000002c0)=0x10) 03:33:20 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000300)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14}, @local={0xac, 0x14, 0x14, 0xaa}}, @igmp={0x0, 0x0, 0x0, @multicast2=0xe0000002}}}}}, &(0x7f0000000040)) 03:33:20 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0xaf02, &(0x7f0000016c40)={'ip6gre0\x00\x00\x00\x00\x00\x00\x00?\x00'}) close(r0) 03:33:20 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x800, 0x0) read(r0, &(0x7f0000000140)=""/207, 0xcf) 03:33:20 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000340)="0300", 0x2, 0x800000000008000, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendto$inet(r0, &(0x7f0000000140)="0900d13a8e04", 0x6, 0x0, &(0x7f0000000040)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 03:33:20 executing program 7: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000000000014, &(0x7f0000000180), 0x4) recvfrom(0xffffffffffffffff, &(0x7f0000000100)=""/98, 0x62, 0x0, &(0x7f0000000240)=@ax25={0x3, {"791e125ee68a8b"}}, 0x709000) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$getregset(0x5, r1, 0x7fffff, &(0x7f0000000000)={&(0x7f0000003040)=""/4096, 0x8dfcfe00aedf55da}) [ 129.807027] hrtimer: interrupt took 22079 ns 03:33:20 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia-asm)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080)=0x229, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef915d56534c90c2", 0x18) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r1, &(0x7f00000007c0)=ANY=[], 0x1a7) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 03:33:20 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000bc4f00000007002e2f6669090030"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) 03:33:20 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1000082) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) 03:33:20 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x800, 0x0) read(r0, &(0x7f0000000140)=""/207, 0xcf) 03:33:20 executing program 7: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000000000014, &(0x7f0000000180), 0x4) recvfrom(0xffffffffffffffff, &(0x7f0000000100)=""/98, 0x62, 0x0, &(0x7f0000000240)=@ax25={0x3, {"791e125ee68a8b"}}, 0x709000) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$getregset(0x5, r1, 0x7fffff, &(0x7f0000000000)={&(0x7f0000003040)=""/4096, 0x8dfcfe00aedf55da}) 03:33:20 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia-asm)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080)=0x229, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef915d56534c90c2", 0x18) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r1, &(0x7f00000007c0)=ANY=[], 0x1a7) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 03:33:21 executing program 5: creat(&(0x7f00000000c0)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000faffe7)=@known='security.capability\x00', &(0x7f0000000240)="0000000201000000000000010400000000000000", 0x14, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='security.ima\x00', &(0x7f0000000080)='security.', 0x9, 0x0) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/22, 0x16) 03:33:21 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) dup2(r1, r0) 03:33:21 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) close(0xffffffffffffffff) 03:33:21 executing program 3: clone(0x8000000800200, &(0x7f0000000380), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000000140)) mknod(&(0x7f00000002c0)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000380), &(0x7f00000001c0)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr/fscreate\x00') write$P9_RSTATFS(r0, &(0x7f00000001c0)={0x43, 0x9}, 0x43) creat(&(0x7f0000000040)='./file0\x00', 0x0) 03:33:21 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x800, 0x0) read(r0, &(0x7f0000000140)=""/207, 0xcf) 03:33:21 executing program 7: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000000000014, &(0x7f0000000180), 0x4) recvfrom(0xffffffffffffffff, &(0x7f0000000100)=""/98, 0x62, 0x0, &(0x7f0000000240)=@ax25={0x3, {"791e125ee68a8b"}}, 0x709000) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$getregset(0x5, r1, 0x7fffff, &(0x7f0000000000)={&(0x7f0000003040)=""/4096, 0x8dfcfe00aedf55da}) 03:33:21 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a600800000000000000068354015002c001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) clock_gettime(0x0, &(0x7f000000a4c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f000000a2c0)=[{{0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000006080)=""/4096, 0x1000}}, {{&(0x7f0000002b00)=@un=@abs, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000002c40)=""/69, 0x45}}, {{&(0x7f0000002cc0)=@can, 0x80, &(0x7f0000007440)}}, {{&(0x7f00000074c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001480), 0x0, &(0x7f0000007700)=""/200, 0xc8}}, {{0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000007840)=""/149, 0x95}}], 0x5, 0x0, &(0x7f000000a500)={0x0, r1+10000000}) 03:33:21 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia-asm)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080)=0x229, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef915d56534c90c2", 0x18) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r1, &(0x7f00000007c0)=ANY=[], 0x1a7) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 03:33:21 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x800, 0x0) read(r0, &(0x7f0000000140)=""/207, 0xcf) 03:33:21 executing program 7: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000000000014, &(0x7f0000000180), 0x4) recvfrom(0xffffffffffffffff, &(0x7f0000000100)=""/98, 0x62, 0x0, &(0x7f0000000240)=@ax25={0x3, {"791e125ee68a8b"}}, 0x709000) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$getregset(0x5, r1, 0x7fffff, &(0x7f0000000000)={&(0x7f0000003040)=""/4096, 0x8dfcfe00aedf55da}) 03:33:21 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='highspeed\x00', 0xa) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) shutdown(r0, 0x1) 03:33:21 executing program 5: mkdir(&(0x7f00000003c0)='./control\x00', 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0) rename(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000280)='./control/file0\x00') [ 130.667566] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:33:21 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000140)=""/207, 0xcf) 03:33:21 executing program 5: syz_emit_ethernet(0x32, &(0x7f000018f000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @dccp={{0x0, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}}}}}}, 0x0) 03:33:21 executing program 7: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000000000014, &(0x7f0000000180), 0x4) recvfrom(0xffffffffffffffff, &(0x7f0000000100)=""/98, 0x62, 0x0, &(0x7f0000000240)=@ax25={0x3, {"791e125ee68a8b"}}, 0x709000) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$getregset(0x5, r1, 0x7fffff, &(0x7f0000000000)={&(0x7f0000003040)=""/4096, 0x8dfcfe00aedf55da}) 03:33:21 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000006580)=[{{&(0x7f0000000140)=@sco, 0x6b, &(0x7f0000002000)=[{&(0x7f0000001f40)=""/26, 0x6}, {&(0x7f0000001f80)=""/68, 0x44}], 0x2, &(0x7f0000002080)=""/77, 0x4d}}], 0x800000000000043, 0x0, &(0x7f00000067c0)) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia-asm)\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x229, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef915d56534c90c2", 0x18) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r0, &(0x7f00000007c0)=ANY=[], 0x1a7) recvmmsg(r0, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) [ 130.716471] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 130.756590] netlink: 'syz-executor2': attribute type 29 has an invalid length. 03:33:21 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x800, 0x0) read(r0, &(0x7f0000000140)=""/207, 0xcf) [ 130.911941] netlink: 'syz-executor2': attribute type 29 has an invalid length. [ 130.933641] netlink: 'syz-executor2': attribute type 29 has an invalid length. [ 130.941267] netlink: 'syz-executor2': attribute type 29 has an invalid length. [ 130.949062] netlink: 'syz-executor2': attribute type 29 has an invalid length. 03:33:21 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0200eeffffff01000000ff07000000000000000000000000000000000000fffffff5", 0x22, 0x1c0}]) 03:33:21 executing program 7: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000000000014, &(0x7f0000000180), 0x4) recvfrom(0xffffffffffffffff, &(0x7f0000000100)=""/98, 0x62, 0x0, &(0x7f0000000240)=@ax25={0x3, {"791e125ee68a8b"}}, 0x709000) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace(0x4207, r1) ptrace$getregset(0x5, r1, 0x7fffff, &(0x7f0000000000)={&(0x7f0000003040)=""/4096, 0x8dfcfe00aedf55da}) [ 130.956619] netlink: 'syz-executor2': attribute type 29 has an invalid length. [ 130.964393] netlink: 'syz-executor2': attribute type 29 has an invalid length. [ 130.974197] netlink: 'syz-executor2': attribute type 29 has an invalid length. [ 130.985661] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 130.996634] netlink: 'syz-executor2': attribute type 29 has an invalid length. [ 131.036906] Dev loop5: unable to read RDB block 1 [ 131.041882] loop5: AHDI p1 p3 [ 131.045277] loop5: partition table partially beyond EOD, truncated [ 131.080589] Dev loop5: unable to read RDB block 1 [ 131.085533] loop5: AHDI p1 p3 [ 131.088767] loop5: partition table partially beyond EOD, truncated 03:33:22 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(r0, r1) 03:33:22 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006580), 0x0, 0x0, &(0x7f00000067c0)) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia-asm)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080)=0x229, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef915d56534c90c2", 0x18) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r1, &(0x7f00000007c0)=ANY=[], 0x1a7) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 03:33:22 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) dup2(r1, r0) 03:33:22 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x800, 0x0) read(r0, &(0x7f0000000140)=""/207, 0xcf) 03:33:22 executing program 2: r0 = memfd_create(&(0x7f0000049000)='selinux\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x80002) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f000004d000)={0x80, 0x1, 'client1\x00', 0xffffffff80000006, "0000da00001effe3", "a6e7fd491ca076ef11ae80ffea002000040004002ecd959baa11a50700000001"}) write$sndseq(r1, &(0x7f0000000240)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x989680}}], 0x30) 03:33:22 executing program 7: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000000000014, &(0x7f0000000180), 0x4) recvfrom(0xffffffffffffffff, &(0x7f0000000100)=""/98, 0x62, 0x0, &(0x7f0000000240)=@ax25={0x3, {"791e125ee68a8b"}}, 0x709000) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace(0x4207, r1) ptrace$getregset(0x5, r1, 0x7fffff, &(0x7f0000000000)={&(0x7f0000003040)=""/4096, 0x8dfcfe00aedf55da}) 03:33:22 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="0200eeffffff01000000ff07000000000000000000000000000000000000fffffff5", 0x22, 0x1c0}]) [ 131.510007] Dev loop5: unable to read RDB block 1 [ 131.515088] loop5: AHDI p1 p3 [ 131.518423] loop5: partition table partially beyond EOD, truncated [ 131.550259] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:33:22 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000180)=0x3, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="020300000700000000000000fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035110f118d0000f55dc62600009b000000faffffff00000000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000080)={0xa, 0x200800800, 0x20000000005, @loopback={0x0, 0x1}}, 0x1c) 03:33:22 executing program 7: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000000000014, &(0x7f0000000180), 0x4) recvfrom(0xffffffffffffffff, &(0x7f0000000100)=""/98, 0x62, 0x0, &(0x7f0000000240)=@ax25={0x3, {"791e125ee68a8b"}}, 0x709000) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace(0x4207, r1) ptrace$getregset(0x5, r1, 0x7fffff, &(0x7f0000000000)={&(0x7f0000003040)=""/4096, 0x8dfcfe00aedf55da}) 03:33:22 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x800, 0x0) read(r0, &(0x7f0000000140)=""/207, 0xcf) 03:33:22 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x31) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote={0xac, 0x14, 0x14, 0xbb}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1=0xe0000001, 0xfffffffffffffffd, 0x33}, 0x0, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") write$binfmt_misc(r1, &(0x7f0000000a80)={'syz1'}, 0x4) 03:33:22 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006580), 0x0, 0x0, &(0x7f00000067c0)) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia-asm)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080)=0x229, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef915d56534c90c2", 0x18) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r1, &(0x7f00000007c0)=ANY=[], 0x1a7) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 03:33:22 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r0, 0x40005504, &(0x7f0000000080)) 03:33:22 executing program 7: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000000000014, &(0x7f0000000180), 0x4) recvfrom(0xffffffffffffffff, &(0x7f0000000100)=""/98, 0x62, 0x0, &(0x7f0000000240)=@ax25={0x3, {"791e125ee68a8b"}}, 0x709000) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) ptrace(0x4207, 0x0) ptrace$getregset(0x5, 0x0, 0x7fffff, &(0x7f0000000000)={&(0x7f0000003040)=""/4096, 0x8dfcfe00aedf55da}) 03:33:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) 03:33:22 executing program 1: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x800, 0x0) read(r0, &(0x7f0000000140)=""/207, 0xcf) 03:33:23 executing program 7: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000000000014, &(0x7f0000000180), 0x4) recvfrom(0xffffffffffffffff, &(0x7f0000000100)=""/98, 0x62, 0x0, &(0x7f0000000240)=@ax25={0x3, {"791e125ee68a8b"}}, 0x709000) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) ptrace(0x4207, 0x0) ptrace$getregset(0x5, 0x0, 0x7fffff, &(0x7f0000000000)={&(0x7f0000003040)=""/4096, 0x8dfcfe00aedf55da}) 03:33:23 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x31) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote={0xac, 0x14, 0x14, 0xbb}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1=0xe0000001, 0xfffffffffffffffd, 0x33}, 0x0, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa}, 0x1c) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") write$binfmt_misc(r1, &(0x7f0000000a80)={'syz1'}, 0x4) 03:33:23 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006580), 0x0, 0x0, &(0x7f00000067c0)) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia-asm)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080)=0x229, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef915d56534c90c2", 0x18) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r1, &(0x7f00000007c0)=ANY=[], 0x1a7) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 03:33:23 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 03:33:23 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x10, 0x4, 0x4, 0x3, 0x0, 0x1}, 0x2c) 03:33:23 executing program 1: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x800, 0x0) read(r0, &(0x7f0000000140)=""/207, 0xcf) 03:33:23 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(r0, r1) 03:33:23 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) dup2(r1, r0) 03:33:23 executing program 7: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000000000014, &(0x7f0000000180), 0x4) recvfrom(0xffffffffffffffff, &(0x7f0000000100)=""/98, 0x62, 0x0, &(0x7f0000000240)=@ax25={0x3, {"791e125ee68a8b"}}, 0x709000) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) ptrace(0x4207, 0x0) ptrace$getregset(0x5, 0x0, 0x7fffff, &(0x7f0000000000)={&(0x7f0000003040)=""/4096, 0x8dfcfe00aedf55da}) 03:33:23 executing program 1: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x800, 0x0) read(r0, &(0x7f0000000140)=""/207, 0xcf) 03:33:23 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) stat(&(0x7f0000000280)='./file0/file0/../file0\x00', &(0x7f0000000340)) open(&(0x7f0000000040)='./file0/file0/../file0\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b}}, 0x50) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) 03:33:23 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, r1}}, 0x48) 03:33:23 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') [ 132.445128] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:33:23 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006580)=[{{&(0x7f0000000140)=@sco, 0x80, &(0x7f0000002000)=[{&(0x7f0000001f80)=""/68, 0x44}], 0x1, &(0x7f0000002080)=""/77, 0x4d}}], 0x1, 0x0, &(0x7f00000067c0)) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia-asm)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080)=0x229, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef915d56534c90c2", 0x18) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r1, &(0x7f00000007c0)=ANY=[], 0x1a7) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 03:33:23 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x800, 0x0) read(r0, &(0x7f0000000140)=""/207, 0xcf) 03:33:23 executing program 7: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000000000014, &(0x7f0000000180), 0x4) recvfrom(0xffffffffffffffff, &(0x7f0000000100)=""/98, 0x62, 0x0, &(0x7f0000000240)=@ax25={0x3, {"791e125ee68a8b"}}, 0x709000) r0 = inotify_init1(0x0) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$getregset(0x5, r1, 0x7fffff, &(0x7f0000000000)={&(0x7f0000003040)=""/4096, 0x8dfcfe00aedf55da}) 03:33:23 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:33:23 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, r1}}, 0x48) 03:33:23 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x800, 0x0) read(r0, &(0x7f0000000140)=""/207, 0xcf) 03:33:23 executing program 7: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000000000014, &(0x7f0000000180), 0x4) recvfrom(0xffffffffffffffff, &(0x7f0000000100)=""/98, 0x62, 0x0, &(0x7f0000000240)=@ax25={0x3, {"791e125ee68a8b"}}, 0x709000) r0 = inotify_init1(0x0) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$getregset(0x5, r1, 0x7fffff, &(0x7f0000000000)={&(0x7f0000003040)=""/4096, 0x8dfcfe00aedf55da}) 03:33:23 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006580)=[{{&(0x7f0000000140)=@sco, 0x80, &(0x7f0000002000)=[{&(0x7f0000001f80)=""/68, 0x44}], 0x1, &(0x7f0000002080)=""/77, 0x4d}}], 0x1, 0x0, &(0x7f00000067c0)) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia-asm)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080)=0x229, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef915d56534c90c2", 0x18) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r1, &(0x7f00000007c0)=ANY=[], 0x1a7) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 03:33:23 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:33:24 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(r0, r1) 03:33:24 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, r1}}, 0x48) 03:33:24 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x800, 0x0) read(r0, &(0x7f0000000140)=""/207, 0xcf) 03:33:24 executing program 7: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000000000014, &(0x7f0000000180), 0x4) recvfrom(0xffffffffffffffff, &(0x7f0000000100)=""/98, 0x62, 0x0, &(0x7f0000000240)=@ax25={0x3, {"791e125ee68a8b"}}, 0x709000) r0 = inotify_init1(0x0) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$getregset(0x5, r1, 0x7fffff, &(0x7f0000000000)={&(0x7f0000003040)=""/4096, 0x8dfcfe00aedf55da}) 03:33:24 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) dup2(r1, r0) 03:33:24 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:33:24 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006580)=[{{&(0x7f0000000140)=@sco, 0x80, &(0x7f0000002000)=[{&(0x7f0000001f80)=""/68, 0x44}], 0x1, &(0x7f0000002080)=""/77, 0x4d}}], 0x1, 0x0, &(0x7f00000067c0)) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia-asm)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080)=0x229, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef915d56534c90c2", 0x18) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r1, &(0x7f00000007c0)=ANY=[], 0x1a7) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 03:33:24 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f00000002c0), 0x7) 03:33:24 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) read(r0, &(0x7f0000000140)=""/207, 0xcf) 03:33:24 executing program 7: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000000000014, &(0x7f0000000180), 0x4) recvfrom(0xffffffffffffffff, &(0x7f0000000100)=""/98, 0x62, 0x0, &(0x7f0000000240)=@ax25={0x3, {"791e125ee68a8b"}}, 0x709000) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace(0x4207, r0) ptrace$getregset(0x5, r0, 0x7fffff, &(0x7f0000000000)={&(0x7f0000003040)=""/4096, 0x8dfcfe00aedf55da}) 03:33:24 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, r1}}, 0x48) 03:33:24 executing program 7: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000000000014, &(0x7f0000000180), 0x4) recvfrom(0xffffffffffffffff, &(0x7f0000000100)=""/98, 0x62, 0x0, &(0x7f0000000240)=@ax25={0x3, {"791e125ee68a8b"}}, 0x709000) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace(0x4207, r0) ptrace$getregset(0x5, r0, 0x7fffff, &(0x7f0000000000)={&(0x7f0000003040)=""/4096, 0x8dfcfe00aedf55da}) 03:33:24 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) read(r0, &(0x7f0000000140)=""/207, 0xcf) 03:33:24 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') 03:33:24 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006580)=[{{&(0x7f0000000140)=@sco, 0x80, &(0x7f0000002000)=[{&(0x7f0000001f40)=""/26, 0x1a}], 0x1, &(0x7f0000002080)=""/77, 0x4d}}], 0x1, 0x0, &(0x7f00000067c0)) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia-asm)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080)=0x229, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef915d56534c90c2", 0x18) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r1, &(0x7f00000007c0)=ANY=[], 0x1a7) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 03:33:24 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0x48) [ 133.669773] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:33:25 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(r0, r1) 03:33:25 executing program 7: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000000000014, &(0x7f0000000180), 0x4) recvfrom(0xffffffffffffffff, &(0x7f0000000100)=""/98, 0x62, 0x0, &(0x7f0000000240)=@ax25={0x3, {"791e125ee68a8b"}}, 0x709000) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace(0x4207, r0) ptrace$getregset(0x5, r0, 0x7fffff, &(0x7f0000000000)={&(0x7f0000003040)=""/4096, 0x8dfcfe00aedf55da}) 03:33:25 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x43289}}, 0x50) open(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0x0, 0x3}, 0x20) 03:33:25 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) read(r0, &(0x7f0000000140)=""/207, 0xcf) 03:33:25 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, r0}}, 0x48) 03:33:25 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') 03:33:25 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006580)=[{{&(0x7f0000000140)=@sco, 0x80, &(0x7f0000002000)=[{&(0x7f0000001f40)=""/26, 0x1a}], 0x1, &(0x7f0000002080)=""/77, 0x4d}}], 0x1, 0x0, &(0x7f00000067c0)) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia-asm)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080)=0x229, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef915d56534c90c2", 0x18) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r1, &(0x7f00000007c0)=ANY=[], 0x1a7) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 03:33:25 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) dup2(r1, r0) 03:33:25 executing program 7: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000000000014, &(0x7f0000000180), 0x4) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$getregset(0x5, r1, 0x7fffff, &(0x7f0000000000)={&(0x7f0000003040)=""/4096, 0x8dfcfe00aedf55da}) 03:33:25 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, r0}}, 0x48) 03:33:25 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006580)=[{{&(0x7f0000000140)=@sco, 0x80, &(0x7f0000002000)=[{&(0x7f0000001f40)=""/26, 0x1a}], 0x1, &(0x7f0000002080)=""/77, 0x4d}}], 0x1, 0x0, &(0x7f00000067c0)) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia-asm)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080)=0x229, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef915d56534c90c2", 0x18) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r1, &(0x7f00000007c0)=ANY=[], 0x1a7) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 03:33:25 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x800, 0x0) read(0xffffffffffffffff, &(0x7f0000000140)=""/207, 0xcf) 03:33:25 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') 03:33:25 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) dup2(r1, r0) 03:33:25 executing program 7: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$getregset(0x5, r1, 0x7fffff, &(0x7f0000000000)={&(0x7f0000003040)=""/4096, 0x8dfcfe00aedf55da}) 03:33:25 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, r0}}, 0x48) 03:33:26 executing program 3: pipe2(&(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') 03:33:26 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006580)=[{{&(0x7f0000000140)=@sco, 0x6b, &(0x7f0000002000)=[{&(0x7f0000001f40)=""/26, 0x6}, {&(0x7f0000001f80)=""/68, 0x44}], 0x2, &(0x7f0000002080)=""/77, 0x4d}}], 0x800000000000043, 0x0, &(0x7f00000067c0)) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia-asm)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080)=0x229, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef915d56534c90c2", 0x18) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r1, &(0x7f00000007c0)=ANY=[], 0x1a7) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 03:33:26 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0xfffffe78) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, r1}}, 0x48) 03:33:26 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:33:26 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, r1}}, 0x48) 03:33:26 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) dup2(r1, r0) 03:33:26 executing program 7: r0 = inotify_init1(0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$getregset(0x5, r1, 0x7fffff, &(0x7f0000000000)={&(0x7f0000003040)=""/4096, 0x8dfcfe00aedf55da}) 03:33:26 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006580)=[{{&(0x7f0000000140)=@sco, 0x6b, &(0x7f0000002000)=[{&(0x7f0000001f40)=""/26, 0x6}, {&(0x7f0000001f80)=""/68, 0x44}], 0x2, &(0x7f0000002080)=""/77, 0x4d}}], 0x800000000000043, 0x0, &(0x7f00000067c0)) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia-asm)\x00'}, 0x58) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x229, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef915d56534c90c2", 0x18) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r1, &(0x7f00000007c0)=ANY=[], 0x1a7) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 03:33:26 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:33:26 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, r1}}, 0x48) 03:33:26 executing program 7: r0 = inotify_init1(0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$getregset(0x5, r1, 0x7fffff, &(0x7f0000000000)={&(0x7f0000003040)=""/4096, 0x8dfcfe00aedf55da}) 03:33:26 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006580)=[{{&(0x7f0000000140)=@sco, 0x6b, &(0x7f0000002000)=[{&(0x7f0000001f40)=""/26, 0x6}, {&(0x7f0000001f80)=""/68, 0x44}], 0x2, &(0x7f0000002080)=""/77, 0x4d}}], 0x800000000000043, 0x0, &(0x7f00000067c0)) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia-asm)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080)=0x229, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef915d56534c90c2", 0x18) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r1, &(0x7f00000007c0)=ANY=[], 0x1a7) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 03:33:26 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='(()bdev{%\x00') 03:33:26 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) dup2(0xffffffffffffffff, r0) 03:33:26 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:33:26 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006580)=[{{&(0x7f0000000140)=@sco, 0x6b, &(0x7f0000002000)=[{&(0x7f0000001f40)=""/26, 0x6}, {&(0x7f0000001f80)=""/68, 0x44}], 0x2, &(0x7f0000002080)=""/77, 0x4d}}], 0x800000000000043, 0x0, &(0x7f00000067c0)) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia-asm)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080)=0x229, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r1, &(0x7f00000007c0)=ANY=[], 0x1a7) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 03:33:27 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, r1}}, 0x48) 03:33:27 executing program 7: r0 = inotify_init1(0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$getregset(0x5, r1, 0x7fffff, &(0x7f0000000000)={&(0x7f0000003040)=""/4096, 0x8dfcfe00aedf55da}) 03:33:27 executing program 0: syz_mount_image$ntfs(&(0x7f00000001c0)='ntfs\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f00000015c0), 0x0, &(0x7f0000001680)={[{@disable_sparse_no='disable_sparse=no', 0x2c}]}) 03:33:27 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006580)=[{{&(0x7f0000000140)=@sco, 0x6b, &(0x7f0000002000)=[{&(0x7f0000001f40)=""/26, 0x6}, {&(0x7f0000001f80)=""/68, 0x44}], 0x2, &(0x7f0000002080)=""/77, 0x4d}}], 0x800000000000043, 0x0, &(0x7f00000067c0)) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia-asm)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080)=0x229, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992", 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r1, &(0x7f00000007c0)=ANY=[], 0x1a7) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 03:33:27 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) dup2(r1, r0) 03:33:27 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:33:27 executing program 3: pipe2(&(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') 03:33:27 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) 03:33:27 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:33:27 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006580)=[{{&(0x7f0000000140)=@sco, 0x6b, &(0x7f0000002000)=[{&(0x7f0000001f40)=""/26, 0x6}, {&(0x7f0000001f80)=""/68, 0x44}], 0x2, &(0x7f0000002080)=""/77, 0x4d}}], 0x800000000000043, 0x0, &(0x7f00000067c0)) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia-asm)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080)=0x229, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef91", 0x12) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r1, &(0x7f00000007c0)=ANY=[], 0x1a7) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 03:33:27 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, r1}}, 0x48) [ 136.161460] ntfs: (device loop0): parse_options(): Unrecognized mount option . [ 136.162847] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:33:27 executing program 7: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$getregset(0x5, r1, 0x7fffff, &(0x7f0000000000)={&(0x7f0000003040)=""/4096, 0x8dfcfe00aedf55da}) 03:33:27 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') [ 136.235178] ntfs: (device loop0): parse_options(): Unrecognized mount option . 03:33:27 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) dup2(r1, r0) 03:33:27 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006580)=[{{&(0x7f0000000140)=@sco, 0x6b, &(0x7f0000002000)=[{&(0x7f0000001f40)=""/26, 0x6}, {&(0x7f0000001f80)=""/68, 0x44}], 0x2, &(0x7f0000002080)=""/77, 0x4d}}], 0x800000000000043, 0x0, &(0x7f00000067c0)) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia-asm)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080)=0x229, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef915d5653", 0x15) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r1, &(0x7f00000007c0)=ANY=[], 0x1a7) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 03:33:27 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, r1}}, 0x48) 03:33:27 executing program 0: perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x857, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 03:33:27 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) 03:33:27 executing program 7: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$getregset(0x5, r1, 0x7fffff, &(0x7f0000000000)={&(0x7f0000003040)=""/4096, 0x8dfcfe00aedf55da}) 03:33:27 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:33:27 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006580)=[{{&(0x7f0000000140)=@sco, 0x6b, &(0x7f0000002000)=[{&(0x7f0000001f40)=""/26, 0x6}, {&(0x7f0000001f80)=""/68, 0x44}], 0x2, &(0x7f0000002080)=""/77, 0x4d}}], 0x800000000000043, 0x0, &(0x7f00000067c0)) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia-asm)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080)=0x229, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef915d56534c90", 0x17) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r1, &(0x7f00000007c0)=ANY=[], 0x1a7) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) [ 136.361259] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:33:28 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006580)=[{{&(0x7f0000000140)=@sco, 0x6b, &(0x7f0000002000)=[{&(0x7f0000001f40)=""/26, 0x6}, {&(0x7f0000001f80)=""/68, 0x44}], 0x2, &(0x7f0000002080)=""/77, 0x4d}}], 0x800000000000043, 0x0, &(0x7f00000067c0)) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia-asm)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080)=0x229, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef915d56534c90c2", 0x18) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r1, &(0x7f00000007c0)=ANY=[], 0x1a7) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 03:33:28 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, r1}}, 0x48) 03:33:28 executing program 3: pipe2(&(0x7f00000000c0), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') 03:33:28 executing program 7: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$getregset(0x5, r1, 0x7fffff, &(0x7f0000000000)={&(0x7f0000003040)=""/4096, 0x8dfcfe00aedf55da}) 03:33:28 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000140)="06"}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 03:33:28 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:33:28 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) dup2(r1, r0) 03:33:28 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) 03:33:28 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006580)=[{{&(0x7f0000000140)=@sco, 0x6b, &(0x7f0000002000)=[{&(0x7f0000001f40)=""/26, 0x6}, {&(0x7f0000001f80)=""/68, 0x44}], 0x2, &(0x7f0000002080)=""/77, 0x4d}}], 0x800000000000043, 0x0, &(0x7f00000067c0)) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia-asm)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080)=0x229, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef915d56534c90c2", 0x18) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r1, &(0x7f00000007c0)=ANY=[], 0x1a7) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 03:33:28 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:33:28 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, r1}}, 0x48) 03:33:28 executing program 7: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x0, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$getregset(0x5, r1, 0x7fffff, &(0x7f0000000000)={&(0x7f0000003040)=""/4096, 0x8dfcfe00aedf55da}) [ 137.149762] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 137.165666] binder: 7992:7994 ERROR: BC_REGISTER_LOOPER called without request 03:33:28 executing program 6: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) dup2(r0, 0xffffffffffffffff) [ 137.209438] binder: release 7992:7994 transaction 6 in, still active [ 137.216138] binder: send failed reply for transaction 6 to 7992:7994 03:33:28 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) 03:33:28 executing program 7: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x0, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$getregset(0x5, r1, 0x7fffff, &(0x7f0000000000)={&(0x7f0000003040)=""/4096, 0x8dfcfe00aedf55da}) 03:33:28 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006580)=[{{&(0x7f0000000140)=@sco, 0x6b, &(0x7f0000002000)=[{&(0x7f0000001f40)=""/26, 0x6}, {&(0x7f0000001f80)=""/68, 0x44}], 0x2, &(0x7f0000002080)=""/77, 0x4d}}], 0x800000000000043, 0x0, &(0x7f00000067c0)) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia-asm)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080)=0x229, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef915d56534c90c2", 0x18) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r1, &(0x7f00000007c0)=ANY=[], 0x1a7) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 03:33:28 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, r1}}, 0x48) 03:33:28 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') [ 137.305339] binder_alloc: binder_alloc_mmap_handler: 7992 20001000-20004000 already mapped failed -16 [ 137.319159] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 137.325478] binder: BINDER_SET_CONTEXT_MGR already set [ 137.351145] binder_alloc: 7992: binder_alloc_buf, no vma [ 137.356747] binder: 7992:8019 transaction failed 29189/-3, size 0-0 line 2967 [ 137.425612] binder: 7992:7994 ioctl 40046207 0 returned -16 [ 137.429785] binder: 7992:8036 ERROR: BC_REGISTER_LOOPER called without request [ 137.476803] binder: undelivered TRANSACTION_COMPLETE [ 137.482719] binder: undelivered TRANSACTION_ERROR: 29189 [ 137.509285] binder: undelivered TRANSACTION_ERROR: 29189 03:33:29 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, r1}}, 0x48) 03:33:29 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006580)=[{{&(0x7f0000000140)=@sco, 0x6b, &(0x7f0000002000)=[{&(0x7f0000001f40)=""/26, 0x6}, {&(0x7f0000001f80)=""/68, 0x44}], 0x2, &(0x7f0000002080)=""/77, 0x4d}}], 0x800000000000043, 0x0, &(0x7f00000067c0)) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia-asm)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080)=0x229, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef915d56534c90c2", 0x18) perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r1, &(0x7f00000007c0)=ANY=[], 0x1a7) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 03:33:29 executing program 7: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x0, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$getregset(0x5, r1, 0x7fffff, &(0x7f0000000000)={&(0x7f0000003040)=""/4096, 0x8dfcfe00aedf55da}) 03:33:29 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) dup2(r1, r0) 03:33:29 executing program 2: fchdir(0xffffffffffffffff) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:33:29 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) 03:33:29 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(r0, r1) 03:33:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000140)="06"}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 138.130204] binder: 8046:8047 ERROR: BC_REGISTER_LOOPER called without request [ 138.154236] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:33:29 executing program 7: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) ptrace(0x4207, r1) ptrace$getregset(0x5, r1, 0x7fffff, &(0x7f0000000000)={&(0x7f0000003040)=""/4096, 0x8dfcfe00aedf55da}) 03:33:29 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006580)=[{{&(0x7f0000000140)=@sco, 0x6b, &(0x7f0000002000)=[{&(0x7f0000001f40)=""/26, 0x6}, {&(0x7f0000001f80)=""/68, 0x44}], 0x2, &(0x7f0000002080)=""/77, 0x4d}}], 0x800000000000043, 0x0, &(0x7f00000067c0)) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia-asm)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080)=0x229, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef915d56534c90c2", 0x18) perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r1, &(0x7f00000007c0)=ANY=[], 0x1a7) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 03:33:29 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, r1}}, 0x48) 03:33:29 executing program 2: fchdir(0xffffffffffffffff) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:33:29 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) [ 138.177385] binder: release 8046:8047 transaction 9 in, still active [ 138.184053] binder: send failed reply for transaction 9 to 8046:8047 03:33:29 executing program 2: fchdir(0xffffffffffffffff) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:33:29 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) dup2(r1, r0) [ 138.244138] binder: undelivered TRANSACTION_COMPLETE [ 138.249411] binder: undelivered TRANSACTION_ERROR: 29189 03:33:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000140)="06"}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 03:33:29 executing program 7: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) ptrace(0x4207, r1) ptrace$getregset(0x5, r1, 0x7fffff, &(0x7f0000000000)={&(0x7f0000003040)=""/4096, 0x8dfcfe00aedf55da}) 03:33:29 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006580)=[{{&(0x7f0000000140)=@sco, 0x6b, &(0x7f0000002000)=[{&(0x7f0000001f40)=""/26, 0x6}, {&(0x7f0000001f80)=""/68, 0x44}], 0x2, &(0x7f0000002080)=""/77, 0x4d}}], 0x800000000000043, 0x0, &(0x7f00000067c0)) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia-asm)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080)=0x229, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef915d56534c90c2", 0x18) perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r1, &(0x7f00000007c0)=ANY=[], 0x1a7) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 03:33:29 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, r1}}, 0x48) 03:33:29 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) [ 138.350815] binder: 8089:8091 ERROR: BC_REGISTER_LOOPER called without request [ 138.353074] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:33:29 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:33:29 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006580)=[{{&(0x7f0000000140)=@sco, 0x6b, &(0x7f0000002000)=[{&(0x7f0000001f40)=""/26, 0x6}, {&(0x7f0000001f80)=""/68, 0x44}], 0x2, &(0x7f0000002080)=""/77, 0x4d}}], 0x800000000000043, 0x0, &(0x7f00000067c0)) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia-asm)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080)=0x229, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef915d56534c90c2", 0x18) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r1, &(0x7f00000007c0)=ANY=[], 0x1a7) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) [ 138.419798] binder: release 8089:8091 transaction 11 in, still active [ 138.426480] binder: send failed reply for transaction 11 to 8089:8091 [ 138.479972] binder: undelivered TRANSACTION_COMPLETE [ 138.485184] binder: undelivered TRANSACTION_ERROR: 29189 03:33:29 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(r0, r1) 03:33:29 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, r1}}, 0x48) 03:33:29 executing program 7: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) ptrace(0x4207, r1) ptrace$getregset(0x5, r1, 0x7fffff, &(0x7f0000000000)={&(0x7f0000003040)=""/4096, 0x8dfcfe00aedf55da}) 03:33:29 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:33:29 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) dup2(r1, r0) 03:33:29 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) 03:33:29 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x4000)=nil, 0x4000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000300)={&(0x7f0000013000/0x2000)=nil, 0x2000}) clone(0x0, &(0x7f0000000240), &(0x7f00000014c0), &(0x7f0000000180), &(0x7f0000000380)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) 03:33:29 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006580)=[{{&(0x7f0000000140)=@sco, 0x6b, &(0x7f0000002000)=[{&(0x7f0000001f40)=""/26, 0x6}, {&(0x7f0000001f80)=""/68, 0x44}], 0x2, &(0x7f0000002080)=""/77, 0x4d}}], 0x800000000000043, 0x0, &(0x7f00000067c0)) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia-asm)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080)=0x229, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef915d56534c90c2", 0x18) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[], 0x1a7) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 03:33:29 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, r1}}, 0x48) 03:33:29 executing program 7: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x0, r1) ptrace$getregset(0x5, r1, 0x7fffff, &(0x7f0000000000)={&(0x7f0000003040)=""/4096, 0x8dfcfe00aedf55da}) 03:33:29 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006580)=[{{&(0x7f0000000140)=@sco, 0x6b, &(0x7f0000002000)=[{&(0x7f0000001f40)=""/26, 0x6}, {&(0x7f0000001f80)=""/68, 0x44}], 0x2, &(0x7f0000002080)=""/77, 0x4d}}], 0x800000000000043, 0x0, &(0x7f00000067c0)) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia-asm)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080)=0x229, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef915d56534c90c2", 0x18) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[], 0x1a7) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 03:33:29 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:33:29 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000080)=r0) [ 139.057923] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:33:30 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800"}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) dup2(r1, r0) 03:33:30 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:33:30 executing program 7: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, 0x0) ptrace$getregset(0x5, r1, 0x7fffff, &(0x7f0000000000)={&(0x7f0000003040)=""/4096, 0x8dfcfe00aedf55da}) [ 139.221133] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 139.836794] FAULT_FLAG_ALLOW_RETRY missing 30 [ 139.841380] CPU: 1 PID: 8122 Comm: syz-executor0 Not tainted 4.18.0-rc5-next-20180720+ #12 [ 139.849790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 139.859134] Call Trace: [ 139.861719] dump_stack+0x1c9/0x2b4 [ 139.865350] ? dump_stack_print_info.cold.2+0x52/0x52 [ 139.870546] ? kasan_check_write+0x14/0x20 [ 139.874786] ? do_raw_spin_lock+0xc1/0x200 [ 139.879044] handle_userfault.cold.33+0x47/0x62 03:33:30 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(r0, r1) 03:33:30 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, r1}}, 0x48) 03:33:30 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006580)=[{{&(0x7f0000000140)=@sco, 0x6b, &(0x7f0000002000)=[{&(0x7f0000001f40)=""/26, 0x6}, {&(0x7f0000001f80)=""/68, 0x44}], 0x2, &(0x7f0000002080)=""/77, 0x4d}}], 0x800000000000043, 0x0, &(0x7f00000067c0)) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia-asm)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080)=0x229, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef915d56534c90c2", 0x18) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[], 0x1a7) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 03:33:30 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000080)=r0) 03:33:30 executing program 7: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$getregset(0x5, 0x0, 0x7fffff, &(0x7f0000000000)={&(0x7f0000003040)=""/4096, 0x8dfcfe00aedf55da}) 03:33:30 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') [ 139.883737] ? userfaultfd_ioctl+0x5430/0x5430 [ 139.888322] ? trace_hardirqs_on+0x10/0x10 [ 139.892546] ? perf_trace_lock+0x920/0x920 [ 139.896792] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 139.902348] ? __perf_event_task_sched_in+0x24f/0xbb0 [ 139.907558] ? perf_trace_lock+0xde/0x920 [ 139.911728] ? userfaultfd_ctx_put+0x810/0x810 [ 139.916331] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 139.921198] ? zap_class+0x740/0x740 [ 139.924957] ? perf_trace_lock+0x8c0/0x920 [ 139.929389] ? finish_task_switch+0x1d3/0x870 [ 139.933920] ? lock_downgrade+0x8f0/0x8f0 [ 139.938092] ? finish_task_switch+0x171/0x870 [ 139.942650] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 139.947258] ? trace_hardirqs_on+0x10/0x10 [ 139.951519] ? lock_acquire+0x1e4/0x540 [ 139.955535] ? __handle_mm_fault+0x3a38/0x44a0 [ 139.960144] ? lock_downgrade+0x8f0/0x8f0 [ 139.964314] ? kasan_check_read+0x11/0x20 [ 139.968481] ? do_raw_spin_unlock+0xa7/0x2f0 [ 139.972909] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 139.977510] ? kasan_check_write+0x14/0x20 [ 139.981753] ? do_raw_spin_lock+0xc1/0x200 [ 139.985998] __handle_mm_fault+0x3a45/0x44a0 [ 139.990415] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 139.995264] ? plist_check_list+0xa0/0xa0 [ 139.999420] ? lock_acquire+0x1e4/0x540 [ 140.003405] ? handle_mm_fault+0x417/0xc80 [ 140.007653] ? lock_downgrade+0x8f0/0x8f0 [ 140.011794] ? lock_release+0xa30/0xa30 [ 140.015757] ? rcu_note_context_switch+0x730/0x730 [ 140.020695] ? mem_cgroup_from_task+0xcb/0x1f0 [ 140.025267] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 140.030027] handle_mm_fault+0x53e/0xc80 [ 140.034090] ? __handle_mm_fault+0x44a0/0x44a0 [ 140.038661] ? find_vma+0x34/0x190 [ 140.042194] __do_page_fault+0x620/0xe50 [ 140.046257] ? mm_fault_error+0x380/0x380 [ 140.050399] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 140.055418] ? futex_wait_setup+0x281/0x410 [ 140.061305] do_page_fault+0xf6/0x8c0 [ 140.065096] ? vmalloc_sync_all+0x30/0x30 [ 140.069237] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 140.074863] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 140.079962] ? lock_acquire+0x1e4/0x540 [ 140.083925] ? __might_fault+0x12b/0x1e0 [ 140.087987] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 140.092823] page_fault+0x1e/0x30 [ 140.096267] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 140.101887] Code: 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 <8a> 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 0f 1f [ 140.121174] RSP: 0018:ffff88019aeaf7f0 EFLAGS: 00010202 [ 140.126531] RAX: 0000000000000004 RBX: 0000000000000004 RCX: 0000000000000004 [ 140.133800] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff88019aeaf890 [ 140.141059] RBP: ffff88019aeaf828 R08: ffffed00335d5f13 R09: ffffed00335d5f12 [ 140.148323] R10: ffffed00335d5f12 R11: 0000000000000003 R12: 0000000020013004 [ 140.156778] R13: 0000000020013000 R14: ffff88019aeaf890 R15: 00007ffffffff000 [ 140.164068] ? _copy_from_user+0x10d/0x150 [ 140.168307] evdev_do_ioctl+0xb69/0x21a0 [ 140.172359] ? perf_trace_lock+0x920/0x920 [ 140.176595] ? str_to_user+0x90/0x90 [ 140.180828] ? do_futex+0x249/0x27d0 [ 140.184553] ? kasan_check_read+0x11/0x20 [ 140.188702] ? rcu_is_watching+0x8c/0x150 [ 140.192845] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 140.197504] ? zap_class+0x740/0x740 [ 140.201211] ? exit_robust_list+0x290/0x290 [ 140.205529] ? lock_acquire+0x1e4/0x540 [ 140.209490] ? __fget+0x4ac/0x740 [ 140.212932] ? lock_downgrade+0x8f0/0x8f0 [ 140.217071] ? lock_release+0xa30/0xa30 [ 140.221053] ? save_stack+0xa9/0xd0 [ 140.224677] ? save_stack+0x43/0xd0 [ 140.228294] ? __fget+0x4d5/0x740 [ 140.231748] ? ksys_dup3+0x690/0x690 [ 140.235448] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 140.240037] evdev_ioctl_handler+0x144/0x1a0 [ 140.244456] evdev_ioctl+0x27/0x2e [ 140.248200] ? evdev_ioctl_compat+0x30/0x30 [ 140.252512] do_vfs_ioctl+0x1de/0x1720 [ 140.256560] ? ioctl_preallocate+0x300/0x300 [ 140.260958] ? __fget_light+0x2f7/0x440 [ 140.264932] ? fget_raw+0x20/0x20 [ 140.268378] ? trace_hardirqs_on+0xd/0x10 [ 140.272519] ? __x64_sys_futex+0x47f/0x6a0 [ 140.276757] ? do_futex+0x27d0/0x27d0 [ 140.280554] ? security_file_ioctl+0x94/0xc0 [ 140.284959] ksys_ioctl+0xa9/0xd0 [ 140.288405] __x64_sys_ioctl+0x73/0xb0 [ 140.292295] do_syscall_64+0x1b9/0x820 [ 140.296205] ? finish_task_switch+0x1d3/0x870 [ 140.300693] ? syscall_return_slowpath+0x5e0/0x5e0 [ 140.305614] ? syscall_return_slowpath+0x31d/0x5e0 [ 140.310532] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 140.315559] ? prepare_exit_to_usermode+0x291/0x3b0 [ 140.320667] ? perf_trace_sys_enter+0xb10/0xb10 [ 140.325332] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 140.330173] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 140.335363] RIP: 0033:0x455ab9 [ 140.338538] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 140.357821] RSP: 002b:00007f930b999c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 140.365538] RAX: ffffffffffffffda RBX: 00007f930b99a6d4 RCX: 0000000000455ab9 [ 140.372797] RDX: 0000000020013000 RSI: 00000000400445a0 RDI: 0000000000000014 [ 140.380075] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 140.387343] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 140.394612] R13: 00000000004bd1d2 R14: 00000000004cb9b0 R15: 0000000000000000 03:33:31 executing program 0: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000140)) mknod(&(0x7f0000000100)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000540)='./file0\x00', &(0x7f0000578fe8), &(0x7f0000000740)) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) execveat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400), &(0x7f00000004c0), 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x27e, 0x0) 03:33:31 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800"}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) dup2(r1, r0) 03:33:31 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:33:31 executing program 7: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$getregset(0x5, r1, 0x0, &(0x7f0000000000)={&(0x7f0000003040)=""/4096, 0x8dfcfe00aedf55da}) 03:33:31 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006580)=[{{&(0x7f0000000140)=@sco, 0x6b, &(0x7f0000002000)=[{&(0x7f0000001f40)=""/26, 0x6}, {&(0x7f0000001f80)=""/68, 0x44}], 0x2, &(0x7f0000002080)=""/77, 0x4d}}], 0x800000000000043, 0x0, &(0x7f00000067c0)) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia-asm)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000080)=0x229, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef915d56534c90c2", 0x18) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r1, &(0x7f00000007c0)=ANY=[], 0x1a7) recvmmsg(0xffffffffffffffff, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 03:33:31 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000080)=r0) 03:33:31 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0x48) 03:33:31 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) dup3(r1, r0, 0x0) connect$inet(r0, &(0x7f00000e5000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 03:33:31 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(0xffffffffffffffff, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:33:31 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)="6e6f01fcffff692a2936f0d00c94808bcfbce5de2d57e70200818c6ab7847c51a44bb3aaaefbb8ae99506ae53aa88a80fec3073ecbcc3e72", 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "858818c80a06f9419f0645f5c828aff30125fe03f167d575e66335269e4a2784b6fa7ca74f3c4fcc18a97b489efa6cbfc375b6099c15059172f17c8dac70b01b", "c56cc6030016763b68466b3882888b474c3d859b5a4d9ed3ad01737782ad10568d74c9ee09f808a2bb61eec4409ff01aeebedd00000000c71d77353820975691", "2c5c591f0dc612cbf01b5b40aab1963f73172251e32b2dd768558f22ee0a0acc"}) dup3(r1, r0, 0x0) [ 140.533863] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:33:31 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) creat(&(0x7f000009aff8)='./file0\x00', 0x0) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(r0, r1) 03:33:31 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000080)) 03:33:31 executing program 4: lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendto$packet(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0) pwritev(r0, &(0x7f0000000740)=[{&(0x7f0000000180)="edd97cc9c4", 0x5}], 0x1, 0x0) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) listxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f00000013c0)=""/21, 0x50) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)=ANY=[]) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000780)=ANY=[@ANYBLOB]}, 0x1}, 0x0) 03:33:31 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800"}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) dup2(r1, r0) 03:33:31 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@local={0xac, 0x14, 0x14, 0xaa}, @broadcast=0xffffffff, 0x0, 0x400000000000010c}, 0x10) 03:33:31 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(0xffffffffffffffff, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') [ 140.820306] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:33:32 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) dup2(r1, r0) 03:33:32 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f00000006c0)='./file0\x00', &(0x7f0000000040)='fuseblk\x00', 0x0, &(0x7f0000000500)={{'fd', 0x3d}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) 03:33:32 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(0xffffffffffffffff, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:33:32 executing program 7: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x4, 0x1012, r0, 0x0) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:33:32 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x6c}, [], {0x95}}, &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x4ae, &(0x7f0000000340)=""/207}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x44, &(0x7f0000000240)="aab84d4670930b05c1e2218b148c", &(0x7f00000004c0)=""/68}, 0x28) 03:33:32 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) creat(&(0x7f000009aff8)='./file0\x00', 0x0) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(r0, r1) 03:33:32 executing program 0: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000140)) mknod(&(0x7f0000000100)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000540)='./file0\x00', &(0x7f0000578fe8), &(0x7f0000000740)) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) execveat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400), &(0x7f00000004c0), 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x27e, 0x0) 03:33:32 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000080)) 03:33:32 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) write$binfmt_script(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1e"], 0x1) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) tee(r1, r0, 0x2, 0x0) dup2(r1, r3) 03:33:32 executing program 4: r0 = creat(&(0x7f0000000440)='./file0\x00', 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000001780)="99", 0x1}], 0x1) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000100)=ANY=[]) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f00000004c0)={0x80000}) 03:33:32 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/route\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000380)=""/242, 0xf2}], 0x1, 0x0) 03:33:32 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) creat(&(0x7f000009aff8)='./file0\x00', 0x0) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(r0, r1) 03:33:32 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) dup2(r1, r0) 03:33:32 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000080)) 03:33:32 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x10, 0x4) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000180), 0x65, 0x0, &(0x7f0000000140)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) recvmmsg(r0, &(0x7f0000002300)=[{{&(0x7f0000001e00)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000002200), 0x0, &(0x7f0000000300)=""/79, 0x4f}}], 0x1, 0x0, &(0x7f00000001c0)={0x77359400}) 03:33:32 executing program 2: socket$inet6(0xa, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:33:32 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000600)={&(0x7f00000003c0)=@delpolicy={0x50, 0x14, 0x131, 0x0, 0x0, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in6=@local={0xfe, 0x80, [], 0xaa}}}}, 0x50}, 0x1}, 0x0) 03:33:32 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(r0, r1) 03:33:32 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x0, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) 03:33:32 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) dup2(r1, r0) 03:33:32 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000600)={&(0x7f00000003c0)=@delpolicy={0x50, 0x14, 0x131, 0x0, 0x0, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in6=@local={0xfe, 0x80, [], 0xaa}}}}, 0x50}, 0x1}, 0x0) 03:33:32 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(r0, r1) 03:33:33 executing program 0: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000140)) mknod(&(0x7f0000000100)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000540)='./file0\x00', &(0x7f0000578fe8), &(0x7f0000000740)) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) execveat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400), &(0x7f00000004c0), 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x27e, 0x0) 03:33:33 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) truncate(&(0x7f0000000140)='./bus\x00', 0x0) 03:33:33 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) write$binfmt_script(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1e"], 0x1) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) tee(r1, r0, 0x2, 0x0) dup2(r1, r3) 03:33:33 executing program 7: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x1, [@loopback=0x7f000001]}, 0x14) syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000880)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f2, &(0x7f0000000580)='ip6_vti0\x00') 03:33:33 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) dup2(r1, r0) 03:33:33 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x0, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) 03:33:33 executing program 2: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001c0000/0x2000)=nil, 0x2000, 0x4, 0x6011, r0, 0x0) mprotect(&(0x7f00001c0000/0x4000)=nil, 0x4000, 0x2) 03:33:33 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(r0, r1) 03:33:33 executing program 7: sched_setattr(0x0, &(0x7f0000000040)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) 03:33:33 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000000000000000000000000000000000000fe000000bc4f00000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) vmsplice(r0, &(0x7f0000000440)=[{&(0x7f0000000640)="ad2bb8c0df1f14bae6473b0ff3e8043d3ba2b766d05643f6e2e0b58a7941ac46e012d83c49a70362a4610b88c78ea0fff150245f1656d63a72f8ed4eca", 0x3d}], 0x1, 0x0) mkdir(&(0x7f0000000380)='./file0/file0\x00', 0x0) 03:33:33 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) dup2(r1, r0) 03:33:33 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x0, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) 03:33:33 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(r0, r1) 03:33:33 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) dup2(r1, r0) 03:33:33 executing program 2: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x40000000000e900, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb2c906d6b66732e666174000404010a02000274f1f8", 0x16}], 0x0, &(0x7f0000000180)={[{@fat=@dmask={'dmask', 0x3d, 0x2}, 0x2c}, {@nodots='nodots', 0x2c}]}) 03:33:33 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(r0, r1) 03:33:34 executing program 0: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000140)) mknod(&(0x7f0000000100)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000540)='./file0\x00', &(0x7f0000578fe8), &(0x7f0000000740)) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) execveat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400), &(0x7f00000004c0), 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x27e, 0x0) 03:33:34 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x1d, 0x1, 0x0, 0x0, {0x1f}}, 0x14}, 0x1}, 0x0) 03:33:34 executing program 5: perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:33:34 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) 03:33:34 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) dup2(r1, r0) 03:33:34 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r0, 0x400, 0x0) getdents(r0, &(0x7f0000000040)=""/148, 0xab) 03:33:34 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(r0, r1) 03:33:34 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open$dir(&(0x7f00000001c0)='./control\x00', 0x0, 0x0) fchmod(r1, 0x0) [ 143.316454] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:33:34 executing program 7: perf_event_open(&(0x7f00000000c0)={0x800000000002, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x6100, 0x1) acct(&(0x7f0000000300)='./file0\x00') 03:33:34 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(r0, r1) 03:33:34 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x100004, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = memfd_create(&(0x7f0000000180)="2df188a80ba116a8db8ba30f436c4e8dae0e32772865c0b60fb6bfc4f11c05e8970122dc649f8aff519c90197f30329b26d2680f21b038521045", 0x0) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000000)=0x2) lseek(r1, 0x0, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)}}, 0x20) close(r0) 03:33:34 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r0, 0x400, 0x0) getdents(r0, &(0x7f0000000040)=""/148, 0xab) 03:33:34 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) 03:33:34 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) mknod(&(0x7f00000056c0)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000380), &(0x7f00000001c0)) r0 = gettid() kcmp(r0, r0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) execve(&(0x7f0000000000)='./bus\x00', &(0x7f00000000c0), &(0x7f0000000140)) open(&(0x7f0000363ff8)='./file0\x00', 0x401, 0x0) 03:33:34 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) dup2(r1, r0) 03:33:34 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r0, 0x400, 0x0) getdents(r0, &(0x7f0000000040)=""/148, 0xab) [ 143.615618] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:33:34 executing program 7: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x3a7, 0x20000000, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 03:33:34 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(r0, r1) 03:33:34 executing program 0: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000140)) mknod(&(0x7f0000000100)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000540)='./file0\x00', &(0x7f0000578fe8), &(0x7f0000000740)) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) execveat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400), &(0x7f00000004c0), 0x0) 03:33:34 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) 03:33:34 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) dup2(r1, r0) 03:33:34 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r0, 0x400, 0x0) getdents(r0, &(0x7f0000000040)=""/148, 0xab) 03:33:34 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004940)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000023c0)="630dc9bb2b3b2aafc83eadd1e9132211", 0x10}], 0x1, &(0x7f0000001380)}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000000)={&(0x7f0000f7ffa8)=@alg, 0xfe0e, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x65}], 0x1, &(0x7f0000001200)=""/87, 0xffffffe1}, 0x0) 03:33:34 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/148, 0xab) 03:33:34 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(r0, r1) [ 144.032688] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:33:35 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) lseek(0xffffffffffffffff, 0x400, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000040)=""/148, 0xab) 03:33:35 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x100004, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = memfd_create(&(0x7f0000000180)="2df188a80ba116a8db8ba30f436c4e8dae0e32772865c0b60fb6bfc4f11c05e8970122dc649f8aff519c90197f30329b26d2680f21b038521045", 0x0) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000000)=0x2) lseek(r1, 0x0, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)}}, 0x20) close(r0) 03:33:35 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) 03:33:35 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x20}, 0x1}, 0x0) dup2(r1, r0) 03:33:35 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 03:33:35 executing program 7: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000100007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000001880)=[{{&(0x7f00000014c0)=@can, 0x80, &(0x7f00000017c0), 0x0, &(0x7f0000001840)=""/43, 0x2b}}], 0x1, 0x0, &(0x7f0000001900)={0x77359400}) 03:33:35 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(r0, 0xffffffffffffffff) 03:33:35 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r0, 0x400, 0x0) getdents(r0, &(0x7f0000000040)=""/148, 0xab) 03:33:35 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) [ 144.616464] TCP: request_sock_TCPv6: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. 03:33:35 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(r0, 0xffffffffffffffff) 03:33:35 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x20}, 0x1}, 0x0) dup2(r1, r0) 03:33:35 executing program 7: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) fallocate(r0, 0x10, 0x0, 0xefff) lseek(r0, 0xe000, 0x4) 03:33:35 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r0, 0x400, 0x0) getdents(r0, &(0x7f0000000040)=""/148, 0xab) 03:33:35 executing program 0: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000140)) mknod(&(0x7f0000000100)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000540)='./file0\x00', &(0x7f0000578fe8), &(0x7f0000000740)) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) execveat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400), &(0x7f00000004c0), 0x0) 03:33:35 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) 03:33:35 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x81000000000002, &(0x7f0000000000)=0x75, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000300)="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", 0x940, 0x0, &(0x7f0000001300)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 03:33:35 executing program 2: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r0, 0x400, 0x0) getdents(r0, &(0x7f0000000040)=""/148, 0xab) 03:33:35 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7295df0df821728d598bf6c2c702ff314", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000000)=[{0x0, 0x0, &(0x7f00000013c0), 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f000000a700)=[{{0x0, 0x0, &(0x7f000000a680)=[{&(0x7f000000a580)=""/200, 0xc8}], 0x1}}], 0x40000000000015f, 0x0, 0x0) 03:33:36 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x100004, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = memfd_create(&(0x7f0000000180)="2df188a80ba116a8db8ba30f436c4e8dae0e32772865c0b60fb6bfc4f11c05e8970122dc649f8aff519c90197f30329b26d2680f21b038521045", 0x0) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000000)=0x2) lseek(r1, 0x0, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)}}, 0x20) close(r0) 03:33:36 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x20}, 0x1}, 0x0) dup2(r1, r0) 03:33:36 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) 03:33:36 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(r0, 0xffffffffffffffff) 03:33:36 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000001740)=""/163, &(0x7f00000019c0)=""/246, &(0x7f0000003ac0)=""/4096}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r1}) 03:33:36 executing program 2: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r0, 0x400, 0x0) getdents(r0, &(0x7f0000000040)=""/148, 0xab) 03:33:36 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x3403}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={0x0, {0x2}, {0x2, 0x0, @loopback=0x7f000001}, {0x2, 0x0, @broadcast=0xffffffff}, 0x1f9}) 03:33:36 executing program 2: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r0, 0x400, 0x0) getdents(r0, &(0x7f0000000040)=""/148, 0xab) 03:33:36 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(r0, r1) 03:33:36 executing program 7: sched_setattr(0x0, &(0x7f0000000080), 0x0) nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f00000001c0)) nanosleep(&(0x7f0000000380)={0x0, 0x1c9c380}, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x8031, 0xffffffffffffffff, 0x0) munlock(&(0x7f000031e000/0x1000)=nil, 0x1000) munlockall() 03:33:36 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) 03:33:36 executing program 0: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000140)) mknod(&(0x7f0000000100)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000540)='./file0\x00', &(0x7f0000578fe8), &(0x7f0000000740)) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) execveat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400), &(0x7f00000004c0), 0x0) 03:33:36 executing program 5: syz_mount_image$vfat(&(0x7f0000004980)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) write$P9_RLCREATE(r0, &(0x7f0000000100)={0x13, 0xf}, 0xffffffbc) 03:33:36 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) dup2(0xffffffffffffffff, r0) 03:33:36 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) 03:33:36 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r0, 0x400, 0x0) getdents(r0, &(0x7f0000000040)=""/148, 0xab) [ 146.098282] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:33:37 executing program 4: r0 = memfd_create(&(0x7f0000000580)='dev ', 0x3) write(r0, &(0x7f0000000040)="16", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) fcntl$addseals(r0, 0x409, 0xc) fallocate(r0, 0x3, 0x0, 0x5d6) clone(0x0, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000380)) 03:33:37 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(r0, r1) 03:33:37 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r0, 0x400, 0x0) getdents(r0, &(0x7f0000000040)=""/148, 0xab) 03:33:37 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) read$FUSE(r0, &(0x7f00000020c0), 0x1000) umount2(&(0x7f0000000100)='./file0\x00', 0x0) 03:33:37 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) 03:33:37 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) dup2(r1, 0xffffffffffffffff) 03:33:37 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r0, 0x400, 0x0) getdents(r0, &(0x7f0000000040)=""/148, 0xab) 03:33:37 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) 03:33:37 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(r0, r1) [ 146.358885] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:33:37 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,s\x00owexec,discard,check=strict']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) bpf$OBJ_GET_MAP(0x7, &(0x7f00000021c0)={&(0x7f0000002180)='./file0/fil..\x00'}, 0x10) creat(&(0x7f0000003900)='./file0/fil..\x00', 0x0) 03:33:37 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x200, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x800000007fff) close(r0) [ 146.737447] FAT-fs (loop7): Unrecognized mount option "uid=" or missing value 03:33:38 executing program 0: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000140)) mknod(&(0x7f0000000100)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000540)='./file0\x00', &(0x7f0000578fe8), &(0x7f0000000740)) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) open$dir(&(0x7f0000000140)='./file0\x00', 0x27e, 0x0) 03:33:38 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r0, 0x400, 0x0) getdents(r0, &(0x7f0000000040)=""/148, 0xab) 03:33:38 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(r0, r1) 03:33:38 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) 03:33:38 executing program 6: unshare(0x64000400) openat$md(0xffffffffffffff9c, &(0x7f0000000240)='/dev/md0\x00', 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x800040002) ioctl$LOOP_CHANGE_FD(r0, 0x4c08, 0xffffffffffffffff) [ 147.156783] IPVS: ftp: loaded support on port[0] = 21 03:33:38 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,s\x00owexec,discard,check=strict']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) bpf$OBJ_GET_MAP(0x7, &(0x7f00000021c0)={&(0x7f0000002180)='./file0/fil..\x00'}, 0x10) creat(&(0x7f0000003900)='./file0/fil..\x00', 0x0) 03:33:38 executing program 5: syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) 03:33:38 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r0, 0x400, 0x0) getdents(r0, &(0x7f0000000040)=""/148, 0xab) 03:33:38 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) 03:33:38 executing program 4: r0 = memfd_create(&(0x7f0000000580)='dev ', 0x3) write(r0, &(0x7f0000000040)="16", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) fcntl$addseals(r0, 0x409, 0xc) fallocate(r0, 0x3, 0x0, 0x5d6) clone(0x0, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000380)) 03:33:38 executing program 6: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x400000000002, 0x32, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0984124, &(0x7f0000001f64)) 03:33:38 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100"}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) 03:33:38 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0xc08c5334, &(0x7f0000000240)) 03:33:38 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r0, 0x400, 0x0) getdents(r0, &(0x7f0000000040)=""/148, 0xab) [ 147.351480] FAT-fs (loop7): Unrecognized mount option "uid=" or missing value 03:33:38 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x6b65a878, 0x4) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0xf, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) 03:33:38 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000080)=r0) 03:33:38 executing program 0: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000140)) mknod(&(0x7f0000000100)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000540)='./file0\x00', &(0x7f0000578fe8), &(0x7f0000000740)) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) open$dir(&(0x7f0000000140)='./file0\x00', 0x27e, 0x0) 03:33:38 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x100, 0x279d}) ioctl(r0, 0x0, &(0x7f0000000100)) 03:33:38 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r0, 0x400, 0x0) getdents(r0, &(0x7f0000000040)=""/148, 0xab) 03:33:38 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,s\x00owexec,discard,check=strict']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) bpf$OBJ_GET_MAP(0x7, &(0x7f00000021c0)={&(0x7f0000002180)='./file0/fil..\x00'}, 0x10) creat(&(0x7f0000003900)='./file0/fil..\x00', 0x0) 03:33:38 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x40}) read(r0, &(0x7f0000000000)=""/128, 0x80) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x8031, 0xffffffffffffffff, 0x0) 03:33:38 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)) 03:33:38 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(r0, r1) 03:33:39 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r0, 0x400, 0x0) getdents(r0, &(0x7f0000000040)=""/148, 0xab) 03:33:39 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)) [ 148.081923] FAT-fs (loop7): Unrecognized mount option "uid=" or missing value 03:33:39 executing program 4: r0 = memfd_create(&(0x7f0000000580)='dev ', 0x3) write(r0, &(0x7f0000000040)="16", 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xffff) fcntl$addseals(r0, 0x409, 0xc) fallocate(r0, 0x3, 0x0, 0x5d6) clone(0x0, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000380)) 03:33:39 executing program 6: r0 = shmget(0x2, 0x2000, 0x202, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5fff) shmctl$IPC_RMID(r0, 0x0) 03:33:39 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r0, 0x400, 0x0) getdents(r0, &(0x7f0000000040)=""/148, 0xab) 03:33:39 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,s\x00owexec,discard,check=strict']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) bpf$OBJ_GET_MAP(0x7, &(0x7f00000021c0)={&(0x7f0000002180)='./file0/fil..\x00'}, 0x10) creat(&(0x7f0000003900)='./file0/fil..\x00', 0x0) 03:33:39 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)) 03:33:39 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(r0, 0x0) close(r0) close(r1) 03:33:39 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x400, 0x0) getdents(r0, &(0x7f0000000040)=""/148, 0xab) [ 148.417415] FAT-fs (loop7): Unrecognized mount option "uid=" or missing value 03:33:39 executing program 0: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000140)) mknod(&(0x7f0000000100)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000540)='./file0\x00', &(0x7f0000578fe8), &(0x7f0000000740)) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) open$dir(&(0x7f0000000140)='./file0\x00', 0x27e, 0x0) 03:33:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x101}) 03:33:39 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,s\x00owexec,discard,check=strict']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000003900)='./file0/fil..\x00', 0x0) 03:33:39 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(r0, 0x0) close(r0) close(r1) [ 149.014517] FAT-fs (loop7): Unrecognized mount option "uid=" or missing value 03:33:40 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f000000ffd8)={'vcan0\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000000c00), 0x4000000000001e6, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x90, 0x4) bind$can_raw(r2, &(0x7f0000010ff0)={0x1d}, 0x10) recvmmsg(r2, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000027c0), 0x0, &(0x7f0000002800)=""/151, 0x97}}], 0x1, 0x0, &(0x7f0000002bc0)={0x77359400}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000007ff0)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f000000afb8)={0x1, 0x3, 0x0, {0x0, 0x2710}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e15adecfc04aba1"}}, 0x48}, 0x1}, 0x0) 03:33:40 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/148, 0xab) 03:33:40 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(r0, r1) 03:33:40 executing program 1: r0 = socket(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000001c0), &(0x7f0000000200)=0x30) 03:33:40 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(r0, 0x0) close(r0) close(r1) 03:33:40 executing program 4: mknod$loop(&(0x7f0000001440)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0x10001) sendfile(r0, r0, &(0x7f0000000140), 0xe00) sendfile(r0, r0, &(0x7f0000000100), 0x100000009) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) 03:33:40 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,s\x00owexec,discard,check=strict']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000003900)='./file0/fil..\x00', 0x0) 03:33:40 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r0, 0x400, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000040)=""/148, 0xab) 03:33:40 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000140)={{0x0, 0x1}}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x0, 0x0) 03:33:40 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(r0, 0x0) close(r0) close(r1) 03:33:40 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(r0, 0x0) close(r1) 03:33:40 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000080)) close(r0) [ 149.390544] FAT-fs (loop7): Unrecognized mount option "uid=" or missing value 03:33:40 executing program 0: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000140)) mknod(&(0x7f0000000100)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000540)='./file0\x00', &(0x7f0000578fe8), &(0x7f0000000740)) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400), &(0x7f00000004c0), 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x27e, 0x0) 03:33:40 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,s\x00owexec,discard,check=strict']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000003900)='./file0/fil..\x00', 0x0) 03:33:40 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(r0, 0x0) close(r1) 03:33:40 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(r0, 0x0) close(r1) [ 149.905868] FAT-fs (loop7): Unrecognized mount option "uid=" or missing value 03:33:40 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='io\x00') sendfile(r0, r1, &(0x7f0000000500)=0x8f, 0xdfd7) 03:33:40 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) close(0xffffffffffffffff) 03:33:40 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,s\x00owexec,discard,check=strict']) bpf$OBJ_GET_MAP(0x7, &(0x7f00000021c0)={&(0x7f0000002180)='./file0/fil..\x00'}, 0x10) creat(&(0x7f0000003900)='./file0/fil..\x00', 0x0) 03:33:40 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) close(r0) close(r1) 03:33:40 executing program 3: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(0xffffffffffffffff, r0) [ 150.076633] FAT-fs (loop7): Unrecognized mount option "uid=" or missing value 03:33:41 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) close(r0) close(r1) 03:33:41 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c03, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e1d3f877e5eae453e55d7d64d00d4901baed21f7de92a8669b38ccd6260857dbf5ae46354569636517b50f805ae208258dbb7d0abe8d208f0f1bcc885c8ba93c", "fe047b3177f4fc2eb04172daa8e7d1c4c4cf144a23173b6605afb988de9bbae0932dee7e07195d78f7ddd19a37cb5aa0a5629eef628582fba5bf4af44acfe059", "ee42e3ef1d1772a9432c220303b70b708ad791139c2982fccc5d747a3131995a"}) 03:33:41 executing program 7: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) bpf$OBJ_GET_MAP(0x7, &(0x7f00000021c0)={&(0x7f0000002180)='./file0/fil..\x00'}, 0x10) creat(&(0x7f0000003900)='./file0/fil..\x00', 0x0) 03:33:41 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000140)={{0x0, 0x1}}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x0, 0x0) 03:33:41 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa}, 0xb) 03:33:41 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) [ 150.469231] syz-executor4 (8840) used greatest stack depth: 14088 bytes left 03:33:41 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000000c0)='#}\x00', 0x0) write(r1, &(0x7f0000000000)="fe", 0x1) ftruncate(r2, 0x40001) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000e4effc)=0x4, 0x4) sendfile(r1, r2, &(0x7f0000000240), 0x100000000002) 03:33:41 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) close(r0) close(r1) 03:33:41 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8) close(r0) 03:33:41 executing program 7: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) bpf$OBJ_GET_MAP(0x7, &(0x7f00000021c0)={&(0x7f0000002180)='./file0/fil..\x00'}, 0x10) creat(&(0x7f0000003900)='./file0/fil..\x00', 0x0) 03:33:41 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b702000013000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7030000000000006a0a00fe00000000850000002b000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0xc0ffffff, 0xe, 0xf8, &(0x7f00000000c0)="7a64f6bfff9c6ca28be40339b5ff", &(0x7f0000000400)=""/248, 0x101}, 0x28) 03:33:41 executing program 0: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000140)) mknod(&(0x7f0000000100)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000540)='./file0\x00', &(0x7f0000578fe8), &(0x7f0000000740)) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400), &(0x7f00000004c0), 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x27e, 0x0) 03:33:41 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1}, 0x0) 03:33:41 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000180)={0x0, 0x0, 0x101, 0x8}) 03:33:41 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(r0, 0x0) close(r0) close(r1) 03:33:41 executing program 3: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(0xffffffffffffffff, r0) 03:33:41 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x20000, &(0x7f0000000080)) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) 03:33:41 executing program 7: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) bpf$OBJ_GET_MAP(0x7, &(0x7f00000021c0)={&(0x7f0000002180)='./file0/fil..\x00'}, 0x10) creat(&(0x7f0000003900)='./file0/fil..\x00', 0x0) 03:33:41 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000080)=r0) 03:33:42 executing program 1 (fault-call:6 fault-nth:0): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:33:42 executing program 6: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_pts(0xffffffffffffffff, 0x0) close(0xffffffffffffffff) close(r0) 03:33:42 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[]) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) bpf$OBJ_GET_MAP(0x7, &(0x7f00000021c0)={&(0x7f0000002180)='./file0/fil..\x00'}, 0x10) creat(&(0x7f0000003900)='./file0/fil..\x00', 0x0) 03:33:42 executing program 5 (fault-call:5 fault-nth:0): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r0, 0x400, 0x0) getdents(r0, &(0x7f0000000040)=""/148, 0xab) 03:33:42 executing program 4 (fault-call:4 fault-nth:0): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) dup2(r1, r0) 03:33:42 executing program 2 (fault-call:4 fault-nth:0): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) 03:33:42 executing program 6: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_pts(0xffffffffffffffff, 0x0) close(0xffffffffffffffff) close(r0) [ 151.402827] FAT-fs (loop7): bogus number of reserved sectors [ 151.408770] FAT-fs (loop7): Can't find a valid FAT filesystem [ 151.447489] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 151.458343] FAULT_INJECTION: forcing a failure. [ 151.458343] name failslab, interval 1, probability 0, space 0, times 1 [ 151.460938] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 151.469628] CPU: 0 PID: 9007 Comm: syz-executor1 Not tainted 4.18.0-rc5-next-20180720+ #12 [ 151.469642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 151.493892] Call Trace: [ 151.496495] dump_stack+0x1c9/0x2b4 [ 151.500130] ? dump_stack_print_info.cold.2+0x52/0x52 [ 151.505325] ? _kstrtoull+0x188/0x250 [ 151.509222] ? perf_trace_lock+0xde/0x920 [ 151.513390] should_fail.cold.4+0xa/0x11 [ 151.517478] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 151.522598] ? get_pid_task+0xd8/0x1a0 [ 151.526528] ? perf_trace_lock+0xde/0x920 [ 151.530696] ? lock_release+0xa30/0xa30 [ 151.534683] ? zap_class+0x740/0x740 [ 151.538441] ? lock_acquire+0x1e4/0x540 [ 151.542430] ? fs_reclaim_acquire+0x20/0x20 03:33:42 executing program 6: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_pts(0xffffffffffffffff, 0x0) close(0xffffffffffffffff) close(r0) [ 151.546770] ? lock_downgrade+0x8f0/0x8f0 [ 151.560319] ? proc_fail_nth_write+0x9e/0x210 [ 151.564854] ? check_same_owner+0x340/0x340 [ 151.569197] ? rcu_note_context_switch+0x730/0x730 [ 151.574242] __should_failslab+0x124/0x180 [ 151.578499] should_failslab+0x9/0x14 [ 151.582320] kmem_cache_alloc+0x2af/0x760 [ 151.586483] ? fsnotify_first_mark+0x350/0x350 [ 151.591088] getname_flags+0xd0/0x5a0 [ 151.594900] do_rmdir+0xeb/0x630 [ 151.598300] ? __ia32_sys_mkdir+0x80/0x80 [ 151.602455] ? fput+0x130/0x1a0 [ 151.605744] ? ksys_write+0x1ae/0x260 [ 151.609555] ? __ia32_sys_read+0xb0/0xb0 [ 151.613631] __x64_sys_rmdir+0x36/0x40 [ 151.617542] do_syscall_64+0x1b9/0x820 [ 151.621441] ? syscall_return_slowpath+0x5e0/0x5e0 [ 151.626391] ? syscall_return_slowpath+0x31d/0x5e0 [ 151.631339] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 151.636357] ? prepare_exit_to_usermode+0x291/0x3b0 [ 151.641370] ? perf_trace_sys_enter+0xb10/0xb10 [ 151.646046] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 151.650891] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 151.656079] RIP: 0033:0x455ab9 [ 151.659267] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 151.678442] RSP: 002b:00007f6984e0ac68 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 151.686148] RAX: ffffffffffffffda RBX: 00007f6984e0b6d4 RCX: 0000000000455ab9 [ 151.693417] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200000c0 [ 151.700688] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 151.707950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 151.715228] R13: 00000000004c0b60 R14: 00000000004d0fd8 R15: 0000000000000000 [ 151.728667] FAULT_INJECTION: forcing a failure. [ 151.728667] name failslab, interval 1, probability 0, space 0, times 0 [ 151.739952] CPU: 1 PID: 8999 Comm: syz-executor4 Not tainted 4.18.0-rc5-next-20180720+ #12 [ 151.748353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 151.757706] Call Trace: [ 151.760294] dump_stack+0x1c9/0x2b4 [ 151.763959] ? dump_stack_print_info.cold.2+0x52/0x52 [ 151.769177] ? perf_trace_lock+0xde/0x920 [ 151.773321] should_fail.cold.4+0xa/0x11 [ 151.777377] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 151.782474] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 151.787054] ? perf_trace_lock+0xde/0x920 [ 151.791184] ? lock_acquire+0x1e4/0x540 [ 151.795152] ? br_get_link_af_size_filtered+0x1e3/0xcf0 [ 151.800513] ? zap_class+0x740/0x740 [ 151.804239] ? lock_release+0xa30/0xa30 [ 151.808200] ? lock_acquire+0x1e4/0x540 [ 151.812161] ? fs_reclaim_acquire+0x20/0x20 [ 151.816467] ? lock_downgrade+0x8f0/0x8f0 [ 151.820610] ? br_get_link_af_size_filtered+0x266/0xcf0 [ 151.825961] ? check_same_owner+0x340/0x340 [ 151.830268] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 151.835268] ? rcu_note_context_switch+0x730/0x730 [ 151.840183] ? br_get_linkxstats_size+0x3a0/0x3a0 [ 151.845018] __should_failslab+0x124/0x180 [ 151.849238] should_failslab+0x9/0x14 [ 151.853032] kmem_cache_alloc_node+0x272/0x780 [ 151.857603] ? lock_release+0xa30/0xa30 [ 151.861563] __alloc_skb+0x119/0x770 [ 151.865272] ? skb_scrub_packet+0x490/0x490 [ 151.869579] ? if_nlmsg_size+0x5d9/0xbc0 [ 151.873625] ? nla_put_ifalias+0x170/0x170 [ 151.877848] ? softnet_seq_show+0x470/0x470 [ 151.882183] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 151.887189] ? netif_tx_stop_all_queues+0xdb/0x110 [ 151.892111] rtmsg_ifinfo_build_skb+0x73/0x190 [ 151.896680] rtmsg_ifinfo_event.part.31+0x45/0xe0 [ 151.901514] rtmsg_ifinfo+0x8c/0xa0 [ 151.905214] dev_close_many+0x3eb/0x8d0 [ 151.909173] ? lock_acquire+0x1e4/0x540 [ 151.913136] ? netdev_master_upper_dev_link+0x50/0x50 [ 151.918399] ? kasan_check_read+0x11/0x20 [ 151.922539] ? do_raw_spin_unlock+0xa7/0x2f0 [ 151.926937] ? insert_work+0x375/0x4f0 [ 151.930820] ? __queue_work+0x688/0x1410 [ 151.934878] ? lock_downgrade+0x8f0/0x8f0 [ 151.939020] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 151.944545] ? rtnl_is_locked+0xb5/0xf0 [ 151.948529] ? rtnl_trylock+0x20/0x20 [ 151.952313] ? do_raw_spin_unlock+0xa7/0x2f0 [ 151.956718] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 151.961296] rollback_registered_many+0x539/0x1250 [ 151.966231] ? generic_xdp_install+0x4c0/0x4c0 [ 151.970824] ? flush_rcu_work+0x90/0x90 [ 151.974785] ? trace_hardirqs_off+0xd/0x10 [ 151.979018] ? quarantine_put+0x10d/0x1b0 [ 151.983164] ? __kasan_slab_free+0x131/0x170 [ 151.987561] ? kmem_cache_free+0x22e/0x2d0 [ 151.991795] ? lock_acquire+0x1e4/0x540 [ 151.995769] rollback_registered+0x1e9/0x420 [ 152.000171] ? rollback_registered_many+0x1250/0x1250 [ 152.005343] ? lock_downgrade+0x8f0/0x8f0 [ 152.009478] ? delayed_work_timer_fn+0x90/0x90 [ 152.014047] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 152.019568] ? rtnl_is_locked+0xb5/0xf0 [ 152.023537] ? rtnl_trylock+0x20/0x20 [ 152.027323] ? trace_hardirqs_on+0xd/0x10 [ 152.031464] ? queue_delayed_work_on+0x130/0x1f0 [ 152.036212] unregister_netdevice_queue+0x32f/0x660 [ 152.041211] ? rollback_registered+0x420/0x420 [ 152.045786] ? linkwatch_schedule_work+0x180/0x180 [ 152.050700] ? tun_show_owner+0x170/0x170 [ 152.054837] ? netif_set_real_num_tx_queues+0x10d/0x6f0 [ 152.060186] ? __tun_detach+0x6d4/0x15e0 [ 152.064234] __tun_detach+0x11d1/0x15e0 [ 152.068212] ? tun_attach+0x1780/0x1780 [ 152.072181] ? zap_class+0x740/0x740 [ 152.075889] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 152.081412] ? fput+0x130/0x1a0 [ 152.084678] ? file_path+0x30/0x30 [ 152.088211] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 152.093733] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 152.099263] ? locks_remove_file+0x3df/0x590 [ 152.103751] ? fcntl_setlk+0x1010/0x1010 [ 152.107794] ? do_dup2+0x32b/0x580 [ 152.111322] ? fsnotify_first_mark+0x350/0x350 [ 152.115891] ? fsnotify+0x14e0/0x14e0 [ 152.119696] ? __tun_detach+0x15e0/0x15e0 [ 152.123834] tun_chr_close+0xe3/0x180 [ 152.127647] __fput+0x376/0x8a0 [ 152.130915] ? __alloc_file+0x400/0x400 [ 152.134882] ? kasan_check_write+0x14/0x20 [ 152.139115] ? do_raw_spin_lock+0xc1/0x200 [ 152.143337] ____fput+0x15/0x20 [ 152.146600] task_work_run+0x1ec/0x2a0 [ 152.151566] ? task_work_cancel+0x250/0x250 [ 152.155883] exit_to_usermode_loop+0x318/0x380 [ 152.160451] ? syscall_slow_exit_work+0x500/0x500 [ 152.165281] do_syscall_64+0x6be/0x820 [ 152.169150] ? finish_task_switch+0x1d3/0x870 [ 152.173629] ? syscall_return_slowpath+0x5e0/0x5e0 [ 152.178546] ? syscall_return_slowpath+0x31d/0x5e0 [ 152.183459] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 152.188460] ? prepare_exit_to_usermode+0x291/0x3b0 [ 152.193460] ? perf_trace_sys_enter+0xb10/0xb10 [ 152.198122] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 152.202954] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 152.208126] RIP: 0033:0x455ab9 [ 152.211293] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 152.230486] RSP: 002b:00007f74aa51ac68 EFLAGS: 00000246 ORIG_RAX: 0000000000000021 [ 152.238178] RAX: 0000000000000013 RBX: 00007f74aa51b6d4 RCX: 0000000000455ab9 03:33:43 executing program 0: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000140)) mknod(&(0x7f0000000100)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000540)='./file0\x00', &(0x7f0000578fe8), &(0x7f0000000740)) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400), &(0x7f00000004c0), 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x27e, 0x0) 03:33:43 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r0, 0x400, 0x0) getdents(r0, &(0x7f0000000040)=""/148, 0xab) 03:33:43 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[]) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) bpf$OBJ_GET_MAP(0x7, &(0x7f00000021c0)={&(0x7f0000002180)='./file0/fil..\x00'}, 0x10) creat(&(0x7f0000003900)='./file0/fil..\x00', 0x0) 03:33:43 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(r0, 0x0) close(r0) close(r1) [ 152.245440] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000000014 [ 152.252693] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 152.259944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 152.267197] R13: 00000000004bb9be R14: 00000000004c8fb0 R15: 0000000000000000 [ 152.323362] FAULT_INJECTION: forcing a failure. [ 152.323362] name failslab, interval 1, probability 0, space 0, times 0 [ 152.329763] FAT-fs (loop7): bogus number of reserved sectors [ 152.334688] CPU: 1 PID: 8994 Comm: syz-executor2 Not tainted 4.18.0-rc5-next-20180720+ #12 [ 152.340494] FAT-fs (loop7): Can't find a valid FAT filesystem [ 152.348855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 152.348861] Call Trace: [ 152.348889] dump_stack+0x1c9/0x2b4 [ 152.348903] ? dump_stack_print_info.cold.2+0x52/0x52 [ 152.348921] ? finish_wait+0x25d/0x430 [ 152.379377] should_fail.cold.4+0xa/0x11 [ 152.383434] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 152.388527] ? mutex_unlock+0xd/0x10 [ 152.392245] ? _synchronize_rcu_expedited.constprop.72+0x7d9/0xa40 [ 152.398552] ? do_raw_spin_unlock+0xa7/0x2f0 [ 152.402957] ? wait_rcu_exp_gp+0xc0/0xc0 [ 152.407012] ? compat_start_thread+0x80/0x80 [ 152.411415] ? finish_wait+0x430/0x430 [ 152.415296] ? kasan_check_write+0x14/0x20 [ 152.419522] ? finish_task_switch+0x2ca/0x870 [ 152.424097] ? lock_acquire+0x1e4/0x540 [ 152.428057] ? fs_reclaim_acquire+0x20/0x20 [ 152.432367] ? lock_downgrade+0x8f0/0x8f0 [ 152.436508] ? check_same_owner+0x340/0x340 [ 152.440826] ? dev_map_notification+0x4e8/0x6a0 [ 152.445745] ? rcu_note_context_switch+0x730/0x730 [ 152.450673] __should_failslab+0x124/0x180 [ 152.454899] should_failslab+0x9/0x14 [ 152.458694] kmem_cache_alloc_trace+0x2cb/0x780 [ 152.463358] netdevice_event+0x34c/0xe80 [ 152.467407] ? update_gid_event_work_handler+0xc0/0xc0 [ 152.472669] ? dev_map_free+0x680/0x680 [ 152.476627] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 152.481206] ? _roce_del_all_netdev_gids+0x30/0x30 [ 152.486121] ? roce_gid_type_mask_support+0x100/0x100 [ 152.491304] ? flush_work+0x545/0x900 [ 152.495094] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 152.500631] notifier_call_chain+0x180/0x390 [ 152.505031] ? unregister_die_notifier+0x20/0x20 [ 152.509772] ? dev_shutdown+0x3d0/0x5da [ 152.513738] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 152.519275] ? rtnl_is_locked+0xb5/0xf0 [ 152.523237] ? rtnl_trylock+0x20/0x20 [ 152.527031] raw_notifier_call_chain+0x2d/0x40 [ 152.531612] call_netdevice_notifiers_info+0x3f/0x90 [ 152.536710] ? tun_show_group+0x180/0x180 [ 152.540842] rollback_registered_many+0xb6b/0x1250 [ 152.545760] ? generic_xdp_install+0x4c0/0x4c0 [ 152.550336] ? check_preempt_curr+0x3a0/0x3a0 [ 152.554838] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 152.559406] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 152.563980] ? trace_hardirqs_on+0xd/0x10 [ 152.568126] ? lock_acquire+0x1e4/0x540 [ 152.572088] ? lock_downgrade+0x8f0/0x8f0 [ 152.576231] rollback_registered+0x1e9/0x420 [ 152.580625] ? rollback_registered_many+0x1250/0x1250 [ 152.585799] ? lock_downgrade+0x8f0/0x8f0 [ 152.589943] ? delayed_work_timer_fn+0x90/0x90 [ 152.594541] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 152.600068] ? rtnl_is_locked+0xb5/0xf0 [ 152.604029] ? rtnl_trylock+0x20/0x20 [ 152.607819] ? trace_hardirqs_on+0xd/0x10 [ 152.611952] ? queue_delayed_work_on+0x130/0x1f0 [ 152.616695] unregister_netdevice_queue+0x32f/0x660 [ 152.621708] ? rollback_registered+0x420/0x420 [ 152.626288] ? linkwatch_schedule_work+0x180/0x180 [ 152.631203] ? tun_show_owner+0x170/0x170 [ 152.635334] ? do_raw_spin_unlock+0xa7/0x2f0 [ 152.639729] ? netif_set_real_num_tx_queues+0x10d/0x6f0 [ 152.645085] ? __tun_detach+0x6d4/0x15e0 [ 152.649139] __tun_detach+0x11d1/0x15e0 [ 152.653104] ? tun_attach+0x1780/0x1780 [ 152.657233] ? mutex_unlock+0xd/0x10 [ 152.660950] ? netdev_run_todo+0x75e/0xa80 [ 152.665175] ? __fget_light+0x2f7/0x440 [ 152.669144] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 152.674667] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 152.680190] ? locks_remove_file+0x3df/0x590 [ 152.684585] ? fcntl_setlk+0x1010/0x1010 [ 152.688636] ? fsnotify_first_mark+0x350/0x350 [ 152.693208] ? fsnotify+0x14e0/0x14e0 [ 152.697009] ? __tun_detach+0x15e0/0x15e0 [ 152.701144] tun_chr_close+0xe3/0x180 [ 152.704950] __fput+0x376/0x8a0 [ 152.708222] ? __alloc_file+0x400/0x400 [ 152.712188] ? kasan_check_write+0x14/0x20 [ 152.716411] ? do_raw_spin_lock+0xc1/0x200 [ 152.720641] ____fput+0x15/0x20 [ 152.723910] task_work_run+0x1ec/0x2a0 [ 152.727787] ? task_work_cancel+0x250/0x250 [ 152.732098] ? rtnl_unlock+0xe/0x10 [ 152.735719] ? __tun_chr_ioctl+0x493/0x4570 [ 152.740032] get_signal+0x1557/0x1970 [ 152.743818] ? tun_select_queue+0xac0/0xac0 [ 152.748127] ? lock_downgrade+0x8f0/0x8f0 [ 152.752264] ? ptrace_notify+0x130/0x130 [ 152.756327] ? __f_unlock_pos+0x19/0x20 [ 152.760293] ? __fget+0x4d5/0x740 [ 152.763751] do_signal+0x9c/0x21c0 [ 152.767282] ? kasan_check_write+0x14/0x20 [ 152.771502] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 152.776431] ? setup_sigcontext+0x7d0/0x7d0 [ 152.780736] ? tun_chr_ioctl+0x2a/0x40 [ 152.784722] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 152.790246] ? do_vfs_ioctl+0x201/0x1720 [ 152.794293] ? fsnotify_first_mark+0x350/0x350 [ 152.799470] ? ioctl_preallocate+0x300/0x300 [ 152.803863] ? __fget_light+0x2f7/0x440 [ 152.807823] ? fget_raw+0x20/0x20 [ 152.811269] ? task_work_add+0x123/0x1f0 [ 152.815413] ? cpumask_weight.constprop.5+0x3f/0x3f [ 152.820418] ? fput+0x130/0x1a0 [ 152.823691] exit_to_usermode_loop+0x2e5/0x380 [ 152.828277] ? syscall_slow_exit_work+0x500/0x500 [ 152.833109] ? ksys_ioctl+0x81/0xd0 [ 152.836725] do_syscall_64+0x6be/0x820 [ 152.840601] ? finish_task_switch+0x1d3/0x870 [ 152.845085] ? syscall_return_slowpath+0x5e0/0x5e0 [ 152.850000] ? syscall_return_slowpath+0x31d/0x5e0 [ 152.854930] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 152.859943] ? prepare_exit_to_usermode+0x291/0x3b0 [ 152.864959] ? perf_trace_sys_enter+0xb10/0xb10 [ 152.869615] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 152.874470] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 152.879651] RIP: 0033:0x455ab9 [ 152.882824] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 152.902100] RSP: 002b:00007f6f41b9ac68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 152.909803] RAX: fffffffffffffff7 RBX: 00007f6f41b9b6d4 RCX: 0000000000455ab9 [ 152.917059] RDX: 0000000020000080 RSI: 00000000800454e0 RDI: 0000000000000014 [ 152.924314] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 152.931568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 152.938831] R13: 00000000004beccd R14: 00000000004ce1e8 R15: 0000000000000000 03:33:43 executing program 3: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(0xffffffffffffffff, r0) 03:33:43 executing program 1 (fault-call:6 fault-nth:1): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:33:43 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) dup2(r1, r0) 03:33:43 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(r0, 0x0) close(r0) close(r1) [ 153.000742] FAULT_INJECTION: forcing a failure. [ 153.000742] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 153.012622] CPU: 1 PID: 9037 Comm: syz-executor1 Not tainted 4.18.0-rc5-next-20180720+ #12 [ 153.021037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 153.030422] Call Trace: [ 153.033027] dump_stack+0x1c9/0x2b4 [ 153.036687] ? dump_stack_print_info.cold.2+0x52/0x52 [ 153.041908] should_fail.cold.4+0xa/0x11 [ 153.045989] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 153.051103] ? zap_class+0x740/0x740 [ 153.054829] ? zap_class+0x740/0x740 [ 153.058559] ? shrink_dcache_sb+0x350/0x350 [ 153.062892] ? perf_trace_lock+0xde/0x920 [ 153.067058] ? trace_hardirqs_on+0x10/0x10 [ 153.071305] ? zap_class+0x740/0x740 [ 153.075033] ? lock_release+0xa30/0xa30 [ 153.079022] ? check_same_owner+0x340/0x340 [ 153.083337] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 153.088859] ? _parse_integer+0x13b/0x190 [ 153.093010] ? perf_trace_lock+0xde/0x920 [ 153.097147] ? _kstrtoull+0x188/0x250 [ 153.100937] ? perf_trace_lock+0xde/0x920 [ 153.105074] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 153.110600] ? should_fail+0x246/0xd86 [ 153.114476] ? zap_class+0x740/0x740 [ 153.118179] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 153.123277] __alloc_pages_nodemask+0x36e/0xdb0 [ 153.127934] ? get_pid_task+0xd8/0x1a0 [ 153.131814] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 153.136815] ? lock_release+0xa30/0xa30 [ 153.140784] ? zap_class+0x740/0x740 [ 153.144492] ? lock_acquire+0x1e4/0x540 [ 153.148453] ? fs_reclaim_acquire+0x20/0x20 [ 153.152768] ? lock_downgrade+0x8f0/0x8f0 [ 153.156906] ? proc_fail_nth_write+0x9e/0x210 [ 153.161390] ? lock_release+0xa30/0xa30 [ 153.165354] ? check_same_owner+0x340/0x340 [ 153.169671] cache_grow_begin+0x91/0x710 [ 153.173727] kmem_cache_alloc+0x689/0x760 [ 153.177870] ? fsnotify_first_mark+0x350/0x350 [ 153.182440] getname_flags+0xd0/0x5a0 [ 153.186227] do_rmdir+0xeb/0x630 [ 153.189580] ? __ia32_sys_mkdir+0x80/0x80 [ 153.193712] ? fput+0x130/0x1a0 [ 153.196989] ? ksys_write+0x1ae/0x260 [ 153.200780] ? __ia32_sys_read+0xb0/0xb0 [ 153.204835] __x64_sys_rmdir+0x36/0x40 [ 153.208708] do_syscall_64+0x1b9/0x820 [ 153.212581] ? finish_task_switch+0x1d3/0x870 [ 153.217066] ? syscall_return_slowpath+0x5e0/0x5e0 [ 153.221989] ? syscall_return_slowpath+0x31d/0x5e0 [ 153.226918] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 153.231930] ? prepare_exit_to_usermode+0x291/0x3b0 [ 153.236942] ? perf_trace_sys_enter+0xb10/0xb10 [ 153.241596] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 153.246430] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 153.251610] RIP: 0033:0x455ab9 [ 153.254782] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 153.274064] RSP: 002b:00007f6984e0ac68 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 153.281761] RAX: ffffffffffffffda RBX: 00007f6984e0b6d4 RCX: 0000000000455ab9 [ 153.289018] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200000c0 03:33:43 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(r0, 0x0) close(r0) close(r1) 03:33:44 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) 03:33:44 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(r0, 0x0) close(r0) close(r1) [ 153.296270] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 153.303521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 153.310774] R13: 00000000004c0b60 R14: 00000000004d0fd8 R15: 0000000000000001 03:33:44 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[]) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) bpf$OBJ_GET_MAP(0x7, &(0x7f00000021c0)={&(0x7f0000002180)='./file0/fil..\x00'}, 0x10) creat(&(0x7f0000003900)='./file0/fil..\x00', 0x0) [ 153.348761] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:33:44 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(r0, 0x0) close(r0) close(r1) 03:33:44 executing program 1 (fault-call:6 fault-nth:2): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') [ 153.406014] FAT-fs (loop7): bogus number of reserved sectors [ 153.411926] FAT-fs (loop7): Can't find a valid FAT filesystem 03:33:44 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r0, 0x400, 0x0) getdents(r0, &(0x7f0000000040)=""/148, 0x200000eb) 03:33:44 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB]) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) bpf$OBJ_GET_MAP(0x7, &(0x7f00000021c0)={&(0x7f0000002180)='./file0/fil..\x00'}, 0x10) creat(&(0x7f0000003900)='./file0/fil..\x00', 0x0) 03:33:44 executing program 0: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000140)) mknod(&(0x7f0000000100)='./file0\x00', 0x1041, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) execveat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400), &(0x7f00000004c0), 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x27e, 0x0) 03:33:44 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(r0, 0x0) close(r0) close(r1) 03:33:44 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') [ 153.585051] FAT-fs (loop7): bogus number of reserved sectors [ 153.591298] FAT-fs (loop7): Can't find a valid FAT filesystem 03:33:44 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) signalfd4(r0, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x800) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) ioctl(r1, 0xe, &(0x7f0000000100)="f2d5f777081dcff31b50b1cdb1e33a0062a9bee4fb028a4d88df287d0e2a12b4cc15280ef06dd39e2c30c313e27eace540e32ffe40f924eb9833cf27ce5c1a3ff03323b259a812052914535b5f61901778f7d3bcc7e35466529cbb34ac5a94d11d1d4781d4fd7b8a5bb45decd56d5a225cea3e3e197e546afb6d1fcf86c468ea561e927b459966d37bf25d1552c320e96457379bbabb8ea4624468f4db8e4a116c35ac3d52a984760c") rmdir(&(0x7f00000000c0)='./file0\x00') 03:33:44 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(r0, r1) 03:33:44 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r0, 0x3fe, 0x3) getdents(r0, &(0x7f0000000040)=""/148, 0xab) 03:33:44 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(r0, 0x0) close(r0) close(r1) 03:33:44 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x400454d8, &(0x7f0000000080)=r0) 03:33:44 executing program 0: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000140)) mknod(&(0x7f0000000100)='./file0\x00', 0x1041, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) execveat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400), &(0x7f00000004c0), 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x27e, 0x0) 03:33:44 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f000009aff8)='./file0\x00', 0x0) mount(&(0x7f0000434ff8)='./file0\x00', &(0x7f0000abf000)='./file0\x00', &(0x7f0000f4c000)='jfs\x00', 0x1023402, 0x0) unlink(&(0x7f00003b3000)='./file0\x00') r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000780)='/dev/autofs\x00', 0x484101, 0x0) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000740)=0x3) write$binfmt_elf64(r5, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x2837, 0x800, 0x0, 0x5, 0xa7, 0x2, 0x6, 0xa45d, 0x1a3, 0x40, 0x3c4, 0x3ff, 0x6, 0x38, 0x2, 0x100, 0x101, 0x2}, [{0x6474e551, 0x3, 0xac63, 0x26b8, 0xd59a, 0x4, 0xfff}, {0x6474e551, 0x5, 0x4, 0x1, 0x100000000, 0x6, 0x0, 0x7b}], "3ac74579139ec5bf501f9fdf8084417b2da82ae8ca1fbc60cd2bba625fab4be8699e38b50acfbe7994185cbcf22087114da1f21825bbf3db326ae42b41101e4a26919fad50ca4461cf80a4a69516ef165ef198bc5f1610aeae77a7a58c12b93581c21d181acded9efa76f3f968dd9bb7b2151c90cd41cee9b6c4b9b36fa696", [[], []]}, 0x32f) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_PIT(r4, 0x8070ae9f, &(0x7f0000000300)) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f00000006c0), &(0x7f0000000140)=0x68) r6 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r6, &(0x7f0000000240)=""/109, 0x6d) write$FUSE_POLL(r1, &(0x7f0000000080)={0x18, 0xffffffffffffffda, 0x2, {0x401}}, 0x18) rmdir(&(0x7f00000000c0)='./file0\x00') ioctl$KVM_GET_TSC_KHZ(r1, 0xaea3) 03:33:44 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB]) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) bpf$OBJ_GET_MAP(0x7, &(0x7f00000021c0)={&(0x7f0000002180)='./file0/fil..\x00'}, 0x10) creat(&(0x7f0000003900)='./file0/fil..\x00', 0x0) 03:33:44 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="2800000010005fba00050000171f4eeaae688a422c54b900000000000000002b47c5c02d56587ac98e5403b870e1ea5987cd5f3f2592c663a5752418530be585db88c3959aa02ac0ec693d33b9701242e938a35ad5ace2f795ce46b21165430201b705d826f65a8126ca43dec4a80616374af50989f4f0c3a807ee1d5204325311eb581b99f9abbbe1aaa3caff25f006af4d5c8d0b4f0bfc85210b4cfe4b54bc48bf109612d3245071294fc82795972d321bb5eca0a9", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000c075222f64e234cf49a3123626087c7c34da2ba5aef2d8c664f23f9125be7257177f84782d9e636c1f3b83ae81fc8939e31bd9b66ede482d83f57cb5aaa25db6e605c3bc8a0c4ba4cf6779690fdf2b691954790ae5cb4a9564e23f6b7d596a69c309bccc81f0e1fa91b928e3ab0fa2379d2ace6c7de1e9b5697a46eed94a095b6791f992824396d277"], 0x28}, 0x1}, 0x0) r2 = dup2(r1, r0) getrandom(&(0x7f00000001c0)=""/160, 0xa0, 0x1) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000040)={'ip6_vti0\x00', 0x3}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000000280)={@mcast1, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000300)={r3, @remote={0xac, 0x14, 0x14, 0xbb}, @broadcast=0xffffffff}, 0xc) ioctl$RTC_UIE_ON(r2, 0x7003) r4 = fcntl$getown(r2, 0x9) syz_open_procfs(r4, &(0x7f0000000340)='net/ip_mr_vif\x00') 03:33:44 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(r0, 0x0) close(r0) close(r1) [ 154.014360] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 154.045340] FAT-fs (loop7): bogus number of reserved sectors [ 154.051265] FAT-fs (loop7): Can't find a valid FAT filesystem 03:33:45 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r2, 0x400, 0x0) getdents(r2, &(0x7f0000000040)=""/148, 0xab) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000200), 0x4) 03:33:45 executing program 0: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000140)) mknod(&(0x7f0000000100)='./file0\x00', 0x1041, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) execveat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400), &(0x7f00000004c0), 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x27e, 0x0) 03:33:45 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454d7, &(0x7f0000000080)=r0) 03:33:45 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(r0, r1) 03:33:45 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB]) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) bpf$OBJ_GET_MAP(0x7, &(0x7f00000021c0)={&(0x7f0000002180)='./file0/fil..\x00'}, 0x10) creat(&(0x7f0000003900)='./file0/fil..\x00', 0x0) [ 154.130312] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. 03:33:45 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x0) close(r0) close(r1) 03:33:45 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0xfffffffffffffe52) vmsplice(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="8c7c7237d725bd166ac76b9d8d1beb799c92ff2ddd3c9323a2d19341ec", 0x1d}], 0x1, 0x1) rmdir(&(0x7f00000000c0)='./file0\x00') 03:33:45 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010c4999e3ebc9cf2ccfc65005fba0000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}, 0x1}, 0x0) dup2(r1, r0) 03:33:45 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r1, 0x400, 0x0) getdents(r1, &(0x7f0000000040)=""/148, 0xab) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000100)=""/48) [ 154.266427] FAT-fs (loop7): bogus number of reserved sectors [ 154.272349] FAT-fs (loop7): Can't find a valid FAT filesystem 03:33:45 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(r0, 0x0) close(0xffffffffffffffff) close(r1) 03:33:45 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(r0, r1) 03:33:45 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'gre0\x00', 0x0}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000b40)={0x0, 0x6}, &(0x7f0000000b80)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000bc0)={r4, 0x100, 0x4, 0x401, 0xb8, 0x5}, &(0x7f0000000c00)=0x14) r5 = accept$packet(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000a40)="7ada2834505658ce75b5cde1c13a4d884e63c189a5f8f28702be05b139f8e251bebc8e8b5f76518c8d7e1bc3c0a25263ffe580aaaa28945533f42aa482d2b71b3bddf7e7f7862791f50d7e0b") r7 = syz_open_dev$adsp(&(0x7f0000000c40)='/dev/adsp#\x00', 0x5, 0x90100) write$P9_RCREATE(r5, &(0x7f0000000540)={0x18, 0x73, 0x2, {{0x20, 0x3, 0x5}, 0x1f}}, 0x18) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_1\x00', 0x0}) getsockopt$inet6_mreq(r1, 0x29, 0xbe2d1ca0dad6688a, &(0x7f0000000300)={@empty, 0x0}, &(0x7f0000000340)=0x14) getsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000f40), &(0x7f0000000f80)=0x8) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000380)={@broadcast, @dev, 0x0}, &(0x7f00000003c0)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in6, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f0000000500)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000580)={{{@in=@remote, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000680)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) r16 = getgid() r17 = getgid() fstat(r0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000d00)={0x208, 0xfffffffffffffff5, 0x1, [{{0x4, 0x0, 0x3f, 0x1, 0xcdb2, 0xec, {0x5, 0x3, 0x98c, 0x2, 0x7ff, 0x401, 0xffff, 0x0, 0x4, 0x3, 0xbf39, r12, r16, 0x4}}, {0x1, 0x3, 0x16, 0x6, 'mcast_rejoin_interval\x00'}}, {{0x3, 0x0, 0x5, 0x80000000, 0x20, 0x5, {0x1, 0x8, 0x7ff, 0x0, 0x9, 0x1, 0x1, 0x10001, 0x3, 0xfffffffffffffffa, 0x9, r14, r17, 0x2}}, {0x4, 0x3ff, 0x8, 0x2, 'keyring\\'}}, {{0x0, 0x3, 0x8, 0x4, 0xffffffff, 0xfffffffffffffff9, {0x6, 0x3, 0x2, 0x9, 0xffffffffffffff71, 0x8, 0x0, 0x43, 0xff, 0x769, 0x4a444c84, r12, r18, 0x5, 0x79}}, {0x1, 0x4, 0xf, 0x2, 'net/ipv6_route\x00'}}]}, 0x208) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000a00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000700)={0x2a8, r2, 0x401, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0xfc, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xac}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r8}}, {0x8, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x2df}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xfff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r11}}, {0x8, 0x7}}}]}}, {{0x8, 0x1, r13}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x3dfc}}}]}}, {{0x8, 0x1, r15}, {0xc0, 0x2, [{0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x14, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'roundrobin\x00'}}}]}}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x4000004}, 0x1) r19 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r19, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000ac0)=0x0) syz_open_procfs(r20, &(0x7f0000000b00)='net/ipv6_route\x00') 03:33:45 executing program 0: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000140)) execve(&(0x7f0000000540)='./file0\x00', &(0x7f0000578fe8), &(0x7f0000000740)) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) execveat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400), &(0x7f00000004c0), 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x27e, 0x0) 03:33:45 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x8927, &(0x7f0000000080)=r0) 03:33:45 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) bpf$OBJ_GET_MAP(0x7, &(0x7f00000021c0)={&(0x7f0000002180)='./file0/fil..\x00'}, 0x10) creat(&(0x7f0000003900)='./file0/fil..\x00', 0x0) 03:33:45 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r2, 0x400, 0x0) getdents(r2, &(0x7f0000000040)=""/148, 0xab) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e20, 0x100, @mcast1={0xff, 0x1, [], 0x1}, 0x4}}, 0x101, 0x0, 0x6, 0x3c5, 0x10}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000002c0)={r3, 0x68, "94d43938bf979ba526ec7e6ae7e5d81e40ce2c530f39edbdf95b199adc4e08fbd15e0a3ac854d2a2f59e6b1c011e47c732a83ddee8095683fc823763125555735825d7eb7b68a01490f4beeb83b9b5c39790f1826ffeb3101fb828346f5ce3584ced305bcf6b26d8"}, &(0x7f0000000340)=0x70) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x400000, 0x0) 03:33:45 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(r0, 0x0) close(0xffffffffffffffff) close(r1) 03:33:45 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(r0, r1) 03:33:45 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r0 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x20000) r1 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x4, 0x4200) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000003c0)={0x3, r1}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x2}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e22, @broadcast=0xffffffff}}, 0x2, 0x401}, 0x90) fanotify_mark(r2, 0x88, 0x0, r2, &(0x7f0000000240)='./file0\x00') rmdir(&(0x7f00000000c0)='./file0\x00') ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000100)={0x11, 0x3f, &(0x7f0000000080)="ca8cb7cc42dc4fc13cd684b990a99d010840b449a82c4d93c1df92f62ee83f758ef6fa1371e1d7c56feeed2b4407dec4edf0e0e074797ebddf20410b4690d9"}) 03:33:45 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000100046ba000000000000000029be3200000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}, 0x1}, 0x0) dup2(r1, r0) [ 154.507794] FAT-fs (loop7): Unrecognized mount option "uid=" or missing value 03:33:45 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0xc0045878, &(0x7f0000000080)=r0) 03:33:45 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(r0, 0x0) close(0xffffffffffffffff) close(r1) 03:33:45 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) bpf$OBJ_GET_MAP(0x7, &(0x7f00000021c0)={&(0x7f0000002180)='./file0/fil..\x00'}, 0x10) creat(&(0x7f0000003900)='./file0/fil..\x00', 0x0) 03:33:45 executing program 0: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000140)) execve(&(0x7f0000000540)='./file0\x00', &(0x7f0000578fe8), &(0x7f0000000740)) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) execveat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400), &(0x7f00000004c0), 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x27e, 0x0) 03:33:45 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r0, 0x1, 0x0) getdents(r0, &(0x7f0000000200)=""/148, 0x3e5) 03:33:45 executing program 1: sync() r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:33:45 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}}, &(0x7f0000000340)=0x84) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00000002c0)=r2, 0x4) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000300)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="28000020b2228000000000ba9c49c3958437fddf520eea", @ANYRES32=0x0, @ANYBLOB="030000f0279a0000000008001b00000000000a06f51a8b0f93b35321ba399158752722d37778283bce5657e019c11461715ec3489c880decd53b57e7ed6bca1caf756b30894678948a0156ad50aa32f352ebed276c55e1e8c77dbbbe915831061c7b286fb43ae133a65af392f9585cd78edc9fbe89e287374c7abd075271043e972f853926"], 0x28}, 0x1}, 0x0) dup2(r3, r0) syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x6, 0x135902) 03:33:45 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(r0, r1) [ 154.671577] FAT-fs (loop7): Unrecognized mount option "uid=" or missing value 03:33:45 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(r0, 0x0) close(r0) close(0xffffffffffffffff) 03:33:45 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x400454dc, &(0x7f0000000080)=r0) 03:33:45 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x2, 0x10000) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000140)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x122) timer_create(0x3, &(0x7f00000003c0)={0x0, 0x10, 0x2, @thr={&(0x7f0000000240)="ac64b0b5c35846629d5c9a25cde950ac4de77eeca6ad3a24f8ad95d0a1e96237ab7880257c06d7fbd5ca1fabf372215138986e3e93714b023f992f8944679d9b30228869eea0f22dc345b70a56150697f5d405c0f123571b51c75b81a0728162e209b6850f7564ed31fa66738018666cb8745b4e0667cf7b874cf4459c76358014465ab547fdbd7724d6abaea3305d8260e67fa50ab9b429d8474c27404b2b2711e30a42b57366a59dd81648beb6e78f6cfab216b81023bc5580d33e13574177e9d052bcfcf5cc43bb7a7d6cfea661fca90e882c48522421efd8d205fa13a305e077f416", &(0x7f0000000340)="81858440e2f53671bcd630de929ff2b1bda874b4fc4bf30e54bd4f835483563cbfa0d9655d91fb8a3d40f963ef4210aea6b0bc5a81bf84db10a5134554def84eeac27dbfa1d3451918cadbd3acb0f214"}}, &(0x7f0000000400)=0x0) timer_delete(r2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x40000000000, 0x0) lseek(r3, 0x400, 0x0) getdents(r3, &(0x7f0000000040)=""/148, 0xab) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000580)=0x8) 03:33:45 executing program 0: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000140)) execve(&(0x7f0000000540)='./file0\x00', &(0x7f0000578fe8), &(0x7f0000000740)) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) execveat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400), &(0x7f00000004c0), 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x27e, 0x0) 03:33:45 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) bpf$OBJ_GET_MAP(0x7, &(0x7f00000021c0)={&(0x7f0000002180)='./file0/fil..\x00'}, 0x10) creat(&(0x7f0000003900)='./file0/fil..\x00', 0x0) 03:33:45 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'bond_slave_1\x00', 0x2}) dup2(r1, r0) 03:33:45 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000300)=""/85) syz_mount_image$ceph(&(0x7f0000000080)='ceph\x00', &(0x7f0000000100)='./file0\x00', 0x9, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000140)="8ca7ddbc5330586b4fd63993ee19800871b08933ba160e1d49809c2ef64c2d11589ece66355da4149d", 0x29, 0x9}, {&(0x7f0000000180)="573149e29e40b11022e963b42c41963cee6d604ce96ee17de5fc370a", 0x1c, 0x1}], 0x60, &(0x7f00000002c0)='\x00') [ 154.897501] FAT-fs (loop7): Unrecognized mount option "uid=" or missing value 03:33:45 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="000100030000000066000000c9030000ec000000010000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)) 03:33:45 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(r0, r1) 03:33:45 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x5450, &(0x7f0000000080)=r0) 03:33:45 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x8000) ioctl$KDSETLED(r0, 0x4b32, 0xfffffffffffdfff9) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r1, 0x400, 0x0) getdents(r1, &(0x7f0000000040)=""/148, 0xab) [ 154.965192] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 154.989681] EXT4-fs (loop6): bad geometry: first data block 1 is beyond end of filesystem (0) 03:33:45 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100), &(0x7f0000000140)=0x4) rmdir(&(0x7f00000000c0)='./file0\x00') ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000080)={r2, 0x0, 0x6, 0x4, 0x4}) 03:33:46 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,s\x00owexec,d']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) bpf$OBJ_GET_MAP(0x7, &(0x7f00000021c0)={&(0x7f0000002180)='./file0/fil..\x00'}, 0x10) creat(&(0x7f0000003900)='./file0/fil..\x00', 0x0) 03:33:46 executing program 0: mknod(&(0x7f0000000100)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000540)='./file0\x00', &(0x7f0000578fe8), &(0x7f0000000740)) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) execveat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400), &(0x7f00000004c0), 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x27e, 0x0) [ 155.112142] EXT4-fs (loop6): bad geometry: first data block 1 is beyond end of filesystem (0) 03:33:46 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(r0, r1) 03:33:46 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r1, 0x400, 0x0) getdents(r1, &(0x7f0000000040)=""/148, 0xab) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000100)=0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)=0x0) kcmp(r2, r3, 0x0, r1, r0) [ 155.188473] FAT-fs (loop7): Unrecognized mount option "uid=" or missing value 03:33:46 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000080)) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:33:46 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="000100030000000066000000c9030000ec000000010000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)) 03:33:46 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(r0, r1) 03:33:46 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r1, 0x400, 0x0) getdents(r1, &(0x7f0000000040)=""/148, 0xab) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000003c0)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', r2}) 03:33:46 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0xc0189436, &(0x7f0000000080)=r0) [ 155.387464] EXT4-fs (loop6): bad geometry: first data block 1 is beyond end of filesystem (0) [ 155.446580] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:33:46 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x7f, 0x248000) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f00000001c0)=0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="040000000000000008001b7f00000000"], 0x28}, 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) dup2(r2, r0) 03:33:46 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="000100030000000066000000c9030000ec000000010000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)) 03:33:46 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000080)) read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:33:46 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,s\x00owexec,d']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) bpf$OBJ_GET_MAP(0x7, &(0x7f00000021c0)={&(0x7f0000002180)='./file0/fil..\x00'}, 0x10) creat(&(0x7f0000003900)='./file0/fil..\x00', 0x0) 03:33:46 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r0, 0x400, 0x0) getdents(r0, &(0x7f00000002c0)=""/148, 0x32f) 03:33:46 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(r0, r1) 03:33:46 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454dd, &(0x7f0000000080)=r0) [ 155.627531] EXT4-fs (loop6): bad geometry: first data block 1 is beyond end of filesystem (0) [ 155.638623] FAT-fs (loop7): Unrecognized mount option "uid=" or missing value 03:33:46 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="000100030000000066000000c9030000ec000000010000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)) [ 155.752781] EXT4-fs (loop6): bad geometry: first data block 1 is beyond end of filesystem (0) 03:33:46 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,s\x00owexec,d']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) bpf$OBJ_GET_MAP(0x7, &(0x7f00000021c0)={&(0x7f0000002180)='./file0/fil..\x00'}, 0x10) creat(&(0x7f0000003900)='./file0/fil..\x00', 0x0) 03:33:46 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000002c0)={@l2={0x1f, 0xaa1c, {0x6, 0x7, 0x7f, 0x3ff, 0x6d02, 0x7ff}, 0x3ff, 0x4f5280000}, {&(0x7f0000000080)=""/53, 0x35}, &(0x7f0000000180)}, 0xa0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000100)={0x9, 0x81, 0x9}) 03:33:46 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(r0, r1) 03:33:46 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) setsockopt$inet6_buf(r2, 0x29, 0xdf, &(0x7f0000000040)="437cd91d1142e9c319115e453eecda5a1666e027ddcddbdf8818046152cf", 0x1e) dup2(r1, r0) 03:33:46 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x200000, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000140)) syz_emit_ethernet(0x22, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c2000003ffffffffffff05a78685531aabfd1700000000000000000000000000012a08e653719f2f31350e5cc04f3af1fa8e38fd8b03630897315f3c26adb771d30732f41cc410f08abc962e5ddf2533caddc605dc3a020ff138ebc84d8715469c6522f661beb754a22788042e95b70fbc60961870502bdd4209df46fb728e81a6680e000000"], &(0x7f0000000240)={0x0, 0x4, [0x75a, 0x4c6, 0xd95, 0x120]}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r1, 0x400, 0x0) getdents(r1, &(0x7f0000000040)=""/148, 0xab) 03:33:46 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x400454cd, &(0x7f0000000080)=r0) 03:33:46 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000180)) 03:33:46 executing program 0: mknod(&(0x7f0000000100)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000540)='./file0\x00', &(0x7f0000578fe8), &(0x7f0000000740)) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) execveat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400), &(0x7f00000004c0), 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x27e, 0x0) 03:33:46 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(r0, r1) 03:33:47 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x100000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r0, 0x400, 0x0) getdents(r0, &(0x7f0000000040)=""/148, 0xab) 03:33:47 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x8200) [ 156.039895] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 156.053113] FAT-fs (loop7): Unrecognized mount option "uid=" or missing value [ 156.063013] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:33:47 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,s\x00owexec,discard,che']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) bpf$OBJ_GET_MAP(0x7, &(0x7f00000021c0)={&(0x7f0000002180)='./file0/fil..\x00'}, 0x10) creat(&(0x7f0000003900)='./file0/fil..\x00', 0x0) 03:33:47 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000180)) 03:33:47 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x100000001, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r2, 0x18000000}}, 0x10) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r4, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:33:47 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f00000012c0)={0x7ff, 0x78, 0x5, 0x6, 0x1f}) lseek(r1, 0x400, 0x0) getdents(r1, &(0x7f0000000040)=""/148, 0xab) ioctl$TIOCCBRK(r0, 0x5428) r2 = add_key(&(0x7f0000000100)='syzkaller\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000240)="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", 0x1000, 0xfffffffffffffff9) r3 = add_key$keyring(&(0x7f0000001240)='keyring\x00', &(0x7f0000001280)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$negate(0xd, r2, 0x1, r3) [ 156.195668] FAT-fs (loop7): Unrecognized mount option "uid=" or missing value 03:33:47 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(r0, r1) 03:33:47 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') [ 156.245614] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 156.264445] FAT-fs (loop7): Unrecognized mount option "che" or missing value 03:33:47 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000180)) 03:33:47 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x401054d6, &(0x7f0000000080)=r0) [ 156.403225] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 156.443271] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:33:47 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b00ff000010b3aa66e9f6209d485965cd2261cb4bc937689a4aa53e9af3715a7dde08433d9283962e6a217368"], 0x28}, 0x1}, 0x0) r2 = dup2(r1, r0) openat(r2, &(0x7f0000000040)='./file0\x00', 0x121100, 0xf0) 03:33:47 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r2, 0x101, 0x70bd2a, 0x25dfdbfb, {0x3}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x3b}, @FOU_ATTR_IPPROTO={0x8, 0x3}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e20}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x7f}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x3c}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x1f}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4, 0x5}]}, 0x50}, 0x1}, 0x800) lseek(r1, 0x400, 0x0) getdents(r1, &(0x7f0000000040)=""/148, 0xab) 03:33:47 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,s\x00owexec,discard,che']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) bpf$OBJ_GET_MAP(0x7, &(0x7f00000021c0)={&(0x7f0000002180)='./file0/fil..\x00'}, 0x10) creat(&(0x7f0000003900)='./file0/fil..\x00', 0x0) 03:33:47 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(r0, r1) [ 156.539919] FAT-fs (loop7): Unrecognized mount option "uid=" or missing value [ 156.568464] FAT-fs (loop7): Unrecognized mount option "che" or missing value 03:33:47 executing program 0: mknod(&(0x7f0000000100)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000540)='./file0\x00', &(0x7f0000578fe8), &(0x7f0000000740)) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) execveat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400), &(0x7f00000004c0), 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x27e, 0x0) 03:33:47 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') ioctl$LOOP_CLR_FD(r1, 0x4c01) 03:33:47 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000), 0x0, 0x400}], 0x0, &(0x7f0000000180)) 03:33:47 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x894c, &(0x7f0000000080)=r0) 03:33:47 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(r0, r1) 03:33:47 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) r0 = shmget$private(0x0, 0x3000, 0x4, &(0x7f0000311000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r1, 0x400, 0x0) getdents(r1, &(0x7f0000000040)=""/148, 0xab) 03:33:47 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,s\x00owexec,discard,che']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) bpf$OBJ_GET_MAP(0x7, &(0x7f00000021c0)={&(0x7f0000002180)='./file0/fil..\x00'}, 0x10) creat(&(0x7f0000003900)='./file0/fil..\x00', 0x0) 03:33:47 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x20000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="280d000010145fba00000000000000f6ea000000e22f7b1eeaa5d07c28b1bd7a2a893e4f91289fa167df094113be112c461d3aca94fe337d336b07000a156ae2eac14301df9ad696229c4592f15bac6ba86d88a0559f3c0636d36e9c6e58bd2523f1415d08b5a1b5331581e75938541401e337ff7b9622a47c", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}, 0x1}, 0x0) dup2(r1, r0) 03:33:47 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000380)='./file0/file0\x00') r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000340)={'ah\x00'}, &(0x7f0000000400)=0x1e) read(r2, &(0x7f0000000240)=""/109, 0x6d) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000002c0), &(0x7f0000000300)=0xb) rmdir(&(0x7f00000000c0)='./file0\x00') getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000080)={'ipvs\x00'}, &(0x7f0000000100)=0x1e) tee(r2, r2, 0x8, 0x8) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x100, 0x0) r3 = geteuid() quotactl(0x7, &(0x7f0000000140)='./file0\x00', r3, &(0x7f0000000180)="ef3762320876391de0dd793544") 03:33:47 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r1, 0x400, 0x0) getdents(r1, &(0x7f0000000040)=""/148, 0xab) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f0000000140)={0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0x1c, 0x1, @in6={0xa, 0x4e22, 0x81, @remote={0xfe, 0x80, [], 0xbb}, 0x7}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f00000002c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000100), r2}}, 0x18) [ 156.876565] FAT-fs (loop7): Unrecognized mount option "uid=" or missing value [ 156.901783] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 156.917993] FAT-fs (loop7): Unrecognized mount option "che" or missing value 03:33:47 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,s\x00owexec,discard,check=st']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) bpf$OBJ_GET_MAP(0x7, &(0x7f00000021c0)={&(0x7f0000002180)='./file0/fil..\x00'}, 0x10) creat(&(0x7f0000003900)='./file0/fil..\x00', 0x0) 03:33:47 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(r0, r1) 03:33:47 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000), 0x0, 0x400}], 0x0, &(0x7f0000000180)) 03:33:47 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454cf, &(0x7f0000000080)=r0) 03:33:47 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x400000000000000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000001c0)={0x10}, 0x1cb, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) dup2(r0, r1) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000040)=0x3, 0x4) 03:33:47 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x5, 0x101100) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000100)) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') mkdir(&(0x7f0000000080)='./file0\x00', 0x4) [ 157.067878] FAT-fs (loop7): Unrecognized mount option "uid=" or missing value [ 157.099616] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 157.129106] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 157.138495] FAT-fs (loop7): Unrecognized mount option "check=st" or missing value [ 157.266555] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:33:48 executing program 0: clone(0x0, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000140)) mknod(&(0x7f0000000100)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000540)='./file0\x00', &(0x7f0000578fe8), &(0x7f0000000740)) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) execveat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400), &(0x7f00000004c0), 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x27e, 0x0) 03:33:48 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r1, 0x400, 0x0) getdents(r1, &(0x7f0000000040)=""/148, 0xab) sendfile(r1, r0, 0x0, 0x7ff) 03:33:48 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(r0, r1) 03:33:48 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000100)={0xd6, ""/214}) rmdir(&(0x7f00000000c0)='./file0\x00') 03:33:48 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000), 0x0, 0x400}], 0x0, &(0x7f0000000180)) 03:33:48 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,s\x00owexec,discard,check=st']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) bpf$OBJ_GET_MAP(0x7, &(0x7f00000021c0)={&(0x7f0000002180)='./file0/fil..\x00'}, 0x10) creat(&(0x7f0000003900)='./file0/fil..\x00', 0x0) 03:33:48 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x400454d4, &(0x7f0000000080)=r0) 03:33:48 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) chroot(&(0x7f00000002c0)='./file0\x00') r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) futimesat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{0x0, 0x2710}, {0x77359400}}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000280)=r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000240)=0x1000, 0x4) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="030000000000000000001b0000000040"], 0x28}, 0x1}, 0x0) dup2(r2, r0) 03:33:48 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f0000000080)='./file0\x00') [ 157.754382] FAT-fs (loop7): Unrecognized mount option "uid=" or missing value [ 157.764678] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 157.790397] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. 03:33:48 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r1, 0x400, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000100)) getdents(r1, &(0x7f0000000040)=""/148, 0xab) [ 157.806466] FAT-fs (loop7): Unrecognized mount option "check=st" or missing value 03:33:48 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,s\x00owexec,discard,check=st']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) bpf$OBJ_GET_MAP(0x7, &(0x7f00000021c0)={&(0x7f0000002180)='./file0/fil..\x00'}, 0x10) creat(&(0x7f0000003900)='./file0/fil..\x00', 0x0) 03:33:48 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="000100030000000066000000c9030000ec000000010000000000000000", 0x1d, 0x400}], 0x0, &(0x7f0000000180)) 03:33:48 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x400454ca, &(0x7f0000000080)=r0) 03:33:48 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(r0, r1) 03:33:48 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e24, @multicast1=0xe0000001}}, [0x2, 0x3ff, 0x80, 0x5b6, 0x6, 0x6, 0x7ac2fb42, 0xd, 0x7fffffff, 0x7f, 0x9, 0x9, 0x40, 0x200, 0x2]}, &(0x7f0000000080)=0x100) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000002c0)={r3, 0x18, "a7cff42aa95f461f272e337065846fc8ef2993bda642928a"}, &(0x7f0000000300)=0x20) 03:33:48 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r0, 0x400, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000280)='fou\x00') sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {0x2}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e23}]}, 0x1c}, 0x1}, 0x0) getdents(r0, &(0x7f0000000200)=""/148, 0x22) [ 157.875884] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 157.955376] netlink: 'syz-executor5': attribute type 1 has an invalid length. [ 157.972205] FAT-fs (loop7): Unrecognized mount option "uid=" or missing value [ 157.991265] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 158.013991] netlink: 'syz-executor5': attribute type 1 has an invalid length. [ 158.041161] FAT-fs (loop7): Unrecognized mount option "check=st" or missing value 03:33:49 executing program 0: clone(0x0, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000140)) mknod(&(0x7f0000000100)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000540)='./file0\x00', &(0x7f0000578fe8), &(0x7f0000000740)) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) execveat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400), &(0x7f00000004c0), 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x27e, 0x0) 03:33:49 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="d104000010005fba01000000000000000000000036b8ad575119930eb5c6e748a0df33a84ca11195b36551396f3b7b57507d8cf07bbb181212d04919980200c96bb524be5e07e8adfedcbf43b7bebb0ed40c0bd8ec34b4f47502394a71eb82d5c8a485aee55171f914ae040465ece6ef8836726f7ac1e9e481e888efcd33ef4071434ca31a51d6a10c47a7e953241f74dfb095cf130c607f6fb6bf0b24c642c34f099afb85551ed21bea1c9c36f547e599bc8d74f76e3e4ee0f7900e3637c491afeeee18b3534dbfcaca5eab816df2efcc65ef", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}, 0x1}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0xe87, 0x2000) dup(r0) dup2(r1, r2) 03:33:49 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:33:49 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(r0, r1) 03:33:49 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="000100030000000066000000c9030000ec000000010000000000000000", 0x1d, 0x400}], 0x0, &(0x7f0000000180)) 03:33:49 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x4020940d, &(0x7f0000000080)=r0) 03:33:49 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x200000, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x4, 0x101000) fanotify_mark(r0, 0x40, 0x1, r1, &(0x7f0000000200)='./file0\x00') openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r2, 0x400, 0x0) getdents(r2, &(0x7f0000000040)=""/148, 0xab) 03:33:49 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,s\x00owexec,discard,check=stri']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) bpf$OBJ_GET_MAP(0x7, &(0x7f00000021c0)={&(0x7f0000002180)='./file0/fil..\x00'}, 0x10) creat(&(0x7f0000003900)='./file0/fil..\x00', 0x0) [ 158.631429] FAT-fs (loop7): Unrecognized mount option "uid=" or missing value [ 158.644705] EXT4-fs (loop6): VFS: Can't find ext4 filesystem 03:33:49 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000100)) 03:33:49 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000004c0)=[@in6={0xa, 0x4e20, 0xbb86, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0xf9}, @in6={0xa, 0x4e22, 0x7ff, @loopback={0x0, 0x1}, 0x80}, @in6={0xa, 0x4e21, 0xfffffffffffff001, @mcast2={0xff, 0x2, [], 0x1}, 0x3f}, @in={0x2, 0x4e23, @multicast1=0xe0000001}, @in={0x2, 0x4e21, @broadcast=0xffffffff}, @in={0x2, 0x4e22, @rand_addr=0x8}], 0x84) mprotect(&(0x7f000068c000/0x2000)=nil, 0x2000, 0x2000004) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x7, @remote={0xfe, 0x80, [], 0xbb}, 0xfff}}, 0xb428, 0xb44f447, 0x2, 0x4, 0x4e}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e22, @broadcast=0xffffffff}}, [0x8000, 0xffffffff, 0x400, 0x40, 0x85ab, 0x0, 0x8, 0x8001, 0x2, 0x8001, 0x5, 0x400, 0x8, 0xe20c, 0x3b2]}, &(0x7f0000000140)=0x100) lseek(r2, 0x400, 0x0) getdents(r2, &(0x7f0000000040)=""/148, 0xab) [ 158.675638] FAT-fs (loop7): Unrecognized mount option "check=stri" or missing value 03:33:49 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) getsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000001c0)=""/144, &(0x7f0000000280)=0x90) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) r3 = dup2(r1, r0) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000300), &(0x7f0000000340)=0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f00000002c0)=[@in6={0xa, 0x4e23, 0x7f, @dev={0xfe, 0x80, [], 0x1f}, 0x9}], 0x1c) 03:33:49 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,s\x00owexec,discard,check=stri']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) bpf$OBJ_GET_MAP(0x7, &(0x7f00000021c0)={&(0x7f0000002180)='./file0/fil..\x00'}, 0x10) creat(&(0x7f0000003900)='./file0/fil..\x00', 0x0) 03:33:49 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x40049409, &(0x7f0000000080)=r0) 03:33:49 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="000100030000000066000000c9030000ec000000010000000000000000", 0x1d, 0x400}], 0x0, &(0x7f0000000180)) 03:33:49 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2), 0x0) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(r0, r1) 03:33:49 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') [ 158.797941] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 158.815062] FAT-fs (loop7): Unrecognized mount option "uid=" or missing value [ 158.856503] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 158.909812] FAT-fs (loop7): Unrecognized mount option "check=stri" or missing value [ 159.011741] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:33:50 executing program 0: clone(0x0, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000140)) mknod(&(0x7f0000000100)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000540)='./file0\x00', &(0x7f0000578fe8), &(0x7f0000000740)) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) execveat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400), &(0x7f00000004c0), 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x27e, 0x0) 03:33:50 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet6_opts(r2, 0x29, 0x2a, &(0x7f00000002c0)=@routing, 0x8) close(r2) close(r1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r3, 0x400, 0x0) getdents(r3, &(0x7f0000000040)=""/148, 0xab) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r3, 0x40505330, &(0x7f0000000100)={{0x9, 0x2}, {0x0, 0xffff}, 0x5fd, 0x2, 0x80000000}) 03:33:50 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000001c0)=0x6, 0x4) read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') rmdir(&(0x7f0000000080)='./file0\x00') bind$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000100)={0x11, 0x5, 0x400000000001, 0x2, 0x81}) 03:33:50 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="000100030000000066000000c9030000ec000000010000000000000000000000002000000020000000010000", 0x2c, 0x400}], 0x0, &(0x7f0000000180)) 03:33:50 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2), 0x0) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(r0, r1) 03:33:50 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,s\x00owexec,discard,check=stri']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) bpf$OBJ_GET_MAP(0x7, &(0x7f00000021c0)={&(0x7f0000002180)='./file0/fil..\x00'}, 0x10) creat(&(0x7f0000003900)='./file0/fil..\x00', 0x0) 03:33:50 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x5460, &(0x7f0000000080)=r0) 03:33:50 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x2000, 0x0) dup2(r1, r0) 03:33:50 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40000, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') [ 159.491593] FAT-fs (loop7): Unrecognized mount option "uid=" or missing value [ 159.504248] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 159.524993] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 159.533887] FAT-fs (loop7): Unrecognized mount option "check=stri" or missing value 03:33:50 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="000100030000000066000000c9030000ec000000010000000000000000000000002000000020000000010000", 0x2c, 0x400}], 0x0, &(0x7f0000000180)) 03:33:50 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2), 0x0) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(r0, r1) 03:33:50 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,s\x00owexec,discard,check=stric']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) bpf$OBJ_GET_MAP(0x7, &(0x7f00000021c0)={&(0x7f0000002180)='./file0/fil..\x00'}, 0x10) creat(&(0x7f0000003900)='./file0/fil..\x00', 0x0) 03:33:50 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x10) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') [ 159.642178] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 159.642909] FAT-fs (loop7): Unrecognized mount option "uid=" or missing value 03:33:50 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r1, 0x400, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x9) getdents(r1, &(0x7f0000000040)=""/148, 0xab) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000200)={0x20, {{0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, [], 0xd}, 0xffff}}}, 0x88) 03:33:50 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x401054d5, &(0x7f0000000080)=r0) [ 159.701257] FAT-fs (loop7): Unrecognized mount option "check=stric" or missing value [ 159.731993] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:33:50 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="000100030000000066000000c9030000ec000000010000000000000000000000002000000020000000010000", 0x2c, 0x400}], 0x0, &(0x7f0000000180)) [ 159.858178] EXT4-fs (loop6): VFS: Can't find ext4 filesystem 03:33:51 executing program 0: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000140)) mknod(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000540)='./file0\x00', &(0x7f0000578fe8), &(0x7f0000000740)) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) execveat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400), &(0x7f00000004c0), 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x27e, 0x0) 03:33:51 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(0xffffffffffffffff, r1) 03:33:51 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,s\x00owexec,discard,check=stric']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) bpf$OBJ_GET_MAP(0x7, &(0x7f00000021c0)={&(0x7f0000002180)='./file0/fil..\x00'}, 0x10) creat(&(0x7f0000003900)='./file0/fil..\x00', 0x0) 03:33:51 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000280)={0x0, @broadcast, @local}, &(0x7f00000002c0)=0xc) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000200)) lseek(r2, 0x400, 0x0) linkat(r1, &(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00', 0x400) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000140)={0xa}, 0x1c) ioctl$int_in(r3, 0x5421, &(0x7f0000000380)=0x801) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x11a) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') sendfile(r3, r4, &(0x7f00000000c0), 0x10000) getdents(r2, &(0x7f0000000040)=""/148, 0xab) 03:33:51 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x100, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0xc0, &(0x7f0000000100)=[@in={0x2, 0x4e21, @broadcast=0xffffffff}, @in={0x2, 0x7, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x4e20, 0x8, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0xaae}, @in6={0xa, 0x4e20, 0xfff, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0xffffffff}, @in={0x2, 0x4e21, @rand_addr=0x35b3}, @in6={0xa, 0x4e21, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x9}, @in={0x2, 0x4e20, @rand_addr=0x1bf08}, @in6={0xa, 0x4e22, 0x3ff, @mcast2={0xff, 0x2, [], 0x1}, 0x9162}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000300)={r2, 0x49f8, 0x10}, &(0x7f0000000340)=0xc) fchdir(r0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000380)={r2, @in={{0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x2, 0x10001, 0x400, 0x6, 0xc4}, &(0x7f0000000440)=0x98) bind$llc(r1, &(0x7f00000004c0)={0x1a, 0x118, 0x1ff, 0x7ff, 0x9, 0x9f9b, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x10) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r4, &(0x7f0000000240)=""/109, 0x6d) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000480)={0x5, 0xfffffffffffffffb, 0x3}) rmdir(&(0x7f00000000c0)='./file0\x00') 03:33:51 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="000100030000000066000000c9030000ec000000010000000000000000000000002000000020000000010000000000006e5fbe", 0x33, 0x400}], 0x0, &(0x7f0000000180)) 03:33:51 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x2000, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f00000001c0), &(0x7f0000000200)=0x4) dup2(r1, r0) 03:33:51 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x2, &(0x7f0000000080)=r0) [ 160.354480] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 160.354653] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 160.368729] FAT-fs (loop7): Unrecognized mount option "uid=" or missing value 03:33:51 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) renameat2(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000140)='./file0\x00', 0x2) read(r2, &(0x7f0000000240)=""/109, 0x6d) pipe2$9p(&(0x7f0000000180), 0x80800) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)=""/4096) rmdir(&(0x7f00000000c0)='./file0\x00') 03:33:51 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="000100030000000066000000c9030000ec000000010000000000000000000000002000000020000000010000000000006e5fbe", 0x33, 0x400}], 0x0, &(0x7f0000000180)) [ 160.408849] FAT-fs (loop7): Unrecognized mount option "check=stric" or missing value 03:33:51 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/148, 0xab) 03:33:51 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,s\x00owexec,discard,check=stric']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) bpf$OBJ_GET_MAP(0x7, &(0x7f00000021c0)={&(0x7f0000002180)='./file0/fil..\x00'}, 0x10) creat(&(0x7f0000003900)='./file0/fil..\x00', 0x0) 03:33:51 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000100)={r3}) rmdir(&(0x7f00000000c0)='./file0\x00') 03:33:51 executing program 0: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000140)) mknod(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000540)='./file0\x00', &(0x7f0000578fe8), &(0x7f0000000740)) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) execveat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400), &(0x7f00000004c0), 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x27e, 0x0) [ 160.531478] EXT4-fs (loop6): VFS: Can't find ext4 filesystem 03:33:51 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) pread64(r0, &(0x7f0000000200)=""/4096, 0x1000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x4000, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000001200)) lseek(r2, 0x400, 0x0) getdents(r2, &(0x7f0000000040)=""/148, 0xab) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000100)={0x34, 0x0, 0x7, 0x5, 0xb, 0x6, 0x0, 0x8d, 0xffffffffffffffff}) getpeername$inet(r1, &(0x7f0000001280), &(0x7f00000012c0)=0x10) 03:33:51 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="000100030000000066000000c9030000ec000000010000000000000000000000002000000020000000010000000000006e5fbe", 0x33, 0x400}], 0x0, &(0x7f0000000180)) 03:33:51 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454d2, &(0x7f0000000080)=r0) [ 160.602950] FAT-fs (loop7): Unrecognized mount option "uid=" or missing value [ 160.655571] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 160.695594] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 160.703570] FAT-fs (loop7): Unrecognized mount option "check=stric" or missing value 03:33:52 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(0xffffffffffffffff, r1) 03:33:52 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@ipv4, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f0000000180)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000003c0)={{{@in, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast1}}, &(0x7f00000001c0)=0xe8) mount$9p_virtio(&(0x7f0000000080)='(.eth0,\x00', &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='9p\x00', 0x2000050, &(0x7f00000004c0)={'trans=virtio,', {[{@debug={'debug', 0x3d, 0x7a78}, 0x2c}, {@dfltuid={'dfltuid', 0x3d, r1}, 0x2c}, {@version_L='version=9p2000.L', 0x2c}, {@version_L='version=9p2000.L', 0x2c}, {@access_uid={'access', 0x3d, r2}, 0x2c}, {@afid={'afid', 0x3d, 0xfffffffffffffffa}, 0x2c}]}}) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r4, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:33:52 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xabaa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r0, 0x400, 0x0) getdents(r0, &(0x7f0000000040)=""/148, 0xab) 03:33:52 executing program 0: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000140)) mknod(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000540)='./file0\x00', &(0x7f0000578fe8), &(0x7f0000000740)) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) execveat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400), &(0x7f00000004c0), 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x27e, 0x0) 03:33:52 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="000100030000000066000000c9030000ec000000010000000000000000000000002000000020000000010000000000006e5fbe5a0000ff", 0x37, 0x400}], 0x0, &(0x7f0000000180)) 03:33:52 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,s\x00owexec,discard,check=strict']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) bpf$OBJ_GET_MAP(0x7, &(0x7f00000021c0)={&(0x7f0000002180)='./file0/fil..\x00'}, 0x10) creat(&(0x7f0000003900)='./file0/fil..\x00', 0x0) 03:33:52 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x2758}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000280)={r2, 0x0, 0x1, [0x2]}, &(0x7f00000002c0)=0xa) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000e53de8282c93730c8e4f77789bd75fea800000000001000024be2fec0a00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}, 0x1}, 0x0) dup2(r3, r0) 03:33:52 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x400454cc, &(0x7f0000000080)=r0) 03:33:52 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x202000, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f00000001c0)={0xfff, 0x7}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f00000002c0)) stat(&(0x7f0000000080)='./file1\x00', &(0x7f0000000100)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r3, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:33:52 executing program 5: r0 = accept$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000100)) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000140)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r1, 0x400, 0x0) getdents(r1, &(0x7f0000000040)=""/148, 0xab) [ 161.340300] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 161.352997] FAT-fs (loop7): Unrecognized mount option "uid=" or missing value 03:33:52 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) dup2(r0, r0) 03:33:52 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="000100030000000066000000c9030000ec000000010000000000000000000000002000000020000000010000000000006e5fbe5a0000ff", 0x37, 0x400}], 0x0, &(0x7f0000000180)) [ 161.415949] FAT-fs (loop7): bogus number of reserved sectors [ 161.421946] FAT-fs (loop7): Can't find a valid FAT filesystem 03:33:52 executing program 0: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000140)) mknod(&(0x7f0000000100)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000540)='./file0\x00', &(0x7f0000578fe8), &(0x7f0000000740)) perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) execveat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400), &(0x7f00000004c0), 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x27e, 0x0) 03:33:52 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0xc020660b, &(0x7f0000000080)=r0) 03:33:52 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,s\x00owexec,discard,check=strict']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) bpf$OBJ_GET_MAP(0x7, &(0x7f00000021c0)={&(0x7f0000002180)='./file0/fil..\x00'}, 0x10) creat(&(0x7f0000003900)='./file0/fil..\x00', 0x0) 03:33:52 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) getsockname$unix(r0, &(0x7f0000000100), &(0x7f0000000200)=0x6e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r1, 0x400, 0x0) getdents(r1, &(0x7f0000000040)=""/148, 0xab) [ 161.505234] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 161.546358] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 161.569732] FAT-fs (loop7): Unrecognized mount option "uid=" or missing value [ 161.614821] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 161.642602] FAT-fs (loop7): bogus number of reserved sectors [ 161.648636] FAT-fs (loop7): Can't find a valid FAT filesystem 03:33:53 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(0xffffffffffffffff, r1) 03:33:53 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200, 0x0) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000100)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r3, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:33:53 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="000100030000000066000000c9030000ec000000010000000000000000000000002000000020000000010000000000006e5fbe5a0000ff", 0x37, 0x400}], 0x0, &(0x7f0000000180)) 03:33:53 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x2, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r1, 0x400, 0x0) getdents(r1, &(0x7f0000000040)=""/148, 0xab) 03:33:53 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x840, 0x0) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f00000001c0)={{0x2, 0x4e21, @multicast2=0xe0000002}, {0x307, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x14}}, 0x7e, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}, 'bcsh0\x00'}) dup2(r1, r0) 03:33:53 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e1, &(0x7f0000000080)=r0) 03:33:53 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,s\x00owexec,discard,check=strict']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) bpf$OBJ_GET_MAP(0x7, &(0x7f00000021c0)={&(0x7f0000002180)='./file0/fil..\x00'}, 0x10) creat(&(0x7f0000003900)='./file0/fil..\x00', 0x0) 03:33:53 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) fcntl$getownex(r0, 0x10, &(0x7f0000000100)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r1, 0x400, 0x0) getdents(r1, &(0x7f0000000040)=""/148, 0xab) 03:33:53 executing program 0: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000140)) mknod(&(0x7f0000000100)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000540)='./file0\x00', &(0x7f0000578fe8), &(0x7f0000000740)) perf_event_open(&(0x7f0000940000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) execveat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400), &(0x7f00000004c0), 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x27e, 0x0) 03:33:53 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') [ 162.367119] FAT-fs (loop7): Unrecognized mount option "uid=" or missing value [ 162.374453] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 162.389385] EXT4-fs (loop6): VFS: Can't find ext4 filesystem 03:33:53 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="000100030000000066000000c9030000ec000000010000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53", 0x39, 0x400}], 0x0, &(0x7f0000000180)) 03:33:53 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x200002, 0x0) fchdir(r0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x10800, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x9, 0x30, 0x2, 0x1}, &(0x7f0000000140)=0x18) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000340)={r2, 0x5c5c, 0x3}, 0x8) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000001c0)={r2, 0x8, 0x2f}, &(0x7f00000002c0)=0x10) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) prctl$setfpexc(0xc, 0x100000) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000200)=0xc) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r3, &(0x7f0000000440)={0xa0, 0x19, 0x1, {0x4, {0x2, 0x1, 0x5}, 0x139, r5, r6, 0x401, 0x4, 0x1, 0x100, 0x3, 0x5, 0x4, 0x7fff, 0x2, 0xf601, 0x0, 0xfff, 0x2, 0x1, 0x100000001}}, 0xa0) read(r4, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') ioctl$KVM_GET_NR_MMU_PAGES(r3, 0xae45, 0x9) write$P9_RWALK(r3, &(0x7f0000000500)={0x16, 0x6f, 0x2, {0x1, [{0x1, 0x2, 0x5}]}}, 0x16) 03:33:53 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r0, 0x4040ae75, &(0x7f0000000140)={0x0, 0x0, 0x1e2, 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000100)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r1, 0x400, 0x0) getdents(r1, &(0x7f0000000040)=""/148, 0xab) [ 162.509796] FAT-fs (loop7): bogus number of reserved sectors [ 162.515698] FAT-fs (loop7): Can't find a valid FAT filesystem [ 162.546080] EXT4-fs (loop6): VFS: Can't find ext4 filesystem 03:33:53 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x5452, &(0x7f0000000080)=r0) 03:33:53 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,s\x00owexec,discard,check=strict']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) bpf$OBJ_GET_MAP(0x7, &(0x7f00000021c0)={&(0x7f0000002180)='./file0/fil..\x00'}, 0x10) creat(&(0x7f0000003900)='./file0/fil..\x00', 0x0) 03:33:53 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="000100030000000066000000c9030000ec000000010000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53", 0x39, 0x400}], 0x0, &(0x7f0000000180)) [ 162.592937] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 162.672166] FAT-fs (loop7): Unrecognized mount option "uid=" or missing value [ 162.687867] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 162.741404] FAT-fs (loop7): bogus number of reserved sectors [ 162.747353] FAT-fs (loop7): Can't find a valid FAT filesystem 03:33:54 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(r0, 0xffffffffffffffff) 03:33:54 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/mixer\x00', 0x80, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000340)={0x9, 0x1fe000, 0x3f, 'queue1\x00', 0x10001}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x400080, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000100)={0x46, "cb29beac59079f786422f59124bca8141140750a8542d642b3797563ac75bfe526eeff2ab88825069621c5352024c9a5273338b92d127249797bfae1ee3670f04f867862c5bf"}) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r4, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') r5 = getpgrp(0xffffffffffffffff) fcntl$setownex(r3, 0xf, &(0x7f0000000180)={0x2, r5}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}, &(0x7f00000002c0)=0x10) 03:33:54 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f00004a4000/0x3000)=nil, 0x3000, 0x1800000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x100, 0x0) lseek(r1, 0x400, 0x0) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000100)={0x100000000, 0x9, 0x100000000, 0x7bd, 0x5a, 0xffffffff}) getdents(r1, &(0x7f0000000040)=""/148, 0xab) 03:33:54 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="000100030000000066000000c9030000ec000000010000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53", 0x39, 0x400}], 0x0, &(0x7f0000000180)) 03:33:54 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) dup2(r1, r0) 03:33:54 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,s\x00owexec,discard,check=strict']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) bpf$OBJ_GET_MAP(0x7, &(0x7f00000021c0)={&(0x7f0000002180)='./file0/fil..\x00'}, 0x10) creat(&(0x7f0000003900)='./file0/fil..\x00', 0x0) 03:33:54 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x400454da, &(0x7f0000000080)=r0) 03:33:54 executing program 0: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000140)) mknod(&(0x7f0000000100)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000540)='./file0\x00', &(0x7f0000578fe8), &(0x7f0000000740)) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)) execveat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400), &(0x7f00000004c0), 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x27e, 0x0) [ 163.418766] FAT-fs (loop7): Unrecognized mount option "uid=" or missing value [ 163.428831] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 163.442913] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:33:54 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key(&(0x7f0000000140)='syzkaller\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000001c0)="f801e4f92a106732fb83b0ee13401d25d390daa5f32fba3badb162da41c555b5ace2e8ac19b277d7c9196d09c5be63a6fed519", 0x33, 0xfffffffffffffffe) keyctl$instantiate(0xc, r1, 0x0, 0x0, r2) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r4, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:33:54 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x100, 0x0) lseek(r0, 0x400, 0x0) getdents(r0, &(0x7f0000000040)=""/148, 0xab) 03:33:54 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="000100030000000066000000c9030000ec000000010000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a}], 0x0, &(0x7f0000000180)) [ 163.471203] FAT-fs (loop7): bogus number of reserved sectors [ 163.477131] FAT-fs (loop7): Can't find a valid FAT filesystem 03:33:54 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,s\x00owexec,discard,check=strict']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) bpf$OBJ_GET_MAP(0x7, &(0x7f00000021c0)={&(0x7f0000002180)='./file0/fil..\x00'}, 0x10) creat(&(0x7f0000003900)='./file0/fil..\x00', 0x0) 03:33:54 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r1, 0x400, 0x0) getdents(r0, &(0x7f0000000040)=""/148, 0x94) 03:33:54 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) symlink(&(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='./file0\x00') read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') [ 163.548933] EXT4-fs (loop6): VFS: Can't find ext4 filesystem 03:33:54 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="000100030000000066000000c9030000ec000000010000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a}], 0x0, &(0x7f0000000180)) [ 163.604509] FAT-fs (loop7): Unrecognized mount option "uid=" or missing value 03:33:54 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20003, 0x0) lseek(r0, 0x400, 0x0) getdents(r0, &(0x7f0000000040)=""/148, 0xab) [ 163.667719] FAT-fs (loop7): bogus number of reserved sectors [ 163.673760] FAT-fs (loop7): Can't find a valid FAT filesystem [ 163.706040] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 163.769788] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:33:55 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(r0, 0xffffffffffffffff) 03:33:55 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x210000, 0x0) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000100)={0x5, 0x1000, 0xf4c, 0x800, 0x1000}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) ioctl$KVM_NMI(r2, 0xae9a) read(r3, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:33:55 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,s\x00owexec,discard,check=strict']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)}], 0x0, &(0x7f0000000240)=ANY=[]) bpf$OBJ_GET_MAP(0x7, &(0x7f00000021c0)={&(0x7f0000002180)='./file0/fil..\x00'}, 0x10) creat(&(0x7f0000003900)='./file0/fil..\x00', 0x0) 03:33:55 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x400454d9, &(0x7f0000000080)=r0) 03:33:55 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x2ee, 0x40) recvfrom$inet(r0, &(0x7f00000002c0)=""/198, 0xc6, 0x10000, &(0x7f0000000140)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) write(r0, &(0x7f0000000200)="b66e81f296681f62525b43ea29ef88b6f6ab3c82c95974f51e8bb821224044d5f4b0cbbc434fd8a1692588d3031786bcb7abef181e1ba90268451066e999759aed2a4c269ad3ef550bc551025f5273fec8cc707b1c4b76732f72421efc39873c05649cb26faa04683f73eb4fa77d71cd50b1fc6093e6426c51bfd36d8bf50deb8ee5561acf54b8b21b2a6725961804", 0x8f) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r1, 0x401, 0x0) getdents(r2, &(0x7f0000000040)=""/148, 0xab) 03:33:55 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="000100030000000066000000c9030000ec000000010000000000000000000000002000000020000000010000000000006e5fbe5a0000ffff53ef", 0x3a}], 0x0, &(0x7f0000000180)) 03:33:55 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x40000, 0x0) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f00000001c0)=0x6, 0x4) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000410005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}, 0x1}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@remote}}, &(0x7f0000000340)=0xe8) sendmsg$nl_route(r1, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x24000088}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=@ipv4_delroute={0x9c, 0x19, 0x14, 0x70bd26, 0x25dfdbff, {0x2, 0x90, 0x20, 0x9, 0xfc, 0x3, 0xfe, 0x1, 0x1500}, [@RTA_MARK={0x8, 0x10, 0x81}, @RTA_MULTIPATH={0xc, 0x9, {0x1, 0xd77, 0x8, r3}}, @RTA_METRICS={0x64, 0x8, "6ac113243002aa5dd803b90d524bf72fdca8768af8c72cc9ddbbbd01eec9f26eff47cf58c7ce12102e583d484891623ae9eca1d4b252386b6126f2f483431034b956481f187bfec53d97d37915c6a320482d60f8640bacb3d9d5c5547444b564"}, @RTA_DST={0x8, 0x1, @remote={0xac, 0x14, 0x14, 0xbb}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8004}, 0x4001) dup2(r1, r0) 03:33:55 executing program 0: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000140)) mknod(&(0x7f0000000100)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000540)='./file0\x00', &(0x7f0000578fe8), &(0x7f0000000740)) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)) execveat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400), &(0x7f00000004c0), 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x27e, 0x0) [ 164.388482] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 164.407447] FAT-fs (loop7): Unrecognized mount option "uid=" or missing value 03:33:55 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) dup3(r0, r0, 0x80000) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:33:55 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f7072000e623def8955a2f043f76402925e419ff6000000000000072f65787085f7933803cafd", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) signalfd(r2, &(0x7f0000000140), 0x8) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x7, 0x70, 0x1, 0x2, 0x9, 0x9, 0x0, 0x200, 0x8002, 0x1, 0x3e, 0x10000, 0x3, 0x10000, 0x9d, 0xffffffff, 0x100000000, 0x0, 0x3, 0x9, 0x2, 0x6, 0x101, 0x8000, 0x7e, 0x9, 0x4, 0x3, 0x1000, 0x0, 0xffffffffffffffff, 0x8000, 0x6, 0x3, 0xfff, 0x26, 0x4, 0x9, 0x0, 0x400, 0x4, @perf_bp={&(0x7f0000000100), 0x2}, 0x10, 0x0, 0x81, 0x7, 0x7fff, 0x7, 0x1}) lseek(r2, 0x400, 0x0) getdents(r2, &(0x7f0000000040)=""/148, 0xffffffffffffff8f) sync_file_range(r1, 0x31, 0x1f, 0x1) fstatfs(r0, &(0x7f00000002c0)=""/74) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000280)={0x3, 0xc54, 0x5, 0x2, 0x2, 0x9}) [ 164.457665] FAT-fs (loop7): bogus number of reserved sectors [ 164.463586] FAT-fs (loop7): Can't find a valid FAT filesystem 03:33:55 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x400454cb, &(0x7f0000000080)=r0) 03:33:55 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000e40)=ANY=[@ANYBLOB="28dfd9bb39e602f0ab0000000000419cf3ffffff", @ANYPTR=&(0x7f0000000d40)=ANY=[@ANYPTR64, @ANYRES64=r0, @ANYPTR64, @ANYBLOB="ff81e21748362cab31f0d1ceea33cdf0f75d5d7ddb227e3f7621ae2e203e70a122f508c9d5918f87a46023cbe0bb96452b929edd53f7f66ca1d0f20f7b0b92caf3f973e452e8f3b2d01fe54cf5e7e291f1b861d7944e4cf70b5b6ece74ecdefe580ff2005daf0eb3b737faea2cc7b40f44ecea6accb40cb24a586c50529af5861e44ec6d4f67c5c66ebc616e74ef39ef1ef80a8f8851e2244567a255", @ANYPTR=&(0x7f0000000d00)=ANY=[@ANYPTR64], @ANYBLOB="79769915bb7472ea72d6ec2cde8ac03c0a123295f3b1f395348b9d99ac306e512e6e"], @ANYBLOB="030000000000000008001b0000000000"], 0x3}, 0x1}, 0x0) r2 = dup2(r1, r0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'erspan0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000004980)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, &(0x7f0000004a80)=0xe8) getpeername$packet(r2, &(0x7f0000004b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000004b40)=0x14) accept$packet(r2, &(0x7f0000004b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000004bc0)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000004c00)={'ipddp0\x00', 0x0}) accept4$packet(r2, &(0x7f0000004c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000004c80)=0x14, 0x800) accept$packet(r2, &(0x7f0000004cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000180)=0x14) accept$packet(r2, &(0x7f0000004d40)={0x0, 0x0, 0x0}, &(0x7f0000004d80)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000c00)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@local}}, &(0x7f0000004f00)=0xfffffffffffffdb4) accept4$packet(r2, &(0x7f0000005400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000005440)=0x14, 0x80000) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000005a40)={@loopback, 0x0}, &(0x7f0000005a80)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000005ac0)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000005bc0)=0xe8) getsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000008100)={@broadcast, @loopback, 0x0}, &(0x7f0000008140)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000008180)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000008280)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000082c0)={{{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f00000083c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000084c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@broadcast}}, &(0x7f00000085c0)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000086c0)={'eql\x00', 0x0}) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f00000089c0)={@broadcast, @broadcast, 0x0}, &(0x7f0000008a00)=0xc) getpeername$packet(0xffffffffffffffff, &(0x7f0000008b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000008b40)=0x14) accept$packet(r2, &(0x7f0000008b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000008bc0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000008c00)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@rand_addr}}, &(0x7f0000008d00)=0xe8) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000008d40)={@empty, @dev, 0x0}, &(0x7f0000008d80)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000008dc0)={{{@in6=@ipv4, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6=@local}}, &(0x7f0000008ec0)=0xe8) getsockname$packet(r2, &(0x7f0000008fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000009000)=0x14) getsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f0000009180)={@dev, 0x0}, &(0x7f00000091c0)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000009c00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000040}, 0xc, &(0x7f0000009bc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="94090000", @ANYRES16=r3, @ANYBLOB="050029bd7000fedbdf250300000008000100", @ANYRES32=r4, @ANYBLOB="4400020040000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000001000040062726f61646361737400000008000100", @ANYRES32=r5, @ANYBLOB="34010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000100010008000600", @ANYRES32=r6, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000700000008000600", @ANYRES32=r7, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400230b000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000600000008000600", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="0401020040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000500000008000600", @ANYRES32=r10, @ANYBLOB="44000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000001400040004000766e9000000050009070100000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000900000008000600", @ANYRES32=r11, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="e801020038000100240001006e6f746966795f70656572735f636f756ee6b6fda84cbf68c4000000940000000800030003009e345a2168d5d6000008000496a8dcdc35aa4be100240001006c625f706f72745f7374617473000000fd000000000000400000000000000000080003000b00000008000400ffffffff08000600", @ANYRES32=r14, @ANYBLOB="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", @ANYRES32=r15, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000100000008000100", @ANYRES32=r16, @ANYBLOB="2002020038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400a853000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000000000008000600", @ANYRES32=r17, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400020000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r18, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400d004000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004006163746976656261636b7570000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r19, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000008000300030000000800040007000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000008000008000600", @ANYRES32=r20, @ANYBLOB="08000100", @ANYRES32=r21, @ANYBLOB="7800020074000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b00000044000400f7ff00030000000060b300030800000003000705ff010000050005000180000000080800042e0000080000000600000000040005f30000001a0004020500000008000100", @ANYRES32=r22, @ANYBLOB="c400020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b00000008000400010000000800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000500000008000600", @ANYRES32=r23, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000200000008010600", @ANYRES32=r24, @ANYBLOB="08000100", @ANYRES32=r25, @ANYBLOB="f4000200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000500000008000600", @ANYRES32=r26, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000400000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000600000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040001000000080007000000000008000100", @ANYRES32=r27, @ANYBLOB="8400020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040001000000080007000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000600000008000600", @ANYRES32=r28], 0x994}, 0x1, 0x0, 0x0, 0x80}, 0x44050) 03:33:55 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 03:33:55 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,s\x00owexec,discard,check=strict']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)}], 0x0, &(0x7f0000000240)=ANY=[]) bpf$OBJ_GET_MAP(0x7, &(0x7f00000021c0)={&(0x7f0000002180)='./file0/fil..\x00'}, 0x10) creat(&(0x7f0000003900)='./file0/fil..\x00', 0x0) 03:33:55 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = socket$pppoe(0x18, 0x1, 0x0) sendto(r1, &(0x7f0000000100)="ff59b908fd544fa87cb4b0f670719834a26749f531236220387bb72d97d0dfc4d06cf35618f8e053bdf26d7f50e13f2110db972be1b77f2eea98ab4d6773f5f0cff45c25d25c4cf2ef6b52b7523be4082ee1a20abe22b4efaee4b6898ff6a725808b6909f1a946575c2bcef6d4366aa20356b855f545c4b5ce825c0e1e4ab66c3d7537852f604e9bfa", 0x89, 0x11, 0x0, 0x0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r3, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:33:55 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) lseek(r1, 0x400, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x9, &(0x7f0000000080)=[{0x3f, 0x0, 0x1, 0xffffffff}, {0x1, 0xffffffff, 0x3, 0x38d}, {0x100000000, 0x100, 0x1}, {0x1, 0x3, 0x8001, 0x80000001}, {0x5, 0x400, 0x34b, 0x24000000}, {0x9, 0x0, 0x4, 0x5}, {0x9, 0x4, 0x7ff, 0x8}, {0x100000001, 0x0, 0x8000, 0x70}, {0xa000, 0x4d42, 0x400, 0x401}]}, 0x10) write$P9_RLERROR(r0, &(0x7f0000000040)={0xb, 0x7, 0x1, {0x2, '%)'}}, 0xb) getdents(r0, &(0x7f00000002c0)=""/148, 0xffffffffffffffec) [ 164.610347] FAT-fs (loop7): Unrecognized mount option "uid=" or missing value [ 164.649101] FAT-fs (loop7): bogus number of reserved sectors [ 164.655556] FAT-fs (loop7): Can't find a valid FAT filesystem 03:33:56 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f0000000100)='./control/file0\x00') dup2(r0, 0xffffffffffffffff) 03:33:56 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x400454c8, &(0x7f0000000080)=r0) 03:33:56 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) socketpair(0x5, 0x80000, 0x4, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$rds(r1, &(0x7f00000008c0)={&(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/250, 0xfa}, {&(0x7f0000000140)=""/30, 0x1e}], 0x2, &(0x7f0000000680)=[@fadd={0x58, 0x114, 0x6, {{0x20, 0xfffffffffffff001}, &(0x7f00000001c0)=0x3, &(0x7f00000003c0)=0x7, 0x7f, 0x6, 0x7, 0x6ad7, 0x4a, 0x7}}, @rdma_dest={0x18, 0x114, 0x2, {0xd1c, 0x9}}, @mask_cswp={0x58, 0x114, 0x9, {{0x4c, 0x101}, &(0x7f0000000400)=0x9c, &(0x7f0000000440)=0xffffffffffffff6b, 0x1, 0x703c, 0x9, 0x0, 0x0, 0x7fffffff}}, @fadd={0x58, 0x114, 0x6, {{0x8, 0x10000}, &(0x7f0000000480)=0x3ff, &(0x7f00000004c0)=0x10001, 0x1, 0x4, 0x1ff, 0x1, 0x2, 0x1}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x1}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000500)=""/30, 0x1e}, &(0x7f0000000540), 0x8}}, @cswp={0x58, 0x114, 0x7, {{0x3, 0x2}, &(0x7f0000000580)=0x1cea04cb, &(0x7f00000005c0)=0x8, 0x2, 0x0, 0x7fff, 0x80000000, 0x20, 0x1c000}}, @cswp={0x58, 0x114, 0x7, {{0x6, 0x1}, &(0x7f0000000600)=0x1, &(0x7f0000000640)=0x3, 0x101, 0x30, 0x400, 0x7, 0x4, 0x1b}}], 0x218, 0x1}, 0x800) fchdir(r0) mkdir(&(0x7f0000000980)='./file0\x00', 0x0) socket$unix(0x1, 0x2, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r3, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f0000000900)='./file0\x00') 03:33:56 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = mq_open(&(0x7f0000000100)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x0, 0x9, &(0x7f0000000140)={0x2, 0x1ff, 0x2, 0x3f, 0x0, 0xf88f, 0xc2, 0x6}) write$binfmt_script(r1, &(0x7f0000000200)={'#! ', './file0', [{0x20, 'em1'}, {0x20, 'trusted/md5sum[,'}, {0x20, 'cgroup'}, {0x20, "2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00"}, {0x20, "2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00"}, {0x20, '-trustednodev%{nodevwlan0!'}, {0x20, 'selinuxcpusetem1nodev+@lo'}, {0x20, '&bdev'}], 0xa, "22f616e998020ea08abad5c889f8b3d1e9cf29188c02fa"}, 0xcd) lseek(r0, 0x400, 0x0) getdents(r0, &(0x7f0000000040)=""/148, 0xab) 03:33:56 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,s\x00owexec,discard,check=strict']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)}], 0x0, &(0x7f0000000240)=ANY=[]) bpf$OBJ_GET_MAP(0x7, &(0x7f00000021c0)={&(0x7f0000002180)='./file0/fil..\x00'}, 0x10) creat(&(0x7f0000003900)='./file0/fil..\x00', 0x0) 03:33:56 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) fsync(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) dup2(r1, r0) 03:33:56 executing program 0: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000140)) mknod(&(0x7f0000000100)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000540)='./file0\x00', &(0x7f0000578fe8), &(0x7f0000000740)) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)) execveat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400), &(0x7f00000004c0), 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x27e, 0x0) 03:33:56 executing program 6: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgsnd(0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0) [ 165.430500] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 165.444815] FAT-fs (loop7): Unrecognized mount option "uid=" or missing value 03:33:56 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r0 = syz_open_dev$amidi(&(0x7f00000003c0)='/dev/amidi#\x00', 0x3, 0x2) r1 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file0/file0\x00', 0x40001, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) recvmsg(r2, &(0x7f00000001c0)={&(0x7f0000000100)=@rc, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)=""/10, 0xa}], 0x1, &(0x7f00000002c0)=""/127, 0x7f, 0xd4ef}, 0x2003) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000340), 0x4) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000400)=0x0) write$cgroup_pid(r0, &(0x7f0000000480)=r4, 0x12) read(r3, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') setsockopt$inet6_tcp_int(r2, 0x6, 0x1f, &(0x7f0000000380)=0x800, 0x4) 03:33:56 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0xff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000f6bff4)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000efd000)=0x62) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000fddfff)) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x3) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) utimes(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={{0x77359400}, {0x0, 0x7530}}) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000100)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}) getsockname(r3, &(0x7f0000000340)=@can, &(0x7f0000000140)=0x80) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x200800, 0x0) lseek(r4, 0x400, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000666000/0x2000)=nil, 0x2000}, &(0x7f0000000240)=0xffffffffffffffdb) getdents(r3, &(0x7f0000000040)=""/148, 0xffffffffffffffc9) 03:33:56 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x4, &(0x7f00000001c0)=0x0) io_getevents(r1, 0x2, 0x192, &(0x7f0000000040), &(0x7f0000000000)={0x77359400}) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x700000000000}]) [ 165.489204] FAT-fs (loop7): bogus number of reserved sectors [ 165.495230] FAT-fs (loop7): Can't find a valid FAT filesystem 03:33:56 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) syz_mount_image$gfs2(&(0x7f0000000180)='gfs2\x00', &(0x7f00000001c0)='./file0\x00', 0x3, 0x1, &(0x7f00000004c0)=[{&(0x7f00000003c0)="6be15542af75ceca32910f1e5568b8650e1f2ca519584acde2a00cc620a5d5c4297f97373c1cc18779918e1e759c1c7b465b75b89738880ff61cccbab43936961b7eb2d711e6bcc22273bea16a4169aa56c17568f526284fc96b314b80a89f1ab76a1d1f61578fb95463f9828743295489288a04d43d0544ecde3549c078f2cb703db582d54abc95f9b5bdc28480950b580220772829c347e53974137e327c9d8c6fea9d948c3ddc7ca08ba6cfa98ff5c5259f1130584b7fb16436a014731aa433f3ac680b4342e286bab4a9ac43096f2eefa04d37b90985bf314bf5b65cccc9b03df96811d5d41a64f08d9386def27d737c", 0xf2, 0x8}], 0x210000, &(0x7f0000000500)={[{@nobarrier='nobarrier', 0x2c}, {@norecovery='norecovery', 0x2c}, {@discard='discard', 0x2c}, {@noloccookie='noloccookie', 0x2c}]}) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='vfat\x00', 0x304800, &(0x7f00000002c0)="5c32a95d3235fa3c1b938653baddef5d12a39eca22485101d666ea9602c6a1029c0cc30fed7683f97ce8c594988f1cd3d4ef8f398aeb64c3ce98c69d65ebb9125a9a48640322dc7810a59691d010d8df211b4e866c5001c01cb85050b4e9a1568c33d28a515b82cd4b8da260fd9496f87b5ac4896775cf3fd94a887f398b81109e9a6af0e10b38e68b5908ff014d2301fe2f8efae00ca78ee9576a328c7abc84dbfeddc33441d6eb0b9fb97f85086fcd12aca0c8867e727c532d732063a3b053d96a0351546d020b6109715139011567016f184b52e40a0f0935d48d2460c670d254a54e7cb65a") r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:33:56 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,s\x00owexec,discard,check=strict']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174", 0xb}], 0x0, &(0x7f0000000240)=ANY=[]) bpf$OBJ_GET_MAP(0x7, &(0x7f00000021c0)={&(0x7f0000002180)='./file0/fil..\x00'}, 0x10) creat(&(0x7f0000003900)='./file0/fil..\x00', 0x0) 03:33:56 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000140)={0xffffffff, 0x10f000}) open_by_handle_at(r0, &(0x7f0000000100)={0x8, 0x5}, 0x8000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r1, 0x400, 0x0) getdents(r1, &(0x7f0000000040)=""/148, 0xab) 03:33:56 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x801054db, &(0x7f0000000080)=r0) [ 165.623666] gfs2: not a GFS2 filesystem 03:33:56 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20080008}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r2, 0x311, 0x70bd28, 0x25dfdbfd, {0x4}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x37c}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10000}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) lseek(r1, 0x400, 0x0) getdents(r1, &(0x7f0000000040)=""/148, 0xab) [ 165.663498] gfs2: not a GFS2 filesystem [ 165.679522] FAT-fs (loop7): Unrecognized mount option "uid=" or missing value [ 165.703297] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 165.733928] FAT-fs (loop7): bogus number of reserved sectors [ 165.739872] FAT-fs (loop7): Can't find a valid FAT filesystem 03:33:57 executing program 0: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000140)) mknod(&(0x7f0000000100)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000540)='./file0\x00', &(0x7f0000578fe8), &(0x7f0000000740)) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) execveat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400), &(0x7f00000004c0), 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 03:33:57 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,s\x00owexec,discard,check=strict']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174", 0xb}], 0x0, &(0x7f0000000240)=ANY=[]) bpf$OBJ_GET_MAP(0x7, &(0x7f00000021c0)={&(0x7f0000002180)='./file0/fil..\x00'}, 0x10) creat(&(0x7f0000003900)='./file0/fil..\x00', 0x0) 03:33:57 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0xc0045878, &(0x7f0000000080)=r0) 03:33:57 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000180)=""/11) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') sendmsg$nl_netfilter(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40010000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x2ec, 0x13, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {0x5, 0x0, 0x9}, [@generic="965637577966f186987768d1b63f2901d854e80c986bd0baad5947bfcef4c24037c02ddc835af9279d6646bdc332a10b25fa0fbf6933571f8541d3881a903e202a51a5d6d91107fbccaccdb9f5db9004d6459fa91fab253240a827474e2ed2", @nested={0x270, 0x62, [@typed={0x14, 0x7f, @ipv6=@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, @generic="8fc5484616da89b386e57e513cb59122e1bea84693f040ff04bf9ca70f212979eb1d53f8ae282ccf4758a3f0b013562e9ce726d1b03e468c13d403a95fd19a3b14c84ae8a508a0afd57741599ab7117e564e32691f6d57fc6b2bbcfd8922ab0e4864bf55ca75ddf7dd765edc5379d70581c69d609a24024ab829279f52f4d7826df9ee8f987f815e3a7666c28f53ddfe8b092f123adbc79965f0f6cb9fabf0499ac321207f4388", @generic="cbfcdfd902c2ff25dc14efe6501878aa65fa06edbd0c1c81ecb139426216d146e3c4e63dfbdef00461ebb3d9c1892ee6d02ed4b680e60350115943dbe72b5c6b411ee4d3aaea90f2a5ef475e5d31598a4ec9c196bd3f8f11fa8b513ea252052d02bc24859320d1e34e70d01aaec6b8cad15d8685750a15ac2fe6fc16c58bbb9ab85264d2a6aa0ff7765618255056938e3edc64c49189aa397495bc4dd3d3c9f050a33406a043ca0a8d7087b738f8fb5429a68f3bcb8499fa81251688799b3e4eb176b133cfee17b892aef518ac970062358f27492f34d1", @generic="5a0236d71ed38e182de67ab575ea6d6ab58cd01da2b74de99237be20913ba91860c879e0aac3b092f83b7701db7c6c335ac7cd24be8ed9f066e24e6756ef6ec815233778d0feb007ec7e4baec4d68d47d2d10c0528ee87baec8a315137e1ecc0810a10190294d756c64b1e519c427a123298c3f4c4c73cfbcb3e1b6ab885b4e627088c39b5b384756628dd7b02c2b305b14b4e61bc3885214165591c3b61226f9b22bf85a0cad2cc2933522ffff03d33bc42b56eaa67c0ea920dfaedf93eca6cbe24568bdaf11f8819fcb488cccb6d93d6b7c34781211b54b010"]}, @generic="1350a34a106bbede"]}, 0x2ec}, 0x1, 0x0, 0x0, 0x40841}, 0x40) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x1) 03:33:57 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x1, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = semget$private(0x0, 0x0, 0x80) r4 = geteuid() r5 = getgid() getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000300)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000000400)=0xe8) getresgid(&(0x7f0000000440)=0x0, &(0x7f0000000480), &(0x7f00000004c0)) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000500)={{0x8000, r4, r5, r6, r7, 0xb0, 0x4}, 0xffff, 0x0, 0x9}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0xfffffffffffffffd, 0x0) lseek(r8, 0x400, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000140)="5253c7330c35b44f7a65c457b6d05434", 0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={r9, 0x5a, 0xfffffffffffffffa}, 0xc) getdents(r8, &(0x7f0000000040)=""/148, 0xab) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000580)={0x2, 0x1f, 0x1ff, 0xa544, 0x8}) syz_mount_image$hfs(&(0x7f00000005c0)='hfs\x00', &(0x7f0000000600)='./file0\x00', 0xfffffffffffffff7, 0x2, &(0x7f0000000740)=[{&(0x7f0000000640)="73cce2157e5639a39c710d537f54774530342a37c216901218f17a32bf407bddf7fae9ec944dd87886dfbbadc7d3deb5e3c774439e987adc5a028101c9bcd6a188bb5350700b2f84d03f841b111f2c86fa243a995b976bfecf3470810b2378276c51941aadeacc1b47c8a5f832790c5ec29c21831faf7527c979b214b3ca951efa1e5dfa3416e7210b0d8185d934b1cb8275df6e9b0045cefd07a636520732e4c17dd98a7b0af829640c8fc4c2fae11a0166", 0xb2, 0x3}, {&(0x7f0000000700)="9d851e11e697551998a18d33c7f8f527f7c9e727d72a7a9b38b6f633ef4a8854405bf2a23bcb71ac5c11ec33a5bcd94cf693d4026db539", 0x37, 0x40}], 0x20c0, &(0x7f0000000780)={[{@type={'type', 0x3d, "a6037323"}, 0x2c}, {@quiet='quiet', 0x2c}]}) 03:33:57 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000200)={0x80000001, 0x40, 0x57, 0x5, 0x9}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28efc50010005fba000400000000000000000000571abc070600000000000025a66c", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}, 0x1}, 0x0) r2 = dup2(r1, r0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000240)=""/41) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x2, 0x76, 0x401, 0x0, 0x3, 0x281, 0xa21, 0x9, 0xfffffffffffffffd, 0x5, 0x80000, 0x33, 0x0, 0x5, 0x3, 0x8001, 0x4, 0x0, 0x100000000}) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000180)={0x57, 0x42b, 0xfff, {0x3502dcd6, 0x40}, {0x4d, 0xb725}, @rumble={0x10000, 0xd3}}) 03:33:57 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000340)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x0, 0x0) [ 166.442486] FAT-fs (loop7): Unrecognized mount option "uid=" or missing value 03:33:57 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000080)) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:33:57 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x5451, &(0x7f0000000080)=r0) 03:33:57 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) munmap(&(0x7f00004b0000/0x3000)=nil, 0x3000) lseek(r0, 0x400, 0x0) getdents(r0, &(0x7f0000000040)=""/148, 0xab) [ 166.486352] FAT-fs (loop7): bogus number of reserved sectors [ 166.492264] FAT-fs (loop7): Can't find a valid FAT filesystem 03:33:57 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,s\x00owexec,discard,check=strict']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174", 0xb}], 0x0, &(0x7f0000000240)=ANY=[]) bpf$OBJ_GET_MAP(0x7, &(0x7f00000021c0)={&(0x7f0000002180)='./file0/fil..\x00'}, 0x10) creat(&(0x7f0000003900)='./file0/fil..\x00', 0x0) 03:33:57 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000011000/0x4000)=nil, 0x4000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000127c0)={'team0\x00'}) ioctl$BLKIOOPT(r2, 0x4008af23, &(0x7f0000000080)) close(r0) 03:33:57 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000010005fba00000000dfffffffffffffff", @ANYRES32=0x0, @ANYRESOCT=r1], 0x3}, 0x1}, 0x0) r2 = dup2(r1, r0) accept4(r1, 0x0, &(0x7f00000001c0), 0x80000) write$P9_RMKNOD(r2, &(0x7f0000000040)={0x14, 0x13, 0x2, {0xaa, 0x0, 0x1}}, 0x55) 03:33:57 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x10100, 0x0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r3, &(0x7f0000000240)=""/109, 0x6d) ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) rmdir(&(0x7f00000000c0)='./file0\x00') 03:33:57 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r1, 0x400, 0x0) fsetxattr(r0, &(0x7f0000000100)=@known='com.apple.system.Security\x00', &(0x7f0000000140)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x29, 0x2) getdents(r1, &(0x7f0000000040)=""/148, 0xab) 03:33:57 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x400454ce, &(0x7f0000000080)=r0) [ 166.638170] FAT-fs (loop7): Unrecognized mount option "uid=" or missing value [ 166.687641] FAT-fs (loop7): bogus number of reserved sectors [ 166.693566] FAT-fs (loop7): Can't find a valid FAT filesystem 03:33:58 executing program 0: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000140)) mknod(&(0x7f0000000100)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000540)='./file0\x00', &(0x7f0000578fe8), &(0x7f0000000740)) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) execveat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400), &(0x7f00000004c0), 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 03:33:58 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @local}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={@local={0xfe, 0x80, [], 0xaa}, @mcast2={0xff, 0x2, [], 0x1}, @mcast1={0xff, 0x1, [], 0x1}, 0xfffffffffffeffff, 0x7, 0x48, 0x500, 0x4, 0x2000204, r2}) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r4, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:33:58 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket(0x13, 0x5, 0x9) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000040), 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) dup2(r2, r0) 03:33:58 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x21) write$FUSE_POLL(r0, &(0x7f0000000200)={0x18, 0xffffffffffffffda, 0x7, {0x7ff}}, 0x18) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000057000/0x4000)=nil, 0x4000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r1, 0x400, 0x0) getdents(r1, &(0x7f0000000040)=""/148, 0xab) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x4000, 0x0) 03:33:58 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x400454d0, &(0x7f0000000080)=r0) 03:33:58 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,s\x00owexec,discard,check=strict']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, &(0x7f0000000240)=ANY=[]) bpf$OBJ_GET_MAP(0x7, &(0x7f00000021c0)={&(0x7f0000002180)='./file0/fil..\x00'}, 0x10) creat(&(0x7f0000003900)='./file0/fil..\x00', 0x0) 03:33:58 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000340)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x0, 0x0) 03:33:58 executing program 6: getsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000380)=""/218, &(0x7f0000000080)=0x15f) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x7f, 0x7, 0x9, 0x1}, 0x2c) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' '], 0x1}, 0x1}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000340)={r0, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) 03:33:58 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') ioctl$KDSKBLED(r1, 0x4b65, 0x9) 03:33:58 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x5421, &(0x7f0000000080)=r0) 03:33:58 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000100)) lseek(r1, 0x400, 0x0) getdents(r1, &(0x7f0000000040)=""/148, 0xab) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x10000, 0x0, 0x80000000, 0x1000000000, 0x2, 0x1, 0x9, 0xca9, 0x5, 0x1, 0x7, 0x7}) [ 167.486415] FAT-fs (loop7): Unrecognized mount option "uid=" or missing value [ 167.524280] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:33:58 executing program 6: r0 = userfaultfd(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000f6bfe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000072f000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00001dc000/0x1000)=nil, 0x709000}, 0x8000}) [ 167.572680] FAT-fs (loop7): invalid media value (0x00) [ 167.578192] FAT-fs (loop7): Can't find a valid FAT filesystem 03:33:58 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:33:58 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r2 = semget$private(0x0, 0x0, 0x40) semtimedop(r2, &(0x7f00000002c0)=[{0x2, 0x60, 0x800}, {0x1, 0x7, 0x800}], 0x2, &(0x7f0000000300)={0x77359400}) lseek(r1, 0x400, 0x0) getdents(r1, &(0x7f0000000040)=""/148, 0xab) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000280)=0x7c) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0xfffffffffffffffa, 0x6, 0x7, 0x5, 0x0, 0x3, 0x1a, 0xa, 0x2, 0xfffffffffffff79f, 0x401, 0x9, 0x20, 0x800, 0x0, 0x2, 0x9, 0x0, 0xf224, 0x5, 0x622e04c4, 0x7f, 0x1, 0x9, 0x1ff, 0xffff, 0x4, 0x0, 0x5, 0x1, 0x100000001, 0xb5ad, 0xbd, 0x200, 0x1, 0x81, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x2f012, 0x6, 0x7fffffff, 0x3, 0xffff, 0x4, 0x20}, r3, 0xa, 0xffffffffffffff9c, 0x8) 03:33:58 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,s\x00owexec,discard,check=strict']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, &(0x7f0000000240)=ANY=[]) bpf$OBJ_GET_MAP(0x7, &(0x7f00000021c0)={&(0x7f0000002180)='./file0/fil..\x00'}, 0x10) creat(&(0x7f0000003900)='./file0/fil..\x00', 0x0) 03:33:58 executing program 6: r0 = epoll_create1(0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) memfd_create(&(0x7f0000a98000)='y#\x00W', 0x0) write(r0, &(0x7f000014d000), 0x0) [ 167.709779] FAT-fs (loop7): Unrecognized mount option "uid=" or missing value [ 167.751331] FAT-fs (loop7): invalid media value (0x00) [ 167.756832] FAT-fs (loop7): Can't find a valid FAT filesystem [ 167.822703] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:33:59 executing program 0: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000140)) mknod(&(0x7f0000000100)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000540)='./file0\x00', &(0x7f0000578fe8), &(0x7f0000000740)) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) execveat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400), &(0x7f00000004c0), 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 03:33:59 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') accept4(r1, &(0x7f0000000100)=@rc, &(0x7f0000000080)=0x80, 0x80000) 03:33:59 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454d3, &(0x7f0000000080)=r0) 03:33:59 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r0, 0x400, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x3477, 0x80000) getdents(r0, &(0x7f0000000040)=""/148, 0xab) 03:33:59 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) syz_emit_ethernet(0x2c, &(0x7f0000000000)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipx={0x8137, {0xffff, 0x1e, 0x0, 0x0, {@random, @random="4d367e3e73c0"}, {@random, @current}}}}}, &(0x7f0000000080)) 03:33:59 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,s\x00owexec,discard,check=strict']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, &(0x7f0000000240)=ANY=[]) bpf$OBJ_GET_MAP(0x7, &(0x7f00000021c0)={&(0x7f0000002180)='./file0/fil..\x00'}, 0x10) creat(&(0x7f0000003900)='./file0/fil..\x00', 0x0) 03:33:59 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="a6e0ff030000681408001b00000000841e48bbdd50c900"], 0x28}, 0x1}, 0x0) dup2(r1, r1) 03:33:59 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x8, &(0x7f0000003980)=ANY=[@ANYBLOB="7a0af8ff00000000bfa100000000000007010000f8ffffffb702000008004000bf130000000000008500000040000000b7000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xf}, 0x48) 03:33:59 executing program 3: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0046bbc04fef7001c020b49ff00000000800f08000800030001000000", 0x24) 03:33:59 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) recvfrom$packet(r1, &(0x7f0000000100)=""/128, 0x80, 0x2000, 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:33:59 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x8924, &(0x7f0000000080)=r0) 03:33:59 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') readv(r0, &(0x7f0000000100)=[{&(0x7f0000d1d000)=""/203, 0xcb}], 0x1) [ 168.543883] FAT-fs (loop7): Unrecognized mount option "uid=" or missing value 03:33:59 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) ioctl$RTC_PIE_OFF(r1, 0x7006) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) syncfs(r2) lseek(r2, 0x400, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000100)={0x7, 0x70, 0x400, 0x8000, 0x81, 0x80, 0x0, 0x8, 0x10, 0x8, 0x3, 0x6, 0xfffffffffffeffff, 0x1f, 0x3, 0x6, 0x884, 0xffffffffffffffff, 0x40, 0x3, 0x5, 0xfffffffffffffc5f, 0x0, 0x6, 0x8, 0x2, 0x7, 0x5b1, 0x150, 0xa822, 0x3, 0xad35, 0x7, 0x40, 0x3, 0x1f, 0x276, 0x8, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0xffffffff80000000}, 0x22, 0xf3c, 0x6, 0x7, 0x5db, 0x1, 0xcf6}) getdents(r2, &(0x7f0000000040)=""/148, 0xab) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000200)={0x2, 'gretap0\x00', 0x2}, 0x18) 03:33:59 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040), &(0x7f00000001c0)=0x4) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) dup2(r1, r0) [ 168.617550] FAT-fs (loop7): invalid media value (0x00) [ 168.622941] FAT-fs (loop7): Can't find a valid FAT filesystem 03:33:59 executing program 3: mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x103001, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x0, 0x0) 03:33:59 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000140)="af1529bae11fd73b449ac657bed17809c87483dd3fd943317f12578321bdf9d72389afd72cead12b725972293d2bdbe14318132d59943e85bcb281c1c96627787b832d81b7aa35072105908ed775ec755839fcc5b0f3", 0x56, 0x2}, {&(0x7f00000001c0)="5acaab4e37fabd8aa0236d29500ef0eabb51ff540232bddd726c84926178f849c74f56cebf0dd0ac92769972b919a6", 0x2f, 0x7}], 0x810020, &(0x7f0000000300)={[{@clear_cache='clear_cache', 0x2c}, {@ref_verify='ref_verify', 0x2c}, {@nobarrier='nobarrier', 0x2c}, {@check_int_print_mask={'check_int_print_mask', 0x3d, 0x7336}, 0x2c}, {@nospace_cache='nospace_cache', 0x2c}]}) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') [ 168.704638] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 168.857784] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:34:00 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2900e30000009a7e000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="030000000800000008001b0000000000"], 0x28}, 0x1}, 0x0) 03:34:00 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x400454d1, &(0x7f0000000080)=r0) 03:34:00 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,s\x00owexec,discard,check=strict']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, &(0x7f0000000240)=ANY=[]) bpf$OBJ_GET_MAP(0x7, &(0x7f00000021c0)={&(0x7f0000002180)='./file0/fil..\x00'}, 0x10) creat(&(0x7f0000003900)='./file0/fil..\x00', 0x0) 03:34:00 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newaddr={0x20, 0x14, 0x115, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2, @multicast2=0xe0000002}]}, 0x20}, 0x1}, 0x0) 03:34:00 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r1, 0x400, 0x0) getdents(r0, &(0x7f00000002c0)=""/148, 0xffffffffffffff1c) 03:34:00 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x200c00, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x440, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB="00f8ffff000000000a004e210100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a004e2401000080ff01000000000000000000000000000104000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e249c6f0000fe8000000000000000000000000000bb7f0000000000000000000000000000000000ae796b356a2cb1a023e5c2801a6c934f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x190) socket$inet6(0xa, 0x0, 0x10000) 03:34:00 executing program 0: openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) [ 169.588907] FAT-fs (loop7): Unrecognized mount option "uid=" or missing value 03:34:00 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1=0xe0000001, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xf0ffffffffffff}}}, 0x24f}, 0x1}, 0x0) 03:34:00 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f000050d000/0x3000)=nil, 0x3000, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r0, 0x400, 0x0) getdents(r0, &(0x7f0000000040)=""/148, 0xab) 03:34:00 executing program 6: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RSTATFS(r0, &(0x7f0000000400)={0x43, 0x9}, 0x43) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:34:00 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x5) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000100)=""/109, 0xfeb0) rmdir(&(0x7f00000000c0)='./file0\x00') 03:34:00 executing program 0: syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@nls={'nls', 0x3d, 'cp852'}, 0x2c}, {@nls={'nls', 0x3d, 'none'}, 0x2c}]}) 03:34:00 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454df, &(0x7f0000000080)=r0) 03:34:00 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x200400, 0x0) dup2(r1, r0) [ 169.630102] FAT-fs (loop7): invalid media value (0x00) [ 169.635781] FAT-fs (loop7): Can't find a valid FAT filesystem 03:34:00 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,s\x00owexec,discard,check=strict']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, &(0x7f0000000240)=ANY=[]) bpf$OBJ_GET_MAP(0x7, &(0x7f00000021c0)={&(0x7f0000002180)='./file0/fil..\x00'}, 0x10) creat(&(0x7f0000003900)='./file0/fil..\x00', 0x0) 03:34:00 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r0, 0x400, 0x0) syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x101, 0x400000) getdents(r0, &(0x7f0000000040)=""/148, 0xab) 03:34:00 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmsg$nfc_llcp(r0, &(0x7f0000000080)={&(0x7f0000000200)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "801e673bb06bc9452f0dc8d6882d81b82ba166767351b6a78dd137571501a1ccc7ee62ae266277cad1a2ec4ae55e1cb81d3cd18af5070000f201087d25ab94"}, 0x60, &(0x7f0000001400)}, 0x0) 03:34:00 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x3, 0x9, 0x1}) rmdir(&(0x7f00000000c0)='./file0\x00') 03:34:00 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000240)={0xc, 0x8, 0xfa00, {&(0x7f0000000400)}}, 0x10) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:34:00 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000500)="8da4363a00000000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000", 0x3c}], 0x0, &(0x7f0000000240)) 03:34:00 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x400454de, &(0x7f0000000080)=r0) [ 169.774485] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 169.807369] FAT-fs (loop7): Unrecognized mount option "uid=" or missing value 03:34:00 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) fchdir(r1) getdents(r1, &(0x7f0000000040)=""/148, 0xab) 03:34:00 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_OPEN(r0, &(0x7f0000000280)={0x20, 0x0, 0x1}, 0x20) 03:34:00 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,s\x00owexec,discard,check=strict']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7", 0x15}], 0x0, &(0x7f0000000240)=ANY=[]) bpf$OBJ_GET_MAP(0x7, &(0x7f00000021c0)={&(0x7f0000002180)='./file0/fil..\x00'}, 0x10) creat(&(0x7f0000003900)='./file0/fil..\x00', 0x0) 03:34:00 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x10000, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) linkat(r0, &(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000180)='./file0\x00', 0x1000) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) symlinkat(&(0x7f00000001c0)='./file0\x00', r0, &(0x7f00000002c0)='./file0\x00') r4 = dup3(r2, r1, 0x80000) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r4, 0x80045700, &(0x7f0000000300)) r5 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r6, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:34:00 executing program 6: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000000)='A::2:e:\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ceph\x00', 0x0, &(0x7f00000000c0)) r0 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000000840)) tkill(r0, 0x1000000000016) 03:34:00 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x82, 0x0) lseek(r0, 0x400, 0x0) getdents(r0, &(0x7f0000000040)=""/148, 0xab) 03:34:00 executing program 0: syz_emit_ethernet(0x36, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="f4624651fb0a", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x28, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f00000000c0)) 03:34:00 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) [ 170.017973] FAT-fs (loop7): Unrecognized mount option "uid=" or missing value [ 170.050086] libceph: connect [a::2:e]:6789 error -101 [ 170.055683] libceph: mon0 [a::2:e]:6789 connect error [ 170.085872] libceph: connect [a::2:e]:6789 error -101 [ 170.086910] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 170.110472] libceph: mon0 [a::2:e]:6789 connect error [ 170.119103] FAT-fs (loop7): invalid media value (0x00) [ 170.124537] FAT-fs (loop7): Can't find a valid FAT filesystem 03:34:01 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x8000, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f00000003c0)={0x8, 0xbf7, &(0x7f0000000240)="ca2a152f39645ee041b8d9119bc177f26d01be175af51a425e1e91f4529b8cb15bdfcde27ff2a588e361060b8c4823ea0b93b9cc9409e3801bb994891b7a609a39709b60c79b8b5ae857c44fd59d5e28c622d88cb4a27652f43caac5367106d0d5cec70e5345b7", &(0x7f00000002c0)="e966072b43cabaf4c90284919775fba5242f0b0a198b4d2ed811d21c27336cd53a5e16b333e0464fcabbd1d2623a11567f5948742e0414717cb99628a127751960e364ff726b8f54ce71c74638d64a4b8aa75bf348983ee7da039092039d0e1577ab6ed5c44dc73ead228bf3b4b0519c06dabcce62f073599784102e2ec4c9db35d0b7b7f26bc6c54e2de181c5298b5dbf724826b9660acb38c2f19638cb4e77afe32599f6d3d688baa4094abd4183748e2098f5d663bd5be727eeba2e159c5687ea3d042cd12041230d53c505637ce6aa5db750ad9a4060874fc020cc8ca3f9ad20246d7046111afc34d7504c", 0x67, 0xed}) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="2800000010005fba00000000ad3f9282734fa63a", @ANYRES32=0x0, @ANYBLOB="831c0000010000e299b3317aa382f0b75f9cfdb68c35ad5d00921d1e294e8ee4dfdf1ac21936"], 0x28}, 0x1}, 0x0) pipe2$9p(&(0x7f0000000040), 0x84800) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x20000, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x9) msgget$private(0x0, 0x400) socket$inet6_udplite(0xa, 0x2, 0x88) dup2(r1, r0) 03:34:01 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) r2 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) 03:34:01 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) socketpair$inet6(0xa, 0xa, 0x5, &(0x7f0000000100)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r0, 0x400, 0x0) getdents(r0, &(0x7f0000000040)=""/148, 0xab) 03:34:01 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x1, 0x40000000000) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:34:01 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgrcv(0x0, &(0x7f0000000580)={0x0, ""/131}, 0x8b, 0x0, 0x800) 03:34:01 executing program 3: request_key(&(0x7f00000006c0)="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", &(0x7f0000000040)={0x73, 0x79, 0x7a, 0xffffffffffffffff, 0x10000000}, &(0x7f00000004c0)="af2019dcc2380b4623dc8c7a581973a96d57452035fca47b18e7992f4c82e608a92c747d6e80519f2f5a436783ee4e3264245238b946a4a11d39b7873e5f3296185625d49ae13974d13940d0c01a5029b35aec2234864afd4648", 0xfffffffffffffffc) 03:34:01 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,s\x00owexec,discard,check=strict']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7", 0x15}], 0x0, &(0x7f0000000240)=ANY=[]) bpf$OBJ_GET_MAP(0x7, &(0x7f00000021c0)={&(0x7f0000002180)='./file0/fil..\x00'}, 0x10) creat(&(0x7f0000003900)='./file0/fil..\x00', 0x0) 03:34:01 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f0000000000)='(#\x00', 0x40, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x4}) close(r0) 03:34:01 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) connect$bt_sco(r0, &(0x7f0000000100)={0x1f, {0x55, 0xff, 0x8, 0x6, 0xba2, 0x9}}, 0x8) lseek(r1, 0x400, 0x0) getdents(r1, &(0x7f0000000040)=""/148, 0xab) 03:34:01 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x2, 0x0, &(0x7f0000028ff0)={0x0, &(0x7f00001a7fd8)}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0x72, "efa3589a4531f5dc9701a87a57942ab8f321cc6b820c6c734259f4db89cc0eb6edf374dfbc8d31dbf31c97c20a8112b5d4d5f1208ef29f4763b3cdeae5186184180f6b1f3f0c44d4c1f2a79873f012839ef6a00364cff33cbf2536c340b0d4871057ef4ac859200560b62df2926d61c58f5c"}, &(0x7f0000000180)=0x7a) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$usbmon(&(0x7f0000000300)='/dev/usbmon#\x00', 0x3, 0x20800) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000001c0)={r2, 0x101}, 0x8) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$P9_RVERSION(r4, &(0x7f00000002c0)={0x13, 0x65, 0xffff, 0x4, 0x6, '9P2000'}, 0x13) read(r4, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') [ 170.227274] FAT-fs (loop7): Unrecognized mount option "uid=" or missing value [ 170.257793] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. 03:34:01 executing program 3: r0 = socket$inet(0x10, 0x3, 0x4) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000000)="4c0000001200ff09fffefd956fa264b724a6007e00000000000000683540150024001d001fc41180b598be593ab6821148a730bb1aa49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 03:34:01 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x13, 0x7, 0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000200)={0xffffffff, 0x40, 0x65, &(0x7f0000000100)="118fe99c67856f26b58dd24a8e14bdb0f73dae02c92cc28b2429901af4ec8c34e7bd79f9fd6f65c2a690b20bdba4b74fc2dd0725d4e5c413e3a8f74fd0cb4f28bb1691af8ebc0bb1200c8c350e494f81e40e65574936b7d2796098c8cc30672b40a55a9bee"}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) [ 170.322523] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 170.345707] FAT-fs (loop7): invalid media value (0x00) [ 170.351402] FAT-fs (loop7): Can't find a valid FAT filesystem [ 170.720491] libceph: connect [a::2:e]:6789 error -101 [ 170.725841] libceph: mon0 [a::2:e]:6789 connect error 03:34:01 executing program 6: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[]}, 0x1, 0x0, 0x0, 0x800}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) 03:34:01 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x38800, 0x0) accept4$inet6(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c, 0xd78c811e22a042b3) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r1, 0x400, 0x0) getdents(r1, &(0x7f0000000040)=""/148, 0xab) 03:34:01 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@ipv4, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f00000002c0)=0xe8) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000440)) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000a40)=@assoc_value={0x0, 0x1}, &(0x7f0000000a80)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000ac0)={0x0, 0xffffffff, 0x4, 0xff, 0xaa, 0x3}, &(0x7f0000000b00)=0x14) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000b40)={0x0, @in={{0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1, 0x0, 0x8000, 0x8, 0x40}, &(0x7f0000000c00)=0x98) sendmsg$inet_sctp(r1, &(0x7f0000000d00)={&(0x7f0000000500)=@in={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000540)="3dec21334850160264650a361591e6fb89605ce704c9100af9269cd9e3d547c6c15e1470377345d0e6771c7dfdb7a12a70da62aad788e4686d1ba3438ada53d3d7f44ae36f2875df861b8ccbc8135a24e2796aa85338c2010824", 0x5a}, {&(0x7f00000005c0)="db9968300b421d4054dba22d525735a5df385604213d2dfc054af6f7ed7cc647b9ee", 0x22}, {&(0x7f0000000600)="fdc8a824c8c23346f376f1bb639b86420f3880337fb032c39014a1a4d5091e78981e517d839bc761a3f5dc6049165da6cc81a45e151bd29dd784bf8f50f64eb7cceebe1df3086b885564bd304654898f4e1dd5149f82ece3e6f3799e803bd4194fad97817508d5b55ae333f9f50543403cdd6edf8d36681a708f3ac8c12b635d6a54ef717648dcc1d025af0cb4dec59e60505ad9f5ff131170e4fae4b61f22b04cebf567a79f26a20b915b3b7129c3aa38e56d54423fad790c50b94c778f4905e4277779462e9226309efafa7e890ff62cd549080fd0f6bc8bb3caa3048eedbde6dbe19f9fa0ea80e963bbc0878326cd2cf7aa10de420851", 0xf8}, {&(0x7f0000000700)="f9dcd30db3b62f51c7511dd186567b4d126956e28e1376a6da987497244e8e8049b6e90d41ec914b4c36908253513aca72ba04d70a5019e8084337caea1febd0409379a020e449", 0x47}, {&(0x7f0000000780)="cadddc8b9367c025a1e220655cc4ac4ab8d413780c082224001c4432cc33ea9addcc0b7fd6cc97a7b65075c686f78ad63e6d4ddfbcdbcd38d576df449309a7d6f2ef218cd9242c0a3ef6ea05b2d324952af11a85dffae85c987604209e9fb3fd352d65f5f407706e95b56b9fdb0c0e3bc6791d4a354ef42f7134e90c8012b7bd77caca42dcee45b633997e2a9504925ee30a1ff8", 0x94}, {&(0x7f0000000840)="60b3ccb504e34ce34e09915825d35b2296eae035eb8a771e42c3e669afaae3a7853c9f95ce49e82c4167e1832412eec9f0c5f6947437249091fc9fd90139f4711e919d43aab56607c08949c1e977aa6a1b4c", 0x52}, {&(0x7f00000008c0)="43322365fbf3a06f52835c760fec4d536c07159237295d1fdaf83d77217520cbd0a4422176d69a15d4d4790f2d07df90531962256dd1137a085a6c83fade889ba2874104b31d1a8efecf0fea6e3c7cbf6eee5fa5490859d935ae82b2b72d81ecd4861115ae06ec0dc2bf635de3bc5a3444a1d2a0914288335ca3db43b818a3edff936fbb74c89cb81a49dbe8800fefd08a84ef88a390b0ce4fd2a51881ed2476772a495d81974aae32e5b36c280e785ffcdb94e9f304d52be7e1c994026d67ab7aa3449c3e28fe916b36", 0xca}], 0x7, &(0x7f0000000c40)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x2, 0x57cf3202, 0x10000000, r4}}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x9, 0x221bbc3b, 0x6, r5}}, @sndrcv={0x30, 0x84, 0x1, {0x200, 0x6, 0x0, 0x145, 0x1, 0x7fff, 0x0, 0xab9, r6}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0xea}}, @dstaddrv4={0x18, 0x84, 0x7, @local={0xac, 0x14, 0x14, 0xaa}}], 0xa0, 0x40000}, 0x40) quotactl(0xad10, &(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000300)="f96835f74cb1bee85a96eb64a78d65fceb68f29eed2cafa6f5a1a62e2d7b602a2f8a2321cb3b5f836095a30e28a0a27da812ef4fcf621b488dd2c42da9a6654e3b14b65d02a21f77395e185f020032a150e9f1ba474f588a2c4bb719570a86a20d12267fc670c0c9e8a1e253d06e0e0de05cfab71f6fa17fccc042ecfdde42a39b7d08b86cfce9e8b1b33db2f58bb2de3b29a6ebd7d7e7257255a27dea3f50c96bf9830f93557109bb7a042d28da4e76ba403b80a33d02381737e96a5042d90052") open(&(0x7f0000000400)='./file0\x00', 0x80, 0x0) 03:34:01 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21}, 0x10) sendto$inet(r0, &(0x7f0000000000)='_', 0x1, 0x0, &(0x7f0000000b00)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080), 0x14) recvfrom$inet(r0, &(0x7f0000000b40)=""/4096, 0x1000, 0x2, 0x0, 0x0) 03:34:01 executing program 7: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dos1xfloppy,uid=,debug,errors=remount-ro,debug,s\x00owexec,discard,check=strict']) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7", 0x15}], 0x0, &(0x7f0000000240)=ANY=[]) bpf$OBJ_GET_MAP(0x7, &(0x7f00000021c0)={&(0x7f0000002180)='./file0/fil..\x00'}, 0x10) creat(&(0x7f0000003900)='./file0/fil..\x00', 0x0) 03:34:01 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x0) 03:34:01 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x2040, 0x0) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f00000001c0)) dup2(r1, r0) 03:34:01 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001300)='/dev/cuse\x00', 0x400000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001340)={{{@in6=@mcast2, @in=@local}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000001440)=0xe8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000080)=r0) [ 170.832365] libceph: connect [a::2:e]:6789 error -101 [ 170.837684] libceph: mon0 [a::2:e]:6789 connect error 03:34:01 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) syz_open_pts(r0, 0x100) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x4a00, 0x0) lseek(r1, 0x400, 0x0) getdents(r1, &(0x7f0000000040)=""/148, 0xab) [ 170.880413] FAT-fs (loop7): Unrecognized mount option "uid=" or missing value [ 170.907716] FAT-fs (loop7): invalid media value (0x00) [ 170.908557] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 170.913143] FAT-fs (loop7): Can't find a valid FAT filesystem 03:34:01 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r1, &(0x7f0000000040), 0xffffffffffffffd5, 0x20000004, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000040)={{0x2, 0x0, @rand_addr}, {0x0, @link_local={0x1, 0x80, 0xc2}}, 0x0, {0x2, 0x0, @multicast1=0xe0000001}}) 03:34:01 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0xfffffffffffffffa) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:34:01 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) 03:34:01 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'bond0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="17"]}) 03:34:01 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f00000005c0)='./file0\x00', 0x0, 0x1) kexec_load(0x0, 0x5, &(0x7f0000000500)=[{&(0x7f0000000100)="c5a0aaa474f597d5da8c398b116075640d8b64f5b5d6bbb0737eaeaaeb1562c6db7bcb4637ce140a9f843145e321bded13c89a4816f43c2a2e1f5ac22d0442eb3d7bf2fbd1654219626675741eca2cb117f5bc496692bd64a317658f88a1f5a5909c6e58bfda0778856f50924ac82f224ac20538dd7a0ac800f4147ff15901203ec719c6ab7cad5bdf523f710aac1a1c01ccbbc8131677c64fd946c2448fb99d1265542a6215f294fdc7d450fec41ff618eca6dbf053d76f61cf7b7771e0937647db84af0bf7ce53f6b6c582b8bc32ab", 0xd0, 0x9, 0x4}, {&(0x7f0000000000)="e3f72081492b9d69ed9bd19c4904374f41fc075152938c0994ca9588e3ff3bd5", 0x20, 0x7, 0x6}, {&(0x7f00000002c0)="9d82ba918ebb4c764ea9725a75de2297c9eb6dc21f370dd1d6bf925a177ab4736d15d397445c72b27f17fc4390707d38ade249b74e3cc25943748cf43053e514e9164bd8029133042db39594a1b27eb3a99abebb9b31ff0b1f40fbcad15677f986ec703880ef1f70d2560e1e0f23078868e62da85ac0c0192b6480d525a8f8c48a7e320be0003bb01232b3d48dfdf9e83a7bf6e78fec8f8679a9d447e8863cba114196fe9ae3c20eb7b02be4edd987eb8824345a2406c7db95a96477df04b857a28630", 0xc3, 0x2040, 0x2}, {&(0x7f00000003c0)="5fc08e5b3f6352c2dc80874583b1b047f450f05bb8cb5cdce91a9e52c0ec723b4d36eb6bb73b8b13a3febb3f8a714dff7da8afc6952c0955de6461c4d5d7f623021acb0e081a2e734c567e08e82f79fbcea678f6106b815842f99e64f7f11b78d07a8246fedb91a86fc8c31f4361191c19ae63fa47d736afa8faed33e4029645f6b67e80e82f0d28b5835a354c56f3a940709848d5bc106b94a40956364c2dd0429de4b62e990b85351de999da693f567cf0cd2c8c06a33ae951949ebff10eb8c6a8612a3bc369b4541ef0507ff8cb4d7d95594d0461ae51a65beb3ca4d0a34dcfa6391600724bb0ac56bc805c3147c590", 0xf1, 0x6, 0x692}, {&(0x7f00000004c0)="96d2ad4e315b9c6d12bf272e00ab99e8e4299ebaa0e09ab06efeddf98254014cc5c7bfbb9fcaa17b10ec95872c03a7eb4e872ee233b24007394f339916", 0x3d, 0xfffffffffffffff9, 0x1}], 0x150002) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:34:01 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x4) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21}, 0x10) sendto$inet(r0, &(0x7f0000000000)='_', 0x1, 0x0, &(0x7f0000000b00)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080), 0x14) recvfrom$inet(r0, &(0x7f0000000b40)=""/4096, 0x1000, 0x2, 0x0, 0x0) 03:34:01 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r2, 0x400, 0x0) getdents(r2, &(0x7f0000000040)=""/148, 0xab) 03:34:02 executing program 6: perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r0, 0x8000000ff, 0x7, &(0x7f0000000000), 0x0) 03:34:02 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) r2 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x100, 0x108) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x3f8, 0xf0, 0xf0, 0x0, 0x0, 0xf0, 0x328, 0x328, 0x328, 0x328, 0x328, 0x4, &(0x7f0000000100), {[{{@ipv6={@remote={0xfe, 0x80, [], 0xbb}, @remote={0xfe, 0x80, [], 0xbb}, [0xffffff00, 0x0, 0xff, 0xffffffff], [0x0, 0xffffffff, 0x56993b46d0e9f467, 0xffffff00], 'bcsf0\x00', 'team_slave_1\x00', {}, {}, 0x89, 0x0, 0x7, 0x40}, 0x0, 0xc8, 0xf0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x101, 0x400, 0x9d8}, {0x3, 0x1ff, 0x800}}}}, {{@ipv6={@local={0xfe, 0x80, [], 0xaa}, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, [0xffffffff, 0xffffff00], [0xffffffff, 0xffffffff, 0xff0000ff, 0xffffff00], 'bond0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x0, 0x9, 0x4, 0x2}, 0x0, 0xc8, 0xf0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@icmp6={0x28, 'icmp6\x00', 0x0, {0x1e, 0x9, 0x7ff}}, @common=@frag={0x30, 'frag\x00', 0x0, {0x8, 0xd37, 0x78, 0xbef16281fcc9b519, 0x2}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x5, 0x82b6, 0x348}, {0x80000001, 0xfffffffffffffff8, 0x7}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x458) 03:34:02 executing program 7: syz_emit_ethernet(0x140, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x10a, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000000)) 03:34:02 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) write$P9_RWRITE(r0, &(0x7f0000000100)={0xfffffcc7, 0x77}, 0x7) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:34:02 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x10) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000100)={{0xffffffffffffffff, 0x3, 0x3, 0x0, 0xf023}, 0xff, 0x4}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000180)={0x21, 0x5, 0x4, 0x6, &(0x7f00000002c0)=[{}, {}, {}, {}, {}]}) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r3, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:34:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0x10}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x201}}}}}]}, 0x50}, 0x1}, 0x0) [ 171.230361] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 171.330222] netlink: 'syz-executor0': attribute type 16 has an invalid length. 03:34:02 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') fstat(r0, &(0x7f0000000100)) 03:34:02 executing program 7: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = creat(&(0x7f0000000240)='./file0/file0\x00', 0x0) ioctl$KVM_GET_REGS(r0, 0x80047213, &(0x7f0000001540)) 03:34:02 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) dup2(r0, r1) 03:34:02 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x2, 0x8, 0x3}) lseek(r1, 0x400, 0x0) getdents(r1, &(0x7f0000000040)=""/148, 0xab) 03:34:02 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f00000002c0)='/dev/snd/pcmC#D#c\x00', 0x401000, 0x800) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000340)={0x6, &(0x7f0000000300)=[{0xfffffffffffffff9, 0x0, 0x8000, 0x6}, {0x9bc, 0x4, 0x9}, {0x4, 0x5, 0x9, 0x9}, {0x4, 0x9, 0x5, 0x1}, {0x3, 0x4, 0x401, 0x5}, {0x3ff, 0x8, 0x6, 0x8}]}, 0x10) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r3, &(0x7f0000000240)=""/109, 0x6d) 03:34:02 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x101, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x2a5) 03:34:02 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000055783b72d0f6959a33eaa1a46aa459b84ab9e3fa223fbee379c8417ad218b3f1f9b077568aa058980aa0b790e1c32523024fe802413e8be5f7934e3b6d496bff0bafe2e6b2705432841400c2eea0c6e429d48369c3897d79fc1e338bfd27f3222d5dcbaa9d251d596fa806521793"], &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x8000, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000240)='/dev/vcs#\x00', 0x0, 0x600080) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000280)={0x4, r2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000300)=r0) 03:34:02 executing program 0: syz_emit_ethernet(0x36, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x9, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x4001, 0x0, @dev={0xac, 0x14, 0x14}, @remote={0xac, 0x14, 0x223, 0xbb}}, @icmp=@timestamp_reply={0xe}}}}}, &(0x7f0000000040)={0x0, 0x2, [0x0, 0xfffffffffffffffe]}) 03:34:02 executing program 6: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fadvise64(r1, 0x0, 0x0, 0x1) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) 03:34:02 executing program 7: request_key(&(0x7f0000000440)="646e735f7265736f6c76657200501e29636aaabf09baf765b2f675534d2d6872617234c790be4a29cddeb1930c717c6dbe6147c0a82dbfd494ce1953db90c6b73b227b5d27238712f3f18514ad23e3f07a8ad63cec2a98a46e7ae9174b684157f0fd6c96dcf551ae1d9b04ea876f3e77035e73d35b1b36fcb1ccf65f40a02cd77f4ef0c387758c940e0506c3e8dd7d36f61e43f91a33dde762c71a386a39c4acac3cace8774917528c5030bc773bea869aaa4a7ea28c9e48dc1bd1548408f208bf0715479cf7b4583d911ee3bb283ef228d1a35aa679", &(0x7f0000000100)={0x73, 0x79, 0x2e}, &(0x7f00000001c0)="bc00", 0x0) 03:34:02 executing program 3: r0 = socket$inet(0x2, 0x8008000000003, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000039c0)=[{{&(0x7f0000000740)=@l2, 0x80, &(0x7f0000001900)=[{&(0x7f00000017c0)=""/110, 0x6e}, {&(0x7f00000018c0)=""/25, 0x19}], 0x2, &(0x7f0000001980)=""/133, 0x85}, 0xfffffffffffffff4}, {{&(0x7f0000003040)=@ll, 0x80, &(0x7f00000034c0)=[{&(0x7f00000031c0)=""/184, 0xb8}, {&(0x7f00000032c0)=""/66, 0x42}, {&(0x7f00000033c0)=""/231, 0xe7}], 0x3, &(0x7f0000003540)=""/203, 0xcb}, 0x6}], 0x2, 0x0, &(0x7f0000003b40)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='ip_vti0\x00', 0xffe5) sendmmsg$unix(r0, &(0x7f0000000380)=[{&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f00000001c0)}], 0x492492492492475, 0x0) 03:34:02 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000200)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) lseek(r1, 0x400, 0x0) getdents(r1, &(0x7f0000000040)=""/148, 0xab) 03:34:02 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000a00)='./file0/"ile0\x00', 0x0) 03:34:02 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x10900, 0x0) r2 = accept4$nfc_llcp(r1, &(0x7f0000000300), &(0x7f0000000080)=0x60, 0x80800) bind(r2, &(0x7f0000000540)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1=0xe0000001}, 0x0, 0x4, 0x4, 0x2}}, 0xffffffffffffff53) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r4, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) chmod(&(0x7f0000000100)='./file0\x00', 0x34) [ 171.687142] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:34:02 executing program 7: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\b', 0x9) close(r0) 03:34:02 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000740)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000840)=0xe8) connect$packet(r1, &(0x7f0000000880)={0x11, 0x1f, r2, 0x1, 0x12, 0x6}, 0x14) getpid() r3 = openat$cgroup_procs(r1, &(0x7f0000000180)="000000017300", 0x2, 0x0) write$P9_RSTAT(r1, &(0x7f0000000100)={0x66, 0x7d, 0x2, {0x0, 0x5f, 0xcacf, 0x401, {0xe0, 0x0, 0x3}, 0x2000000, 0x1, 0xfffffffffffff3bb, 0xce, 0xd, 'cgroup.procs\x00', 0x9, './cgroup\x00', 0x5, 'em1([', 0x11, '\'vboxnet1selinux&'}}, 0x66) read(r3, &(0x7f0000000240)=""/109, 0x15) fcntl$setpipe(r0, 0x407, 0x642) syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x8, 0x2) rmdir(&(0x7f00000001c0)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipddp0\x00', r2}) 03:34:02 executing program 6: [ 171.768590] raw_sendmsg: syz-executor3 forgot to set AF_INET. Fix it! 03:34:02 executing program 0: [ 171.886717] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:34:02 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000064020000000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}, 0x1}, 0x0) r2 = dup2(r1, r0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@ipv4={[], [], @rand_addr}, @in6=@remote}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000040)=0xe8) 03:34:02 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) getdents(r1, &(0x7f00000002c0)=""/148, 0x94) 03:34:02 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000040)={0x0, 0x2, [0x0, 0x2ef]}) 03:34:02 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=ANY=[@ANYBLOB="1800f9ff45e9000000000000000000009500000000000000"], &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) 03:34:02 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dffc, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) 03:34:02 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x4a) r1 = memfd_create(&(0x7f0000000100)='GPLbdevposix_acl_access\x00', 0x0) name_to_handle_at(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x46, 0x3, "a996329127d650a6ffa045a739619b38fc248c098b3ff8df04b99868174acb8fa1da06bae7867e39ce1f504f0d281cde2a3ca09eeada4f3764a1f7ecda2c"}, &(0x7f00000002c0), 0x400) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r3, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:34:02 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000cab5b3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000d6af50)={{0x80}, 'port0\x00', 0xfffffffffffffffd}) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000680)={{0xfffffffffffffb80}}) 03:34:02 executing program 7: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) write$P9_RWRITE(r0, &(0x7f0000000100)={0xbac616ba41f84539, 0x77}, 0xfffffd12) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:34:02 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r1, 0x400, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 'sit0\x00'}}, 0x1e) getdents(r1, &(0x7f0000000040)=""/148, 0xab) 03:34:02 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2=0xe0000002, @remote={0xac, 0x14, 0x14, 0xbb}, @loopback=0x7f000001}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x1, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x3f) r1 = socket$inet_udp(0x2, 0x2, 0x0) dup2(r0, r1) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000004000)=0x90) 03:34:02 executing program 0: socket$inet6(0xa, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x8000000000000000, &(0x7f0000000100), 0x28a, &(0x7f0000000000)}, 0x0) 03:34:02 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x8000005c6e, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x1}, 0xffffffffffffff7f) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) socketpair(0x10, 0xa, 0xfffffffffffffffe, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000200)={{{@in=@broadcast, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000140)=0xe8) sendmsg$xdp(r2, &(0x7f00000008c0)={&(0x7f0000000300)={0x2c, 0x2, r3, 0x33}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000340)="91726577350f6f64f786d6663d8c6f76424f68966bc864ee665bac9b84d9c8780067b90057dce74443560ab53b8ab40679e773277d611f2afc3ada0e74a760349ae37779fd8c2152f9502ce76020c23371f24a52c17c898c0c78cf5226160c0fec0620d3cbbde1cc0cf8000e2903ca5f0e141195c683587ac26f21d3c55f03dd8917c54a3e0f4c", 0x87}, {&(0x7f0000000400)="7908676d95224bee07f054835c18eab9f135d8f60499e881742f6fa56919d6b45e9356fa5de78c9714a1cd615cfdebba632c562c0fd488986c968ae499cf90b4c1501c13a04e832a5d3a88538c0065e37e0f4fe09b061436babdfe3dbd7a9febd1b7911f6cfacbbc6e8894d0aa18df21549e695d2f83626de9a2a4e208bc8b00901970c9d4f3f847caf4a94a2cce61e5a9e5fdb644dca5c409949b4296dd093d664dd7e59896c6d0942a244ec7905a9fa624d3aea8f72462d58ddd7d1948", 0xbe}, {&(0x7f00000004c0)="57d24982398ab6add656476f9227553c9bf4978bbad80dec55ec6d917f5f02544df2a26ada0706bf645cab742356eb6dc388e1d24e26cdaef61752d352684f0e11ab8e1d305f0e8c6cfe77bb9242d1cabf3bf60834794b207170b3de00d51409ed7c33ffea26c6454c1ecc95c2c2897ebab0abea4ec1df4363e75eeec0cb691e865c2ead1b", 0x85}, {&(0x7f0000000580)="0083e55ceeedddf5d031f5d460191fa95feda0cca6e93f2829b9aa81d6603e5cda680046a169dbebde5507618cd0dcf3ff2b4f7d4c5d7f481e043a99ae3ea7c55b4edb88fdc1fe530af9acc79a7e865c22969734d93671d7d1276a7776d178b80460c08e4093ee1a669a99c7d8c09f1bfd39de0d73c6c8665f90e0651bb4e8ef1a9862692a230587a7d5cd42629fc01b29134d8b57def71edb13023224fa301b5c55eb5836f66dc55e01e9767b3352086d78", 0xb2}, {&(0x7f0000000640)="885b6899417879c46c8755a0b4211e94b3f37c648ae91f20367e65f9f103e5fc04dde53b21f7a79c17ca67ea3e6ac43130678ce18cd83fa34a0cf913cd6520ea8a768fce817ec9daaeb4add0f354f8aee2463b8dd83f5a228db0f8a6cac5ce246b3ba39c6ed898636982640eb04f422428bfd3f9195e92a1867048bfd009d7a5b0ba40904a71ac02be735d7408a0f9b0da4a483aac4b5b66a882c73f31f2d8c022cd52b2145b16c068e901b1b95c1eeac1d99c", 0xb3}, {&(0x7f0000000700)="e1764b137ce5af72c25efe4bba33daec1d2bb834d38b5c8a86cdafb88ba5eabbfefa3e949e1656d8bc3c4471e7af0518c1469717559708e61dbc98b82540dcc8c111b87700a0f524f1f12eee1300ab2cacd9cf0f11", 0x55}, {&(0x7f0000000780)="9c979db27a18b5083f664b286d63acb77541ff9caefcd902bc5c33a259c03513d047", 0x22}, {&(0x7f00000007c0)="8e2b3221d7168e3256f0d754402bd756b08f69e12f7f7baa7e5212b9782910940ee062fc920a609b29d5815cc60ba6cc004a964a9f84ce7752ecbe8512c83c89b6ad0c6e5ca9cfa098e2ce847f21032124fed3dde6", 0x55}], 0x8, 0x0, 0x0, 0x4010}, 0x40) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x410080, 0x0) 03:34:02 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000100)="038ff793caf36af1") r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) fsync(r1) r3 = getpgrp(0xffffffffffffffff) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)=0x0) kcmp(r3, r4, 0x7, r1, r1) read(r2, &(0x7f00000002c0)=""/109, 0xcc) rmdir(&(0x7f00000000c0)='./file0\x00') socket$alg(0x26, 0x5, 0x0) 03:34:02 executing program 3: 03:34:03 executing program 7: 03:34:03 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={r3, @in6={{0xa, 0x4e22, 0x1ff, @empty, 0x3ff}}, 0x10000, 0x259a, 0x7, 0x3, 0x8}, 0x98) 03:34:03 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x2, 0x5, &(0x7f00000014c0)=[{&(0x7f0000000200)="2c2ad55c66b6bbbf82e3e47da41f8d45e20a43e9f6f6d5f3e4f3972f9d219eac3d3acd8cd831346e4056b39f9d473eff728064f580598fd1540d52946708fabfad47fb7f47af44c9e9a4ad6cf76f8e8e4d5f579dd7113b302c6e3cae2dcc7e7cef07b43d3ee8a440071154897ca2371967fb31674e4c02331f0d01f1c2a6ebf0af1c945083e8c4af889ab5d180dfd77713e5a6", 0x93, 0x8}, {&(0x7f00000002c0)="7d6f69ff75b739d35ce96c3558cd7a98def40ff2bfdcae562357e3afde3389bf6381c299354bec7cf829fd73e49cd600938bda643c9516ea7f8413b3f6ea1a355b86d26ae1f77e54ddef549bce0a9f92097be707423052e34774854b2b8dc95e2c22f9bd7f7cab69a6d91175df524f0680cb7701a0a57dee", 0x78, 0x10aac706}, {&(0x7f0000000340)="818cb99639b4b7cf91b135a4f77ed8a74781392878680b9dbdff32c8b87e6f847769797c0fb62972d0bb46a8bdb2d6d37c1fc4c76c07d400618a13e707ba80dd79ba6f1f71b3e7562a7360ccdf39772c7e32a25a9f15e5de17fa99d0cc2fc1406a26d32921576c2803888f6f1086e413656da85049a800c92e91e36f1470a96742747a8df79c8056edf62d14ff9ac8c9fa2fa253232b98a76410b84884da071838287b33854431c04807161bc1990a9d444c84d9da39a991062e69a0a382ed934ff848c55f436ef8626dda0da0ee12001332df657eca62ea80ff3dda35f12ba947870bd21d37", 0xe6, 0x3}, {&(0x7f0000000440)="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", 0x1000, 0x52a8}, {&(0x7f0000001440)="435efbb9998dc7ef3520d1a7424518d1e25c42c63f353e2c6f2cbbe74d64d3f787df565251c3ea32f4fe9c83cdc5e816f59946beb946fc2cacbd2ec055f6b4728820f009820ec09787a3274e98c4", 0x4e, 0x8}], 0x2002, &(0x7f0000001540)={[{@nojournal_checksum='nojournal_checksum', 0x2c}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10000}, 0x2c}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) dup2(r1, r0) 03:34:03 executing program 7: 03:34:03 executing program 3: 03:34:03 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=ANY=[@ANYBLOB="180000000000000000000000000000e8c222e40a2f76d988"], &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) 03:34:03 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000140)=0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r1, 0x400, 0x0) getdents(r1, &(0x7f0000000040)=""/148, 0xab) 03:34:03 executing program 6: 03:34:03 executing program 7: 03:34:03 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='cgroup.procs\x00', 0xffffffffffffff9c}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f00000002c0)={0x9, 0x1, 'client1\x00', 0x1, "e8c39825ad325b48", "2ac47557e3b1d6e65020a9b0ac7a894af459b9fa4e89d4113453313bc8ff3f42", 0x8, 0xffffffff}) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) userfaultfd(0x800) write$P9_RREADLINK(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="100000a8d9010007002e2f66696c6530"], 0x10) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r3, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:34:03 executing program 3: 03:34:03 executing program 6: [ 172.296329] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 172.483918] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:34:03 executing program 6: 03:34:03 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) write$P9_RREMOVE(r0, &(0x7f0000000580)={0x7, 0x7b, 0x1}, 0x7) fstat(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000400)={0x158, 0x0, 0x6, [{{0x2, 0x1, 0x6, 0x0, 0x400, 0xfffffffffffffbff, {0x3, 0x9, 0x7fff, 0x8, 0x6, 0x7, 0x0, 0x7ff, 0x6, 0x200, 0xffffffffffffff01, r3, r4, 0x1000, 0x7}}, {0x6, 0x80, 0x17, 0xef3, '-selinux/system#keyring'}}, {{0x4, 0x1, 0x9, 0x8, 0x3, 0x3, {0x5, 0x3, 0x2, 0x6, 0x4, 0x217c, 0x5, 0x100, 0x0, 0x81, 0x7, r5, r6, 0x4, 0x9}}, {0x0, 0xe6b, 0x0, 0x20}}]}, 0x158) lseek(r2, 0x400, 0x0) getdents(r2, &(0x7f0000000040)=""/148, 0xab) 03:34:03 executing program 7: 03:34:03 executing program 0: 03:34:03 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) r2 = syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0xfffffffffffffffa, 0x200001) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000100)={0x0, 0x2000, 0x34, 0x5}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000240)=""/191, 0xbf}, {&(0x7f0000000300)=""/131, 0x83}, {&(0x7f00000003c0)=""/215, 0xd7}, {&(0x7f00000004c0)=""/158, 0x9e}, {&(0x7f0000000580)=""/65, 0x41}], 0x5) 03:34:03 executing program 3: 03:34:03 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x9, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xe0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0xae2, 0x1) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="0300000019010e00b233548e970f0088730608191bd25700000069f445fccbd14971fd6e192b3b23d40747dc662ded024012022ed4e27881fd9979cf8c979fbfdea10ad140eca765b156463fe1f7b3882b1484cea9e4c6ea3f417dd4650180816248e4d4324a355ed55b2a01a2779f963520c49c0c6a284138556f3845881b10d4000000000000006e048012305eccc09b049457fca8246f6c4a44aed966d2de1df1ad8f957e"], 0x28}, 0x1}, 0x0) dup2(r2, r0) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv4_getroute={0x1c, 0x1a, 0x200, 0x70bd27, 0x25dfdbfd, {0x2, 0x34, 0xa0, 0xdacd, 0xff, 0x3, 0x0, 0xa, 0x2800}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x24000000) 03:34:03 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000a80)={0x0, 0x0, 0x0}, &(0x7f0000000b00)=0x29977dba471f4b8e) fchdir(r0) openat$md(0xffffffffffffff9c, &(0x7f0000000900)='/dev/md0\x00', 0x141, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000480)='/dev/uinput\x00', 0x10000, 0x0) fcntl$setown(r1, 0x8, r2) setsockopt$netlink_NETLINK_RX_RING(r4, 0x10e, 0x6, &(0x7f00000004c0)={0x800, 0x4, 0x6, 0x7}, 0x10) ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f0000000740)="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") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r5 = open(&(0x7f0000000440)='./file0\x00', 0x400000, 0x14) setsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000500)=0x1, 0x1) fstat(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getgid() lchown(&(0x7f0000000080)='\x00', r6, r8) r9 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r5, 0x29, 0x45, &(0x7f0000000840)={'TPROXY\x00'}, &(0x7f0000000880)=0x1e) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000940)={'bond0\x00', 0x4400}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000600)={0x0, 0x4b, 0x10}, &(0x7f0000000640)=0xc) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000680)={r10, @in6={{0xa, 0x4e23, 0xffff, @dev={0xfe, 0x80, [], 0x21}, 0x7}}}, 0x84) setresgid(r3, r7, r8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) mkdir(&(0x7f00000009c0)='./file0\x00', 0x100) read(r9, &(0x7f0000000240)=""/109, 0x6d) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000b00), 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') syz_open_procfs(r2, &(0x7f0000000980)='wchan\x00') getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f00000002c0), &(0x7f0000000300)=0x4) link(&(0x7f0000000180)='./file0\x00', &(0x7f0000000400)='./file0\x00') read(r5, &(0x7f0000000540)=""/172, 0xac) 03:34:03 executing program 3: 03:34:03 executing program 6: 03:34:03 executing program 7: 03:34:03 executing program 0: [ 173.028597] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. 03:34:03 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000035d949b22d860b34a92b830d4d1e55c8e219f5f6ddd05a7f"], &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) 03:34:03 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000100)={0x5, 0x3}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r1, 0x400, 0x0) getdents(r1, &(0x7f0000000040)=""/148, 0xab) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", r0}, 0x10) 03:34:04 executing program 3: 03:34:04 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) 03:34:04 executing program 6: 03:34:04 executing program 7: [ 173.118181] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. 03:34:04 executing program 0: 03:34:04 executing program 6: 03:34:04 executing program 3: 03:34:04 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000200)=""/247) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000100)) lseek(r2, 0x400, 0x0) getdents(r2, &(0x7f0000000040)=""/148, 0xab) 03:34:04 executing program 7: 03:34:04 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000a40)='./file0\x00', 0x60) r2 = syz_open_dev$mouse(&(0x7f0000000a80)='/dev/input/mouse#\x00', 0x1000, 0x42000) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) r4 = dup2(r3, r0) mount$9p_tcp(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x100440, &(0x7f0000000240)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@aname={'aname', 0x3d}, 0x2c}]}}) syz_mount_image$nfs4(&(0x7f0000000540)='nfs4\x00', &(0x7f0000000580)='./file0\x00', 0x7, 0x6, &(0x7f0000000940)=[{&(0x7f00000005c0)="e29a9d92a5300fafac20ba40e22af26f78106b69", 0x14, 0x1}, {&(0x7f0000000600)="e688a7c936f8bd47de0ee9f85a878b39", 0x10}, {&(0x7f0000000640)="3d2ca0f09fa5081d4a60d94b7dcc537343864c61464f4d89dfc4fd47f3e04404f4007277d7d7f4d3e9ab2ecb6bd5565026a0e677dd2406645ebb43645b21b9092945b4b5064443dbfd1c64e8ba448fcc8b2dfe3a001c246be299ba045102c797c31c8520b483551c640c5503ab46ed7208e4dbba1960cd57e42b1f8c92e45194cbaa077b6b95cf", 0x87, 0xdc}, {&(0x7f0000000700)="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", 0xfe, 0x8438}, {&(0x7f0000000800)="bb7fc30fd26067d61c930089ae39a227f3230a6f18c204850420fe78855201e531c6b5f855b8ff48375d165c4b3ba7a31a14cc30c50bb76a385805a5bb6ccdedfc9b2f96bef16ca11d2a967ebf8170e447dd9e20a615a14386eb8fc1397f9fb67f5672d508190f25d50828b418936d5f8ee7cade5294597bb1c61872eac89ed862627baa38fc0036799b7e812ab21aa02c42452d934862ef85493bd6cef4108c318e08bdb49262a490aadf96d20d240df1c0830b910bc76302a2af47ba3d9f254a45addf5ad6f452", 0xc8, 0x200}, {&(0x7f0000000900)="ac96", 0x2, 0x5c8c}], 0x20000, &(0x7f0000000a00)=',&\\#\x00\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000480)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000500)={0x13, 0x10, 0xfa00, {&(0x7f0000000280), r5}}, 0x18) 03:34:04 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000000c0)={'veth0_to_team\x00', @random="e5a05abf7daf"}) 03:34:04 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) ioctl(r0, 0x7, &(0x7f0000000400)="edbe9f4b696883aa8cdf93ce8872f9f492d882c2316d0ef796242684a3d08fec3418ec4f782e6600ddc6193d53ba06af5160fed7c8069f5cf838d1648e58d0a409d93ff56f91dcf9daa343acaa21810929e219d39de12c4645b112f5086935ac05dd7d9e16b6dbc341ac39876525defd7cae21f527e68c7f5aad41d2285ad649d76d7b0582efe761253bfaa2d663d4cb5d2f6e738ee8f985ead83d7c4ebec4d3c3dafd718c67f7efcdae1da19cb09c9bdef0bd16338c731d38885fdb125faca6eb1af58e157bd89b4100462e569954ac3b9fb34e856af237e08bdf710875976914d26fb88672fad31ba6a9631c8001d1e31d630776e3313b5b3b4d82dbbc88a2e34e451096d04070619e14d0fb49c089af14989d9259e431d63fd2000000000000000000000000000000004510fb9bda20f94aef9f29af987db7f0a8d23c9a2274ed40e185d961d7e773aa0e13ea") r1 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x0, @multicast1}, &(0x7f0000000100)=0x10, 0x80000) getsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000140), &(0x7f0000000180)=0x4) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r3, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:34:04 executing program 0: 03:34:04 executing program 6: 03:34:04 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r1, 0x400, 0x0) getdents(r1, &(0x7f0000000040)=""/148, 0xab) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000100)) 03:34:04 executing program 3: 03:34:04 executing program 0: 03:34:04 executing program 7: 03:34:04 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$nfs(&(0x7f0000000080)='nfs\x00', &(0x7f0000000100)='./file0\x00', 0x1, 0x3, &(0x7f0000000140)=[{&(0x7f00000002c0)="efea54337a1b52ff161bd1258f283bfb1d4dc8395c14822c690c48d8e3b533cbbb03f4ec2686d56ba87a09c5621d41dc10bc756b2891c67ab195be8bb011ab920daa73015df63c05a71f8396390585d1b8ea8c835dd62eff018649c4d266d2a5b2e76c7c8c018810d7d917d84999f215b7f8b30d552e6821e00bf9f25df7ad3aa437c4f8884ab456d8671c4419e00d257c2eaa32019cbbcaa459f0057ca56e24960cec9a616c81d016ef26386757c65d14568b54853c563b113bbf44ae54810f6a", 0xc1, 0x4}, {&(0x7f00000003c0)="6c3f80f87406b10c615295b878d4dbaaad3dda4ab762a8bbe6fd19c42633ab61cf3d7f1213789686f960d1db61e39ea90e2adb2b50c75ad0d36b5474ac20c67b8df9ab50464bc1c0dc6b116c5e5c5d35259df748176a403b31048783753e3a92214320e80c198fefba31e0e1f269d5a7ca938e06881f105e13056a93bf43950cccfca07c20b0ec0b4e69707e3f5f8c65a85fe62cf16eeb4da0c4408d1aa0ecbf2784ec5f87412024977875c16aed19697fffa4873579e6498fb196e8712389badb3e199359ce70575ae19051b9879ec58cf11a676273707a61d2b7cd5d808707ae0185e4d076841a058eaade5b53e7df7ba43296d0", 0xf5, 0xe31e}, {&(0x7f0000001380)="1f87776d770dc68a1009b24d451866008f35dca11f0c4401fbcceb01a9501667348ede141a1dc333a8c149ecd2b7daaef172cad959320dc38526230f6a5818d3477c4ac4fe9f3e083c55accd2c5b1fcad58e77751adc2c29708505f7b12f1cbb22e109487c29b814ea9996e82c0dd0e258f83c0949d4c81f29f58fe272209d9f377c56875d29878eed5ab70d8180fbda1f273f4a129a9ddfadfb39bda4f95ab18c7bc3300cbb1aaae66bee8c79ea2f23192933cdc4423c74ebdf9a6d62e7f0c28411fa096ae952bac3594b26011002ea036c71fda4446a790364045591afafc4a46cab75b1a168f841324c5e3b2a34ae8608344b4ab636482acdecfa276b5ddbf7b654bb0adf698e998fc0e205ca1dc31dff927160d40473c4b4417646ce621a57689df9e638ed512777fa9534abedd231d9e7cf1996c231573ecd358733245b7f0861f111c18ad420997caf64ef946f0f58b80a08acf3bf17a64d7f23971a1537150e70e9218e388bc21bbd70860ac66860bc54ffded274fbe7b25a0e60b932b196774e1dc26a4f1989c76a4455be47ad615881d72484586158af2bb9a147766718d290905e5c5dbb180ca51c015690d629730b4777fc55dbeaf27102b825c1445c491bd9ddd22c2f1dc07b60cbbd988d18a0019289f9b1cec9c4dee544a60eb7000ded1d543076c76cd58394f03b146c0353d8661f8cb5990572da79db17f4d60af594d28bd75adfa243ae641584c65bf75bdcf184c6b31e4a25a9532953d89f5c1826ca2e455bcea645922fcd6d27a74883055b5aa867b3f92ec8f3b433f580335ecc9f8f1bdd37e5e9ac90da1a03d7233af7c1ad45629c5091f09ebfecb3f687c52f18cf3703c9caf493978998aa4b13b62e7d2e22890576c4c50e86ee3e554774d672c2117a3544d48512e80eaaa47c6fd1812b85f0753d9831c25c2905c3f8265621152cc0ae0e26dc87d96c1c04df8eed6dbd87cde2c10fbed439bc7972e071f035008be7ef71d21e7fd29b7db9806693f0a2fdfb21be00329bfd6bf414e39ffd2b1917e60b85d7455fe11ec636f74a2088bb34de71012a797cefa2c79030335f9380c973218891ecc5a8fe301d09d8b9d70f00c33a790fa59655d809d85600c5c5433f8a0c6a7127ba561456441059bc6b35a748c0d2fbd642df92119452bd34a7c453e99a00586af32863b9fdb57fa883d5d745ab23e01117eeb612ba2cdf44d72a3cdef25d3297bbbb8309b389f925041c43fcb80a403a61faa4ef12e80d9d666b804900ff0bf871fc591f183d178d6d35f469b902795cb937448db2066d80920bffa68af2ecfc2157cb395e7b032f0314d54467fb8d4973a1eea331134f780efbf5128ffe7f7f45de0024d92e3570ce077587cfa2cce17e38044c1431cf83555af11784e92844885a4519566d657721af72793fbab190e6a65786de0887db7ee418f0f77ea6467ad38078f0033c7bd790d6a55e13fa94a5ea6a438c6625b197a93b2fe0fbf56f7153ed65217858924fbff40d54d049576b6065cb5751fe77119cab6fb495558fc77df3ff14e82b2454337aedee0cdbd2450a1c3ac4f34951345a30b7e8eed145269cb512091508d0c99edd5b29180686c10e932365cbb0c454497811a2fd9d6f08ce224b3796ee69f70ed234432fc8ffada4f1da537709b61c89122b4fa2ae0a37d43a1bb1ecfe2e2ed86e9cf61ce38abc0d0bc2c024ab1bfe3a189e0e5b8e24d30b4c39b7e841cca63185fa8854c38d06331d556c4d05a733e081aacca328dfca8de2a9c8830250afdb4b67541d1aeba1b16009127cc3868d4e6f20876597396a53c35b656cf6f49806b1fbb1063d7b80374cf25961f3727c6377c51731317966406824c3f2f9155495a55deee02e916ddc480248c17583ac67a500932b16a8388a269bc2a1718632467a1d71df0ed27f6944832f4848bea51da79b7580f9a07a443a39449cac2061351d6b31f894679afea58d6909dace140829eac59b3fc0dcd564d833bf881bf9fb9238e39dd4df4f9adfb69ef5ca952d4bf86d349c9abb27105def8fd2208d8cf4cfbd4e30b3c6f9eee6f4479031d6596bb760f929b49e463f17be4cb949af384236d0a84e96f01f77fa5f22c486a737267b85fa944c348a6053369283db73dc274a3aad4500e1170e1b94b03604955caf82d559401a3c436deabf8415acc79b6292d61c15af0adb58f6f56eb4e405ef8e1941f93086835a805b26218ed2c279f1ea4667e412b0b16b8d7c5593764f7046ac2a461725b6ecb3f59e6fad3897321ee0e5bb45bcfc4f8f1005a4497cf06a4b37719c172689a5ffe235876cc31f4f7bc305ae6f149e8ae587c7a0694e43ca9c65fe66276805bb8863c705c19b2a8d09167dbb0ef2aa2142a1bc2a313699b7a46b47ce392d9c5c4299f39fc9191ec9a738e7790f6ee0c6434b22e2d92454e7bdacb7ac2075d962ae00ef0a5061fa7437c6e17800b075acda627d8afc7e9df9b153d9ce45be9ebf41c331f5112d7eb60a5bbfb5c393f9d87c3aa7ad9c3af7fdef539add5c5037b6512acc81af65326dca4b78f13ccbd64a4e30abe33031ab01b300a132ab3a82152792aeddaf818b367488a295bdbe8db678d5c874263506a3fb9bb6ea8fc4dd3d941556ff57e3252abbad00476103c7684cbc071b3333c5e6a13f684a527e265013eb75729a3d14f71b47e878da93a6c0f2f13b977ade3f82c640da36e0e97bdef3094bba9a7fa3d870f953de94b8d5e2038bac887b4448913209a9a8d1b72b3448dd635d9cb869e032c2dc26dc0bac06a1c6c93ce788be3c7042ae6772b0e924007d8fbf8ffa85890528ddaf408810d8073b69f9e41e75039e228b7cb7c08d4b11b2963c121877998be93776a3240d399ef86127bfa65bc9af778f5b507eba0a366cca79cd2ac7ecccada2ca912249259c46725db385be9e252b45a2a5da1115610d7c652ddf6aed3884a9efc89b59f91086b5726457b9b2b2fa8337e1f149ed0aae684b4f9a122eed3649fcea71dbeb5829c58c03ed40d5ac910741619d4634520b411dc8face2879785b7df95d597f4608592a569f2da2105d4119fe5ded261c1812c96a3d57316c0ca8bf49909ae66b6f5edf31e9efe9859a406a044aa489d8a2fa59c11277677218c5ef65ce06bb454d81adda8d22b417a35ef44c66b1abe8d64d35ff06d7390075f11e7c113bceacc81df80ed3c521ee038f05174643983bcf402b950fab7f191bde9a6f62e2cfeccdddc872acd01b05d2b770a43f8150d392972b40de70030296f19fca3044fe55584fa39e221184988359c23f6b84f8268c51c2beaefaf66406a445521b87eb78de9778e3cbd81b401152efae675a9abc427bc7a0e20dc30d71b046cadbc9c628b15b0586479701818714a54d21272d1625aa75f1365b0a202583430c38e89564feef714f73fc82281aaa06b87c728112f4e608ace2d6a22bb3f2fed88c1465fce58c39ff70e053cc23f7378326ce2ffbc26fb6c35714ab9786e2a26dcbb3f145e0be2e8d86f919a6db62176e8b1e19a6bac01ceaef843efb001c3887f227a39c246ec8133f889e7adbacd107f7ef2ed8f882b777b1ac351b42e223bded294723e757bb6fdda0de88c3c4af529a972aac4f2b7980db8c02dde2f8947c504622169cce7eb4ff1be046b0fd644fb455457be418de9e23ac17ad76339a4b4f438c338f8536e134b19818f0825c06df66989e0f1ba9905a6564047888f613bca0f9921e693b6efcabbc3b9ccd00c585e50032f22b292f4d3363ae2352a5c79747c47488825efab0d4803666c7291e1d4e49a2e0631c51b9603406d20a73a211758307c7674a606594899cafead4ef227a1e146530dcd3129fce8a161fe1a95e122758c14e73a4032cc03c9ec84340b40005fd86fe86285cae729102585c74c70b6522ffe517bc1892959c3c1a1b95751943bbafeed8056b70f5ab229af561a2de5b9d36d7b3a1679b31cf5cade66e627601e91e4119cee64412f64eb3297e5856dc782efc0506a390a4a63cd745fb2dfc2ff964d1ce848c381b5637ce7a758a83010e99dd26b263459b1a3d7b4be18ee87e5b74ba1a458db3cbb4f68bf1bee8af52667bd78e5661766a36bce82c35950c738b294aaa19deffae522c3c98310a833b598295ca4b41d2cce708e691104c8f6d50c54b410cf5a63986daac1a44a609c6283a5947e72ad4a14659c1b8dafcac32c5828f082c6d28a1fa4df6b5afb9e8a2d06f6ab7236b1320569ebb6c03d08b284c033640a9ff0e4de6bfe2d47c28496504ecf74df925dfd78c3c0811d8e7481d5a080891f992babe488f3af3a7a9db152848e8ee49e6bf3d18a25a1d1c30d1da1e0ded9a0bb51232b8b1fe1ab22153bce2a84dcf9fc800ebed596521b49d72fc97384ae7f58ae28ca4c2745e3722d09953672ce50d0d2ab2f60308d67265b95bfa915155d75e9861ddfd6038390ad50c66b3302af7e56c3c8f78a6dd8c55135ba291f4586ae263544d2f51657d7cb823105aa8fea935bf455e50908b4d864fff1f716033edf75880421ba231e153d8c2fcd5fb2c75be8ebf2a0936b3faaa3ea7d643e4eaa14c8ed919cf4fd5757bf53f512fbdfd05d82a633ec84ebc3a95b91b94fc999a0557cfc244a84483034a94ffb0cf6131f17e8044b3aee801f2ca72ec45670848065a59e5a997b0aa224e6b50e5c25268f68d1c576d33632a1521c8ef7a5925bc00e8b449533883037c2e572a9c6d80919d37764ed180f53ecfb2275042e02e762c4e3a91ed46b6dae9bf0395fc7c4f06ff87207ec8bfde0ad451668c48424032517d03d5d591f86a7850c15792d245f2bc739068bd8ae4cf9baf0cbf2aa8ccfe113cf8638a42a12536e3318b8a9e97fafbfa870a9024744c9279abb187e1282d8ae150157d2dcb0616d0875e98fc971397329273bdbd6784c0c9d23436b7f040b9298942b6b5fbf59ba9fda422add23a4b18b7c49602fc856a81ef81699bd9d7db04867d907a617fc6bed0129d2ac6e4dbd723b7cb2b3954cf92b7e4c4fb106e2698b8071f5fc82ca7fc919a269faef073dbfba03f6b508ba7ce8131d374ca7ed61f2e17a464e813e3fec3985fe511482714090ae80ea587d30756a42dd3ad2a90ac845c0db455716618182b3d3a2d289b0b26c7cef6578fc231dd5d9d050e4899ba45690d03b285b3af668fd53030891910ba1b782fae149b4a2bdf647f6c50a8cea54819bba596f1ef6cee6778776cc61127e6bdf06356c3a9dfc8c4d5868c85de862bcd0583ac6f6312ff19b4c7363ab494471885043d6ccf2c82efe9516f712f946f701ef6a08e95d539e766e1e826266519ba5d93884aaf059f3617063c1dae6c04f4e767790122a5ffdc119a820c9a4ae4ce2106ae0516bdf083fe5db4db345765d26e5c1aa8a755b4bac028862cb558e3105512c2d7e6a367de0a89503c01b515708e40c5069d0ed2609071d05601836ddff32023a99d195795f87f16a0f7d64db22c91a9d1680707738f049fa810f0370af6b5473cd8055d9345833483f5f0cf5e7ea07ade2d82c21ff06e05d6b511b39c712ec7a77b9ee1e9faed3072cd5a0d54fb322b43f274c74ce4100a871e1d77c80ffa74491940aecf96eea3ba01a3152d73cb4c16c63edc4513dc8514a65c4febab0f57fdd5f05a4159e718b33d8a6ad911f07c8e2d26be5434db0ee2019751fa54ee91509b5500e1b465f3241e89f05b5c82c96b7c3a8f3ece120236a4b9fd286834faf3add42de1053e24645db0c71299271c7f8d7456ed1b11", 0x1000, 0x766}], 0x800, &(0x7f00000001c0)='\x00') mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:34:04 executing program 6: [ 173.367274] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:34:04 executing program 3: 03:34:04 executing program 7: 03:34:04 executing program 6: 03:34:04 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000100)=0x7, 0x4) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=@random={'trusted.', 'b\x00'}, &(0x7f0000000240)=""/138, 0x8a) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r1, 0x400, 0x0) getdents(r1, &(0x7f0000000040)=""/148, 0xab) 03:34:04 executing program 0: 03:34:04 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'bond_slave_0\x00', 0x43732e5398416f1c}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="0300000000000000000000f734781cda801c20fd0376c506bafd21e03551b211f02066d8dd2438c79298a9901f04c9245f59fdad68f98eb2dd83877a941770bb747bae930f44c2e047bdd0f5bc930c341dc04cb477b7410000000000"], 0x28}, 0x1}, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000200)={0x5, 0x0, [{}, {}, {}, {}, {}]}) r3 = dup2(r1, r0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'ip_vti0\x00', 0x400}) 03:34:04 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=ANY=[@ANYBLOB="180000008000000000000000000000000000000000000000"], &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/zero\x00', 0x80000, 0x0) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000800)) msgget(0x2, 0xe1) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f0000000940)={0x4}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_mount_image$bfs(&(0x7f0000000100)='bfs\x00', &(0x7f0000000200)='./file0\x00', 0xae, 0x6, &(0x7f0000000700)=[{&(0x7f0000000240)="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", 0xfe, 0x2}, {&(0x7f00000003c0)="2cc5f6d21075927df378007dc7c91af2680fc0f9dacb1e067bc7c21665b502a24f5885e0b2b7322e96f5821d989e5c802bfe6602ec9f7247be7e865cc02b69fb8417bc33898853de06610b3fadb4452368ca7c075b448c5e795d79edc63f833b1472318e5257c82a9ddd2eb69d71b44cf29307e70e032a07b84ca692908343379671e21e31ac3dda9c696551e0c7c7238c4c28b860cafe36529e93c13fce7984", 0xa0, 0x5}, {&(0x7f0000000340)="ce1bb06c73d115", 0x7, 0x4}, {&(0x7f0000000480)="0f46e76e77b335cf4f72bce2089b30bb18d9d5261093839586c322a64102da1957f51cfda218a189f1d4cb7782d9b7a6f3998da76323e277fd39bcd4e72118ba7428d428ad89893072150a9cb05ebaea68df9e69d27e1703d8fcf1f65b1ddce62a91b47a8836d92889768c0a818e513d27fc20b1890648d4b15ab8e88b532eb83b06ec94d0b456fa754971fe41786cc4a416c26abe450fc57b2c5f0d98a7b7a3634eb58f0c59716098d1e96f487505fa7784c9", 0xb3, 0xfffffffffffffffe}, {&(0x7f0000000540)="449008e30e8e552ff441861eaf86f7a6b52a70f4a98489c3054156ed3d1cd2141a61a78c08f2f2688ded691e19ffcbce542fce7caf9c3dcee5bcc84da10aaa7ea7e2eaf036187be1c553d38b4f97db86f970b91206683781c58ff492beeb4d799d1a7f27ca6bd0ab36352c033faf1813e03fb8b0bb755b7416d1e87c3a6406d58a583ff63cc975392b4d5b319f129d98942ef434eb992f3111da30857c814743a5624d56dd73f42813db99a1b4037b547e404df49d486391f2b33fb30190205dc3e0771a4c12821c32bd89cc5a56", 0xce, 0xcb2}, {&(0x7f0000000640)="6cd6a5c381f48f277909593f876b409441c5c10b8ba0261718c8ff395d9d89b3d9e13382845aef2762ebdcd85736fed542a2d0594e5f2507e0d1e7df6068ef410d6122d77ba0cc1e960336556e5bac7029354c00d5749addfd7d15e5be493c7c7abc6cf3ca2a59ad8013779798f8b6f7825b433525c78ed0e901e2f65c21c46ad2a9eff1b1ba06354c3b45634c19ed773baccc48413951", 0x97, 0xce0}], 0x800, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000040)="0faebc680036adbaf80c66b82683a78966efbafc0ced0f080f00d366b9ae0a00000f32670fe278050f0667362b8100400000660f54eb", 0x36}], 0x1, 0x80000037, &(0x7f0000000080), 0x0) pipe2(&(0x7f0000000900), 0x4800) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000980)={[0x80, 0x5, 0xe0, 0x7, 0xc1b0, 0x80000000, 0x7, 0x6f3c, 0x5, 0x5, 0x9, 0x3, 0x3, 0x81, 0x27, 0x4], 0x3000, 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000080)=r0) finit_module(r0, &(0x7f00000000c0)='/dev/net/tun\x00', 0x1) 03:34:04 executing program 6: 03:34:04 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000200)='*[\x00', r1}, 0x10) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x89fb, 0xfffffffffffffffb, 0xa2c4, 0x1, 0x1000}) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f0000000100)=0x2) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x3}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYBLOB="010f070059b9010487bf35da040001000600"], 0x16) 03:34:04 executing program 3: 03:34:04 executing program 7: 03:34:04 executing program 0: 03:34:04 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) lseek(r0, 0x400, 0x0) getdents(r0, &(0x7f0000000040)=""/148, 0xab) [ 173.646303] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:34:04 executing program 3: 03:34:04 executing program 6: 03:34:04 executing program 0: 03:34:04 executing program 7: 03:34:04 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000080)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) rmdir(&(0x7f00000000c0)='./file0\x00') 03:34:04 executing program 3: 03:34:04 executing program 6: 03:34:04 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x3a48f2081cd289ce, 0x5, 0x4000000000006) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000002001ffc}, 0xc) r3 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x7, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f00000002c0)=""/183) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000001440)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001400)={&(0x7f0000001300)=ANY=[]}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{&(0x7f0000000780)=@ipx, 0x80, &(0x7f00000008c0)}}, {{&(0x7f0000000900)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast2}}}, 0x14d, &(0x7f0000000c80), 0x0, &(0x7f0000000cc0)=""/191, 0xbf}}], 0x2, 0x10022, &(0x7f0000000e00)={0x77359400}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r4, 0x400, 0x0) getdents(r4, &(0x7f0000000040)=""/148, 0xab) [ 173.759359] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=918d0000) [ 173.779644] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 173.884836] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 173.896172] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=918d0000) 03:34:04 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'sit0\x00', 0x1000}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="0300000000000048001b000000000000"], 0x28}, 0x1}, 0x0) dup2(r1, r1) 03:34:04 executing program 0: 03:34:04 executing program 7: 03:34:04 executing program 3: 03:34:04 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x1000442) rmdir(&(0x7f00000000c0)='./file0\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x4, @loopback={0x0, 0x1}, 0x10001}, @in6={0xa, 0x4e23, 0x1, @mcast1={0xff, 0x1, [], 0x1}, 0x3aac0000}, @in={0x2, 0x4e20, @broadcast=0xffffffff}, @in={0x2, 0x4e20, @loopback=0x7f000001}, @in6={0xa, 0x4e24, 0x1, @empty, 0xfff}, @in={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e20, 0x6370, @mcast1={0xff, 0x1, [], 0x1}, 0x200}, @in6={0xa, 0x4e22, 0x7, @remote={0xfe, 0x80, [], 0xbb}, 0x6}, @in6={0xa, 0x4e22, 0x9123, @empty, 0x7}], 0xd8) fgetxattr(r2, &(0x7f0000000140)=@known='security.evm\x00', &(0x7f0000000180)=""/99, 0x63) 03:34:04 executing program 6: 03:34:04 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x280, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e22, 0x7fff, @dev={0xfe, 0x80, [], 0xb}, 0x2}}, 0x5, 0x7, 0x0, "96326461bae4fc512b6a5230eb95345fe40fa9807ba11641bae23b9ac591ba7a4ab739ff441df984d5cfdcd24d6081f720b31ec383ab207da5a6931b4c51a245911fa5d6c8eae1a083007b26aecb4f4f"}, 0xd8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) 03:34:04 executing program 5: r0 = accept4$unix(0xffffffffffffff9c, 0x0, &(0x7f0000000280), 0x80800) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000002c0)={0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f0000000400)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000004c0)={r1, r2, r3}, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x1, 0x2c7, 0x3, 0x738d, 0x0, 0x3, 0x0, 0xe, 0x1, 0x1ff, 0x5, 0x8, 0x253, 0x0, 0x10000, 0xfc0, 0x80000001, 0x2, 0x100000000, 0x59, 0x6, 0x0, 0x812, 0x5, 0x8, 0x1, 0x9, 0x8, 0x80000001, 0x5, 0x6f61b1b6, 0x4, 0xcf, 0x6, 0x10001, 0x7, 0x0, 0x800, 0x6, @perf_config_ext={0x8, 0x7}, 0x100, 0x5, 0x4, 0x0, 0x10000, 0x6, 0x7}, r5, 0x5, 0xffffffffffffff9c, 0x8) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r6, 0x400, 0x0) getdents(r6, &(0x7f0000000040)=""/148, 0xab) [ 174.004440] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 174.020398] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. 03:34:04 executing program 7: 03:34:04 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) 03:34:04 executing program 3: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r0, 0x0, 0xb612, 0x3ff) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000100)={0x0, 0xfffffffffffffffe}) 03:34:04 executing program 6: perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x30, &(0x7f0000000280)=r0, 0x706) 03:34:05 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000180)={0x18, 0x401}) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000100)={0x7cf9ba99, 0xffffffffffff2dfc, 0x4}) read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') ioctl$VT_WAITACTIVE(r1, 0x5607) 03:34:05 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) r2 = dup2(r1, r0) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000080)=0x8001, 0x4) 03:34:05 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000083000/0x2000)=nil, 0x2000}, &(0x7f0000000140)=0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) syslog(0xa, &(0x7f00000002c0)=""/185, 0xb9) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000240)='./file0\x00', 0x0, 0x8}, 0x10) getdents(r0, &(0x7f0000000200)=""/9, 0x9) lseek(r1, 0x400, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getdents(r1, &(0x7f0000000040)=""/148, 0xab) 03:34:05 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000004111000268009500000000000040"], &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x84) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x200000, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000080)=r0) 03:34:05 executing program 7: open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) 03:34:05 executing program 6: 03:34:05 executing program 3: 03:34:05 executing program 0: 03:34:05 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) r3 = accept(r1, &(0x7f0000000180)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000080)=0x444) rmdir(&(0x7f00000000c0)='./file0\x00') setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000100)=0xb3c, 0x4) 03:34:05 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000729000/0x4000)=nil, 0x4000, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r1, 0x400, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000100), &(0x7f0000000140)=0x4) getdents(r1, &(0x7f0000000040)=""/148, 0xab) 03:34:05 executing program 6: [ 174.254361] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:34:05 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000000)={0x31, 0x6, 0x0, {0x0, 0x0, 0x8, 0x0, 'syscall\x00'}}, 0x31) 03:34:05 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x2, 0x0) io_setup(0x3, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000ac0)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)}]) 03:34:05 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ae2ae908e334c3bf87a4061e2b93a960dfe8c4d23290f57e1f3144f67701bbdb15986f41886558116e78b8a9fe6c8452efa6166a5a638818d78f8210a2e4fe90", "4935bb334067f0cb66b4070bf73d23d1dd1e774e30c3f630faf36ae3019074aefd2a9955e246d8cd8fe2d04d4bfeb7854227d1a0b6573ba7106e82f4d8e91baf", "c88bbcd45e7ac2341b0ae875a628539785478280a90425e0f47fc53005c01ec7"}) 03:34:05 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000007b75dc204caf10ccd365b3cabe9d901fe9d4cb1a03c740e4f49f7f3336b208903c5273c7b3239b48b3dd92b92f3febced22ffc000000000000"], &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000380)={0x1, 0x1}, 0x8) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f00000002c0)={0x0, 0x0, {0x38, 0x11, 0x11, 0x1c, 0x3, 0x0, 0x1, 0x144}}) socketpair(0x1d, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000240)=r0, 0x4) ioctl$sock_SIOCADDDLCI(r5, 0x8980, &(0x7f0000000300)={'yam0\x00'}) ioctl$int_out(r3, 0x2, &(0x7f0000000140)) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) 03:34:05 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000480)='./file0\x00', 0xfffffffffffffffd, 0x40) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000340)={'vcan0\x00', 0x1000}) read(r2, &(0x7f0000000240)=""/109, 0x6d) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x60, &(0x7f0000000040)={0x0, @empty, 0x0, 0x0, 'dh\x00'}, 0x2c) rmdir(&(0x7f00000000c0)='./file0\x00') recvfrom$unix(r1, &(0x7f0000000100)=""/236, 0xec, 0x101, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000080)={0x1, 0x1000, 0x6}) readlink(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=""/88, 0x58) 03:34:05 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000cd9ff4)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000000)) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) dup3(r1, r0, 0x0) [ 174.443061] can: request_module (can-proto-0) failed. 03:34:05 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x400, 0x0) ioctl$TIOCSBRK(r0, 0x5427) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000140)=0x10001) lseek(r1, 0x400, 0x3) mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x10, r0, 0x100000000) getdents(r2, &(0x7f0000000040)=""/148, 0xab) 03:34:05 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}, 0x1}, 0x0) dup2(r1, r0) 03:34:05 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f0000000080)='./file0\x00') 03:34:05 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000140)='threaded\x00', 0x9) 03:34:05 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)="2e2f6367726f75700032365469ea4cdb59d6f73ceae6c70c0061712de6ef5e1ccac9e67486b7f612ba1117c2e2618771327634b9b5a428b1f1d3e0fa49a06183b1d95b7043275e3f068ec7b914be9076d9ceee26b874fdd7acc756ec704b54b63dba7a2bd5a7567572269acc48e8b0a631ba0016f686ad63ec883930869f2f641634b74798cf9f5e0bd5daef42d643041761be6092495cc23452c3e110ce4373a286fa6eb49d543698585200e3542b94773c89e6fd5cf63dd18239f71ee77525d0c04d89e90ca4ddbbfad28bed57660c9e3d4ae819038620c43df5bc96f9ec56a66ef8160692825390bc22b0ebbb9df98de9ad0f7a840f9fc9382e63e151c05d", 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.low\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000180)=0x100000001, 0x12) 03:34:05 executing program 7: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c906d6b660800666174000204010a0200027400f8000000000283224ea4224b5494fab2", 0x25}], 0x0, &(0x7f00000000c0)) 03:34:05 executing program 6: creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$f2fs(&(0x7f0000000140)='f2fs\x00', &(0x7f0000000180)='./bus\x00', 0x0, 0x0, &(0x7f0000001300), 0x1000, &(0x7f0000001440)=ANY=[]) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) syz_mount_image$ext4(&(0x7f0000001340)='ext4\x00', &(0x7f0000001380)='./bus\x00', 0x0, 0x1, &(0x7f0000001780)=[{&(0x7f0000001580), 0x0, 0x1c15}], 0x0, &(0x7f00000002c0)=ANY=[]) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f0000001f00)) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000001c0), 0x20, 0x2) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000340)={0x28, 0x2}, 0x28) [ 174.512872] can: request_module (can-proto-0) failed. [ 174.528946] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:34:05 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) r2 = dup2(r0, 0xffffffffffffff9c) write$P9_RWSTAT(r2, &(0x7f00000000c0)={0x7, 0x7f, 0x2}, 0x7) 03:34:05 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:34:05 executing program 0: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)={0x28, 0x4}, 0x28) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000100)=ANY=[]) [ 174.591983] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 174.602748] EXT4-fs (loop6): VFS: Can't find ext4 filesystem 03:34:05 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) syz_mount_image$nfs4(&(0x7f0000000100)='nfs4\x00', &(0x7f0000000140)='./file0\x00', 0x1, 0x1, &(0x7f0000000240)=[{&(0x7f0000000200)="37d0c132402a2496eb35cdbb64b8351a221371b644e4fbd88d4c5effacdb83bb524e1bece1ac85f4b194a1cde85afcca94a3b2ca0e97c11ff575f0a3ca", 0x3d, 0xfffffffffffffffa}], 0x200080c, &(0x7f0000000280)='/dev/ptmx\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r1, 0x400, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000002c0)=@req={0x80000000, 0x9, 0x3f, 0x1}, 0x10) getdents(r1, &(0x7f0000000040)=""/148, 0xab) 03:34:05 executing program 3: r0 = creat(&(0x7f0000003200)='./file0\x00', 0x0) r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f0000000080)=ANY=[]) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)='5', 0x1}], 0x1, 0x20000) fallocate(r0, 0x3, 0x0, 0x20001) 03:34:05 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000018c0), 0x0, 0x0, &(0x7f0000001940)={0x0, 0x1c9c380}) geteuid() setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001980)={{{@in=@multicast2=0xe0000002, @in6=@ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}}, {{@in=@loopback=0x7f000001}, 0x0, @in=@local={0xac, 0x14, 0x14, 0xaa}}}, 0xe8) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB='!'], 0x1) sendto$inet(r0, &(0x7f0000000040)='Y', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) inotify_init1(0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) getegid() setfsgid(0x0) pipe(&(0x7f0000000180)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[]}, 0x1}, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00', 0x101}) read(r0, &(0x7f00000001c0)=""/244, 0xf4) close(r0) 03:34:05 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x400100, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in=@remote, @in=@broadcast}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000180)=0xe8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b00000000006d65a23a5388c68324a77f6cf86c8efe289652779894aa932ffd5d0c3c5649ecb749fdab4bf6ef1deb97abaae1d5b68433d30af5a97ddbdbe775612aa9641daae819f7c1bc65aa3347ad0c583b7f1430d7a00ffd8b8b39c007fcca27b876a6333636e4"], 0x28}, 0x1}, 0x0) dup2(r2, r0) 03:34:05 executing program 7: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f00000001c0), 0x1000) 03:34:05 executing program 1: fchdir(0xffffffffffffffff) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0x35, "96da4bf97203508e669583a4a55aa70ff845b314d1b08a0909c946b77242908b64f0deddd05f78432c58e9f5a7fa0057a8b5c4dcae"}, &(0x7f0000000100)=0x3d) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={r1, 0x7}, 0x8) rmdir(&(0x7f00000000c0)='./file0\x00') 03:34:05 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0xd000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) 03:34:05 executing program 0: socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000080)={0x0, 0x0}) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000007c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) write$P9_RREADDIR(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='\v\x00\x00\x00)\x00\x00'], 0x7) 03:34:05 executing program 3: r0 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) write(r0, &(0x7f0000000080)="8c28ac171f4508f013489ebef5d925549b9dcec92035dcd9b5b32ca3a6d97fbd267bf7dac7956dfa", 0x28) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000317000), 0xff8) sysfs$1(0x1, &(0x7f0000000040)='\x00') [ 174.778573] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 03:34:05 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/148, 0xab) 03:34:05 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0xc0505350, &(0x7f0000000000)={{0x0, 0x1}, {0xf}}) 03:34:05 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)="2e2f6367726f757000ce9958ac605df21c85ee3e8291c0fff542ad6a5a0756198e684709d9a072d93c94e900db27aaa5b1", 0x200002, 0x0) fchdir(r0) readlink(&(0x7f0000000280)='./file0\x00', &(0x7f0000000240)=""/52, 0x34) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000100)=""/109, 0xfffffffffffffea7) rmdir(&(0x7f00000001c0)='./file0\x00') 03:34:05 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000240)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000000000000000000000000000000000000000000766696c6530000000"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r1, &(0x7f0000000500)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d}, 0x2c}]}}) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)=""/16) 03:34:05 executing program 5: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) getdents(r0, &(0x7f0000000200)=""/94, 0x5e) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000280)={0xfffffffffffffffd, 0xe9, 0x1e, 0x7f, 0xff, 0x5, 0x7fff, 0xffffffff, 0x2, 0x1, 0x7, 0x1}) lseek(r2, 0x400, 0x0) statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/26) getdents(r2, &(0x7f0000000040)=""/148, 0xab) 03:34:05 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0xc0505350, &(0x7f0000000000)={{0x0, 0x1}, {0xf}}) 03:34:05 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x80000000}, &(0x7f0000000100)=0x8) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, r4, 0xa00, 0x70bd2b, 0x25dfdbfd, {0x8}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044800}, 0x80) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={r3, 0x7}, 0x8) [ 174.981633] FAT-fs (loop3): bogus number of reserved sectors [ 174.987694] FAT-fs (loop3): Can't find a valid FAT filesystem 03:34:05 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0xc0505350, &(0x7f0000000000)={{0x0, 0x1}, {0xf}}) 03:34:06 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r1, 0x400, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfb}, 0xc) getdents(r1, &(0x7f0000000040)=""/148, 0xab) [ 175.143950] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 175.195069] device lo entered promiscuous mode [ 175.214827] FAT-fs (loop3): bogus number of reserved sectors [ 175.220803] FAT-fs (loop3): Can't find a valid FAT filesystem [ 175.252441] device lo left promiscuous mode 03:34:06 executing program 6: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000023c0)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 175.334488] device lo entered promiscuous mode [ 175.348588] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:34:06 executing program 4: prctl$getname(0x10, &(0x7f00000001c0)=""/4096) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) dup2(r1, r0) 03:34:06 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) getsockname$unix(r1, &(0x7f0000000100)=@abs, &(0x7f0000000080)=0x6e) read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:34:06 executing program 7: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000200)={0x13, 0x7, 0x0, {{0x6, 'msdos\x00'}}}, 0x13) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000040)) ftruncate(r1, 0x80003) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 03:34:06 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x10000, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f0000000200)=""/93) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r1, 0x400, 0x0) getdents(r1, &(0x7f0000000040)=""/148, 0xab) [ 175.458763] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000020) [ 175.466237] FAT-fs (loop7): Filesystem has been set read-only [ 175.473542] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000020) [ 175.478849] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 175.486521] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000020) [ 175.496146] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000020) [ 175.507990] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000020) [ 175.558623] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:34:06 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000540)}}, 0x20) 03:34:06 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000200)=""/218) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) 03:34:06 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) rename(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/file0\x00') open$dir(&(0x7f0000000180)='./file0/file0\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000040c0), 0x1000) read$FUSE(r0, &(0x7f00000020c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b}}, 0x50) write$FUSE_DIRENT(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="90000000000000000200000000000000010000000045000000000000000000000b08956d069e000000002066ce654d316e6f646576656d3100f9ff00000000000000000000000000000000000001000000000000002c00000000000000000000000000000000000000000000001c000000000000002b737973740400000065746367726f7570246367726f7570150000"], 0x90) 03:34:06 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r1, 0x400, 0x0) getdents(r1, &(0x7f0000000040)=""/148, 0xab) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x6, 0x6}, &(0x7f00000003c0)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000400)={r2, @in6={{0xa, 0x4e22, 0xa4, @mcast2={0xff, 0x2, [], 0x1}, 0x7f}}, 0xec9, 0x7}, 0x90) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000200)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@local}}, &(0x7f0000000100)=0xe8) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000140)={@broadcast=0xffffffff, @empty, r3}, 0xc) 03:34:06 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f0000000100)='./file0\x00') 03:34:06 executing program 7: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhost-net\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000340)) 03:34:06 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x43732e5398416f1f}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000100063ba0000318000000000000000000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}, 0x1}, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f0000000180)) getsockname(r2, &(0x7f0000000300)=@rc, &(0x7f0000000380)=0x80) syz_open_dev$usbmon(&(0x7f0000000240)='/dev/usbmon#\x00', 0x5, 0x0) getsockname$packet(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000002c0)=0x14) 03:34:06 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = accept$unix(0xffffffffffffff9c, &(0x7f0000000100), &(0x7f0000000080)=0x6e) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f00000002c0)=""/136, &(0x7f0000000180)=0x88) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r3, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:34:06 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) 03:34:06 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) r2 = semget(0x2, 0x0, 0x80) semctl$SETVAL(r2, 0x3, 0x10, &(0x7f0000000140)=0x5) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x24200, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r3, 0xc0305302, &(0x7f0000000100)={0x10000, 0x5, 0x5, 0xffffffffffff7fff, 0x3, 0x9}) 03:34:06 executing program 0: mkdir(&(0x7f0000000640)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000002c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='gfs2\x00', 0x100000, &(0x7f0000000480)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000100)='.', &(0x7f00000001c0)='loefs\x00', 0x9004, 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x80000, &(0x7f0000000140)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000377ff8)='.', &(0x7f0000002e80)='./file0\x00', &(0x7f0000753000)='msdos\x00', 0x5010, &(0x7f0000000380)) umount2(&(0x7f0000000440)='./file0\x00', 0x0) [ 175.783230] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 175.798552] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. 03:34:07 executing program 6: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x80, 0x0) r1 = memfd_create(&(0x7f0000000140)="2b8b8a16114fdddf6b284699df92d53e6f4a02759b9461ac", 0x3) write$binfmt_misc(r1, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(0xffffffffffffffff, r1, &(0x7f0000000200), 0xffff) fcntl$addseals(r1, 0x409, 0x8) shutdown(r0, 0x1) 03:34:07 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x200, 0x0) lseek(r0, 0x400, 0x0) getdents(r0, &(0x7f0000000040)=""/148, 0xab) 03:34:07 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x7164, 0x7, 0x9, 0xffffffffffff0001, 0x7fff, 0x9, 0x6, {0x0, @in={{0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x28000, 0x3, 0x8, 0x7, 0x4}}, &(0x7f0000000080)=0xb0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000002c0)={r3, @in6={{0xa, 0x4e23, 0x7, @empty, 0x80000000}}, 0x3ff, 0x3ff}, &(0x7f00000001c0)=0x90) read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:34:07 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x400000) r1 = socket$inet(0x15, 0x5, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2) bind$inet(r1, &(0x7f000001bff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) connect$inet(r1, &(0x7f0000024ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000440)=[{0x10, 0x114, 0x3}], 0x10}, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f00000001c0)) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f0000000480)={"64b928d8ab3af280985c56850647a8a30483fc6b79eb655a476d3cffef710c1de0c51eab189c2e8b71791c9511710c226b0a71006d52c04151dae5e51e67d22aba1d528ec5d98ae6bb44739a4249f7a49a599662c88a6fd83f2021f2323eb289c6bff11ae3df95ab8e17bab31c468778ba46eca6c38834c794536237eb5161c76b369f9250bbd677dfdd621e4024852b48bed61ff241bd9faa0184df7af5ebad9b434dd5125b9573c94d7034b8c7583e5293db636c9a9e79a204b3f7d221f7660b36b20951402023c3fecf39dbc8ca98f3715f0fe09a45e537d8f896548380b6ee3cb1c1dd881d25d99e28a6db73716ed668e4337c532aa832c4915f6e3cf3cfa6ea07b8ee764a4d235516fba925be8dea0822589acfb502d682d25e65952c543fdf1e49c0c48fa9461445dfafcac78d3fd224db034eeaf5aad0f38636e7363d4bd78fbf6c83bf5aeabb3d2079420ad0ece89545d33a19abbc2c19e4a2d650ef15cc127acb59ab249e97dc5cc86b46d28fb548b0d26c2c65d32e5d65175a786560f8fb1e033dcf2c83378a6805a8b4db078b77fd37566c3caeeba87e9e90ac22e1b9bc4794034902ba18aecb631e32fabd2a67a72d2ff2f7a11cf5a93ea3429760956bcf7dfb13356924a15d54d71b81b73d439dc14ee42726f5fb9f3f12ed3f765695e4d2a822a17a0914e3b0ff12461f84ec6482fa46a5fb226bcdfee4948590bfcc59dd053f16baf9f4c6fd283e6265e1404529edcbdd8637c29c5530e093c042730eac03729c0a99fc478fdb77889770654bc5126c3f2a892b093aa8a2c85957b5a083f32fe49d9de6f225acc7f116f21ff0f44ffb569ef9444b43265e6e8914c1407fc6bbb20712b21f2c4b79557311388b6630b3f292da97cbcdd4882697ae60604c00f89ddef0c36ed7247ce46fd1f86971c47f2106681ca9cfd8d26ff959193cd7c13c28802286eac79635477b781b85d204db8823db0ae00916a8f8baae454b87c2db810f5ccf11f0c51bfddd4c3c2f58b2c2a888cb5c8caeb69e87b856cf945997c5c30588133bc4c43e36fd4c7687258f48cca2fee88ed89badad896c5affc0186d0ff36b5723955622e6196b2238f37c7ee21a6df1c7e8f58f4a9818eb928649118fdb56709d6520c8d405205154a9f1e9aa75022f50cb109265c5483142d4e23746dd5330067dac1779303d8b31f4ad9b62a82efc542e187b6edb1eab0e673e9d1facb4f4ed7102b44876ab6c5b0f35c89235da7118b5589fb935915bf850f6dafa07d7ba46969561c7f9bb8964af37f5a26ed277fa550d61c7bbff9065ed301e6add448896ebd9a8bf578e9fed76f16df8549a0629c118854a138ef3e7de7d2979200038d24b50e837ae025f17b8b328aeaf6cc2e66b692b7cf5d96b3f6c27df45e0133362356391a6132f5406eac5d374afad07b2cc71e61f"}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000380)='\x00') sendmsg$nl_route(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="0400010010005fba000000000000020000082800050ce06d90575ba1d330eea763c4af1674fe67181a9ad783b851cae86b583d555ac62f2e11a6360c6babbed3ec21179adfcea4682fc1247a0f56ea7608e001e4ab9cdb9a4c554aa344ebcdd7a3afdb558022f25fbc58004ec71e5e7a6aa1d5c430296c854d6c166c99a96a633b9323a3fdc22e77f345744020d67146f7bba23706cdbd63793f2040d570079307f87032d027a045ab643e32dd", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}, 0x1}, 0x0) r4 = dup2(r3, 0xffffffffffffffff) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000200)={0x9, {0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x4e24, @multicast2=0xe0000002}, {0x2, 0x4e20, @multicast1=0xe0000001}, 0x206, 0x0, 0x6, 0x40, 0xfff, &(0x7f0000000080)='veth1_to_bond\x00', 0x5, 0x1, 0x92}) 03:34:07 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={"6e72300100", 0xffffffffffffffff}) setsockopt$inet6_buf(r0, 0x29, 0x1b, &(0x7f0000000040)="f1795eb4edba9e2742ff2aac450c7f6fc0865c8b16681f", 0x17) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) 03:34:07 executing program 7: getsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f00000001c0)=""/218, &(0x7f0000000080)=0xda) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), &(0x7f0000000140)}, 0x20) bind$vsock_dgram(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host=0x2}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) 03:34:07 executing program 0: r0 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x0) close(r0) 03:34:07 executing program 7: mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x840, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000280)='.\x00', 0x4a400295f) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000340)='./file1\x00', r1, &(0x7f0000000100)='./file0\x00', 0x2) close(r0) 03:34:07 executing program 6: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180), 0x4) getsockopt$packet_int(r0, 0x107, 0x12, &(0x7f00000014c0), &(0x7f0000000000)=0x4) 03:34:07 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007fe, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) writev(r0, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) sendmmsg(r0, &(0x7f0000006140)=[{{&(0x7f0000000200)=@rc={0x1f}, 0x80, &(0x7f0000000300)}}], 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2}, 0x6) 03:34:07 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x420440) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f0000000140)=0x8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r3, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:34:07 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff070000000000000000000000000b000000000000000000001f0000ffffff03000000ef000003ff02000000000012000000000000000000000600", 0xc7, 0x80003}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) close(r0) close(r1) 03:34:07 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)="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", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r2 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x4000, 0xc) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000140), &(0x7f0000000200)=0xb) lseek(r1, 0x400, 0x0) getdents(r1, &(0x7f0000000040)=""/148, 0xab) 03:34:07 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="2800000010005fba000000de0000000000000000", @ANYRES32=0x0, @ANYBLOB="0300000d0000000008001b0000000020000000f84b135b358be5b516dfc34d63ddf00db712f93baeea1e0ec2f87ac70cb66ae6269a"], 0x28}, 0x1}, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000380)='team\x00') ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000800)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000580)={0x204, r3, 0x2, 0x70bd2d, 0x25dfdbfb, {0x1}, [{{0x8, 0x1, r4}, {0x7c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x100}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r5}, {0x164, 0x2, [{0x34, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x4, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xdf57}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0xfffffffffffffffd}}, {0x8, 0x7}}}]}}]}, 0x204}, 0x1, 0x0, 0x0, 0x14}, 0x840) socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x4, &(0x7f00000001c0)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) write$evdev(r2, &(0x7f0000000280)=[{{}, 0x1f15, 0x401, 0x2}, {{}, 0x8, 0xbeb7, 0x800}, {{0x77359400}, 0x0, 0xfff, 0xfffffffffffffffa}, {{}, 0x1f, 0x9, 0x87b}, {{r7, r8/1000+30000}, 0xfffffffffffffff8, 0x7, 0x8}, {{}, 0x800, 0xfff, 0x67}, {{r9, r10/1000+10000}, 0x2, 0x7ff, 0x298130ba}], 0xa8) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f00000008c0)={{0x9, 0x0, 0x0, 0x6, 'syz1\x00'}, 0x0, [0x91, 0xaa01, 0x5, 0x0, 0x0, 0x1000, 0x0, 0x6, 0xffff, 0x25, 0x2fe6, 0x1000, 0xfffffffffffff508, 0xb6e, 0x7, 0xb4, 0x1, 0xed28, 0x7f, 0x6, 0x8, 0x9, 0xffffffff, 0xc37, 0x7f, 0xfffffffffffffe00, 0xfffffffffffff001, 0x8, 0x5, 0x3, 0x5, 0x0, 0x4, 0xfffffffffffffff8, 0x2000000000000, 0xfffffffffffffffe, 0x3, 0xc526, 0x80000000, 0x7, 0x5, 0x3, 0x7, 0x88f, 0x800, 0x300, 0x4, 0xfffffffffffffffe, 0x6, 0xd, 0x4, 0xd75, 0xffffffff, 0x3f, 0x1, 0xc541, 0x401, 0xfffffffffffffffa, 0x400, 0x100, 0x396, 0x81, 0x2, 0x7, 0x8, 0x41, 0x6, 0x100000001, 0x4, 0x10000, 0x8, 0x0, 0x1, 0x8b2, 0x8, 0x9, 0x20, 0x100000001, 0x9, 0xde, 0x7fff, 0x8c2, 0x4, 0x5, 0xc6bd, 0x9, 0x200, 0xff, 0xc937, 0x5, 0x3, 0x0, 0x7ff, 0x8, 0x7fffffff, 0x70e7, 0x6, 0x4, 0x11584577, 0x2, 0x70b5, 0x800, 0x101, 0x4, 0x2, 0x8, 0x7cd, 0x80000001, 0x1000, 0x6, 0x6, 0x9, 0x9, 0x0, 0x5021, 0x9, 0x3, 0x1, 0x5, 0x5, 0x7fffffff, 0x9, 0x100, 0xfffffffffffffffa, 0x1000, 0x40, 0x4, 0x6], {0x0, 0x989680}}) dup2(r1, r0) 03:34:07 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, &(0x7f0000000080), r0, &(0x7f00000000c0), 0xfffb, 0xb) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) 03:34:07 executing program 7: mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x840, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000280)='.\x00', 0x4a400295f) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000340)='./file1\x00', r1, &(0x7f0000000100)='./file0\x00', 0x2) close(r0) 03:34:07 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) getgroups(0x2, &(0x7f0000000200)=[0x0, 0x0]) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000700)='./file0\x00', 0x40) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x4, &(0x7f0000000500)=[{&(0x7f0000000180)="2708b1d54c72609b894839eb701cf3269e5f918cf329436c97d1c0b7174895341eac5dfebaeac8cdcf4c4fe955e0637ed06d9ca8c1380ce6a052ea1df48c95c9df8481955d0070b8f08765e71dd0bf8ee9ec7169b9afbeddbf147d827b69c3869f99008f2a", 0x65, 0xca10}, {&(0x7f00000002c0)="f8e09bc410eae9eec40abfe6ffd5fcbb3f26fb0c642fa795d0887e8f0e91bd84299662c63743b8ac836fe5a8b8248eb130322e7e51fbe0a7ad2cf7448c2dcb2a9d6d66be1153baea6e7f8595917f2b65c9bbe24dd360201e39a5507aff848e6855456e07153ba3d9f154ef24d0a4e4052fa7c18e79e0964df35b710dc303f8b8ca96fe", 0x83, 0x4}, {&(0x7f0000000380)="e5d6440246f00734951cb12c06d616f91c6bdbdfe5905fe6dabc41a8239ec0f829a8b21d006a2ba28f3f7c895dfc950568239736d6f29dcdb91de785cc99dad51e0f56525bf3893597e870280b503b1bc41064bda97d053869c3891562dc61a75c8fd36a5112294de3a8c91b", 0x6c, 0x2}, {&(0x7f0000000400)="5d2cbf032712f081cffc1975e4003d578f85268aa59a7afaf4b412f6e9ced4eb208993c3b5951a0af93546a48e1638d84805e685a5d768c9d52c1edf581be1e3a424450a02f08e7b4c8fc3460fcce7589c99b9b66159457437f161223935e1250158abdc7589dd9d30372d1dfae09cdf7c370314b7f05d17e90556777c1d72fe1dc25993f140cdcadae29192d4f339cd04ee7aee78b90c15bd88072ea8cd1ecdafaf0d4971fcf073950000bb55261644292a1c436c50f6b186665e62e829a58dfcb2dc5f5dac554a6e0017b1aaa6210bbf56f2a8e2c4b6c9252b76df2f3d25ffd9c445ab6e", 0xe5, 0x7fff}], 0x20000, &(0x7f0000000640)={[{@dir_umask={'dir_umask', 0x3d, 0x9f80}, 0x2c}, {@gid={'gid', 0x3d, r3}, 0x2c}, {@codepage={'codepage', 0x3d, 'cp949'}, 0x2c}, {@gid={'gid', 0x3d, r4}, 0x2c}, {@dir_umask={'dir_umask', 0x3d, 0x4}, 0x2c}, {@umask={'umask', 0x3d, 0x5}, 0x2c}, {@part={'part', 0x3d, 0x800}, 0x2c}]}) rmdir(&(0x7f00000000c0)='./file0\x00') 03:34:07 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount$fuseblk(&(0x7f0000000b40)='/dev/loop0\x00', &(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)='fuseblk\x00', 0x40000, &(0x7f0000000c00)={{'fd', 0x3d}, 0x2c, {'rootmode', 0x3d}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) 03:34:07 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xe) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r1, 0x400, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100), &(0x7f0000000240)=0x8) getdents(r0, &(0x7f0000000040)=""/148, 0x47c) socket$inet6_udp(0xa, 0x2, 0x0) io_setup(0x9, &(0x7f0000000140)=0x0) io_submit(r2, 0x0, &(0x7f0000000200)) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000200)) 03:34:07 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) sysinfo(&(0x7f0000000200)=""/213) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) 03:34:07 executing program 7: mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x840, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000280)='.\x00', 0x4a400295f) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000340)='./file1\x00', r1, &(0x7f0000000100)='./file0\x00', 0x2) close(r0) 03:34:07 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000002c0)={@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x73, r2}) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) r3 = dup2(r1, r0) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000300)=0x6a) 03:34:07 executing program 6: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000380)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$sndseq(r0, &(0x7f0000000180)=[{0x5, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}], 0x30) 03:34:07 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000080), 0x4) read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') fallocate(r0, 0x1a, 0x4, 0x0) 03:34:07 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = getpid() ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f0000000340)={0x200000000000, 0x3d, 0x1f}) fcntl$lock(r0, 0x7, &(0x7f0000000300)={0x0, 0x7, 0x2, 0x4, r2}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r3, 0x400, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000003c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000440)={0xf, 0x8, 0xfa00, {r4, 0xf}}, 0x10) getdents(r3, &(0x7f0000000040)=""/148, 0xab) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000480)=0x2) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000140)={0x3f}) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000100)) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x6, 0x0, 0x16, 0x12, 0x4, "57650cba951b98c1c43ebfb501b48547bb2b02321846998e60244e8d7cc63fd6792bdf105dce41087c87f682ab314e3ed6864e12f53dc903581633c921fd4ea6", "82d76c3a7e7e9c9a5a3c1084ceccc1df17650a15493ebf877eac7bf4ec49de8d117941b9f83c12e8eae63b5f4a2c9f8927daa2839518dc6fea8bcc8f94935796", "ceaa113554bbf06ac4dea84a53e723faa8f46ff29516bd0ed37f3cc97a2e2065", [0x1, 0x8]}) [ 176.923929] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 177.033608] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:34:08 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) r2 = dup(r1) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x4008af13, &(0x7f00000127c0)={'team0\x00'}) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) close(r0) 03:34:08 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) fcntl$getflags(r1, 0xb) 03:34:08 executing program 7: mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x840, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000280)='.\x00', 0x4a400295f) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000340)='./file1\x00', r1, &(0x7f0000000100)='./file0\x00', 0x2) close(r0) 03:34:08 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000100)={0x7, 0x3, 0x4a, 0x6, 0x4, 0x7ff}) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000180)=0x14, 0x4) read(r2, &(0x7f0000000240)=""/109, 0x6d) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') 03:34:08 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x24000, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000080)=0x8, 0x4) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r1, 0x400, 0x0) getdents(r1, &(0x7f0000000380)=""/148, 0x94) 03:34:08 executing program 6: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 03:34:08 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getegid() write$P9_RCLUNK(r1, &(0x7f0000000180)={0x7, 0x79, 0x1}, 0x7) timerfd_create(0x7, 0x80800) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000010005fba00160000000000000000000082fcbcdac4dced10432aae906ab9f99c7dc6778f885731acfe3538e93b94a8619e6b82d537ca3316f9232a01c86e3fe1855d29fad4aa6bf68934e76609", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}, 0x1}, 0x0) dup2(r0, r0) 03:34:08 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) write$binfmt_aout(r0, &(0x7f0000000700)={{0x1cf, 0x0, 0x3}}, 0x20) 03:34:08 executing program 7: mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x840, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000280)='.\x00', 0x4a400295f) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000340)='./file1\x00', r1, &(0x7f0000000100)='./file0\x00', 0x2) 03:34:08 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000000002) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) write(r1, &(0x7f0000000100)='g', 0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000280)='~', 0x1}], 0x1) ioctl$TCXONC(r3, 0x540a, 0x1) 03:34:08 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0xfffffffffffffffe, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x80, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) [ 177.676184] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. 03:34:08 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'bridge0\x00', 0x6422}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x40, 0x0) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000100)={{0x2, 0x4e23}, {0x6, @random="7de079740fcb"}, 0x10, {0x2, 0x4e23, @broadcast=0xffffffff}, 'veth1\x00'}) 03:34:08 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x51, 0x80000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4002, 0x0) lseek(r1, 0x400, 0x0) getdents(r1, &(0x7f0000000040)=""/148, 0xab) ioctl$TCSBRKP(r0, 0x5425, 0x4) [ 177.729461] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:34:08 executing program 7: mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x840, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000280)='.\x00', 0x4a400295f) renameat2(0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x2) 03:34:08 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1d, &(0x7f0000000100)="a6d34c23c1b761c3a3df9cd8efbfa05d7940ad062839a19a857cb2921b61f758a2b10134975fb90e70091177fff2f6378df5c49db24f97fe8d8a2624b51b8123598c24ed1a3672cad9bead8d1ad72a3be9bd9718c51ebb2e1452b79a0bfb36a67e1f48", 0x63) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r3, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:34:08 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffff7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x20000, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r0, 0x400, 0x0) getdents(r0, &(0x7f0000000040)=""/148, 0xab) [ 177.772273] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 177.805815] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 177.855977] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:34:09 executing program 0: syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="eb3c906d6b660800666174000204010a0200027400f8000000000283224ea4224b5494fab2", 0x25}], 0x0, &(0x7f0000000280)) 03:34:09 executing program 7: mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x840, 0x0) inotify_init1(0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000340)='./file1\x00', r0, &(0x7f0000000100)='./file0\x00', 0x2) 03:34:09 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000080)='./file0\x00', 0xfffffffffffffffe) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000100)={0x0, 0x4}) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x412400, 0x8) r2 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:34:09 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) socket$vsock_dgram(0x28, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r0, 0x400, 0x0) getdents(r0, &(0x7f0000000040)=""/148, 0xab) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000100)) 03:34:09 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000fffbff98e500001a0000004000"], 0x28}, 0x1}, 0x0) dup2(r1, r0) 03:34:09 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r1, 0x400454cc, r2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'ip6gretap0\x00', 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) 03:34:09 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000080)=r0) 03:34:09 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x11, @local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, "64680000f0ff7c97ac76b6eecbfa00"}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 03:34:09 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) mount$9p_rdma(&(0x7f0000000100)='127.0.0.1\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x20000, &(0x7f00000002c0)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@rq={'rq', 0x3d, 0x5}, 0x2c}, {@rq={'rq', 0x3d, 0xa24f}, 0x2c}]}}) mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0xe0) read(r2, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:34:09 executing program 7: mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x840, 0x0) inotify_init1(0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000340)='./file1\x00', r0, &(0x7f0000000100)='./file0\x00', 0x2) 03:34:09 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x100000a) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r0, 0x500, 0x0) getdents(r0, &(0x7f0000000040)=""/148, 0xab) 03:34:09 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x9, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0}]) 03:34:09 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=ANY=[@ANYBLOB="060000000000000000000000000000000095000000000000"], &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) [ 178.586939] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. 03:34:09 executing program 3: socket(0x0, 0x0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='tunl0\x00', 0x10) sendto(r0, &(0x7f00000007c0)="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", 0x595, 0x3, 0x0, 0x0) sendto$inet(r0, &(0x7f00006d1fd4)="db", 0x1, 0x4000000, &(0x7f00004daff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) [ 178.659877] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. 03:34:09 executing program 7: mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x840, 0x0) inotify_init1(0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000340)='./file1\x00', r0, &(0x7f0000000100)='./file0\x00', 0x2) 03:34:09 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x11, @local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, "64680000f0ff7c97ac76b6eecbfa00"}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 03:34:09 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x11, @local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, "64680000f0ff7c97ac76b6eecbfa00"}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 03:34:09 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005f0000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x200000000}, 0x0) r2 = dup2(r1, r0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) [ 178.743745] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 03:34:09 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x9f) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) 03:34:09 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r0, 0x400, 0x0) getdents(r0, &(0x7f0000000040)=""/148, 0xab) 03:34:09 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x9}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={r3, 0x7, 0x30}, 0xc) rmdir(&(0x7f0000000300)='./file0\x00') setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000080)=[{0x2, 0xfffffffffffffffd}, {0x8, 0x344}, {0xf68bf12c3627edea, 0x5}, {0x8}], 0x4) 03:34:09 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x11, @local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, "64680000f0ff7c97ac76b6eecbfa00"}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 03:34:09 executing program 7: mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x840, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000280)='.\x00', 0x4a400295f) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000340)='./file1\x00', r0, &(0x7f0000000100)='./file0\x00', 0x2) 03:34:09 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) read$FUSE(r0, &(0x7f00000020c0), 0x1000) read$FUSE(r0, &(0x7f00000040c0), 0x1000) umount2(&(0x7f0000000100)='./file0\x00', 0x0) 03:34:09 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xf010, 0x5, &(0x7f0000000440)=[{&(0x7f0000000140)="97d71ac01b46712c627127ec81dacc705538009e5dbdc800bdcf01bdc81c18d5c220337258e3f278dcc2f8ac91a7ea1f898c206c425b2d4ed7ee3eae8349b591456cf23e521f42f4f3827d53280dbfa93875fac7c1f87b27e42499cfb4d43730f35973998a2a8d30ec726910cd20d5c4c07ae869982abe1582", 0x79, 0x8}, {&(0x7f00000001c0)="b03f7b7868134663bd1d71274b113c1fea8f7155ce5e60c72d56678b333126d4adec817f4f16f2020663423c78ce", 0x2e, 0x9}, {&(0x7f00000002c0)="fcb36f050f69129d4e6081a3ef0633be929226dea89714f836ed59828ca4d3ef96eac3f7e9bc83401ff8b783470aed601afbe8cd2d84076d9c61b1760f54df9a622edbc55dec84225d18df6fcf202b4cc410271f8d18a627c299dc9876915df6d5ef309829c66d6c5e92fffa1474c31226fa04", 0x73, 0x6}, {&(0x7f0000000340)="d4f16d85e2d93e10420024f0c530be4c4c4c83c93c5c9147c6ca714037f2ec0f09da063dc5c292708ba72c4d00437e6d1d388334bc53758ca1b4c0c2ea549990985dd8546979ae3bd4c0b644657595c5de15e72aa52bd2c63db44707c74bd40d521955a904557ae44bd85f722744baf7c2c55476ef5bbbbd05d88c662c735d62a2a010f6cc48f3df7ea64892e26ea2788b43f2814367936eeb06a2ca2bb3e97609e953ee1b59329b", 0xa8, 0x20}, {&(0x7f0000000400)="008d72cf9180e14fda5b69b99532cbe331ea2fbd0cb76fb068869c5d83", 0x1d, 0x9}], 0x100000, &(0x7f00000004c0)={[{@nodiscard='nodiscard', 0x2c}]}) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000240)=""/109, 0x6d) read$eventfd(r1, &(0x7f0000000500), 0x8) rmdir(&(0x7f00000000c0)='./file0\x00') 03:34:09 executing program 5: r0 = semget$private(0x0, 0x5, 0x20) semop(r0, &(0x7f0000000100)=[{0x0, 0xf86d, 0x1000}, {0x1, 0xee2, 0x1800}, {0x2, 0x1, 0x800}], 0x3) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r1, 0x400, 0x0) getdents(r1, &(0x7f0000000040)=""/148, 0xab) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) [ 178.882367] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. 03:34:09 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) ptrace$getenv(0x4201, r1, 0x100000001, &(0x7f0000000100)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000080)=r0) 03:34:09 executing program 7: mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x840, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000280)='.\x00', 0x4a400295f) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000340)='./file1\x00', r0, &(0x7f0000000100)='./file0\x00', 0x2) 03:34:09 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="f3"], 0x1) ioctl$int_in(r0, 0x8000008010500c, &(0x7f00000004c0)) [ 178.978535] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. 03:34:09 executing program 1: fchdir(0xffffffffffffffff) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000240)=""/109, 0x6d) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000100)='irlan0\x00') rmdir(&(0x7f00000001c0)='./file0\x00') write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x1, 0x0, {0x6}}, 0x18) 03:34:09 executing program 3: perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 03:34:09 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000100)={0x100, 0x101}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) 03:34:09 executing program 7: mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x840, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000280)='.\x00', 0x4a400295f) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000340)='./file1\x00', r0, &(0x7f0000000100)='./file0\x00', 0x2) 03:34:09 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) r2 = dup2(r1, r0) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000040)) mq_unlink(&(0x7f00000001c0)='/dev/net/tun\x00') getgroups(0x3, &(0x7f0000000200)=[0xee01, 0x0, 0xee01]) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f0000000240)={0x6, 0x2, {0xffffffffffffffff, 0x2, 0x81, 0x2, 0xb88}}) ioctl$TUNSETGROUP(r2, 0x400454ce, r4) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000480)=0xe8) mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='fuseblk\x00', 0x80, &(0x7f00000004c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@default_permissions='default_permissions', 0x2c}, {@max_read={'max_read', 0x3d, 0x6}, 0x2c}, {@blksize={'blksize', 0x3d, 0x1e00}, 0x2c}]}}) mount(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='ecryptfs\x00', 0x300000, &(0x7f0000000640)="110e71cb6afc7635255fa224516654838a780ca915ad") 03:34:10 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x8000, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000100)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x81, 0x2240) fchdir(r1) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e22, @multicast1=0xe0000001}}, 0x3f, 0x3, 0x2, 0xe}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000380)={r2, @in6={{0xa, 0x4e23, 0x100, @remote={0xfe, 0x80, [], 0xbb}, 0x6}}}, &(0x7f00000001c0)=0x84) r3 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_procs(r3, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0) read(r4, &(0x7f0000000240)=""/109, 0x6d) rmdir(&(0x7f00000000c0)='./file0\x00') 03:34:10 executing program 7: mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000280)='.\x00', 0x4a400295f) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000340)='./file1\x00', r1, &(0x7f0000000100)='./file0\x00', 0x2) 03:34:10 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000e15000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000133ffc)="71e67a15", 0x4) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffeee, 0x0, &(0x7f0000351ff0)=@ipx={0x4, 0x0, 0x0, "a074edebb7e1"}, 0x10) write$binfmt_script(r1, &(0x7f0000001280)=ANY=[], 0x0) readv(0xffffffffffffffff, &(0x7f0000001140), 0x0) [ 179.138847] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:34:10 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) 03:34:10 executing program 7: open(&(0x7f0000000040)='./file0\x00', 0x840, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000280)='.\x00', 0x4a400295f) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000340)='./file1\x00', r1, &(0x7f0000000100)='./file0\x00', 0x2) [ 179.296437] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:34:10 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f76") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, r2}}, 0x48) dup2(0xffffffffffffffff, r1) 03:34:10 executing program 1: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001580), 0x0, &(0x7f0000001680)={[{@commit={'commit', 0x3d, 0x937}, 0x2c}]}) [ 179.743078] gfs2: not a GFS2 filesystem [ 179.768756] gfs2: not a GFS2 filesystem 03:34:10 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18000000000000000000fcd794aef664dd00004000000095"], &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f00000000c0)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) 03:34:10 executing program 7: mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000280)='.\x00', 0x4a400295f) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000340)='./file1\x00', r1, &(0x7f0000000100)='./file0\x00', 0x2) 03:34:10 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) getpeername$llc(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000001c0)=0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) dup2(r2, r0) 03:34:10 executing program 0: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000001640)=[{&(0x7f0000000640)="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", 0x1ff, 0x1}], 0x0, &(0x7f0000001740)) 03:34:10 executing program 6: r0 = socket(0xa, 0x1, 0x0) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setgid(r1) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$setopts(0x4206, r5, 0x0, 0x0) 03:34:10 executing program 1: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000480)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x11, &(0x7f0000000600)=""/17}, &(0x7f00000003c0)="c0df24ae2a1c", &(0x7f00000016c0)=""/4096, 0x0, 0x4, 0x0, &(0x7f0000000440)}) 03:34:10 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) fcntl$setown(r0, 0x8, r3) getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f00000000c0)=""/99, &(0x7f0000000140)=0x63) getdents(r2, &(0x7f0000000200)=""/148, 0xfffffec7) 03:34:10 executing program 7: mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x840, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000280)='.\x00', 0x4a400295f) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000340)='./file1\x00', r1, &(0x7f0000000100)='./file0\x00', 0x2) [ 180.020891] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:34:11 executing program 1: socket$inet6(0xa, 0x0, 0x0) r0 = inotify_init() flock(r0, 0x2) r1 = epoll_create(0x102050204) flock(r1, 0x2) gettid() dup2(r1, r0) 03:34:11 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x180, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r0, 0x400, 0x0) getdents(r0, &(0x7f0000000040)=""/148, 0xab) 03:34:11 executing program 7: mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x840, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000280)='.\x00', 0x4a400295f) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000340)='./file1\x00', r1, &(0x7f0000000100)='./file0\x00', 0x2) [ 180.084451] ptrace attach of "/root/syz-executor6"[4485] was attempted by "/root/syz-executor6"[11789] [ 180.114895] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:34:11 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x0, &(0x7f0000000380)) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 03:34:11 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="4b3c00004002118961510a292b0d3ca17e2ad917d7f1102db8f971cf45ad0215f501f29743935ca69be020353ca8bfd9b1f4f762e321505189b9c96b4b1b60149310a8836d02ee1f856dbbdd3465390678638c3c9c4d96f53d528a6aa61103102292c71ef094133883ba"], &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setpipe(r1, 0x407, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) 03:34:11 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcd, &(0x7f0000000000), 0x3c) 03:34:11 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)) lseek(r0, 0x400, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x400, 0x0) getdents(r0, &(0x7f0000000040)=""/148, 0xab) 03:34:11 executing program 7: mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x840, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000280)='.\x00', 0x4a400295f) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000340)='./file1\x00', r1, &(0x7f0000000100)='./file0\x00', 0x2) 03:34:11 executing program 6: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000040)='threaded\x00', 0xfd87) fallocate(r0, 0x3, 0x0, 0x2cbd) sync_file_range(r0, 0x0, 0x0, 0x2) 03:34:11 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x661f8d093d74ee80}, {r0, 0x20}, {r0}, {r0}, {0xffffffffffffffff, 0x4000}], 0x5, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)={0x1000}, 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000240)=0x7) dup2(r1, r0) 03:34:11 executing program 7: mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x840, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000280)='.\x00', 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000340)='./file1\x00', r1, &(0x7f0000000100)='./file0\x00', 0x2) 03:34:11 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcd, &(0x7f0000000000), 0x3c) 03:34:11 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e723001000000000000000000000500", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) 03:34:11 executing program 6: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x40}) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) read(r0, &(0x7f0000000000)=""/128, 0x80) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f000018f000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1e, 0x8031, 0xffffffffffffffff, 0x0) 03:34:11 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x9, 0x2) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000200)) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000140)=0xb7e) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r2, 0x400, 0x0) getdents(r2, &(0x7f0000000040)=""/148, 0xab) 03:34:11 executing program 7: mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x840, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000280)='.\x00', 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000340)='./file1\x00', r1, &(0x7f0000000100)='./file0\x00', 0x2) [ 180.302835] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 180.480665] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:34:11 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x3f0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000240)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85322, &(0x7f00000002c0)={{0x0, 0x2}, 'port1\x00'}) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:34:11 executing program 3: open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='./file1\x00') 03:34:11 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcd, &(0x7f0000000000), 0x3c) 03:34:11 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000000100)=""/18, 0x12, 0x2020, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) lseek(r1, 0x400, 0x0) getdents(r1, &(0x7f0000000040)=""/148, 0xab) 03:34:11 executing program 7: mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x840, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000280)='.\x00', 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000340)='./file1\x00', r1, &(0x7f0000000100)='./file0\x00', 0x2) 03:34:11 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x200000000000009d, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x24c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={"6e72300100", 0x800000000009}) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='self\x00', r0}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipv6_getmulticast={0x14, 0x3a, 0x0, 0x70bd2a, 0x25dfdbfe, {0xa}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20008810) sendmmsg$inet_sctp(r2, &(0x7f0000000140), 0x0, 0x240000c0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) 03:34:11 executing program 4: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r0, &(0x7f0000000200)=""/107, 0x6b) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) syz_open_dev$sndpcmc(&(0x7f0000000280)='/dev/snd/pcmC#D#c\x00', 0xc9b7, 0x101000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) dup2(r2, r1) 03:34:11 executing program 7: mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x840, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000280)='.\x00', 0x4a400295f) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', r1, &(0x7f0000000100)='./file0\x00', 0x2) 03:34:11 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)="2f70726f632f7379732f0000000e342a39ee5c4ff2f5b9e13df208000000000000072f657870697265", 0x2, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x400, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getegid() fchownat(r0, &(0x7f00000002c0)='./file0\x00', r1, r2, 0x1000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2240, 0x0) lseek(r3, 0x400, 0x0) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000280)={0x5, 0xdf15, 0x100000000, 0x0, 0xc8d}) getpeername$inet6(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000240)=0x1c) getdents(r3, &(0x7f0000000040)=""/148, 0xab) 03:34:11 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x1040, 0x0) 03:34:11 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=ANY=[@ANYBLOB="180000000500000000000000ffff00009500000000000000"], &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) 03:34:11 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcd, &(0x7f0000000000), 0x3c) [ 181.049474] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:34:12 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x82) ioctl$LOOP_SET_STATUS64(r0, 0x4c02, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "804e2486cff9d9266b6504d1017e922724e02697040000005249cf42d85e7f102204bb458c81a116e92835a7de67f1f800000000b74e77d3dd1a520200c1748d", "9b0fcdf54d8916989d63700e3ae36c30222a2d0b51e59e9dd6b0f929a9bc926e01d8f4cc00", "73e37038ac9e1afce8d30c230037155d045737cfaa8dd98f8db0f64fe0594b51"}) [ 181.225938] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:34:12 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x9) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) 03:34:12 executing program 7: mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x840, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000280)='.\x00', 0x4a400295f) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000340)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x2) 03:34:12 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xcd, &(0x7f0000000000), 0x3c) 03:34:13 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:34:13 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x7fffffff, 0x2000) ioctl$TIOCGPTPEER(r1, 0x5441, 0x4) write$binfmt_elf32(r0, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x22, 0x4, 0x401, 0x641b5889, 0x10000, 0x3, 0x0, 0x130, 0x3e2, 0x38, 0x3e8, 0x9, 0x1ff, 0x20, 0x2, 0x3, 0x0, 0xfffffffffffffff9}, [{0x1, 0xeadc, 0x8, 0x0, 0x7, 0x2, 0x3, 0x9}, {0x60000007, 0x6, 0x7f, 0x9, 0xda1, 0x9da, 0xffffffffffffff01, 0x7fff}], "b3d5d1e0b7a7beb4d3ee9665a6e39eb37734ad0293b890d8759f6b6be6399e15213aa2763540f25c9549a8ca790efe5124bebc75211fec550811f9f51df52ab2060bc05636ccbf02d116d3cce66ee7c778e37fc87ecd247ac8d216999666f1b9599eca5b4569bd952b6c0729d05c5a6016d8e7662f513208534d811d5b38b07cdc0bcf9ccb5fd4d6bdf84fe12b89567cc44c010985f3372c33a9c0fcf0ec94df2b7480507ba0f9ace4b5711c8fe500a58affe4915510c26d686221463834bc8ce4dd789727d63f2b5be6b84ab35283e7d54ada14457d62975052ff7ffcbd24cb46dca466", [[]]}, 0x25c) accept$nfc_llcp(r1, &(0x7f0000000100), &(0x7f0000000200)=0x60) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000080)=r0) 03:34:13 executing program 5: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="646f733178664b1d7ac5792c7569643d2c64656275672c6572726f72733d72656d6f756e742d726f2c64656575672c04006f77657865632c644500000072642c636865636b3d737472696374"]) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000180)='./file0/fil..\x00', 0x0) 03:34:13 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x805, 0x0) r1 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2, 0x3ff}, 0x94) sendmsg(r0, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000000480), 0x0, &(0x7f00006e9c68)}, 0x0) 03:34:13 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) signalfd4(r0, &(0x7f0000000040)={0xfd}, 0x8, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) dup2(r1, r0) 03:34:13 executing program 7: mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x840, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000280)='.\x00', 0x4a400295f) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000340)='./file1\x00', r1, &(0x7f0000000100)='./file0\x00', 0x0) 03:34:13 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcd, &(0x7f0000000000), 0x3c) 03:34:13 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001080)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000400)="269b2663d3a43035a7de65482fe91739785e73e5636e561f6460b8cb337960c16323c519570faf3c27e4eded3fc0f82694c2f9", 0x33}], 0x1, &(0x7f0000000680)}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000040c0)=[{{&(0x7f00000012c0)=@vsock={0x0, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000280)}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001700)=""/195, 0xfcf6}], 0x1, &(0x7f00000018c0)=""/185, 0xb9}}], 0x2, 0x0, &(0x7f0000004280)={0x77359400}) 03:34:13 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) write$binfmt_elf64(r0, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], 0x4a9) ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f0000000440)={0x1, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}, 'ip_vti0\x00'}) sendto$inet(r0, &(0x7f0000000340)="39974e0d87e3847ec0b91f339089f1f7f800bcc5ac5f6d9efd65f586317d5bc3ff0d19f90278907a62fbcf01d6a977ef8e2ab80a874d81e7c8b1a5e5c6e98c27fc3e8b681c", 0x45, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x5) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000280)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0xb38) [ 182.170272] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 182.171266] FAT-fs (loop5): Unrecognized mount option "dos1xfKzÅy" or missing value 03:34:13 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x39c) 03:34:13 executing program 3: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_vif\x00') sendfile(r0, r1, &(0x7f0000000440), 0x80000002) 03:34:13 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:34:13 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x9208, 0x0) 03:34:13 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcd, &(0x7f0000000000), 0x3c) 03:34:13 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x200000, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000100)=r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000080)=r0) 03:34:13 executing program 3: mq_open(&(0x7f0000000040)='.:\x00', 0x0, 0x0, &(0x7f0000000080)) socket$inet6(0xa, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:34:13 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 03:34:13 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="800000000002000019000000e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000200)) 03:34:13 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:34:13 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcd, &(0x7f0000000000), 0x3c) [ 182.423727] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 182.452483] EXT4-fs (loop5): bad geometry: block count 512 exceeds size of device (1 blocks) [ 182.553752] EXT4-fs (loop5): bad geometry: block count 512 exceeds size of device (1 blocks) 03:34:13 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 03:34:13 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:34:13 executing program 3: syz_mount_image$msdos(&(0x7f0000000300)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010a0200020000f801", 0x17}], 0x0, &(0x7f0000000080)) 03:34:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000380)={[{@uid={'uid', 0x3d, r1}, 0x2c}]}) [ 182.648578] FAT-fs (loop3): Directory bread(block 2563) failed [ 182.659227] ntfs: (device loop5): parse_options(): Invalid uid option argument: 0x00000000ffffffff [ 182.679605] FAT-fs (loop3): Directory bread(block 2564) failed [ 182.687603] FAT-fs (loop3): Directory bread(block 2565) failed [ 182.696372] FAT-fs (loop3): Directory bread(block 2566) failed [ 182.698258] ntfs: (device loop5): parse_options(): Invalid uid option argument: 0x00000000ffffffff [ 182.702801] FAT-fs (loop3): Directory bread(block 2567) failed [ 182.718777] FAT-fs (loop3): Directory bread(block 2568) failed [ 182.728874] FAT-fs (loop3): Directory bread(block 2569) failed [ 182.735475] FAT-fs (loop3): Directory bread(block 2570) failed [ 182.741880] FAT-fs (loop3): Directory bread(block 2571) failed [ 182.748357] FAT-fs (loop3): Directory bread(block 2572) failed 03:34:14 executing program 7: socket$unix(0x1, 0x1, 0x0) 03:34:14 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"764474000000000000000000bd68ff81", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) inotify_init1(0x80000) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={0x0, r2, 0xc, 0x3}, 0x14) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f00000002c0)={'veth1_to_team\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}}) r3 = dup2(r1, r0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@broadcast, @in=@multicast1}}, {{@in6}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) r4 = dup2(r2, r1) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in=@multicast1}}, {{@in=@rand_addr}, 0x0, @in6}}, &(0x7f0000000440)=0xe8) 03:34:14 executing program 0: socket$inet(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xcd, &(0x7f0000000000), 0x3c) 03:34:14 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e7230010000000000004000", 0x2000}) r2 = accept(0xffffffffffffffff, &(0x7f0000000200)=@l2, &(0x7f0000000140)=0x80) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r3 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x5, 0xe0140) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000100)) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) 03:34:14 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 03:34:14 executing program 5: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000440)=""/61, 0x3d}, 0x0) r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg(r0, &(0x7f0000000280)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1302, [], 0x1}}, 0x80, &(0x7f00000000c0), 0x2fe, &(0x7f0000000440)}, 0x0) 03:34:14 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:34:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f00000001c0)=[@flat], &(0x7f0000000280)=[0x30]}}}], 0x0, 0x0, &(0x7f0000002000)}) 03:34:14 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:34:14 executing program 5: socket$inet6(0xa, 0x1000000000002, 0x0) syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000009000)='/dev/audio\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fbfc0), &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000774ff8), 0x8}) 03:34:14 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) [ 183.125455] binder: 12038:12040 got transaction with invalid offset (48, min 0 max 24) or object. [ 183.155391] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 183.162552] binder: 12038:12040 transaction failed 29201/-22, size 24-8 line 3030 03:34:14 executing program 7: mkdir(&(0x7f0000000140)='./control\x00', 0x0) [ 183.190457] binder_alloc: binder_alloc_mmap_handler: 12038 20fff000-21000000 already mapped failed -16 03:34:14 executing program 5: mkdir(&(0x7f0000001340)='./file0\x00', 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') 03:34:14 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 03:34:14 executing program 7: r0 = socket(0x1e, 0x805, 0x0) r1 = socket(0x1e, 0x5, 0x0) listen(r1, 0x0) accept$packet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000000)=0x14) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000300)=@req3={0x80000000}, 0x1c) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda) sendmsg(r0, &(0x7f0000000140)={&(0x7f0000000740)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000000b00), 0x0, &(0x7f0000000600)=ANY=[]}, 0x0) 03:34:14 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 183.281967] binder: BINDER_SET_CONTEXT_MGR already set 03:34:14 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000000400)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="fb"], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='highspeed\x00', 0xa) sendto$inet(r0, &(0x7f0000000040)='Y', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000380), 0xc) sendmmsg(0xffffffffffffffff, &(0x7f0000000fc0), 0x0, 0x0) [ 183.328159] binder_alloc: 12038: binder_alloc_buf, no vma [ 183.333831] binder: 12038:12051 transaction failed 29189/-3, size 24-8 line 2967 [ 183.361066] binder: 12038:12040 ioctl 40046207 0 returned -16 [ 183.391544] binder: undelivered TRANSACTION_ERROR: 29201 [ 183.407094] binder: undelivered TRANSACTION_ERROR: 29189 [ 183.510427] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:34:14 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000300)=0x1) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) r2 = dup2(r1, r0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x70, r3, 0x500, 0x70bd2d, 0x25dfdbfd, {0xa}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xfff}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xfffffffffffffff9}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2=0xe0000002}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 03:34:14 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 03:34:14 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:34:14 executing program 0: setsockopt$inet_int(0xffffffffffffffff, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xcd, &(0x7f0000000000), 0x3c) 03:34:14 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x81, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x84000, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {&(0x7f0000000200)}}, 0x10) r4 = fcntl$dupfd(r2, 0x406, r0) syz_open_pts(r4, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000080), 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) 03:34:14 executing program 3: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') r2 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000001c0)='./control\x00', &(0x7f0000000200)='bpf\x00', 0x0, &(0x7f0000000240)) getdents64(r2, &(0x7f0000000300)=""/188, 0xbc) close(r0) 03:34:14 executing program 5: r0 = msgget$private(0x0, 0x0) msgrcv(r0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0) msgrcv(r0, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000700)) 03:34:14 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 03:34:14 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:34:14 executing program 0: r0 = socket$inet(0x2, 0x0, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcd, &(0x7f0000000000), 0x3c) 03:34:14 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18001a08da850d2498050000000000000000000000000000"], &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x400000, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000000200)={'bcsh0\x00', 0xffffffff}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={"6e72300100", 0x3}) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=@known='security.capability\x00', &(0x7f0000000140)="6e72300100", 0x5, 0x1) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f00000000c0)=r0) [ 183.627399] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:34:14 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) 03:34:14 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 183.793339] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:34:15 executing program 7: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000280)=ANY=[]) 03:34:15 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) 03:34:15 executing program 0: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcd, &(0x7f0000000000), 0x3c) 03:34:15 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:34:15 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) 03:34:15 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'bond_slave_0\x00', 0x20}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) dup2(r1, r0) 03:34:15 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) [ 184.172884] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 184.185149] BTRFS: device fsid ecf6f2a3-2997-48ae-b81e-1b00920efd9a devid 0 transid 0 /dev/loop7 [ 184.210787] BTRFS error (device loop7): superblock checksum mismatch 03:34:15 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 184.227738] BTRFS error (device loop7): open_ctree failed [ 184.261783] BTRFS error (device loop7): superblock checksum mismatch [ 184.269410] BTRFS error (device loop7): open_ctree failed [ 184.371408] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:34:15 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000340)}}, &(0x7f0000044000)) r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x4018920a, 0x20000000) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x15) 03:34:15 executing program 5: socketpair$unix(0x1, 0x48000000002, 0x0, &(0x7f00000000c0)={0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/netfilter\x00') fchdir(r1) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 03:34:15 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 03:34:15 executing program 7: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000840), 0x0, &(0x7f0000000940)={[{@utf8='utf8', 0x2c}]}) 03:34:15 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(0xffffffffffffffff, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcd, &(0x7f0000000000), 0x3c) 03:34:15 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:34:15 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@raw=[@map={0x18, 0x0, 0x1, 0x0, r0}], &(0x7f000031cff6)='syzkaller\x00', 0xc6, 0xfb, &(0x7f00001a7f05)=""/251}, 0xfffffffffffffdea) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000080)=r1) 03:34:15 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x8100004100000003, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) dup2(r1, r0) 03:34:15 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0x0, &(0x7f0000000000), 0x3c) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcd, &(0x7f0000000000), 0x3c) 03:34:15 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 03:34:15 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:34:15 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_tables_matches\x00') sendfile(r1, r2, &(0x7f0000000000), 0x1000f) [ 184.617650] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 184.655821] ISOFS: Unable to identify CD-ROM format. 03:34:15 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 03:34:15 executing program 5: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffdb0}, 0x8, 0x0) rt_tgsigqueueinfo(r0, r1, 0x1f, &(0x7f0000000100)={0x0, 0x0, 0x1}) read(r2, &(0x7f0000481000)=""/128, 0x80) 03:34:15 executing program 6: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 03:34:15 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 184.758056] ISOFS: Unable to identify CD-ROM format. [ 184.858705] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:34:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000100)="580000001400192340834b80040d8c560a02000000ff81004e227e00000058000b4824ca944f64009400050028925aa8000000000000008000f0ffffffff09000000fff5dd00000010000100090c0c00fcff0000040e05a5", 0x58}], 0x1) 03:34:16 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcd, &(0x7f0000000000), 0x3c) 03:34:16 executing program 7: socket$inet6(0xa, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='.//ile0\x00', 0x0, 0x0, &(0x7f0000000300), 0x80400, &(0x7f0000000340)={[{@shortname_mixed='shortname=mixed', 0x2c}]}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe005, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) 03:34:16 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000200)={0xf7, 0xfffffffffffffffc, 0x5, 0x1, 0x4, [{0x56208792, 0x3, 0xfff, 0x0, 0x0, 0x2}, {0x200, 0x8, 0x8, 0x0, 0x0, 0x8}, {0x2, 0x3, 0x1, 0x0, 0x0, 0x2900}, {0x81, 0x1, 0x4, 0x0, 0x0, 0xc}]}) 03:34:16 executing program 6: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 03:34:16 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2807000000000000000400000000000000000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}, 0x1}, 0x0) dup2(r1, r0) 03:34:16 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:34:16 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 03:34:16 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0xfffffffffffffffc, 'queue0\x00'}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000280)={0x0, 0x0, 0xfffffffffffffffe, 'queue0\x00'}) 03:34:16 executing program 6: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 03:34:16 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) close(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)) 03:34:16 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x400000, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x4, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x12}, 'veth1_to_bridge\x00'}}, 0x1e) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000080)=r1) 03:34:16 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcd, &(0x7f0000000000), 0x3c) 03:34:16 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x100) r2 = request_key(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000340)="766574000000000000000000bd6800", 0xfffffffffffffffb) add_key(&(0x7f0000000040)='blacklist\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000200)="8bd2bd0c3e23376fa9c989b36c6a1f895d079cc623b3ae08ea67532672cacf872a642ff054d881bcdbd89bfa058f0ea9a453f1958d3de7188b4a83f2517d647ad129aa9e65aa3ad95617ad5b8cdc01975fa78d05ed6490babc8a4ba17e6fb1281473fc596ebf038dbdacd7d402b5bc4684d186a7521b4513ca5fbe93c1a29c0d13933419e5541ffeeabf0af971b2cee5ff7f2ce46cde01017d33e84e607b68593b5e6091a66941c96d6c8350eba9db9f5761eb9cd91dac59d1f219ce", 0xbc, r2) dup2(r1, r0) 03:34:16 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) close(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)) 03:34:16 executing program 3: r0 = memfd_create(&(0x7f0000000840)='\x00', 0x0) pwrite64(r0, &(0x7f0000000280)="df121e5e7398e5232a200c20e4e7fe1a9201f2e34d81acd7cae0be4af8e0cf5f79dea6f4e35cfb0241ad30b3ca891bc6fd45060a3b2328ea566f03d6", 0x3c, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') creat(&(0x7f0000000000)='./file0\x00', 0x0) 03:34:16 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 03:34:16 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c, {[{@default_permissions='default_permissions', 0x2c}]}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000030c0), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000003000)={0x90, 0x0, 0x3}, 0x90) 03:34:16 executing program 7: socket$inet6(0xa, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='.//ile0\x00', 0x0, 0x0, &(0x7f0000000300), 0x80400, &(0x7f0000000340)={[{@shortname_mixed='shortname=mixed', 0x2c}]}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe005, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) 03:34:16 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcd, &(0x7f0000000000), 0x3c) 03:34:16 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000003c0)={r2}) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000400)=0x2, 0x4) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000200)=""/229, 0xe5}], 0x1, &(0x7f0000000300)=""/46, 0x2e, 0x8}, 0x10100) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000380)={0x1, [0x400000]}, 0x6) [ 185.614087] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:34:16 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 03:34:16 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff030}, {0x6}]}, 0x10) 03:34:16 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) close(0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)) 03:34:16 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 03:34:16 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcd, &(0x7f0000000000), 0x3c) 03:34:16 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) 03:34:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f0000000440)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ppoll(&(0x7f00000002c0)=[{r0}], 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f0000000100), 0x8) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)}) 03:34:16 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 185.894578] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:34:16 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 03:34:16 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcd, &(0x7f0000000000), 0x3c) 03:34:16 executing program 7: socket$inet6(0xa, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='.//ile0\x00', 0x0, 0x0, &(0x7f0000000300), 0x80400, &(0x7f0000000340)={[{@shortname_mixed='shortname=mixed', 0x2c}]}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe005, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) 03:34:16 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:34:17 executing program 5: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000000)="800000000002000019000000e60100006c0000000000000001000000010000000040000000400000800000000000000a6d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000001c0)) 03:34:17 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000015a8ee0000000095000000004305b46cdaca08d589f819bcd981fc386c3a3ffb6c66e8b7a4ae2911522142d6c22f1a6a680fa2b2c0cab92e2b1423d7c5488a6af74f70419148b9902518102bce2c8c31c43a4b1938aaf10aa262fafd778223849f9d23c24352a67c199c7142ce8f617cf7707de39ca7e5eb0418b0e0d5559eb95d37e3025b25a1"], &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) 03:34:17 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) uname(&(0x7f0000000040)=""/10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={"766545000000000000100000bd6800", 0x4373265398416f1b}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) dup2(r1, r0) 03:34:17 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 03:34:17 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcd, &(0x7f0000000000), 0x3c) 03:34:17 executing program 7: socket$inet6(0xa, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='.//ile0\x00', 0x0, 0x0, &(0x7f0000000300), 0x80400, &(0x7f0000000340)={[{@shortname_mixed='shortname=mixed', 0x2c}]}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe005, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) 03:34:17 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:34:17 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 03:34:17 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 186.631266] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 186.653424] EXT4-fs (loop5): bad geometry: block count 512 exceeds size of device (1 blocks) 03:34:17 executing program 7: socket$inet6(0xa, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe005, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) [ 186.775736] EXT4-fs (loop5): bad geometry: block count 512 exceeds size of device (1 blocks) [ 186.778832] binder: BINDER_SET_CONTEXT_MGR already set [ 186.817954] binder: 12347:12402 ioctl 40046207 0 returned -16 [ 186.843217] binder_alloc: 12347: binder_alloc_buf, no vma [ 186.849031] binder: 12347:12428 transaction failed 29189/-3, size 0-0 line 2967 [ 186.850155] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:34:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f0000000440)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ppoll(&(0x7f00000002c0)=[{r0}], 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f0000000100), 0x8) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)}) 03:34:17 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:34:17 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 03:34:17 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcd, &(0x7f0000000000), 0x3c) 03:34:17 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x1, 0x80000) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000200)={0x14, 0x3a, 0x4, 0x5, 0x0, 0x2, 0x3, 0x46, 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000080)) symlink(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00') flock(r1, 0x9) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 03:34:17 executing program 7: socket$inet6(0xa, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe005, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) 03:34:17 executing program 5: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x11, 0x2, r0, &(0x7f0000000380)="2e2f66692e65318c00") 03:34:17 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6, 0x40000) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000100)={{0x62, @multicast2=0xe0000002, 0x4e23, 0x0, 'wrr\x00', 0x20, 0x6, 0x5c}, {@loopback=0x7f000001, 0x4e24, 0x2, 0x7, 0x7, 0x8}}, 0x44) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xfeee, &(0x7f00000001c0)={&(0x7f0000000240)=@ipv4_deladdr={0x0, 0x15, 0x202, 0x70bd29, 0x25dfdbfc, {0x2, 0x3f, 0x0, 0xfe, r2}, [@IFA_CACHEINFO={0x0, 0x6, {0x5e30, 0x1, 0x9, 0xffffffff}}, @IFA_ADDRESS={0x0, 0x1, @multicast1=0xe0000001}]}, 0x28}, 0x1}, 0x0) dup2(r1, r0) [ 186.975106] binder: release 12347:12402 transaction 16 out, still active [ 187.011624] FAT-fs (loop5): bogus number of reserved sectors [ 187.014352] binder: send failed reply for transaction 16, target dead 03:34:17 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 187.017834] FAT-fs (loop5): Can't find a valid FAT filesystem 03:34:17 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 03:34:17 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcd, &(0x7f0000000000), 0x3c) 03:34:17 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000000a9e6e52fefdeaca406514524d4b45762dcc40ebfe8335414f5c4f5563194908691f720ba6888a4a2953ccc762196cf7bd1abc11ddddb2eba53fceaea7384da0aee5e9e6c3326e8be550eabd5fdc5bef36e40fa685bf60aeb4e137402b1d30056146a37d375649535768bc656c0a6822d16506a4914f6bcc68e15728786b27145ab8a4bc26778f17a916c408d9761359566e3901e119ede90ac1a3563e58ba3173664df9bdec6e57ce482546275c29aae2fbec69c1f1e33bd947fcc562a81b4e455a5516c550b200eaf0c5297705324e033d1869b6448bcae941e027ca67a4cebc110241b9bd6c8e9bfa6a895759204009e3c8244808bca243fa32c5b25481d461b8bb8c9506023383ea2e44d259d167686b1dbee5a6df4436af888084bf998d83fc0df01761b74ccf8388f8e2359d089afde0cd8611b38e85e1bbb59e10d52a95f63342109be5e4faec5bb1ae021186d22b0f614588d961669370a0df8f8a329c3a38d1ec8be27b34de4772d6e273ca89a7be9b9489f915c53db697b71b282175c6bada32c145e87", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}, 0x1}, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f0000000040)=0x200000000) 03:34:18 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) 03:34:18 executing program 7: socket$inet6(0xa, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe005, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) 03:34:18 executing program 1: ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, &(0x7f0000000300)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)={0x0, r0}) 03:34:18 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcd, &(0x7f0000000000), 0x3c) [ 187.195989] FAT-fs (loop5): bogus number of reserved sectors [ 187.202054] FAT-fs (loop5): Can't find a valid FAT filesystem 03:34:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f0000000440)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ppoll(&(0x7f00000002c0)=[{r0}], 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f0000000100), 0x8) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)}) 03:34:18 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@security={'security\x00', 0xe, 0x4, 0x460, 0x2a0, 0x158, 0x158, 0x2a0, 0x158, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@unspec=@realm={0x30, 'realm\x00', 0x0, {0xffff, 0x100000000}}, @common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x20, 0x840, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1e}, 0x0, 0x2, [0x3, 0x1b, 0x26, 0x3b, 0x3d, 0x2e, 0xd, 0x3d, 0xd, 0x2f, 0x3a, 0x3a, 0x28, 0x2a, 0x17, 0x1c], 0x0, 0x0, 0x100}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x18}, @multicast2=0xe0000002, 0xff000000, 0xff000000, 'rose0\x00', 'bond_slave_1\x00', {}, {0xff}, 0x7f, 0x1, 0x68}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x2, 0x6, 0x1, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0x200, 0xb, [0xe, 0x34, 0x23, 0x36, 0x28, 0x6, 0x29, 0x1b, 0x40, 0x17, 0x17, 0x2d, 0x2b, 0x39, 0xf], 0x2, 0x2, 0x40}}}, {{@ip={@rand_addr=0x8, @local={0xac, 0x14, 0x14, 0xaa}, 0xffffff00, 0xffffffff, 'bridge_slave_0\x00', 'syzkaller1\x00', {}, {}, 0x0, 0x1, 0xc}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0xfffffffffffffff8, 0x647, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3ff, [0x4, 0x35, 0xffff, 0x0, 0xb24c, 0x74ba], 0x4, 0x6632f248, 0x800}, {0x3ff, [0x3, 0xffffffffffffffff, 0x800, 0xbf, 0x800, 0x4], 0xff, 0xfff, 0x25}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4c0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000006203c60c201f82fdf53d11c10000950000000000000076c23e0e9fd3e08f62fdce3e5acfb417221d43332a2a7fe8c3185271fa4ecac3b9a579c1b002b36d2a1d5ccf53b399e55c7b42429cee407233167d21431f8c4b8efe11019636df08149610e4bcb7ec97e07c61222c7575519e9a09bfa9fe028ebce2ee0000000000"], &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000080)=r1) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) 03:34:18 executing program 1: ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, &(0x7f0000000300)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)={0x0, r0}) 03:34:18 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="03a9b6a67204"], 0x28}, 0x1}, 0x0) dup2(r1, r0) 03:34:18 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) 03:34:18 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x0, 0x2) setsockopt$inet_int(r1, 0x0, 0xcd, &(0x7f0000000000), 0x3c) 03:34:18 executing program 7: syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='.//ile0\x00', 0x0, 0x0, &(0x7f0000000300), 0x80400, &(0x7f0000000340)={[{@shortname_mixed='shortname=mixed', 0x2c}]}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe005, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) 03:34:18 executing program 5: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000240)='/dev/md0\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) ioctl$LOOP_CHANGE_FD(r1, 0x4c08, 0xffffffffffffffff) [ 187.938516] binder: release 12454:12507 transaction 19 out, still active 03:34:18 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0x27c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000580)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0xc1}) getpid() sched_setattr(0x0, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x40bc5311, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000efb000)='/dev/sequencer2\x00', 0x0, 0x0) 03:34:18 executing program 1: ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, &(0x7f0000000300)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000f1dff8)={0x0, r0}) 03:34:18 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18306335da161139f13b080000000000000000000000000000009500003d"], &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) getsockopt$sock_buf(r1, 0x1, 0x1e, &(0x7f0000000200)=""/239, &(0x7f0000000100)=0xef) r2 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x7a01, 0x8000) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000300)={0x2, 0x8000, 0x6, 0x7, 0x1000, 0x4}) [ 187.985126] binder: send failed reply for transaction 19, target dead [ 188.000326] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. 03:34:18 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) 03:34:18 executing program 7: syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='.//ile0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000340)={[{@shortname_mixed='shortname=mixed', 0x2c}]}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe005, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) 03:34:19 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:34:19 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_int(r1, 0x0, 0xcd, &(0x7f0000000000), 0x3c) [ 188.104110] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 188.126468] FAT-fs (loop7): bogus number of reserved sectors [ 188.132421] FAT-fs (loop7): Can't find a valid FAT filesystem 03:34:19 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="03000000000000000000000000f18fecb70dbe58ad809bce404d000000"], 0x28}, 0x1}, 0x0) dup2(r1, r0) [ 188.244730] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 188.281540] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. 03:34:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f0000000440)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ppoll(&(0x7f00000002c0)=[{r0}], 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f0000000100), 0x8) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)}) 03:34:19 executing program 7: syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='.//ile0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000340)={[{@shortname_mixed='shortname=mixed', 0x2c}]}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe005, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) 03:34:19 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x400840, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=ANY=[@ANYBLOB="95080000000000000000000000000000000000003a5f0000"], &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000000140)={0x100, 0x14, [0xfffffffffffff001, 0x5, 0x10000, 0x7, 0x5]}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000200)) 03:34:19 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) 03:34:19 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:34:19 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xcd, &(0x7f0000000000), 0x3c) 03:34:19 executing program 4: r0 = socket$inet6(0xa, 0x5, 0xec9) fallocate(r0, 0x10, 0x1000, 0x100000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x4, 0x2a14, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000040)='.', &(0x7f0000000100)}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800000010005fba00000000948b000080000000ff7f000000000000e75fad8d291065651fc63d41880c083b514ee33304062798dfeee001a077c4ecd84de3c89bfabd9c0418b20bb2ea44ab2a9434494a1d5f48d82f451984c9353cb54df7efd8f4cede58df7e8444c75a8dedef26b0bfbafb0b969a87", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}, 0x1}, 0x0) dup2(r3, r2) [ 188.891872] binder: release 12528:12575 transaction 21 out, still active [ 188.911793] binder: send failed reply for transaction 21, target dead 03:34:19 executing program 6: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000002c0)) [ 188.942353] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 188.957282] FAT-fs (loop7): bogus number of reserved sectors [ 188.963226] FAT-fs (loop7): Can't find a valid FAT filesystem 03:34:19 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) accept(0xffffffffffffff9c, 0x0, &(0x7f0000000380)) r2 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x90000001}) epoll_wait(r2, &(0x7f0000000140)=[{}], 0x1, 0x47) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 03:34:19 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0x0, &(0x7f0000000000), 0x3c) 03:34:19 executing program 7: syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='.//ile0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000340)={[{@shortname_mixed='shortname=mixed', 0x2c}]}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe005, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) 03:34:19 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x1, 0x2) ioctl$TIOCEXCL(r2, 0x540c) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f00000000c0)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) 03:34:19 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 189.002119] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. 03:34:20 executing program 0: r0 = socket$inet_tcp(0x2, 0x3, 0x6) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) sendmsg(r0, &(0x7f0000000500)={&(0x7f0000000080)=@in={0x2, 0x0, @multicast1=0xe0000001}, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000280)}, 0x8000) write$binfmt_script(r0, &(0x7f0000000540)=ANY=[], 0x0) [ 189.075143] FAT-fs (loop7): bogus number of reserved sectors [ 189.081234] FAT-fs (loop7): Can't find a valid FAT filesystem 03:34:20 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000105174", @ANYRES32=0x0, @ANYBLOB="03000000fe00000008001b000000000047d941d900774a3041e19d5bc0cc7fe9949c6a4b4d88e48a8c076c5c6fe203e9ee86107389f883c9a0aa2204102a56c64e200352671b0e54cd744093915a72ef333314f667599b5af30a67756b59ff3e172e566c8bae3c0d58cc40d5589b968722d5e8"], 0x28}, 0x1}, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x1f80000000000000, 0x2) ioctl$RTC_WIE_OFF(r2, 0x7010) dup2(r1, r0) 03:34:20 executing program 7: syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='.//ile0\x00', 0x0, 0x0, &(0x7f0000000300), 0x80400, &(0x7f0000000340)) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe005, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) 03:34:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f0000000440)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000000500)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ppoll(&(0x7f00000002c0)=[{r0}], 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f0000000100), 0x8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}}}], 0x97, 0x0, &(0x7f0000fedffe)}) 03:34:20 executing program 6: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000002c0)) 03:34:20 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:34:20 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f00000000c0)=r0) 03:34:20 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='io.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[@ANYBLOB="7f454c270000000000000000000000000000000000000000000000db"], 0x1c) preadv(r1, &(0x7f0000000240), 0x9b, 0x7b00000000000000) 03:34:20 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x301800, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f00000001c0)={0xb2, 0x1, 0x1, 0x25}, 0x6) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) dup2(r1, r0) 03:34:20 executing program 7: syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='.//ile0\x00', 0x0, 0x0, &(0x7f0000000300), 0x80400, &(0x7f0000000340)) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe005, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) [ 189.883267] binder: release 12596:12649 transaction 23 out, still active [ 189.912064] binder: send failed reply for transaction 23, target dead 03:34:20 executing program 7: syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='.//ile0\x00', 0x0, 0x0, &(0x7f0000000300), 0x80400, &(0x7f0000000340)) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe005, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) [ 189.972782] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 190.137046] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:34:21 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000200)={0x7, 0x4d}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000140)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) write$P9_RREADDIR(r1, &(0x7f0000000600)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0xfffffffffffffd34, './file0'}]}}, 0x2a) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) r2 = open$dir(&(0x7f0000000580)='./file0\x00', 0x0, 0x0) close(r2) 03:34:21 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='io.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[@ANYBLOB="7f454c270000000000000000000000000000000000000000000000db"], 0x1c) preadv(r1, &(0x7f0000000240), 0x9b, 0x7b00000000000000) 03:34:21 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:34:21 executing program 6: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000240)='/dev/md0\x00', 0x24082, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r2 = dup(0xffffffffffffffff) getdents(r2, &(0x7f0000000080)=""/19, 0x13) socket$inet6(0xa, 0x1000000000002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000500)='/dev/input/event#\x00', 0x0, 0x0) dup(r4) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 03:34:21 executing program 7: syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000002c0)='.//ile0\x00', 0x0, 0x0, &(0x7f0000000300), 0x80400, &(0x7f0000000340)={[{@shortname_mixed='shortname=mixed', 0x2c}]}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) 03:34:21 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000200)={{0x108, 0x7, 0x7fdc, 0x2b7, 0x38f, 0x1d, 0x108, 0x8}, "58f8fa6dee4f5f04e96f5124afbd314ef6cb0a1e603b3fef1819c8d2541f532e920db7ff33424e8365f8642f80d4c65ada15032fcae4c2f47b31", [[], [], [], [], [], [], [], []]}, 0x85a) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f00000000c0)=0x6) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) 03:34:21 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'bpq0\x00', 0x200}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) dup2(r0, r0) [ 190.266693] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 190.283294] FAT-fs (loop7): bogus number of reserved sectors [ 190.289311] FAT-fs (loop7): Can't find a valid FAT filesystem [ 190.327934] ================================================================== [ 190.335368] BUG: KASAN: use-after-free in _copy_from_iter+0x9ea/0x1090 [ 190.342049] Read of size 19 at addr ffff8801d3323720 by task kworker/1:2/1920 [ 190.349358] [ 190.351000] CPU: 1 PID: 1920 Comm: kworker/1:2 Not tainted 4.18.0-rc5-next-20180720+ #12 [ 190.355216] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 190.359228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 03:34:21 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2}) write$eventfd(r2, &(0x7f0000000040), 0x8) [ 190.359251] Workqueue: events p9_write_work [ 190.359258] Call Trace: [ 190.359283] dump_stack+0x1c9/0x2b4 [ 190.385730] ? dump_stack_print_info.cold.2+0x52/0x52 [ 190.390928] ? printk+0xa7/0xcf [ 190.394226] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 190.398970] ? _copy_from_iter+0x9ea/0x1090 [ 190.403293] print_address_description+0x6c/0x20b [ 190.408221] ? _copy_from_iter+0x9ea/0x1090 [ 190.412528] kasan_report.cold.7+0x242/0x30d [ 190.416946] check_memory_region+0x13e/0x1b0 [ 190.421352] memcpy+0x23/0x50 [ 190.424444] _copy_from_iter+0x9ea/0x1090 [ 190.428581] ? lock_downgrade+0x8f0/0x8f0 [ 190.432722] ? _copy_from_iter_nocache+0x1050/0x1050 [ 190.437818] ? lock_downgrade+0x8f0/0x8f0 [ 190.441973] copy_page_from_iter+0x576/0x890 [ 190.446396] ? trace_hardirqs_on+0x10/0x10 [ 190.450617] ? cpuacct_css_alloc+0x160/0x160 [ 190.455031] ? _copy_from_iter+0x1090/0x1090 [ 190.459430] pipe_write+0x7fd/0xeb0 [ 190.463059] __vfs_write+0x6af/0x9d0 [ 190.466772] ? kernel_read+0x120/0x120 [ 190.470648] ? perf_trace_lock+0xde/0x920 [ 190.474793] ? lock_acquire+0x1e4/0x540 [ 190.478755] ? p9_write_work+0x554/0xd50 [ 190.483064] ? rw_verify_area+0x118/0x360 [ 190.487198] vfs_write+0x1fc/0x560 [ 190.490725] kernel_write+0xab/0x120 [ 190.494437] p9_write_work+0x6f1/0xd50 [ 190.498316] ? p9_fd_create_tcp+0x8a0/0x8a0 [ 190.502644] ? lock_acquire+0x1e4/0x540 [ 190.506621] ? process_one_work+0xb9b/0x1ba0 [ 190.511037] ? kasan_check_read+0x11/0x20 [ 190.515189] ? lock_release+0xa30/0xa30 [ 190.519149] ? kasan_check_read+0x11/0x20 [ 190.523288] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 190.527872] ? read_word_at_a_time+0x20/0x20 [ 190.532281] ? compat_start_thread+0x80/0x80 [ 190.536683] process_one_work+0xc73/0x1ba0 [ 190.540913] ? trace_hardirqs_on+0x10/0x10 [ 190.545147] ? pwq_dec_nr_in_flight+0x4a0/0x4a0 [ 190.549822] ? lock_repin_lock+0x430/0x430 [ 190.554058] ? __sched_text_start+0x8/0x8 [ 190.558192] ? lock_downgrade+0x8f0/0x8f0 [ 190.562344] ? graph_lock+0x170/0x170 [ 190.566148] ? graph_lock+0x170/0x170 [ 190.569948] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 190.574696] ? retint_kernel+0x10/0x10 [ 190.578587] ? lock_acquire+0x1e4/0x540 [ 190.582548] ? worker_thread+0x3dc/0x13c0 [ 190.586695] ? lock_downgrade+0x8f0/0x8f0 [ 190.590836] ? lock_release+0xa30/0xa30 [ 190.594808] ? kasan_check_read+0x11/0x20 [ 190.599117] ? do_raw_spin_unlock+0xa7/0x2f0 [ 190.603517] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 190.608091] ? kasan_check_write+0x14/0x20 [ 190.612317] ? do_raw_spin_lock+0xc1/0x200 [ 190.616554] worker_thread+0x189/0x13c0 [ 190.620542] ? process_one_work+0x1ba0/0x1ba0 [ 190.625056] ? graph_lock+0x170/0x170 [ 190.628875] ? graph_lock+0x170/0x170 [ 190.632668] ? find_held_lock+0x36/0x1c0 [ 190.636824] ? find_held_lock+0x36/0x1c0 [ 190.640888] ? kasan_check_read+0x11/0x20 [ 190.645037] ? do_raw_spin_unlock+0xa7/0x2f0 [ 190.649437] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 190.654543] ? __kthread_parkme+0x58/0x1b0 [ 190.658778] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 190.663786] ? trace_hardirqs_on+0xd/0x10 [ 190.667938] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 190.673462] ? __kthread_parkme+0x106/0x1b0 [ 190.677787] kthread+0x345/0x410 [ 190.681155] ? process_one_work+0x1ba0/0x1ba0 [ 190.685636] ? kthread_bind+0x40/0x40 [ 190.689426] ret_from_fork+0x3a/0x50 [ 190.693141] [ 190.694759] Allocated by task 12715: [ 190.698472] save_stack+0x43/0xd0 [ 190.701922] kasan_kmalloc+0xc4/0xe0 [ 190.705639] __kmalloc+0x14e/0x760 [ 190.709180] p9_fcall_alloc+0x1e/0x90 [ 190.712965] p9_client_prepare_req.part.8+0x107/0xa00 [ 190.718144] p9_client_rpc+0x242/0x1330 [ 190.722105] p9_client_create+0xca4/0x1537 [ 190.726344] v9fs_session_init+0x21a/0x1a80 [ 190.730653] v9fs_mount+0x7c/0x900 [ 190.734179] legacy_get_tree+0x131/0x460 [ 190.738223] vfs_get_tree+0x1cb/0x5c0 [ 190.742011] do_mount+0x6f2/0x1e20 [ 190.745571] ksys_mount+0x12d/0x140 [ 190.749184] __x64_sys_mount+0xbe/0x150 [ 190.753146] do_syscall_64+0x1b9/0x820 [ 190.757034] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 190.762201] [ 190.763813] Freed by task 12715: [ 190.767164] save_stack+0x43/0xd0 [ 190.770600] __kasan_slab_free+0x11a/0x170 [ 190.774831] kasan_slab_free+0xe/0x10 [ 190.778633] kfree+0xd9/0x260 [ 190.781735] p9_free_req+0xb5/0x120 [ 190.785347] p9_client_rpc+0xa8e/0x1330 [ 190.789306] p9_client_create+0xca4/0x1537 [ 190.793526] v9fs_session_init+0x21a/0x1a80 [ 190.797846] v9fs_mount+0x7c/0x900 [ 190.801372] legacy_get_tree+0x131/0x460 [ 190.805437] vfs_get_tree+0x1cb/0x5c0 [ 190.809236] do_mount+0x6f2/0x1e20 [ 190.812782] ksys_mount+0x12d/0x140 [ 190.816408] __x64_sys_mount+0xbe/0x150 [ 190.820384] do_syscall_64+0x1b9/0x820 [ 190.824274] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 190.829441] [ 190.831056] The buggy address belongs to the object at ffff8801d3323700 [ 190.831056] which belongs to the cache kmalloc-16384 of size 16384 [ 190.844051] The buggy address is located 32 bytes inside of [ 190.844051] 16384-byte region [ffff8801d3323700, ffff8801d3327700) [ 190.855998] The buggy address belongs to the page: [ 190.861008] page:ffffea00074cc800 count:1 mapcount:0 mapping:ffff8801da802200 index:0x0 compound_mapcount: 0 [ 190.870980] flags: 0x2fffc0000010200(slab|head) [ 190.875642] raw: 02fffc0000010200 ffffea0006597408 ffffea0006413808 ffff8801da802200 [ 190.883525] raw: 0000000000000000 ffff8801d3323700 0000000100000001 0000000000000000 [ 190.891389] page dumped because: kasan: bad access detected [ 190.897077] [ 190.898686] Memory state around the buggy address: [ 190.903619] ffff8801d3323600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 190.910974] ffff8801d3323680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 190.918331] >ffff8801d3323700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 190.925673] ^ [ 190.930063] ffff8801d3323780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 190.937406] ffff8801d3323800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 190.944753] ================================================================== [ 190.952459] Kernel panic - not syncing: panic_on_warn set ... [ 190.952459] [ 190.959848] CPU: 1 PID: 1920 Comm: kworker/1:2 Tainted: G B 4.18.0-rc5-next-20180720+ #12 [ 190.969560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 190.978962] Workqueue: events p9_write_work [ 190.983290] Call Trace: [ 190.985892] dump_stack+0x1c9/0x2b4 [ 190.989518] ? dump_stack_print_info.cold.2+0x52/0x52 [ 190.994729] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 190.999494] panic+0x238/0x4e7 [ 191.002673] ? add_taint.cold.5+0x16/0x16 [ 191.006814] ? do_raw_spin_unlock+0xa7/0x2f0 [ 191.011220] ? do_raw_spin_unlock+0xa7/0x2f0 [ 191.015616] ? _copy_from_iter+0x9ea/0x1090 [ 191.019923] kasan_end_report+0x47/0x4f [ 191.023883] kasan_report.cold.7+0x76/0x30d [ 191.028195] check_memory_region+0x13e/0x1b0 [ 191.032588] memcpy+0x23/0x50 [ 191.035679] _copy_from_iter+0x9ea/0x1090 [ 191.039827] ? lock_downgrade+0x8f0/0x8f0 [ 191.043965] ? _copy_from_iter_nocache+0x1050/0x1050 [ 191.049055] ? lock_downgrade+0x8f0/0x8f0 [ 191.053204] copy_page_from_iter+0x576/0x890 [ 191.057615] ? trace_hardirqs_on+0x10/0x10 [ 191.061835] ? cpuacct_css_alloc+0x160/0x160 [ 191.066228] ? _copy_from_iter+0x1090/0x1090 [ 191.070628] pipe_write+0x7fd/0xeb0 [ 191.074248] __vfs_write+0x6af/0x9d0 [ 191.077961] ? kernel_read+0x120/0x120 [ 191.081838] ? perf_trace_lock+0xde/0x920 [ 191.085978] ? lock_acquire+0x1e4/0x540 [ 191.089942] ? p9_write_work+0x554/0xd50 [ 191.094008] ? rw_verify_area+0x118/0x360 [ 191.098147] vfs_write+0x1fc/0x560 [ 191.101678] kernel_write+0xab/0x120 [ 191.105381] p9_write_work+0x6f1/0xd50 [ 191.109431] ? p9_fd_create_tcp+0x8a0/0x8a0 [ 191.113752] ? lock_acquire+0x1e4/0x540 [ 191.117712] ? process_one_work+0xb9b/0x1ba0 [ 191.122109] ? kasan_check_read+0x11/0x20 [ 191.126254] ? lock_release+0xa30/0xa30 [ 191.130212] ? kasan_check_read+0x11/0x20 [ 191.134345] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 191.138914] ? read_word_at_a_time+0x20/0x20 [ 191.143325] ? compat_start_thread+0x80/0x80 [ 191.147725] process_one_work+0xc73/0x1ba0 [ 191.151949] ? trace_hardirqs_on+0x10/0x10 [ 191.156187] ? pwq_dec_nr_in_flight+0x4a0/0x4a0 [ 191.160843] ? lock_repin_lock+0x430/0x430 [ 191.165077] ? __sched_text_start+0x8/0x8 [ 191.169211] ? lock_downgrade+0x8f0/0x8f0 [ 191.173347] ? graph_lock+0x170/0x170 [ 191.177143] ? graph_lock+0x170/0x170 [ 191.180947] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 191.185689] ? retint_kernel+0x10/0x10 [ 191.189585] ? lock_acquire+0x1e4/0x540 [ 191.193554] ? worker_thread+0x3dc/0x13c0 [ 191.197701] ? lock_downgrade+0x8f0/0x8f0 [ 191.201835] ? lock_release+0xa30/0xa30 [ 191.205806] ? kasan_check_read+0x11/0x20 [ 191.209941] ? do_raw_spin_unlock+0xa7/0x2f0 [ 191.214347] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 191.218920] ? kasan_check_write+0x14/0x20 [ 191.223150] ? do_raw_spin_lock+0xc1/0x200 [ 191.227375] worker_thread+0x189/0x13c0 [ 191.231353] ? process_one_work+0x1ba0/0x1ba0 [ 191.235839] ? graph_lock+0x170/0x170 [ 191.239625] ? graph_lock+0x170/0x170 [ 191.243411] ? find_held_lock+0x36/0x1c0 [ 191.247470] ? find_held_lock+0x36/0x1c0 [ 191.251524] ? kasan_check_read+0x11/0x20 [ 191.255657] ? do_raw_spin_unlock+0xa7/0x2f0 [ 191.260060] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 191.265152] ? __kthread_parkme+0x58/0x1b0 [ 191.269376] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 191.274382] ? trace_hardirqs_on+0xd/0x10 [ 191.278534] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 191.284057] ? __kthread_parkme+0x106/0x1b0 [ 191.288369] kthread+0x345/0x410 [ 191.291731] ? process_one_work+0x1ba0/0x1ba0 [ 191.296208] ? kthread_bind+0x40/0x40 [ 191.299998] ret_from_fork+0x3a/0x50 [ 191.304216] Dumping ftrace buffer: [ 191.307750] (ftrace buffer empty) [ 191.311440] Kernel Offset: disabled [ 191.315067] Rebooting in 86400 seconds..